GlobalNET_PWS_Final_28_Apr.docx

Section C – Description and Specification

PERFORMANCE WORK STATEMENT

Revision 1

CONTENTS

PART 1: GENERAL INFORMATION

1 General: This is a non-personal services contract to provide software development, testing, and operations.

1.1 The Government shall not exercise any supervision or control over contractor employees performing services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.2 Introduction: The Defense Security Cooperation Agency (DSCA) leads, directs, and manages security cooperation programs and resources to support U.S. national security objectives that build relationships that promote U.S. interests; build allied and partner capacities for self-defense and coalition operations; and promote peacetime and contingency access for U.S. forces. As the responsible organization for managing the Regional International Outreach (RIO) - Partnership for Peace (PfP) Information Management System (PIMS) program DSCA maintains a requirement to implement a web-based outreach platform “GlobalNET”, connecting the security cooperation community.

1.3 Objective: The objective of this contract is to continue to operate the current technology solution IAW DoD guidance meeting net centric and information sharing standards and deliver new functionality within that framework. This Contract is necessary to maintain services for the GlobalNET user community. The outcome of this effort will be coordinated updates to the current platform, and the ability for the GlobalNET user communities to maintain connection to former participants, share information among each other, and other institutions/activities, using the web-based platform.

1.4 Approach: The GlobalNET platform is an integrated stack of open source web-based applications. The platform, while ever evolving, has been in operation for over seven years and has a mature set of user stories, requirements, management, operational processes, and procedures. The platform is used globally, to allow partners to continue to communicate, build communities of practice, and share information. System requirements, as documented in TECHNICAL EXHIBIT 1: GLOBALNET SYSTEM SPECIFICATIONS, are defined by the user community, prioritized and scoped by the Government Program Manager, discussed with the contractor prior to coding, and subsequently bundled into a release of manageable size based on mutual agreement by the Government and contractor. This is an iterative process. The platform is sized at 965 function points. Development size will be estimated using the International Function Point Users Group (IFPUG) 4.3 methodology to include the General System Characteristics, and the IFPUG Software Non-functional Assessment Practices (SNAP) Manual 2.1 or higher methodology. DSCA also uses local counting practice resolutions, which are listed in TECHNICAL EXHIBIT 2: DSCA Function Point Counting Resolutions.

The current GlobalNET supported communities are: the Africa Center for Strategic Studies, the Asia- Pacific Center for Security Studies, the Defense Institution Building, the Defense Institute of International Legal Studies, and the Defense Language Institute-English Learning Center, Department of Defense Leadership Programs, the George C. Marshall Center European Center for Security Studies, the Global Center for Security Cooperation, the Military Partnership Directorate, the Ministry of Defense Advisors Program, the NATO School, the Near East South Asia Center, the PfP Consortium, the PfP Net, the Regional Network of Strategic Studies Centers, the School of International Graduate Studies, and the William J. Perry Center for Hemispheric Defense Studies.

1.5 Period of Performance: The period of performance is for a twelve (12) month base period and two twelve (12) month option periods. The total contract period of performance is thirty-six (36) months.

1.6 Operational Information:

1.6.1 Quality Control: The contractor shall develop and maintain an effective quality control program (QCP) to ensure services are performed in accordance with the PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which it assures itself that work complies with the requirement of the contract. As a minimum, the contractor shall develop quality control procedures that address the areas identified in section 7, Performance Requirements Summary. After acceptance of the quality control plan, the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to the QC system. The QCP proposed in the solicitation shall be incorporated into the contract award.

1.6.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s). The chart below defines the defect levels used in this acquisition:

The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services.

1.6.3 Recognized Holidays: The contractor will not be required to work the below holidays:

New Years Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Independence Day Memorial Day Thanksgiving Day Christmas Day

1.6.4 Emergency Base or Government Office Closures: When contractor employees are not allowed access to the worksite due to emergency closures, the Government shall not be charged for the previously scheduled work hours, unless the contractor can show work was performed and the Government received a benefit. The contracting officer shall have the option of seeking remedies, which permit the contractor to (a) reschedule the time lost due to base closure or (b) report to an alternate duty location.

1.6.5 Hours of Operation: The Contractor shall perform the required services, except as noted below, between the hours of 0800 and 1700 local time, Monday through Friday, except Federal holidays. Overtime is not authorized for these efforts. The Contractor shall provide 24x7 on-call support for the services in support of Section 5.2.1 of this PWS.

1.6.6 Place of Performance: Work will be performed at the Contractor’s facilities. Except as noted below, domestic facilities in the National Capitol Region are desirable, but not required to facilitate quarterly status meetings and requirements based meetings during the period of performance.

1.6.6.1 Meetings will be required at key stakeholder sites in the United States and Europe. Occasional domestic and international travel is required. Passports and visas, when necessary, are required; more information can be obtained from the Department of State.

1.6.6.2 GlobalNET Technical Support Services in support of Section 5.3.4 of this PWS are currently performed in six foreign countries at the seven following locations.

* Yerevan, Armenia (Ministry of Defense), *Stuttgart, Germany (U.S. European Command), *Garmisch-Partenkirchen, Germany, *Astana, Kazakhstan (Ministry of Defense), *Bishkek, Kyrgyzstan (Ministry of Defense), *Dushanbe, Tajikistan (Ministry of Defense), and *Kyiv, Ukraine (National Defense University of Ukraine).

1.6.7 Type of Contract: This is an Indefinite Delivery Indefinite Quantity (IDIQ) hybrid contract utilizing Firm Fixed Price (FFP) and Cost Reimbursable (CR) CLINs for contractor travel.

1.6.7.1 Government Responsibilities

Task orders will be issued under this contract by the Defense Security Cooperation Agency (DSCA). DSCA is hereafter defined as the Delegated Ordering Authority (DOA).

Only warranted Contracting Officers within the DOA are authorized to place orders within the terms of the contract and within the scope of their authority. The Contracting Officer is responsible for requesting, obtaining, and evaluating proposals, and for obligating funds for orders issued.

1.6.7.2 Government Obligation

The Government is obligated only to the extent of the funds obligated on each of the task order(s) issued under the basic contract.

1.6.7.3 Estimated Value

The minimum value of this IDIQ contract (base year + four option years) shall be five hundered thousand dollars ($ 500,000.00). The awardee shall be guaranteed a minimum quantity of five hundered thousand dollars ($ 500,000.00) to ensure binding of the contract.

1.6.7.4 Ordering Procedures

1.6.7.4.1 General.

Ordering under the contract is authorized to meet the needs of the Defense Security Cooperation Agency (DSCA).

1.6.7.4.2 Pricing

a. All task orders awarded, on a Firm Fixed Price, will be priced in accordance with the pricing set forth in the Rates Tables of the contract.

1.6.7.4.3 Ordering

An appropriate order form (DD Form 1155) or (SF 1449) shall be issued for each Task Order.

At a minimum, the following information shall be specified in each Task Order awarded:

1) Date of order, contract number, and order number

2) Point of contact (COR name), commercial telephone and facsimile number and e-mail address

3) Ordering Contracting Officer’s commercial telephone number and e-mail address

4) Description of the services to be provided, including contract item number and description, quantity, unit prices, and delivery or performance schedule. The performance work statement (PWS) should be attached; the contractor’s proposal may be incorporated by reference.

5) Address of place of performance.

6) Accounting and appropriation data and Contract Accounting Classification Reference Number (ACRN) (DFAS requires an ACRN(s) on all orders.)

1.6.8 Security Requirements: The contractor is responsible for safeguarding information of a confidential or sensitive nature. Failure to safeguard any classified/proprietary information which may involve the contractor or the contractor’s personnel or to which they may have access may subject the contractor and/or the contractor’s employees to criminal liability. Provisions of the Privacy Act apply to all records and reports maintained by the contractor. Due to the nature of the business and the data contained in the GlobalNET system, all contractor personnel working on this PWS shall sign non-disclosure agreements.

1.6.8.1 Any visit(s) to DSCA by contractor personnel not physically/permanently assigned to this contract (company presidents, company security managers, contract employees, etc) require an escort by the DSCA POC they are visiting.

1.6.8.2 In order to satisfy the DoD Information Assurance Certification and Accreditation Process (DIACAP) and to properly configure, secure, and maintain the GlobalNET platform, the vendor will require common access cards (CAC) or alternate hardware tokens for US citizens to access official Defense Information Systems Agency (DISA) information repositories. The resources include, but are not limited to the DISA Security Readiness Review Scripts (SRRs), the DISA Open Source Repository forge.mil, and the Enterprise Mission Assurance Support Service (eMass).

1.6.8.3 Physical Security: The contractor shall be responsible for safeguarding all government property provided for contractor use. When contractors leave work locations, government facilities, equipment, and materials shall be secured.

1.6.9 GlobalNET System Components:

1.6.10 Coordination:

1.6.10.1 The Contractor agrees to attend any post award conference convened by the contracting activity in accordance with Federal Acquisition Regulation Subpart 42.5, Post Award Orientation. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor’s performance. At these meetings, the contracting officer will apprise the contractor of how the Government views the contractor’s performance, and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.

1.6.10.2 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates.

The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract (i.e. sprint plans and changes to development priorities); issue oral or written interpretations of technical requirements; monitor the Contractor's performance and notify both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property; and make arrangements for site entry of Contractor personnel.

The COR does not have the authority to direct the contractor or alter any of the terms and conditions of the contract. The contractor shall not act on any discussion with the COR without the written authorization of the Contracting Officer.

1.6.11 Key Personnel: Key personnel are those that contribute substantially and measurably to the project. The contractor shall notify the COR 15 days prior to replacing key personnel and provide the resumes of proposed key personnel replacements with an equal or better-qualified person for review and approval by the Government.

1.6.12 Identification of Contractor Employees: All contract personnel attending meetings, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Provisions of the Privacy Act may apply to some records and reports maintained by the contractor.

1.6.13 Contractor Travel: Travel outside of Washington DC Metro Area to other sites may be required for specific tasks. All travel requires government pre-approval/authorization and shall be coordinated with the Contracting Officer and COR. Any projected travel should be submitted to the Contracting Officer and COR expeditiously to allow necessary time to complete the Government approval process. Travel and per diem shall be reimbursed in accordance with the Joint Federal Travel Regulations currently in effect and IAW FAR Part 31.205-46. All travel will be conducted at the minimum cost to the Government. The Contractor shall provide a trip report detailing travelers, activities conducted, results accomplished, and expenses incurred to the Contracting Officer and COR within two (2) days of the completion of travel.

1.6.14 Organizational Conflict of Interest OCI: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCIs as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.15 Safety: The Contractor shall comply with all Federal, State, and local authorities having jurisdication and with safety and fire regulations promulgated by the Department of Labor (OSHA) under Title 29, Section 1900 of the Code of Federal Regulations. The Contractor is solely responsible for compliance and any associated cost of compliance with Federal, State, and local laws and regulations. The Contractor shall provide written notification to the Contracting Officer and COR within twenty-four (24) hours of being notified by any Federal, State, or local agency that a safety law and/or regulation has been violated. This report shall provide at a minimum the following: time and date of the occurrence, a description of the violation, required corrective action(s), and a projected correction date.

1.6.16 Inspection and Acceptance Criteria: The COR or technical representative will require up to fifteen (15) working days from receipt of all deliverables for review and comment/acceptance. Government acceptance will be based upon the deliverables meeting accepted professional standards for technical content, workmanship, and relevance to stated functional task requirements.

1.6.17 Reporting

1.6.17.1 Manpower Reporting: The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Defense Security Cooperation Agency via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address: http://www.ecmra.mil/ Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2014. Contractors may direct questions to the help desk at http://www.ecmra.mil/

1.6.17.2 Travel Reporting: The Contractor will submit a monthly financial report, in addition to invoice requirements, to the Contracting Officer and COR, that includes all travel costs incurred by the contractor. The report shall be formatted to provide breakout of costs for the current period to date and the total amount expended to include the remaining balance on the Travel CLIN. This format allows efficient, effective, and accurate tracking and provides effective insight into declining funds availability.

1.6.17.3 Scientific and Technical Reporting: The Contractor must complete a scientific and technical report, detailing the work accomplished under the contract IAW FAR 35.010. The report should include a SF298 cover form.

1.6.18 Information Assurance (IA) Compliance: In order to protect DoD and personal information in the service provider’s operating environment, the contractor shall outline the security roles and responsibilities of the web hosting service down to the IA control level in the web hosting service level agreement, along with any other performance and service-level parameters that the DoD deems appropriate and by which the DoD shall measure the IA profile of the outsourced IT-based process for the purpose of certification and accreditation. This will compliment, not duplicate, any controls inherited from the provider’s FedRamp certification.

1.6.19 Section 508 Compliance: The contractor will develop all systems to comply with Section 508 of the US Rehabilitation Act and deliver reports with any changes that detail compliance. In the event compliance cannot be achieved due to DSCA requirements, DSCA will review the requirements and the solution and if applicable issue a waiver for this requirement in accordance with general and or specific exceptions in the US Rehabilitation Act.

1.6.20 Environmental Protection: The Contractor shall be knowledgeable and comply with all applicable federal, state, and local laws, regulations, and requirements regarding environmental protection. In the event environmental laws or regulations change during the term of this contract, the Contractor is required to comply as such laws come into effect.

1.7 Special Qualifications: The Government anticipates specialized qualifications will be required to perform this effort. The contractor shall provide personnel experienced in managing and supporting a program of the scope and complexity of the GlobalNET platform.

1.7.1 The following specific skills shall be provided in order to maintain, support, and enhance the application: knowledge and use of the software at 1.6.9 as well as assorted Internet browsers (i.e. Internet Explorer, Firefox, and Safari), web-based communications systems (i.e. chat, multi-lingual chat, and web mail), event management, collaboration, and analytic reporting systems. Furthermore, the Contractor is expected to use both agile software development and function point analysis for planning, managing, and delivering software. Personnel supporting this effort should have the appropriate experience, education, and certifications.

1.7.2 Labor Qualifications: The Government believes that the following minimum mix of skills is required to perform this effort.

1.7.2.1 Program Manager: Plans, directs, or coordinates program services, such as the management of assessment findings and continued operations and maintenance of the fielded system. A certification in project management professional (PMP) by the Project Management Institute or equivalent government certification is required. Ten years experience as a program manager is preferred.

1.7.2.2 Project Controller: Ensures that all elements are within scope and budget for the contract and works with the program manager to provide analytical resources to understand the state of the contract. Duties primarily include administrative tasks (such as billing, burn rates, and change orders). Five years experience managing a project of a similar nature is preferred.

1.7.2.3 Technical Architect: Plans the architecture used to satisfy the requirements. Tasks include documenting “as is states”, and defining the “to be states”. Identifies the most optimal configurations, understands best practices for deploying technology, and is able to change assumptions and recommendations as the situations change. The architect should be familiar with and be able to create artifacts within the DoD Architectural Framework (DoDAF) Ten years experience as a technical architect is preferred.

1.7.2.4 Data Architect: Ensures, in conjunction with the technical architect, that data structures are properly designed, enforced, and optimized for the system. Ensures that all data, in motion and at rest, are properly secured, backed up, and structured to move within and external to the GlobalNET ecosystem. Five years experience as a data architect is preferred.

1.7.2.5 Data Engineer: Implements all of the recommendations of the data architect, performs database management, keying, optimization, and other data tasks. Ensures data integrity and best practices through moving out of the current hosting environment and upgrading to the next software package as described. Five years experience as a software systems engineer is preferred.

1.7.2.6 Software Engineer: Implements all of the changes required to move the code base and documents all of the changes. Trained in the software listed in section 1.6.9 and a bachelor of science in software engineering or 10 years of software engineering experience. This position uses industry best practices and includes additional duties of expeditiously and securely deploying the software to the new hosting environment.

1.7.2.7 Quality Assurance Analyst: Ensures that all of the functional metrics are established in development sprints and that all processes support the successful achievement of those metrics. Ensures that all products are defect free and meet end user expectation. Five years experience in quality assurance is preferred.

1.7.2.8 SCRUM Master: Ensures that each development sprint is managed according to the agile methodology. Coordinates all sprint activities and manages the team according to the sprint plan. Mitigates risks and keeps the government representatives apprised of the progress and any substitutions/changes that need to be made during the sprint or deployment. Ten years experience as a SCRUM master is desired with SCRUM Master Certification.

1.7.2.9 Business Analyst: Ensures the end user expectation matches the delivered capability. Works with end users to understand the required changes, documents it in terms for the end user to understand. Once coordinated with the end user, the analyst should be able to translate that into a technical requirement that may be estimated and implemented. Five years experience as a business analyst is preferred.

1.7.2.10 Developer: Develop, create, and modify general computer applications software or specialized utility programs. Design software or customize software for client use with the aim of optimizing operational efficiency, understands how to operate in an agile methodology and is accountable back to the SCRUM master. This role will also perform, as a minimum, Information Assurance Technical (IAT) level I duties as defined in DoD 8570.01-M, Information Assurance Workforce Improvement Program. Five years development experience with projects of a similar size and scope is preferred.

1.7.2.11 1.7.2.11 Technical Support: Operates and maintains the platform. Specific tasks include but are not limited to ensuring the backups are preformed according to the backup and COOP plans, patches are applied, maintenance is performed to the hardware, servers and services are optimized, services and servers are restarted as necessary. Ten years experience as a technologist is preferred.

1.7.2.12 Help Desk: Maintains the help desk. Fields requests from end users and enters them into the contractor provided tracking tool. Ensures that tickets are properly assigned and that the backlog is understood between technical support/development team and end users/ representatives, provides the program manager monthly status reports. Five years of help desk experience is preferred.

1.7.2.13 Technical Assessor: Ensures that the system is optimized and running correctly by performing periodic audits of performance and security standards. This role will also perform Information Assurance Technical (IAT) level III duties as defined in DoD 8570.01-M, Information Assurance Workforce Improvement Program. Ten years experience in this area is preferred.

PART 2: DEFINITIONS AND ACRONYMS

2.1 DEFINITIONS:

Advisory and Assistance Services (AAS). Those services provided under contract by nongovernmental sources to support or Improve organizational policy development; decision-making; management and administration; program and/or project management and administration; or research and development (R&D) activities. It can also mean the furnishing of professional advice or assistance rendered to improve the effectiveness of Federal management processes or procedures (including those of an engineering and technical nature). In rendering the foregoing services, outputs may take the form of information, advice, opinions, alternatives, analyses, evaluations, recommendations, training, and the day-to-day aid of support personnel needed for the successful performance of ongoing Federal operations. All advisory and assistance services are classified in one of the following definitional subdivisions:

(1) Management and professional support services, i.e., contractual services that provide assistance, advice or training for the efficient and effective management and operation of organizations, activities (including management and support services for R&D activities), or systems. These services are normally closely related to the basic responsibilities and mission of the agency originating the requirement for the acquisition of services by contract. Included are efforts that support or contribute to improved organization of program management, logistics management, project monitoring and reporting, data collection, budgeting, accounting, performance auditing, and administrative technical support for conferences and training programs.

(2) Studies, analyses and evaluations, i.e., contracted services that provide organized, analytical assessments/evaluations in support of policy development, decision-making, management, or administration. Included are studies in support of R&D activities. Also included are acquisitions of models, methodologies, and related software supporting studies, analyses, or evaluations.

(3) Engineering and technical services, i.e., contractual services used to support the program office during the acquisition cycle by providing such services as systems engineering and technical direction (see 9.505-1(b)) to ensure the effective operation and maintenance of a weapon system or major system as defined in OMB Circular No. A-109 or to provide direct support of a weapon system that is essential to research, development, production, operation or maintenance of the system.

Affiliates. Associated business concerns or individuals if, directly or indirectly--

(1) Either one controls or can control the other; or

(2) A third party controls or can control both.

For this contract, Officers or employees of the prime contractor and first tier subcontractors involved in the program and technical decision making process concerning this contract can be considered affiliates.

Contracting Officer (KO). A person duly appointed with the authority to enter into and administer contracts on behalf of the U.S. Government.

Contracting Officer’s Representative (COR). A representative from the requiring activity assigned by the Contracting Officer to perform surveillance and to act as liaison to the contractor Defective Service. A service output that does not meet the standard of performance associated with it in the Performance Work Statement.

Interest. Organizational or financial interest.

Government Furnished Property (GFP). Property in the possession of, or directly acquired by the Government and subsequently made available to the contractor.

Government Property. All property owned or leased to the Government or acquired by the Government under the terms of the contract. Government property includes both Government furnished property and contractor acquired property as defined in FAR 45.101.

Government Furnished Material (GFM). Material in the possession of, or directly acquired by, the Government and subsequently made available to the contractor.

Government Material. All material that may be incorporated into or attached to a deliverable end item or that may be consumed or expended in performing a contract, i.e., raw and processed materials, small tools, supplies component parts, raw and processed materials.

Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

Quality Control. Those actions taken by a contractor to control the performance of services so that they meet the requirements of the PWS.

Quality Assurance. Those actions taken by the government to assure services meet the requirements of the Performance Work Statement.

2.2 ACRONYMS:

AAS. Advisory and Assistance Services ARO. After Receipt Of DoD. Department of Defense IAW. In Accordance With OCI. Organizational Conflict of Interest ODC. Other Direct Costs PRS. Performance Requirements Summary PWS. Performance Work Statement QC. Quality Control QDR. Quadrennial Defense Review TBN. To Be Negotiated UIC. Unit Identification Code

PART 3: GOVERNMENT FURNISHED RESOURCES

3 General: The government shall provide, the facilities, equipment, supplies, materials, and/or services listed below.

3.1 Equipment and Information: When authorized by the COR to perform on-site at Government facilities, adequate workspace, including desks, computer workstation setup, telephone, and other necessary equipment or supplies will be provided by the Government. The government will provide the contractor access to regulations, directives, or other policy documents required to complete this task.

3.2 Software and Documentation: DSCA will provide the baseline system specifications, which include the requirements document, the minimum end user and system configurations, and the architecture diagrams. Additionally DSCA will deliver initial new capabilities desired/known deficiencies and UAT test cases prior to sprint plan for changes

3.3 Licenses:

*CometChat license (must be renewed on module update, no set timeline)

3.4 Domains:

pims.org 09/19/2014 08/07/2014

3.5 All existing code and software developed or that which is produced as a result of this contract, is to be given back to the open source community per open source licensing and uploaded into forge.mil.

PART 4: CONTRACTOR FURNISHED RESOURCES

4 General: Except for those items specifically stated to be government furnished in PART 3: GOVERNMENT FURNISHED RESOURCES, the contractor shall furnish everything required to perform this PWS.

PART 5: SCOPE OF WORK

5 General: Contracting will issue specific task orders for each of the following broad category of activities. The Contractor shall provide DSCA Programs Centers Management Office the necessary non-personal support services for said activities. The Contractor shall provide cost and schedule proposals for each task order prior to issuance. Upon award, the contractor and DSCA will meet to ensure no ambiguity exists on each task order.

5.1 Program Management: Management of assessment findings, continued operations and maintenance of the fielded system, to include onsite support at identified locations, software, usability and security updates.

5.1.1 The contractor shall create, update, maintain, and provide an Integrated Project Plan. The plan should include the following, but is not limited to: Software Design and Development; Testing; Configuration and Change Management; Quality Control; Documentation Management; Hardware Configuration; Risk Management; Schedule, Cost, and Risk.

5.1.2 The contractor shall create, update, maintain, and provide Continuity of Operations Plan (COOP). This plan will document the restore processes and procedures, a recommendation for a backup locations and services, and detail requirements to do so. DSCA will expect to simulate the plan no more than twice a year or, if needed, execute the plan within the recommendations of the plan.

5.1.3 The contractor shall create, update, maintain, and provide an Operations, Administration, and Maintenance (OAM) Manual.

5.1.4 The contractor shall create and provide a monthly summary status report for all task orders that includes the following: work performed during the previous period, work planned for the next period, database management information, resource expenditures, current bug reports and status, deliverables to date, and accomplishments or problems encountered during the period.

5.1.5 The contractor shall prepare and submit an electronic monthly invoice using Wide Area WorkFlow (WAWF) in accordance with the following contract clauses:

*DFAR 252.232-7003 Electronic Submission of Payment Requests and Receiving Reports *DFAR 252.232-7006 Wide Area WorkFlow Payment Instructions *WAWF-RA Wide Area WorkFlow – Receipt and Acceptance

5.1.6 Certification and Accreditation Support: GlobalNET has an authority to operate (ATO). With the new hosting environment and software, the ATO will have to be revalidated using the DoD Information Assurance Certification and Accreditation Process (DIACAP). This will require the contractor to enter all required products into DSCA’s implementation of eMass, in accordance with the GlobalNET Information Assurance Manager (IAM).

5.1.7 The contractor shall provide appropriate oversight to ensure all deliverables and scheduled tasks are met.

5.2 Turnkey Operations for GlobalNET: The Contractor shall maintain and operate the operational, test, and development environments within a secure environment such that all data at rest and in motion is encrypted using a Federal Information Processing Standard (FIPS) 140-2 approved algorithm. The Contractor shall use all reasonable commercial efforts to ensure that all services are available 99.9% of the time in any calendar month, which translates to a maximum of 45 minutes of unavailability per calendar month. The Contractor shall implement patches (software, security, etc.) coordinated with user communities and ensure the minimization of system down time.

5.2.1 The contractor shall provide 24x7 on-call Help Desk support. Each community will assign a GlobalNET lead to respond to Tier 1 issues identified by users. Issues that cannot be resolved by the Tier 1 support team will be escalated to the Help Desk. The Help Desk will respond to the GlobalNET lead within 30 minutes of receiving the issue and assign a ticket number for resolution. The team will provide updates to the responsible GlobalNET leads every 24 hours for Tier 2 items and every 3 days for Tier 3 items. The Government anticipates 125 Tier 2 support tickets and 50 Tier 3 support tickets per year.

5.2.1.1 Help Desk Levels of Support:

· Restart Non-Responsive Services

· Clear Caches

· Email Accounts

· URL Updates

· System Restoration

· Debugging

· Fault Replication/Resolution

5.2.1.2 System failures: System failures are the loss of system services. All failures are to be restored within eight (8) hours with the following caveat: system services that have become non-responsive shall be restarted within 45 minutes.

5.2.1.3 Database Management: The contractor shall provide the ability to manage the database for efficient operations. These includes, but is not limited to optimizing indexes, understanding and implementing the optimal storage engines, indentifying and providing fixes for slow queries, and providing input into the continuity of operations, backup, and restore plans.

5.2.2 Web Hosting: The Contractor shall provide the hosting environment, using best commercial and DoD practices, for the operations of the GlobalNET platform.

5.2.3 Procure/Maintain GlobalNET Domains: GlobalNET incorporates seventeen (17) different communities. Each community has its own branding scheme that is available on its unique URL. The contractor shall procure any necessary new domain names, manage all domain names, and manage the daily DNS operations including zone administration. In addition, the contractor will manage all server/domain certificates. This will include wildcard and single server certificates where appropriate. See Table at 3.4.

5.2.4 Maintain Zimbra Email Servers: DSCA operates email for select customers in the European theater using the pims.org domain. There are approximately 100 email accounts that are anticipated to remain constant with some limited additions and subtractions as needed. Each account is capped at 200MB per account and is not heavily used due to the use of GlobalNET for collaboration.

5.2.5 Backup Data: The contractor shall backup and secure all system files. The contractor will backup all data files every 24 hours, at a minimum. The contractor must be able to restore data within 12 hours and restore the system within 24 hours, when necessary.

5.3 GlobalNET Development: The Contractor will use an agile software development, test and evaluation, and deployment methodology that will document the changes, function and SNAP points, before any work commences. The contractor will have core capabilities to manage a highly specialized technical team using an agile methodology. DSCA uses the International Function Point Users Group (IFPUG) functional and non-functional size measurement method, supplemented with the standard IFPUG General Systems Characteristics supplemented by DSCA local counting practice resolutions, to estimate and plan for software delivery. All requirements should be detailed in terms of operational requirements and the corresponding function points and/or SNAP point sizes. Sprint size ranges for both function points and SNAP points will be:

5.3.1 Configuration Management: The contractor shall ensure that all software and system changes are properly captured and published. This includes but is not limited to internet protocol (IP) addresses, domain name service (DNS), domain management, software builds, database documentation, manuals, scripts, and other system configurations.

5.3.2 Planned Enhancements:

5.3.2.1 Build New Hosting Environment and Migrate Software/Content: GlobalNET has three internet-hosted environments: development, test, and production all currently located in the Acquia Hosting Cloud serviced by the Amazon Elastic Cloud Compute (EC2). DSCA desires to move from that environment to a Federal Risk Authorization Management Program (FEDRAMP) compliant facility. DSCA would prefer the Vazata Nova data center for reasons of consolidation and information exchange with the regional center person activity management system (RCPAMS) but other FEDRAMP compliant facilities may be appropriate.

5.3.2.1.1 The Contractor will provide a plan for moving data from current hosting location to new location. This plan should include specific sections to address how the contractor will minimize the risk of data loss and downtime.

5.3.2.1.2 The Contractor will build a new hosting environment to support the development, testing, and operations for GlobalNET. The Contractor will build a new hosting environment to support the development, testing, and operations for GlobalNET. The platform is currently provisioned for 3TB of storage and uses approximately 1.5 TB of storage. The required backup solution maintains all transactions.

5.3.2.1.3 Upgrade Core Content Management System (CMS) and Additional Platform Applications: The Contractor will provide a recommendation as to which version of Drupal, version 7 or 8, will provide the best capabilities, costs, security, and stability. The contractor will provide an upgrade plan with the recommendation that includes all of the software listed at 1.6.9. The plan must minimize disruption to the end-user, technical risk, and data loss. The plan must include a timeline to deploy and migrate all content. Lastly, the plan must provide a map from the required capabilities as documented in TECHNICAL EXHIBIT 1: GLOBALNET SYSTEM SPECIFICATIONS. The Contractor will upgrade the core content management system to a more current core release.

5.3.3 Future Enhancements: GlobalNET has been developed iteratively with emerging customer requirements and capabilities. DSCA operates a process that allows users to submit new requirements. DSCA and the vendor will plan and execute, if approved, changes IAW section 5.3 of this PWS.

5.3.4 GlobalNET Technical Support (GTS) Services: GTSs are experienced in digital communications, using social collaboration and networking software. GTSs help security sector focused partners implement a web 2.0 centric strategy as part of a US Department of Defense sponsored program to build partner capacity. They have knowledge of content management systems, social media, and web analytics. GTSs will travel to events regionally throughout the year, and attend an annual meeting coordinated with DSCA. The contractor shall ensure GTSs personnel work with the development team to understand end user needs and operational requirements. The GTSs also conduct user acceptance testing and work with local communities on usability and design concerns. There are currently six full-time GTSs matrixed to the locations listed in section 1.6.6.2.

5.4 Transition Activities: The Contractor will be provided a thirty-day transition period at the beginning and end of the contract. The Contractor shall ensure that all transition activities are completed within the thirty-day transition period in order to move all intellectual property, software, documentation, and domain name service (DNS) requirements.

5.5 Deliverables: All deliverables shall meet professional standards and requirements set forth in contractual documentation. Unless otherwise stated all deliverables, other than software, shall be submitted in final form to the COR. Acceptance of deliverables shall be provided by the COR. The deliverables shall be provided as follows:

Quarterly, 5th Electronic

(Existing/New)

3 Days ARO Notice to Proceed Electronic

PART 6: PERFORMANCE REQUIREMENTS SUMMARY (PRS)

6 General: This PRS summary identifies critical success factors for the contract. It identifies both the performance objectives for those factors and the performance threshold required for each performance objective. The Government reserves the right to surveil all services called for in the contract to determine whether the performance objectives and goals were met.

6.1 This PRS lists the performance objectives for the required service that the Government will surveil. The absence of any contract requirement from the PRS shall not detract from its enforceability nor limit the rights or remedies of the Government under any other provision of the contract including the clauses entitled “Inspection of Services” and “Default”.

6.2 This PRS will be used as the baseline to develop a QASP. The QASP will identify the surveillance methods the Government will use to evaluate the contractor’s performance. Surveillance methods may include 100 Percent Inspection, Periodic Surveillance, Validated Customer Complaint, or any combination of these methods. Methods of surveillance can change after contract award based on, but not limited to the Contractor’s QC Plan, Partnering Agreements, or Contractor Performance.

6.3 Performance Evaluation: Performance of a service will be evaluated to determine whether it meets the performance…