HQ0034-11-D-0003-0004_Task_Order_Award.pdf

6. ISSUED BY CODE

HQ0034-11-D-0003

1. CONTRACT/PURCH. ORDER/

AGREEMENT NO.

HQ0034

2. DELIVERY ORDER/ CALL NO.

60PAGE 1 OF

5. PRIORITY

CODE

8. DELIVERY FOB

DESTINATIONX

OTHER

(See Schedule if other)

ORDER FOR SUPPLIES OR SERVICES

3. DATE OF ORDER/CALL

2013 Aug 16

4. REQ./ PURCH. REQUEST NO.

SEE ITEM 6

WHS - ACQUISITION DIRECTORATE

1155 DEFENSE PENTAGON

WASHINGTON DC 20301-1155

7. ADMINISTERED BY (if other than 6)

(YYYYMMMDD)

10. DELIVER TO FOB POINT BY (Date)

(YYYYMMMDD)

DIGITAL MANAGEMENT, INC.

JAY SUNNY BAJAJ

6701 DEMOCRACY BLVD STE 500

BETHESDA MD 20817-1572

CODE 3BDL89. CONTRACTOR FACILITY

SEE SCHEDULE

12. DISCOUNT TERMS

MARK IF BUSINESS IS11.

SMALL

SMALL

DISADVANTAGED

WOMEN-OWNED

13. MAIL INVOICES TO THE ADDRESS IN BLOCK

See Item 15

25. TOTAL $7,924,196.64

OSD CIO

MARQUITA ADAMS

1155 DEFENSE PENTAGON - 3B288

WASHINGTON DC 20301-1155

X

17. ACCOUNTING AND APPROPRIATION DATA/ LOCAL USE

CODE

18. ITEM NO. 19. SCHEDULE OF SUPPLIES/ SERVICES

* If quantity accepted by the Government is same as quantity accepted below quantity ordered and encircle.

DELIVERY/16.

14. SHIP TO

See Schedule

HQ0002 HQ0347

MARK ALL

PACKAGES AND

PAPERS WITH

IDENTIFICATIO N

NUMBERS IN

BLO CKS 1 AND 2.

23. AMOUNT

15. PAYMENT WILL BE MADE BY CODE

DFAS INDIANAPOLIS

8899 E. 56TH STREET

INDIANAPOLIS IN 46249-1510

This delivery order/call is issued on another Government agency or in accordance with and subject to terms and conditions of above numbered contract.

TYPE CALL

OF PURCHASE

ORDER

SEE SCHEDULE

24. UNITED STATES OF AMERICA

TEL:703-545-0693

EMAIL:james.e.johnson58.civ@mail.mil

CONTRACTING / ORDERING OFFICER

quantity ordered, indicate by X. If different, enter actual

BY:James Johnson

If this box is marked, supplier must sign Acceptance and return the following number of copies:

NAME OF CONTRACTOR SIGNATURE TYPED NAME AND TITLE

(YYYYMMMDD)

DATE SIGNED

ACCEPTANCE. THE CONTRACTOR HEREBY ACCEPTS THE OFFER REPRESENTED BY THE NUMBERED PURCHASE ORDER AS IT MAY PREVIOUSLY HAVE BEEN OR IS NOW MODIFIED, SUBJECT TO ALL OF THE TERMS

AND CONDITIONS SET FORTH, AND AGREES TO PERFORM THE SAME.

Reference your quote dated

Furnish the following on terms specified herein. REF:

20. QUANTITY

ORDERED/

ACCEPTED*

21. UNIT 22. UNIT PRICE

DIFFERENCES

26.

INSPECTED RECEIVED ACCEPTED, AND CONFORMS TO THE

CONTRACT EXCEPT AS NOTED

27a. QUANTITY IN COLUMN 20 HAS BEEN

(YYYYMMMDD)

c. DATE d. PRINTED NAME AND TITLE OF AUTHORIZED

GOVERNMENT REPRESENTATIVE

b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

36. I certify this account is correct and proper for payment.

g. E-MAIL ADDRESSf. TELEPHONE NUMBER

a. DATE

(YYYYMMMDD)

b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

28. SHIP NO. 29. DO VOUCHER NO. 30.

INITIALS

32. PAID BY 33. AMOUNT VERIFIED

CORRECT FOR

35. BILL OF LADING NO.

34. CHECK NUMBER

37. RECEIVED AT 38. RECEIVED BY

(YYYYMMMDD)

31. PAYMENT

COMPLETE

PARTIAL

FINAL

PARTIAL

FINAL

DD Form 1155, DEC 2001 PREVIOUS EDITION IS OBSOLETE.

39. DATE RECEIVED 40.TOTAL

CONTAINERS

41. S/R ACCOUNT NO. 42. S/R VOUCHER NO.

ADDRESS

AND

NAME

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 Lot $3,423,702.96 Mark Center Operation and Maintenance

CPFF

Mark Center Operation and Maintenance Per PWS 4.1. Per FAR 252.232-7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $3,214,744.56

FIXED FEE $208,958.40

TOTAL EST COST + FEE $3,423,702.96

000101 $0.00 Funding for CLIN 0001

CPFF

Funding for 16 Aug 2013 - 15 Nov 2013. $803,686.14

ESTIMATED COST $0.00

FIXED FEE $0.00

TOTAL EST COST + FEE $0.00

ACRN AA

$803,686.14

000102 $0.00

FOR CLIN 0001

Funding for the remainder of the period of performance.

0002 Lot $744,316.40 MC Enterprise Management Systems

CPFF

Mark Center Enterprise Management Systems (PWS 4.1.6) (CPFF). Per FAR 252.232-7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $698,888.64

FIXED FEE $45,427.76

TOTAL EST COST + FEE $744,316.40

000201 $0.00 Funding for CLIN 0002

Funding for 16 Aug 2013 - 15 Feb 2014. $349,444.32

$349,444.32

000202 $0.00

FOR CLIN 0002

0003 Lot $849,796.00 Consolidated Server Room Ops and Support

CPFF

Consolidated Server Room Operations and Support (PWS 4.2) (CPFF). Per FAR 252.232-7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $797,930.52

FIXED FEE $51,865.48

TOTAL EST COST + FEE $849,796.00

000301 $0.00 Funding for CLIN 0003

Funding for 16 Aug 2013 - 15 Nov 2013. $199,482.63

$199,482.63

000302 $0.00

FOR CLIN 3001

0004 Lot $205,938.04 Wireless Service (PWS of the 4.3) (CPFF)

CPFF

Per FAR 252.232-7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $193,369.05

FIXED FEE $12,568.99

TOTAL EST COST + FEE $205,938.04

000401 $0.00 Funding for CLIN 0004

Funding for 16 Aug 2013 - 15 Nov 2013. $48,342.26

$48,342.26

000402 $0.00

FOR CLIN 0004

0005 Lot $68,646.01

IPTV (PWS 4.4) (CPFF)

CPFF

Internet Protocol Television (IPTV) (PWS 4.4) (CPFF). Per FAR 252.232-7007, ESTIMATED COST $64,456.35

FIXED FEE $4,189.66

TOTAL EST COST + FEE $68,646.01

000501 $0.00 Funding for CLIN 0005

Funding for 16 Aug 2013 - 11 Dec 2013. $20,547.65

$20,547.65

000502 $0.00

FOR CLIN 0005

0006 Lot $649,591.43 Information Assurance Support (PWS 4.5)

CPFF

Information Assurance Support (PWS 4.5) (CPFF). Per FAR 252.232-7007, ESTIMATED COST $609,945.00

FIXED FEE $39,646.43

TOTAL EST COST + FEE $649,591.43

000601 $0.00 Funding for CLIN 0006

Funding for 16 Aug 2013 - 15 Nov 2013. $152,486.25

$152,486.25

000602 $0.00

FOR CLIN 0006

0007 Lot $92,798.78 Information Security (PWS 4.6) (CPFF)

CPFF

ESTIMATED COST $87,135.00

FIXED FEE $5,663.78

TOTAL EST COST + FEE $92,798.78

000701 $0.00 Funding for CLIN 0007

Funding for 16 Aug 2013 - 15 Nov 2013. $21,783.75

$21,783.75

000702 $0.00

FOR CLIN 0007

0008 Lot $1,202,491.54 Connection Approval/Cert/Accreditation

CPFF

Connection Approval and Certification and Accreditation (PWS 4.7) (CPFF).

ESTIMATED COST $1,129,100.04

FIXED FEE $73,391.50

TOTAL EST COST + FEE $1,202,491.54

000801 $0.00 Funding for CLIN 0008

Funding for 16 Aug 2013 - 15 Nov 2013. $282,275.01

$282,275.01

000802 $0.00

FOR CLIN 0008

0009 Lot $137,302.06 Planet CMS Data Entry Systems Hosting

CPFF

Planet CMS Data Entry Systems Hosting (PWS 4.8) (CPFF). Per FAR 252.232- 7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $128,922.12

FIXED FEE $8,379.94

TOTAL EST COST + FEE $137,302.06

000901 $0.00 Funding for CLIN 0009

Funding for 16 Aug 2013 - 15 Nov 2013. $32,230.53

$32,230.53

000902 $0.00

FOR CLIN 0009

0010 Lot $115,612.23 Facility Mgmt for MC Telecom Rooms

CPFF

Facility Management for MC telecommunication Rooms (PWS 4.9) (CPFF). Per FAR 252.232-7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $108,556.08

FIXED FEE $7,056.15

TOTAL EST COST + FEE $115,612.23

001001 $0.00 Funding for CLIN 0010

Funding for 16 Aug 2013 - 15 Nov 2013. $27,139.02

$27,139.02

001002 $0.00

FOR CLIN 0001

0011 Lot $224,001.19 Project Engineering Support

CPFF

Project Engineering Support (PWS 4.10) (CPFF). Per FAR 252.232-7007, this CLIN is incrementally funded. Please see subclin for funding details.

ESTIMATED COST $210,329.76

FIXED FEE $13,671.43

TOTAL EST COST + FEE $224,001.19

001101 $0.00 Funding for CLIN 0011

Funding for 16 Aug 2013 - 15 Nov 2013. $52,582.44

$52,582.44

001102 $0.00

FOR CLIN 0011

0012 Lot $200,000.00 Warranties, Software Licenses and Main.

COST

Warranties, Software Licenses and Maintenance Contracts (PWS 4.11) (COST).

ESTIMATED COST $200,000.00

$200,000.00

0013 Lot $10,000.00 Travel and ODCs (COST) (PWS 14.0)

Travel and ODCs per PWS 14.0.

ESTIMATED COST $10,000.00

$10,000.00

1001 Lot $1,754,647.77 OPTION Mark Center Operation and Maintenance

Mark Center Operation and Maintenance (PWS 4.1) (CPFF)

ESTIMATED COST $1,647,556.59

FIXED FEE $107,091.18

TOTAL EST COST + FEE $1,754,647.77

1002 Lot $0.00 OPTION MC Enterprise Management Systems

Mark Center Enterprise Management Systems (PWS 4.1.6) (CPFF)

1003 Lot $196,283.95 OPTION Consolidated Server Room Ops and Support

Consolidated Server Room Operations and Support (PWS 4.2) (CPFF)

ESTIMATED COST $184,304.18

FIXED FEE $11,979.77

TOTAL EST COST + FEE $196,283.95

1004 Lot $105,543.25 OPTION Wireless Service (PWS of the 4.3) (CPFF)

ESTIMATED COST $99,101.64

FIXED FEE $6,441.61

TOTAL EST COST + FEE $105,543.25

1005 Lot $35,181.08

OPTION IPTV (PWS 4.4) (CPFF)

Internet Protocol Television (IPTV) (PWS 4.4) (CPFF)

ESTIMATED COST $33,033.88

FIXED FEE $2,147.20

TOTAL EST COST + FEE $35,181.08

1006 Lot $332,915.60 OPTION Information Assurance Support

Information Assurance Support (PWS 4.5) (CPFF)

ESTIMATED COST $312,596.81

FIXED FEE $20,318.79

TOTAL EST COST + FEE $332,915.60

1007 Lot $47,559.37 OPTION Information Security (PWS 4.6) (CPFF)

ESTIMATED COST $44,656.69

FIXED FEE $2,902.68

TOTAL EST COST + FEE $47,559.37

1008 Lot $616,276.92 OPTION Connection Approval/Cert/Accreditation

Connection Approval and Certification and Accreditation (PWS 4.7) (CPFF)

ESTIMATED COST $578,663.77

FIXED FEE $37,613.15

TOTAL EST COST + FEE $616,276.92

1009 Lot $70,367.31 OPTION Planet CMS Data Entry Systems Hosting

Planet CMS Data Entry Systems Hosting (PWS 4.8) (CPFF)

ESTIMATED COST $66,072.59

FIXED FEE $4,294.72

TOTAL EST COST + FEE $70,367.31

1010 Lot $59,251.26 OPTION Facility Mgmt for MC Telecom Rooms

Facility Management for MC Telecommunication Rooms (PWS 4.9) (CPFF)

ESTIMATED COST $55,634.99

FIXED FEE $3,616.27

TOTAL EST COST + FEE $59,251.26

1011 Lot $114,800.61 OPTION Project Engineering Support

Project Engineering Support (PWS 4.10) (CPFF)

ESTIMATED COST $107,794.00

FIXED FEE $7,006.61

TOTAL EST COST + FEE $114,800.61

1012 Lot $200,000.00 OPTION Warranties, Software Licenses and Main.

Warranties, Software Licenses and Maintenance Contracts (PWS 4.11) (COST)

1013 Lot $10,000.00 OPTION Travel and ODCs (COST) (PWS 14.0)

2001 Lot $1,754,647.77 OPTION Mark Center Operation and Maintenance

ESTIMATED COST $1,647,556.59

FIXED FEE $107,091.18

TOTAL EST COST + FEE $1,754,647.77

2002 Lot $0.00 OPTION Mark Center Enterprise Mgmt Systems

2003 Lot $125,916.65 OPTION Consolidated Server Room Ops and Support

ESTIMATED COST $118,231.60

FIXED FEE $7,685.05

TOTAL EST COST + FEE $125,916.65

2004 Lot $105,543.25

ESTIMATED COST $99,101.64

FIXED FEE $6,441.61

TOTAL EST COST + FEE $105,543.25

2005 Lot $35,181.08

OPTION IPTV (PWS 4.4) (CPFF)

ESTIMATED COST $33,033.88

FIXED FEE $2,147.20

TOTAL EST COST + FEE $35,181.08

2006 Lot $332,915.60 OPTION Information Assurance Support

Information Assurance Support (PWS 4.5) (CPFF)

ESTIMATED COST $312,596.81

FIXED FEE $20,318.79

TOTAL EST COST + FEE $332,915.60

2007 Lot $47,559.37

ESTIMATED COST $44,656.69

FIXED FEE $2,902.68

TOTAL EST COST + FEE $47,559.37

2008 Lot $437,515.38 OPTION Connection Approval/Cert/Accreditation

ESTIMATED COST $410,812.56

FIXED FEE $26,702.82

TOTAL EST COST + FEE $437,515.38

2009 Lot $70,367.31 OPTION Planet CMS Data Entry Systems Hosting

ESTIMATED COST $66,072.59

FIXED FEE $4,294.72

TOTAL EST COST + FEE $70,367.31

2010 Lot $59,251.26 OPTION Facility Mgmt for MC Telecom Rooms

ESTIMATED COST $55,634.99

FIXED FEE $3,616.27

TOTAL EST COST + FEE $59,251.26

2011 Lot $114,800.61 OPTION Project Engineering Support

ESTIMATED COST $107,794.00

FIXED FEE $7,006.61

TOTAL EST COST + FEE $114,800.61

2012 Lot $200,000.00 OPTION Warranties, Software Licenses and Main.

2013 Lot $10,000.00

3001 Lot $1,798,513.96 OPTION Mark Center Operation and Maintenance

ESTIMATED COST $1,688,745.50

FIXED FEE $109,768.46

TOTAL EST COST + FEE $1,798,513.96

3002 Lot $0.00 OPTION Mark Center Enterprise Mgmt Systems

3003 Lot $0.00 OPTION Consolidated Server Room Ops and Support

3004 Lot $108,181.83

ESTIMATED COST $101,579.18

FIXED FEE $6,602.65

TOTAL EST COST + FEE $108,181.83

3005 Lot $36,060.61

OPTION IPTV (PWS 4.4) (CPFF)

ESTIMATED COST $33,859.73

FIXED FEE $2,200.88

TOTAL EST COST + FEE $36,060.61

3006 Lot $341,238.49 OPTION Information Assurance Support (PWS 4.5)

ESTIMATED COST $320,411.73

FIXED FEE $20,826.76

TOTAL EST COST + FEE $341,238.49

3007 Lot $48,748.35

ESTIMATED COST $45,773.10

FIXED FEE $2,975.25

TOTAL EST COST + FEE $48,748.35

3008 Lot $448,453.26 OPTION Connection Approval/Cert/Accreditation

ESTIMATED COST $421,082.87

FIXED FEE $27,370.39

TOTAL EST COST + FEE $448,453.26

3009 Lot $72,126.49 OPTION Planet CMS Data Entry Systems Hosting

ESTIMATED COST $67,724.40

FIXED FEE $4,402.09

TOTAL EST COST + FEE $72,126.49

3010 Lot $60,732.55 OPTION Facility Management for MC Telecom Rooms

ESTIMATED COST $57,025.87

FIXED FEE $3,706.68

TOTAL EST COST + FEE $60,732.55

3011 Lot $117,670.63 OPTION Project Engineering Support

ESTIMATED COST $110,488.85

FIXED FEE $7,181.78

TOTAL EST COST + FEE $117,670.63

3012 Lot $200,000.00 OPTION Warranties, Software Licenses and Main.

3013 Lot $10,000.00

Section C - Descriptions and Specifications

PERFORMANCE WORK STATEMENT

Washington Headquarters Services (WHS) Enterprise Information Technology Services Directorate (EITSD)

Performance Work Statement for Infrastructure Services for Mark Center

17 JULY 2013

1.0 Introduction:

Washington Headquarters Services (WHS) is a Department of Defense (DoD) field activity and provides administrative and operational support to a number of DoD activities in the National Capital Region (NCR).WHS Enterprise Information Technology Services Directorate (EITSD) resulted from the 2011 merger of WHS’s Information Technology Management Directorate (ITMD) and the Office of the Secretary of Defense (OSD) Chief Information Officer (CIO) organization. Washington Headquarters Services provides a wide range of administrative and operational services that enable DOD components to accomplish the shared mission of supporting the Secretary of Defense. Under the direction of the Director, Washington Headquarters Services (WHS), the Facilities Services Directorate (FSD) is responsible for designing, constructing, and implementing the infrastructure for the Mark Center. The Enterprise IT Services Directorate (EITSD) is responsible for operating and maintaining the IT infrastructure for the Mark Center Building in collaboration with the US Army Information Technology Agency

(ITA).

2.0 Background:

In response to the Base Realignment and Closure (BRAC) Commission ruling contained in the 2005 Base Realignment and Closure Act, Washington Headquarter Services (WHS) consolidated operations and relocated people and functions from their current locations throughout the National Capital Region (NCR) to a stand-alone facility, the Mark Center, located at Alexandria, Virginia, on 9 August 2011.

EITSD assisted OSD and WHS customers’ move to Mark Center with all of their IT service requirements and will continue to support these customers after the relocation. EITSD will provide advice and assistance to the Mark Center Tenants and other senior managers to ensure IT is acquired and information resources are managed in a manner that implements the policies and procedures of legislation, including the Paperwork Reduction Act and the Clinger-Cohen Act.

3.0 Scope:

3.1 The contractor shall, as an independent contractor, and not as an agent of the Government, furnish all management and labor necessary to perform the requirements contained herein unless otherwise provided by the Government. The Government shall provide workspace, workstations, and other standard equipment for use. The contractor shall obtain Government approval prior to contractor use of contractor provided hardware and software in the performance of this work. Hardware, Commercial Off-the-Shelf (COTS) software, custom-developed software, and data provided during the execution of this contract shall become property of the Government at the end of the task order.

3.2 The contractor shall utilize commercial best business practices such as but not limited to:

• The Information Technology Infrastructure Library (ITIL) version 3 (ITIL v3)

• Project Management Body of Knowledge (PMBOK) guide

• Control Objectives for Information and related Technology (COBIT)

• Capability Maturity Model Integration (CMMI)

3.3 The contractor shall use Government approved tools to accurately document, administer, and maintain data and information. Government provided tools include, but are not limited to the following: (1) BMC Remedy for ticket tracking and routing, knowledge management and configuration management database (CMDB), and asset management; and (2) the enterprise portal, using Microsoft SharePoint, as a knowledge management repository including incident reporting and standard operating procedure (SOP) library.

3.4 The contractor shall provide on-site management staff with full company authority to oversee the assigned resources and enable rapid resolution of day-to-day service delivery issues.

3.5 The contractor shall develop and maintain Standard Operating Procedures (SOPs) to identify collaborative responsibilities and support processes. The contractor shall present SOPs to the Government for review and approval prior to implementation. The contractor shall provide SOP updates throughout the contract performance period as required, but no less than annually. The contractor shall follow current Government approved policies, procedures, and processes until SOPs are revised, coordinated, and approved. The contractor shall also maintain technical documents as required. The contractor shall deliver to the Government a listing of SOP’s to be developed in priority order within 45 days of contract start date. (Deliverable)

3.6 The contractor shall participate in authorized on-site meetings; prepare and present written and oral briefings on progress of work, and prepare white papers and draft responses to Task Order relevant data calls, as requested by the Government. (Each employee shall attend meetings as required by the government, not to exceed 5 hours per week.

Historically the number of IT-related data calls and white papers are 2-3 per week and no more than 5, which may vary in size or complexity).

3.7 The contractor shall participate in the Government’s Enterprise Change Management (CM) procedures using ITIL v3 framework.

3.8 The contractor shall adhere to the Government’s personnel “in and out” processing procedures.

3.9 The contractor shall develop and implement a monthly Program Management Review (PMR) to provide reports to the Government on contract performance including, but not limited to: performance measures demonstrating performance to established service levels, hours expended, risks and mitigations, major accomplishments, shortfalls, and future activities. The contractor shall use the standard PMR template developed for monthly reviews which will be provided by the government.

3.10 The contractor shall submit a comprehensive management plan within 30 calendar days of contract start. The plan shall include, but is not limited to the following: (Deliverable)

• Plan and procedures for Quality Control Management including methods to measure, monitor, and report on performance, costs, schedules, and deliverables.

• Shall develop and execute a Quality Assurance Plan. The plan shall address the collection, analysis, and reporting of performance data. The Quality Assurance Plan shall align with the gov’t Quality Assurance Surveillance Plan.

• Method for Risk Management planning and analysis.

• Plan to develop, implement, and maintain Standard Operating Procedures (SOPs) throughout the contract performance period.

• Procedures for developing written project plans and organization improvements including estimation methodology for staffing and resources, and scheduling with lead time and critical path.

• Plan to implement an integrated team approach for delivery of services and method for overall management of sub-contractors.

• Procedure for updating the organization structure, staffing plan, and staff qualifications.

• Procedures to provide subject matter expertise (SME) for participation in various working groups and meetings for example the Enterprise Change Control Board and the Project Management Working Group.

• Procedures for providing timely project status reports for current and planned initiatives and programs.

3.11 Upon Government approval, the contractor shall implement plans and procedures, and address discrepancies through the contractor’s Quality Control Management procedures.

3.12 Contractor personnel accessing information systems shall have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement Program. The Contractor shall meet the applicable information assurance certification requirements, including-

• DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01- M; and

• Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.

Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.

Personnel requiring 8570 certification shall be compliant within 120 days of contract start date.

Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions.

4.0 Requirements

The contractor shall provide management and labor required to successfully perform the objectives described in this PWS. The contractor will provide the Mark Center Tenants with support for their current and evolving common IT requirements in the areas of network and IT infrastructure support, network security, systems analysis, engineering, configuration management, telephony, wireless services, enterprise network management solutions, data center operations, data backup and storage, disaster recovery, and surge support for related but unanticipated elevations in the following services.

4.1 Mark Center Operations and Maintenance (CLIN X001) (CPFF)

4.1.1 Data Network Transport Services

The contractor shall use the ITIL model of network management, network device and application fault management, network device and application configuration management, network utilization and accounting management, network performance management, and security management in conjunction with ITA Security CNDSP. The objective is to provide 24/7 on-site and off-site personnel with 8570.1 compliant expertise for support operation and maintenance, monitoring, and management of all network services available at the Mark Center. The contractor shall provide local and remote monitoring and maintenance services for network services at the Mark Center.

During the conduct of all network operations the contractor shall:

• Analyze and assess equipment and performance degradation, including determination of hardware, software, networking, and/or other necessary technical changes. The contractor shall meet operational requirements and have the responsibility for troubleshooting network problems, identifying probable cause, taking immediate corrective action and making written recommendations to prevent problems from reoccurring.

• Monitor the network and proactively make recommendations to improve performance while resolving and/or preventing potential problems.

• Administer and maintain network addresses in compliance with ITA addressing standards, policies and procedures, utilizing COTS applications as available; maintain the systems that provide remote access to the network, and manage Internet Protocol (IP) addressees (primarily assigned through DHCP).

• Develop requirements and specifications for new hardware, software, and/or services (assisting Government employees); assist in determining requirements, developing plans and justifying additions and modifications to hardware and software for network systems and in the planning, installation, operation, maintenance, managing, configuration, and performance monitoring of the network and associated equipment and connections.

• Provide routine and continuous monitoring of unclassified, classified, Secret, Top Secret(TS), Sensitive

Compartmented Information (SCI) networks located at the Mark Center, and the administration of systems hosting software toolsets used to monitor the health of the enterprise network and systems (e.g., Windows Active Directory).

• Provide maintenance and configuration management for all IT infrastructure including related devices and software leases.

• Respond, coordinate and manage all change requests for additions, removals and modifications to the Government Furnished Equipment (GFE) maintenance coverage.

• Maintain, troubleshoot, fix and/or replace all critical infrastructure devices on a (24x7x365) basis.

4.1.2 Layer 2 Switch Transport

The contractor shall provide network engineering services including planning and technical advice and assistance to support network resources and connectivity and maintain fully functional mission support capabilities within the Mark Center to include all network devices, interfaces, and component parts.

The contractor shall provide engineering expertise for maintaining and troubleshooting the network along with switches as required, as well as monitor operation and configuration of switches for the Mark Center network.

The contract shall provide planning and technical support to management when requested by a designated official, and shall gather performance indicators (i.e., metrics) analyze data, and produce reports when requested by a designated official.

The contractor shall provide network engineering and management services including: network analysis, feasibility studies, program configuration analysis, VLAN extensions, network hardware/software analysis, network utilization studies, performance and health evaluations, and design studies.

The contractor shall also support Mark Center tenants with special projects and/or moves, adds and changes (MACs)

4.1.3 New Port Activations - Moves, Adds and Changes (MACs)

The Contractor shall activate, modify, upgrade or deactivate circuits and provision network ports to accommodate customers’ Moves, Adds and Changes (MACs) for their missions and their data, voice and video needs on an ad-hoc basis. The Contractor shall follow established ITA engineering standards in preparing and executing a MAC. The scope of MAC requests shall be:

• 1-10 drops of telephone, CAT5, CAT6 or fiber

• No more than 100 horizontal feet

• No vertical cabling requirements (between floors)

• No drilling through walls (between rooms that do not have a cable passageway)

• Maintain and update the cable plant records database for all MACs.

• The Contractor shall be responsible for providing all patch cables, cabling to complete MAC tickets. ODCs shall be used to purchase the necessary consumables to complete MAC tickets and purchases billable to the ODC CLIN shall be approved by the Contracting Officer’s Representative (COR) prior to purchase.

• The Contractor shall follow the established change and configuration management policy and process for this subtask to maintain change control and asset accountability.

• The Contractor shall staff personnel on-site 0600 - 1800 (12 hours/day), Monday-Friday (5 days/week).

• The Contractor shall treat any customer requests beyond the scope above as new engineering/project requests

4.1.4 Passive Cable Maintenance

The contractor shall provide inside cable plant services which include operation, maintenance, and sustaining engineering of the copper and fiber optic cable plant, including cable management and support for end-to-end configuration/validation tests to meet operational and institutional requirements at the Mark Center.

• Operate, maintain, and perform sustaining engineering for the inside cable plant.

• Perform installation design. Procure, and install new cabling, equipment, and associated hardware and software to extend and/or enhance existing services.

• Maintain specialized cable support equipment.

• Maintain the cable support infrastructure for both external and intra-facility cable routing capability.

• Perform installation and corrective maintenance of fiber ribbon and air blown fiber cables.

• Provide technical and management expertise for the communications pathways including communications manhole and conduit systems, repeaters, Cross Connect Terminals (CXTs), Telephone Terminal Cabinets (TTCs), Main Distribution Frames (MDFs), and dedicated communications cable trays.

• Provide technical and management expertise for facility premise wiring from the frame to the Customer Face Plate (CFP), frame cross connects, TTC cross connects, circuit protectors, circuit design, and installation.

• Maintain and update the cable plant records database for all circuit changes. Deliverable

• Provide for each cable work order a minimum of one cable plant engineer that is certified as a Registered

Communications Distribution Designer (RCDD) by Building Industry Consulting Service International (BICSI) or equivalent.

• Provide for each cable work order a minimum of one cable plant technician that is certified as an Installer by BICSI or equivalent.

• Install and maintain all cable in accordance with all NEC and NFPA codes as well as all applicable ANSI/TIA/EIA standards.

• Support the commercial ISS connectivity for commercial concessions approved for operations in the Mark Center. Connectivity currently exists from the TR to the Work Area Outlet and consists of two (2) Category 6 cables per location. The contractor shall provide operations and maintenance for installed passive systems only; no active IT or AV systems shall be maintained.

4.1.5 Interceptor Monitoring and Support

The contractor shall monitor and maintain the Interceptor PDS system by assessing and resolving configuration problems, and other issues that require specialized expertise. Support includes monitoring alarm systems, identifying and responding to intrusion alarms, and maintaining the Interceptor devices at the Mark Center.

The contractor shall provide support to perform proactive and continuous 24/7 monitoring of the Interceptors. Upon detection of an alarm, the contractor shall investigate the nature of the intrusion and if necessary initiate contact with Pentagon Forces Protection Agency (PFPA) for assistance. The contractor shall be responsible for management notification of all high impact intrusions using standard operating procedures so any alternate support groups- (e.g., PFPA) are notified of the problem and can respond accordingly.

Additionally, the contractor shall:

• Provide the expertise required to perform the operations and maintenance of the Inceptor System, including the Interceptor devices and Coral Network infrastructure.

• Perform all electronic security system maintenance support in a manner that is consistent with the established SLA and MoU/MoA agreements.

• Provide preventative and corrective maintenance for Interceptor and Coral Network systems at the Mark

Center.

4.2 Mark Center Enterprise Management System (EMS) (CLIN X002) (CPFF)

The Mark Center EMS Architecture supports management of Sensitive But Unclassified (SBU), SECRET, TOP SECRET (TS), and Sensitive Compartmented Information (SCI) networks while maintaining separation of classified data. The Mark Center EMS proactively manages each of the networks, by location, organization, Community-of-Interest (COI) or any combination of these elements.

The current solution also manages all IP based Voice, Video and Wireless services and Storage Area Networks (SAN), in addition to the backbone infrastructure (e.g. Routers, Switches, Fiber Channel Switches) and security devices (e.g. firewalls, intrusion prevention).

• The EMS includes all required NOC Operator Workstations for all Security Classifications (i.e.

unclassified, classified, Top Secret, and Sensitive Compartmental Information

• The Mark Center EMS system is compatible with the ITIL methodology and provides Service Level Agreement (SLA) metrics collection/analysis support

EMS Integration with ITA’s EMS System

• The contractor must have a complete architectural and operational knowledge of the EMS

Solution in order to work closely with ITA to integrate and migrate the solution to the Pentagon Fusion Center.

• The Mark Center EMS will be integrated and consolidated with ITA’s EMS during the base contract period.

• As this integration occurs, the responsibilities for monitoring the systems at the Mark Center will transition to an ITA core function.

Until such a time in which the two Enterprise Management Systems are integrated, contractor responsibilities at the Mark Center will include:

• Network management, discovery and root cause analysis capabilities for the entire IT infrastructure and capabilities present at the Mark Center

• management of all Type-1 encryption devices and Cryptonets in operation on the Mark Center MAN/WAN Campus

• Providing SNMPv3 trap data across the MAN/WAN to ITA's EMS in the Pentagon NOC for remote monitoring, as required

• Integration of network discovery, topology and dependency mapping with the Change and Configuration Management Data Base (CCMDB).

• Monitoring, event correlation, security and business service management.

• Provide tenant organizations’ help desks with an overall view of services and systems health

4.2 Consolidated Server Room Operations and Support (Servers, Storage Area Network (SAN) and Data Backup and Recovery (CLIN X003) (CPFF) The Mark Center CSR solution includes an enterprise server farm utilizing systems virtualization and storage area networks (SAN). All hardware, software, firmware, and materials to support server and application hosting, as well as managed storage services have been installed, and will be maintained by the provider contractor. The CSR includes unclassified Black, Red, and Yellow environments with only variations on specific models of the components across them all due to the smaller data and server requirements within those enclaves. A Video Surveillance System (VSS) is installed within the CSR.

The contractor shall provide server management, data storage and application backup and recovery services and manage data center work through proper planning and sound performance measurement review, and analysis.

The contractor shall operate the CSR in a "lights out" operational mode and will be able to leverage the 24x7 help desk capabilities of the Mark Center Network Operations support.

The contractor shall conduct and participate in test exercises as required by applicable Disaster Recovery Plans.

The contractor shall continuously monitor the Data Center equipment and infrastructure services and proactively take steps to improve performance and prevent degradation of Data Center services. In this capacity, the contractor shall:

• Monitor the end-to-end availability of all systems and equipment (infrastructure), backing up network servers on a daily basis and preparing them for operation prior to standard office hours (6:00 am - 7:00 pm, Monday - Friday).

• Manage tape cycling according to set policy between the Data Center and any off-site storage locations.

Maintain an inventory of all tapes and perform periodic audits to confirm backup integrity.

• Perform hardware/software testing, installation, local customization and maintenance and provide system administration and database support services for Data Center systems

Monitor the availability of all systems and equipment, and prepare incident analysis reports as a result of interruption in service.

Prepare monthly reports depicting availability of systems and services. These reports shall include analysis and recommendations for improving the overall availability. Deliverable

Monitor the available capacity of all systems, equipment, services and storage.

Provide support services to maintain file/application backup capability, security, operational data storage and retrieval application resident on diverse computer platforms such as networks and client-server environments and support the implementation of automated systems that use Internet technologies.

• Manage the life cycle of all Data Center equipment. This includes the projection of equipment that shall be required to meet the EITSD's forecasted business needs. It also involves the identification of equipment that has reached the end of useful life and should be retired. All equipment actions shall be coordinated with the asset management coordinators. Portions of asset management shall be performed by the contractors, ITA, and EITSD until the transition to ITA is completed.

• Inventory and maintain operational spares requisite to meet operational requirements. All Enterprise-related Help Desk tickets called in to Data Center Helpdesk shall be monitored and tracked. All customer requests shall be handled as soon as possible and within the agreed upon timeframe established by any current or future SLA. The contractor shall implement, operate and maintain standard Data Center management platforms to manage the configuration and monitor performance of all designated servers, storage and systems and provide assistance in planning and performing data conversion or system migrations.

The contractor will coordinate with the ITA Data Center Storage Services Branch to support current and identify future Mark Center Customer COOP requirements.

4.3 Wireless Services (CLIN X004) (CPFF)

4.3.1 Wireless Local Area Network (WLAN) Support

The Mark Center Campus has four WiFi disciplines, which are incorporated under the wireless systems: Cell/PCS, Wireless Enhancement System (WES), Wireless Intrusion Detection System (WIDS), and Wi-Fi in common use areas. The Wireless Enhancement System is made up of the Land Mobile Radio (LMR) Systems in support of Pentagon Force Protection Agency (PFPA) and Alexandria Police and Fire Departments. Each is intended to be a physically isolated system from the others. Shared user information between Wi-Fi and WIDS is intended to be part of management to enhance performance of the WIDS system. Many of the design concepts for the in-building DAS supporting Cell Phone and the LMR are shared.

Wireless Intrusion Detection System (WIDS), shall be maintained by ITA as part of the overall WIDS system.

The contractor shall operate, maintain, repair, upgrade, configure, and document all wireless technology installed at the Mark Center, which includes Land Mobile Radio (LMR), Cell/PCS, Wireless Enhancement System (WES), Wireless Local Area Network (WLAN) and Wi-Fi.

The contractor shall:

• Conduct operational checks and maintenance of the antenna systems cabling, grounding grids, lightening protections systems and other ancillary equipment.

• Perform all duties of the Installation Spectrum Manager

• Maintain all radio frequency services including configuration control and developing frequency requests

The contractor shall also:

Monitor key events associated with wireless service contracts and agreements including, but not limited to:

expiration dates, annual review dates, thresholds for additional discounts, notification deadlines for various contract or agreement options, etc.

• Meet regularly with the agency to develop strategy and guidance for dealing with carrier contract related issues, practical strategies for achieving optimal pricing or service terms, and methods to maximize negotiation strength with wireless carriers.

• Advise EITSD on how their contracts or agreements might be impacted by changes in the wireless telecommunications industry or by new wireless service offerings and assist with developing strategies to include new, or terminate old, technical services into their carrier contracts or agreements.

4.3.2 Land Mobile Radio (LMR)

The contractor shall provide all personnel, equipment, tools, parts, materials, transportation, ancillary items, and other items and services necessary for LMR maintenance services. The contractor shall perform maintenance and modification on all non-warranty equipment, installation, removal, system troubleshooting and programming on all equipment to include supporting ancillary equipment and LMR antenna systems. The contractor shall maintain equipment/nets/talk groups IAW Electronic Industry Association Standards, OEM specifications and other standards/specifications as applicable. The contractor shall be responsible for all equipment configuration and programming of the LMR system. Additionally, the contractor shall seamlessly repair/restore system components and transition users with minimum impact to existing communications as well as provide:

• Radio Frequency Management

• Systems Security Testing

• System Security Analysis

4.3.3 Cellular PCS Services

The contractor shall provide O&M support for the in-building wireless radio enhancement system throughout the Mark Center Campus that supports PFPA and local public safety radio communications, cellular communications, and PCS communications.

4.4 Internet Protocol Television (IPTV) Support (CLIN X005) (CPFF) The Mark Center Enterprise Internet Protocol Television (IPTV) system design defines a technical approach that employs an enterprise perspective; addressing scalability, flexibility, security and service capabilities that meet all of the government’s stated requirements. Five satellite dishes are mounted on the roof of the West Tower and an Advanced Television System Committee (ATSC) antenna mounted on the roof of the East Tower will receive digital satellite system (DSS) content and television broadcasts.

The contractor shall support and manage the enterprise IPTV solution built into the Mark Center infrastructure. A commercial contract will be provided for the channel service offerings within the Mark Center, and will include the Pentagon channel, CSPAN, BBC, and all other channels that are available from the Pentagon. However, the Contractor shall troubleshoot and coordinate all corrective actions in order to maintain service requirements as stated in the Service Level Agreements (SLAs) as they are developed.

4.5 Information Assurance Support (CLIN X006) (CPFF)

Contractor personnel assigned to perform IA functions and responsibilities shall comply with DoD Directive 8570.1 “Information Assurance Training, Certification, and Workforce Management” and its implementing Manual, DoD 8570.1-M.

4.5.1 Vulnerability Assessment

The Contractor shall:

• Conduct vulnerability assessments for all Mark Center networks, including subnets and IP space for which ITA has responsibility or authority.

• Conduct vulnerability assessment for all Mark Center applications and operating systems.

• Conduct network security audits and scanning on a weekly, monthly, quarterly and ad-hoc basis.

Network security audits may also be required and directed by the Government to support accreditation, connection approval, current threats which may affect the overall mission, or to meet customer requirements.

• Perform quarterly security audits, to include DISA Gold Disk and SRRs scanning. Deliverable

• Conduct network scans, report vulnerabilities and recommend corrective actions as requested.

• Compile and track vulnerabilities over time for metrics purposes.

• Provide vulnerability metrics and reports on a monthly basis. Deliverable

• Conduct follow-on interviews with network and systems administrators to determine if they require additional guidance on mitigating the vulnerabilities found during the assessment, and provide hands-on training on the corrective measures for the vulnerabilities found.

• Develop, test, and modify scripts and procedures to enhance vulnerability assessments.

• Assist in developing a vulnerability assessment database that includes assessment results and reports.

The database shall allow for comparisons of audit results and reports. The results should be analyzed and trends provided in reports.

• Provide detailed reports and briefing on all matters pertaining to Vulnerability Assessments in a draft and final form.

• Within 120 days of contract award; develop and maintain a Vulnerability Assessment program to include: Deliverable

Standard Operating procedures Concept of Operations Processes and Checklists

4.5.2 Information Assurance Vulnerability Management (IAVM)

The Contractor shall administer an IAVM Program in accordance with the CJCSM 6510.01, patching all systems/networks and reporting to the DOD or service/agency central IAVA reporting databases (i.e., VMS, etc.).

The Contractor shall:

• Acknowledge IAVM Notices: The Contractor shall keep abreast of all IAVM notices issued by the ACERT (via subscription to the AKO’s IAVA community and the US Cyber Command IAVA list server). The Contractor shall acknowledge 100% of IAVM notices (alerts, bulletins, and tech tips) in the Army approved central repository for reporting compliance database by the acknowledgement suspense date indicated in the IAVM notice.

• Verify IAVM Compliance: The Contractor shall review weekly vulnerability assessment results to verify all contract managed systems and applications conform to the security requirements mandated in ACERT IAVM notices by their respective due date. Upon receipt and acknowledgement of each IAVM notice the Contractor shall: Deliverable

Coordinate with the Vulnerability Assessment Branch to scan all Mark Center assets under contract for the vulnerabilities identified in the notice.

Manage patching and rescanning of assets until they are 100% compliant to any given IAVM notice.

The contractor is expected to establish 100% IAVA compliance via mitigation or POA&M.

• Report IAVM Compliance: The Contractor shall report compliance data for IAVM alerts. The Contractor shall utilize the current approved repository. In addition, compliance data for IAVM notices (to include alerts, bulletins, and tech tips) will be reported to EITSD management on a weekly basis. Deliverable

• Document IAVM Compliance: The Contractor shall provide weekly reports to management using the subscribed tool for all Mark Center managed Information Systems and VMS for other CND subscribers. IAVM repository data shall also be kept current, accurate, and complete with respect to all IAVM alerts. To be current, data must be no more than 7 days old in the weekly IAVM compliance report, and no more than 30 days old in the database. To be accurate, data must properly reflect actual IAVA compliance for each and every asset reported. To be complete, data must reflect 100% of all assets actually scanned. Deliverable

• Develop IAVM Plan of Action & Milestones (POA&M) s: No later than five (5) business days prior to the suspense date specified in a given IAVM alert, the Contractor shall prepare and submit an acceptable Plan of Action & Milestones (POA&M) for all IAVM alerts for which compliance is not yet attained. All POA&Ms must be of acceptable quality. The Contractor shall solicit information required to complete the POA&M from appropriate System Administrator/Network Administrator staff. Deliverable

• POA&M Tracking: The Contractor shall implement a tracking system for all Mark Center POA&Ms.

Deliverable

• Monitor Relevant Security Sources: The Contractor shall monitor relevant security sources to identify emerging threats and recommend mitigating actions to ITA Directorates and CND subscribers.

Relevant sources include but are not limited to US CERT, National Vulnerability Database (NVD), and vendor advisories.

• Coordinate with ITA Directorates and CND Subscribers: The Contractor shall coordinate with EITSD, ITA and CND subscribers to determine the impact associated with emerging threats and vulnerabilities.

• Assist Customers with Plan of Actions and Milestones (POA&M) Development: The Contractor shall assist customers with POA&M development by providing information regarding mitigating controls in place, such as firewall rules and intrusion detection signatures.

4.5.3 Information Assurance Systems Support

The contractor shall support INFOCON Reporting, HBSS policy management and reporting, IAVM Compliance reporting and Incident Response reporting for all Information Systems.

The Contractor shall:

• Manage all actions necessary for USCC Computer Network Directives (i.e. Communication Task Orders (CTO), Warning Orders (WARNORD) Fragmented Orders (FRAGO)), and All Army Activities (ALARACT). On time and 95% accurate reporting to all directives are mandatory thru PENTCIRT or VMS. INFOCON, JTF- GNO Computer Network Directives and all Army Activities directives implementation tasks will be tracked as a project, and the Contractor shall submit updated project reports to the appropriate Information Assurance Manager (IAM).

• Manage the implementation of HBSS policies and reporting back to the appropriate IAM for an EITSD and or ITA wide roll-up report to JTF-GNO.

• Submit current, accurate, and complete IAVM compliance reports every week to appropriate IAM. The approved IAVM database will likewise be kept current, accurate, and complete with respect to all IAVM alerts. To be current, data must be no more than 7 days old in the weekly IAVM compliance report, and no more than 30 days old in the IAVM tracking database. To be accurate, data must properly reflect actual IAVA compliance for each and every asset reported. To be complete, data must reflect 100% of all assets actually scanned. Deliverable

• Resolve all security incidents reported against EITSD-managed assets in accordance with established processes and procedures. The Contractor will make use of a wide variety of Attack Sensing & Warning (AS&W) data to respond to all incidents with a focus on nation state sponsored intrusion set activity. This data shall come from multiple sources.

In responding to computer security incidents, the Contractor shall:

Document incidents in an approved workflow tracking system within 1 hour of notification. Tasks involved to properly document security incidents include:

o Tracking the incident in the approved database and updating the appropriate authorities as significant investigatory events occur.

o Creating the requisite helpdesk trouble tickets to get incidents resolved.

o Indicating man-hour/cost calculations within 8 hours of closing the incident.

o Collect forensic evidence related to the security incident and of any other suspect activity uncovered while investigating the…