PWS_(Rev_20170629).pdf

Defense Security Assistance Development Center Performance Work Statement

Thycotic Secret Server Enterprise Software Licenses and Support

Title: Thycotic Secret Server Enterprise

Requiring Activity: Defense Security Assistance Development Center (DSADC)

1. Introduction:

This request states the requirements for the procurement of the Thycotic Secret Server Enterprise Software licenses and 1 year product support.

2. Background:

The Thycotic Secret Server Enterprise Software is a comprehensive privileged account management solution. This product is designed to address the risk Privileged Credential Risk across the enterprise.

Thycotic provides an end-to-end Privileged Account Management solution that:

• Combines industry-leading Privileged Account Security and Password protection with proven end-point security and application control for Windows and UNIX.

• Dramatically lowers risk by stopping the progress of malware-based attacks at the endpoint and servers, limiting an attacker’s ability to move beyond their initial point of entry, as well as preventing installation of Remote Access Tools (RATs).

• Ensures secure Privileged Account credential protection while preventing privilege escalation by removing and/or limiting privileges for business users and IT admins without impacting productivity.

Thycotic Secret Server delivers a comprehensive Privileged Account Management solution set to protect your most valuable information assets from cyberattacks and insider threats. Thycotic Secret Server, Application Control, Local Security and Security Analytics solutions protect privileged accounts and enables organizations to enforce least privilege policies for business and administrative users, as well as control applications to reduce the attack surface without halting productivity.

3. Program Objects and Scope of Work:

Scope of work includes:

The contractor shall provide all software and services requested in this contract including 1 year U.S. Federal Production Support/Subscription for each of the products. The contractor needs to be an official authorized Thycotic Channel Partner Premier Reseller.

Software required is listed below:

Line Manufacturer QTY PART # Description

1. Thycotic 1

ADD-SS-HSM Add On for Secret Server Installed - Hardware Security

Module

2. Thycotic 1 SS-SPT-1YR Secret Server Installed - Support - 1 Year

3. Thycotic 1 SS-STARTER-B Secret Server Starter B with 50 users and 1000 secrets

The requested Thycotic U.S. Federal Technical Support at a minimum should include the following:

a) Global, 24x7x365 support for Severity 1 issues

b) Unlimited number of support requests

c) Remote Support

d) Online access to documentation and technical resources, knowledge base, discussion forums

e) Product updates and upgrades

f) An exclusive telephone number for use by U.S. Federal customer’s only, giving access to Thycotic technical support engineers who are physically located, and are citizens of, the U.S.A.

g) Target Response Times:

a. Critical (Severity 1) – 30 minutes or less: 24x7

b. Major (Severity 2) – 4 business hours

c. Minor (Severity 3) – 8 business hours

d. Cosmetic (Severity 4) – 12 business hours

4. Deliverables:

The Vendor must provide written and/or electronic notification stating that all subject items in this contract are available or delivered. Notification shall include any serial numbers, licenses, credits, and/or account numbers assigned to the software packages, thereby allowing the Government to contact the vendor for the contracted technical support or professional services, as required.

Vendor must be an official authorized Thycotic Channel Partner Premier Reseller. All vendors are required to submit documentation with their offer that identifies the Thycotic Partnership level. The vendors Thycotic partnership status will be verified by the Government with Thycotic prior to award.

The vendor shall warrant that all products and software are new and certify prior to award that all Thycotic software packages to be delivered shall be licensed originally to buyer as the original licensee authorized to use Thycotic software. The vendor confirms to have sourced all Thycotic products provided under this contract directly from Thycotic or through Thycotic authorized channels only. The vendor shall make the End User (Government) customer clearly known to Thycotic so that warranty and service contract information can transfer to the appropriate party.

Prior to payment authorization, the Government intends to confirm with Thycotic that all software provided under this contract has been sourced through authorized channels only and that all warranties/support are transferrable to the Government.

The contractor is required to provide all hardware/software licenses for the items to be delivered under this contract within thirty days after date of award. In the event that the Government determines that the hardware/software to be delivered are not 1st tier, the Government need not accept delivery. If after award, the hardware/software delivered is determined not to be 1st tier, the Government has the right to terminate for cause with the Contract liable to the Government for any and all rights and remedies provided by law. Incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2005-27. FAR 52.212-1 Instructions to Offerors--Commercial Items applies.

Security/Sensitivity: All work associated with this PWS is UNCLASSIFIED.

Sensitivity – No access is required for non-U.S. citizen government and contractor personnel.

6. Government Furnished Equipment (GFE)/Government Furnished Information (GFI) Government Furnished Software (GFS): N/A

7. Task Monitors (TMs)/COR:

Primary Task Monitor & Ship To Address:

Name: Mr. Bob Hoffmann Organization: Defense Security Assistance Development Center Address: 5450 Carlisle Pike, Bldg 107N, Mechanicsburg, PA 17055 Phone: (717) 605-9083 Fax: (717) 605-9319 E-mail: baptist.w.hoffmann.civ@mail.mil

Alternate Task Monitor & Ship To Address:

Name: Mr. Chris Derouaux Organization: Defense Security Assistance Development Center Address: 5450 Carlisle Pike, Bldg 107N, Mechanicsburg, PA 17055 Phone: (717) 605-9094 E-mail: Christopher.derouaux.civ@mail.mil

Primary Contracting Office Rep (COR) & Invoice:

Name: Mr. Will Ritcher Organization: Defense Security Assistance Development Center Address: 5450 Carlisle Pike, Bldg 107N, Mechanicsburg, PA 17055 Phone: (717) 605-9078 E-mail: William.j.ritcher2.civ@mail.mil

8. Other Direct Costs: N/A

9. Contract Type: Firm Fixed Price

10. Contracting POC: The POC for any contracting issues is:

Name: Mr. Erwin Cablay, Contracting Specialist Organization: Defense Security Cooperation Agency Address: 201 12th St South, Suite 201, Arlington, VA 22202-5408 Phone: (703) 697-8951 E-mail: erwin.c.cablay.civ@mail.mil

11. Document Review: N/A

12. Document Deliverable Criteria: N/A

13. Other Pertinent Information or Special Considerations: N/A

14. Contractor Travel: N/A

15. Section 508 Accessibility standards:

The following Section 508 Accessibility Standards (Technical Standards and Functional Performance Criteria) are applicable to this acquisition:

Applicable Section 508 Product Requirements Technical Provisions

1194.21 Software Applications and Operating Systems

Functional Performance Criteria 1194.31- Functional Performance Criteria

Information, Documentation, and Support

1194.41 - Information, Documentation, and Support

The contractor shall complete and submit the Government Product/Service Accessibility Template (GPAT) for this requirement and submit it along with the quote.

16. Invoices – Invoices shall be submitted electronically via Wide Area Workflow (WAWF) to:

Mr. William Ritcher Defense Security Assistance Development Center 5450 Carlisle Pike, Bldg 107 North Mechanicsburg, PA 17055 Ph: (717) 605-9078 william.j.ritcher2.civ@mail.mil

17. Requested Delivery: The contractor shall deliver the items/software listed above no later than by June 30th, 2016 22-JUL-2017. The Period of Performance for the maintenance/support shall commence on award date and continue for a period of one year.

18. Place of Performance: The contractor shall deliver all items/equipment to:

Defense Security Assistance Development Center Attn: Mr. Baptist Hoffman or Mr. Will Ritcher 5450 Carlisle Pike, Bldg 107 North Mechanicsburg, PA 17055 mailto:william.j.ritcher2.civ@mail.mil