HQ0516-21-R-0080 Request for Proposal.pdf

SEE A DDENDUM

(No Collect Call s)

HQ051621R0080 03-Sep-2021

b. TELEPHONE NUMBER

301-222-6031

8. OFF ER DUE DAT E/LOCAL T IME

10:00 AM 04 Oct 2021

5. SOLICIT ATION NUM BER 6. SOLICITAT ION ISSUE DAT E

A UTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STA NDARD FORM 1449 (REV . 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR P RINT)

(SIGNAT URE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Us e Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTA NCE IS DIFFERENT A ND PUT

BELOW IS CHECKED

TELEPHONE NO.

HQ05169. ISSUED BY

18b. SUBMIT INVOICES TO A DDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORM AT ION CALL:

a. NAME

DUSTIE THOMPSON

2. CONTRACT NO. 3. AWARD/EFF ECTIVE DATE 4. ORDER NUM BER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNA TURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISIT ION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

WEBENTERPRISE

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. Y OUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED ORX

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

CONTRACTING

6700 TAY LOR AVE

FORT MEADE MD 20755

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE 16. ADMINISTERED BY

SEE SCHEDULE

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$30,000,000

NAICS:

541512

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUA NTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOM EN-OWNED SM ALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SM ALL BUSINESS P ROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF157

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAY MENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC' D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDA RD FORM 1449 (REV. 2/2012) BA CK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCA L REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUA NTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

HQ051621R0080

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

11 Months

CLIN 0001-Tasks 6.1-6.5; 6.12; 6.14 -FFP

FFP

NON-PERSONAL. Performance Work Statement Tasks 6.1 through 6.5; Task 6.12; Task 6.14. This is a Firm-Fixed price CLIN.

FOB: Destination

PURCHASE REQUEST NUMBER: WEBENTERPRISE

NET AMT

1 Lot

CLIN 0002-Tasks 6.6-6.11 (CPFF)

CPFF

NON-PERSONAL. Performance Work Statement Tasks 6.6 through 6.11. This is a Cost-Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established within the contract.

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

CLIN 0003-Task 15-Optional Task (CPFF)

CPFF

NON-PERSONAL. (Optional task) PWS Paragraph 6.15. Optional Services as Requested by Reimbursable Customers. This is a Cost Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established within the contract.

CLIN 0004-Other Direct Costs/Materials

COST

Other Direct Costs (ODC) shall be in accordance with the Performance Work Statement. The contractor shall obtain materials at the most advantageous prices available to the Government. ODC's shall be authorized by the COR, in writing, prior to purchase. All ODCs shall annotate the specific detail (e.g., quantity, part number, manufacturer, etc.) to include supporting documentation to justify the costs (i.e., price quotes, price history, etc.). No profit or fee will be authorized for ODCs.

CLIN 0005-Travel

COST

Travel shall be in accordance with the Joint Travel Regulation (JTR). All travel must show the specific detail, if known (e.g., number of days, locations, number of personnel, etc.). Travel shall be authorized by the Contracting Officer Representative (COR) in writing prior to performance and will be paid IAW FAR Part 31.205-46. No profit or fee will be authorized for travel. Applicable burdens, e.g., G&A, may apply to travel IAW the schedule contractor’s accounting practices.

1 Months

CLIN 0006-Task 13 Transition Period-FFP

FFP

NON-PERSONAL. The contractor shall be fully staffed for the base period not later than 30 days after award. The contractor shall provide transition support utilizing Government Task Manager Guidance. The contract Transition and stabilization period will be from contract award and continue for 30 days after contract award. The Contractor shall perform in accordance with the Phase-In Plan submitted as part of the proposal.

12 Months

FFP

NON-PERSONAL. Performance Work Statement Tasks 6.1 through 6.5; Task 6.12; Task 6.14. This is a Firm-Fixed price CLIN.

CPFF

NON-PERSONAL. Performance Work Statement Tasks 6.6 through 6.11. This is a Cost-Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established within the contract.

CPFF

NON-PERSONAL. (Optional task) PWS Paragraph 6.15. Optional Services as Requested by Reimbursable Customers. This is a Cost Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established within the contract.

COST

Other Direct Costs (ODC) shall be in accordance with the Performance Work Statement. The contractor shall obtain materials at the most advantageous prices available to the Government. ODC's shall be authorized by the COR, in writing, prior to purchase. All ODCs shall annotate the specific detail (e.g., quantity, part number, manufacturer, etc.) to include supporting documentation to justify the costs (i.e., price quotes, price history, etc.). No profit or fee will be authorized for ODCs.

COST

Travel shall be in accordance with the Joint Travel Regulation (JTR). All travel must show the specific detail, if known (e.g., number of days, locations, number of personnel, etc.). Travel shall be authorized by the Contracting Officer Representative (COR) in writing prior to performance and will be paid IAW FAR Part 31.205-46. No profit or fee will be authorized for travel. Applicable burdens, e.g., G&A, may apply to travel IAW the schedule contractor’s accounting practices.

FFP

NON-PERSONAL. Performance Work Statement Tasks 6.1 through 6.5; Task

CPFF

NON-PERSONAL. Performance Work Statement Tasks 6.6 through 6.11. This is a Cost-Plus Fixed Fee CLIN. The contractor will be reimbursed the cost

CPFF

NON-PERSONAL. (Optional task) PWS Paragraph 6.15. Optional Services as Requested by Reimbursable Customers. This is a Cost Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established

COST

Other Direct Costs (ODC) shall be in accordance with the Performance Work Statement. The contractor shall obtain materials at the most advantageous prices available to the Government. ODC's shall be authorized by the COR, in writing, prior to purchase. All ODCs shall annotate the specific detail (e.g., quantity, part number, manufacturer, etc.) to include supporting documentation to justify the costs (i.e., price quotes, price history, etc.). No profit or fee will be authorized for

COST

Travel shall be in accordance with the Joint Travel Regulation (JTR). All travel must show the specific detail, if known (e.g., number of days, locations, number of personnel, etc.). Travel shall be authorized by the Contracting Officer Representative (COR) in writing prior to performance and will be paid IAW FAR Part 31.205-46. No profit or fee will be authorized for travel. Applicable burdens, e.g., G&A, may apply to travel IAW the schedule contractor’s accounting

FFP

NON-PERSONAL. Performance Work Statement Tasks 6.1 through 6.5; Task

CPFF

NON-PERSONAL. Performance Work Statement Tasks 6.6 through 6.11. This is a Cost-Plus Fixed Fee CLIN. The contractor will be reimbursed the cost

CPFF

NON-PERSONAL. (Optional task) PWS Paragraph 6.15. Optional Services as Requested by Reimbursable Customers. This is a Cost Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established

COST

Other Direct Costs (ODC) shall be in accordance with the Performance Work Statement. The contractor shall obtain materials at the most advantageous prices available to the Government. ODC's shall be authorized by the COR, in writing, prior to purchase. All ODCs shall annotate the specific detail (e.g., quantity, part number, manufacturer, etc.) to include supporting documentation to justify the costs (i.e., price quotes, price history, etc.). No profit or fee will be authorized for

COST

Travel shall be in accordance with the Joint Travel Regulation (JTR). All travel must show the specific detail, if known (e.g., number of days, locations, number of personnel, etc.). Travel shall be authorized by the Contracting Officer Representative (COR) in writing prior to performance and will be paid IAW FAR Part 31.205-46. No profit or fee will be authorized for travel. Applicable burdens, e.g., G&A, may apply to travel IAW the schedule contractor’s accounting

FFP

NON-PERSONAL. Performance Work Statement Tasks 6.1 through 6.5; Task

CPFF

NON-PERSONAL. Performance Work Statement Tasks 6.6 through 6.11. This is a Cost-Plus Fixed Fee CLIN. The contractor will be reimbursed the cost

CPFF

NON-PERSONAL. (Optional task) PWS Paragraph 6.15. Optional Services as Requested by Reimbursable Customers. This is a Cost Plus Fixed Fee CLIN. The contractor will be reimbursed the cost incurred and the fixed fee established

COST

Other Direct Costs (ODC) shall be in accordance with the Performance Work Statement. The contractor shall obtain materials at the most advantageous prices available to the Government. ODC's shall be authorized by the COR, in writing, prior to purchase. All ODCs shall annotate the specific detail (e.g., quantity, part number, manufacturer, etc.) to include supporting documentation to justify the costs (i.e., price quotes, price history, etc.). No profit or fee will be authorized for

COST

Travel shall be in accordance with the Joint Travel Regulation (JTR). All travel must show the specific detail, if known (e.g., number of days, locations, number of personnel, etc.). Travel shall be authorized by the Contracting Officer Representative (COR) in writing prior to performance and will be paid IAW FAR Part 31.205-46. No profit or fee will be authorized for travel. Applicable burdens, e.g., G&A, may apply to travel IAW the schedule contractor’s accounting

Section E - Inspection and Acceptance

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 N/A N/A N/A Government 0002 N/A N/A N/A Government 0003 N/A N/A N/A Government 0004 N/A N/A N/A Government 0005 N/A N/A N/A Government 0006 N/A N/A N/A Government 1001 N/A N/A N/A Government 1002 N/A N/A N/A Government 1003 N/A N/A N/A Government 1004 N/A N/A N/A Government 1005 N/A N/A N/A Government 2001 N/A N/A N/A Government 2002 N/A N/A N/A Government 2003 N/A N/A N/A Government 2004 N/A N/A N/A Government 2005 N/A N/A N/A Government 3001 N/A N/A N/A Government 3002 N/A N/A N/A Government 3003 N/A N/A N/A Government 3004 N/A N/A N/A Government 3005 N/A N/A N/A Government 4001 N/A N/A N/A Government 4002 N/A N/A N/A Government 4003 N/A N/A N/A Government 4004 N/A N/A N/A Government 4005 N/A N/A N/A Government

Section F - Deliveries or Performance

CLIN CONTRACT TYPE

PWS TASK DESCRIPTION CONTRACT TYPE

6.1 Task 1 Microsoft Azure Commodity, provide labor and program management Firm-fixed price

6.2 Task 2 Akamai Service including Commodity, Labor and Program Management

Firm-fixed price

6.3 Task 3 Software Subscriptions Firm-fixed price

6.4 Task 4 Collaborative Communication Platform Subscription Firm-fixed price

6.5 Task 5 LMS Subscription and training support Firm-fixed price

6.6 Task 6 Migration and migration program management Cost Plus Fixed-Fee

6.7 Task 7 Infrastructure Operations and Program Management Cost Plus Fixed-Fee

6.8 Task 8 Software Development and Program Management Cost Plus Fixed-Fee

6.9 Task 9 Security Cost Plus Fixed-Fee

6.10 Task 10 Analysis Cost Plus Fixed-Fee

6.11 Task 11 Program Management Cost Plus Fixed-Fee

6.12 Task 12 Service Desk Support Firm-Fixed Priced

6.13 Task 13 Transition Firm-Fixed Price

6.14 Task 14 Email Messaging and Content Data Network Support Firm-Fixed Price

6.15 Task 15 Optional Services as Requested by Reimbursable Customers Cost Plus Fixed-Fee

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 15-DEC-2021 TO

14-NOV-2022

N/A N/A

0002 POP 15-DEC-2021 TO

14-NOV-2022

0003 POP 15-DEC-2021 TO

0004 POP 15-DEC-2021 TO

0005 POP 15-DEC-2021 TO

0006 POP 15-NOV-2021 TO

14-DEC-2021

1001 POP 15-NOV-2022 TO

14-NOV-2023

1002 POP 15-NOV-2022 TO

1003 POP 15-NOV-2022 TO

1004 POP 15-NOV-2022 TO

1005 POP 15-NOV-2022 TO

2001 POP 15-NOV-2023 TO

14-NOV-2024

2002 POP 15-NOV-2023 TO

2003 POP 15-NOV-2023 TO

2004 POP 15-NOV-2023 TO

2005 POP 15-NOV-2023 TO

3001 POP 15-NOV-2024 TO

14-NOV-2025

3002 POP 15-NOV-2024 TO

3003 POP 15-NOV-2024 TO

3004 POP 15-NOV-2024 TO

3005 POP 15-NOV-2024 TO

4001 POP 15-NOV-2025 TO

14-NOV-2026

4002 POP 15-NOV-2025 TO

4003 POP 15-NOV-2025 TO

4004 POP 15-NOV-2025 TO

4005 POP 15-NOV-2025 TO

CLAUSES INCORPORATED BY REFERENCE

52.247-34 F.O.B. Destination NOV 1991

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

as of 13 August 2021

Contract Number: (completed by the KO at time of contract or TO award) Task Order Number: (completed by the KO at time of TO award or N/A) Tracking Number: (completed by the KO when complete package is received) Follow-on to Previous Contract and Task Order Number:

HQ051621F0003

1. Contracting Officer Representative (COR).

a. Primary COR.

Name: To be completed at award Organization:

Department of Defense Activity Address Code (DODAAC):

(refer to the DODAAC web site at https://dodaac.wpafb.af.mil for additional information)

Address: ( physical mailing address) Phone Number:

Fax Number:

E-Mail Address:

b. Alternate COR.

Name: To be completed at award Organization:

DODAAC: (refer to the DODAAC web site at https://dodaac.wpafb.af.mil for additional information) Address: ( physical mailing address) Phone Number:

Fax Number:

E-Mail Address:

2. Contract Title. Web Enterprise Business Services

3. Background.

Defense Media Activity Web Enterprise Business (DMA-Web.mil) operational activities include providing professional labor service and associated commodity required to execute these services, including training, migration operations, infrastructure operations, software development and maintenance, creative services, program management, security, analysis, support to service desk operations, 24/7 technical support, and transition. Further, this effort covers a high- performance, world-wide content distribution network (CDN) as well as AWS/Azure commodityThis contract includes support for DMA and its customers.

4. Objectives.

Defense Media Activity Web Enterprise Business (DMA-Web.mil) objectives are to provide public web hosting and integrated services to all DOD components. This contract will provide a core service of standard website hosting as well as a menu of optional services that federal and department of defense units may require to optimize their public information communication objectives.

5. Scope.

The objective and the purpose of the effort are to provide a fully functioning best in class Web Enterprise Business operations center and other support requirements as deemed necessary by DMA and other government entities. This includes all professional labor services required to execute this objective, including labor and commodity to provide and provision Azure Cloud software- as-a-service, Akamai labor and commodity, software subscriptions, collaborative communication platform, LMS and training, migration operations and program management, infrastructure operations and program management, provide security, threat log reporting, code scanning ,metrics reporting, accessibility reporting, software development and maintenance, customer relations management, program management, security, analysis, continual vulnerability assessments, support to service desk operations, 24/7 technical support, and transition. Additionally, the program will offer a menu of services website owners can opt into such as creative services, content creation, search engine optimization services, email subscription services, sentiment analysis services, news clipping services, customer satisfaction surveys and other services as necessary. Furthermore, this effort is to provide all services necessary to maintain and support the GCDN and the reasonable growth of the GCDN.

6. Performance Requirements.

Provide best in class Web Enterprise Business and integrated services for the Department of Defense and other Federal Agencies as listed below.

Task 1 Azure Cloud Commodity, Labor, and Program Management

Task 2 Akamai Distribution Cloud Commodity, Labor, and Program Management

Task 3 Software Subscriptions

Task 4 Collaborative Communication Platform

Task 5 Learning Management System and Training

Task 6 Migration Operations and Program Management

Task 7 Infrastructure Operations and Program Management

Task 8 Software Development and Management

Subtask 1 Ensure Legal and Regulatory Compliance

Task 9 Security

Subtask 1 Threat Log Reporting

Subtask 2 Code Scanning

Subtask 3 Continual Vulnerability Assessments

Task 10 Analysis

Subtask 1 Accessibility Reporting

Task 11 Program Management

Task 12 Service Desk Support

Task 13 Transition

Task 14 Email Subscription Service

Task 15 Provide Optional Services

Subtask 1 Custom Development Work

Subtask 2 Creative Services

Subtask 3 Search Engine Optimization Services

Subtask 4 Sentiment Analysis Services

Subtask 5 News Clips

Subtask 6 Website Customer Satisfaction Surveys

Subtask 7 Other

6.1 Task 1: Microsoft Azure Commodity, provide labor and program management (Firm-fixed price)

Contractor shall have one or more of the following credentials for Microsoft Azure to indicate expertise.

Microsoft Azure Certified Cloud Partner Microsoft Azure authorized reseller

Contractor shall also provide 1) provisioned Microsoft Azure soft-ware, infrastructure, and platform to establish a Cloud architecture; 2) five years of experience in performing professional labor in migrating existing Web sites into the Cloud and new Cloud site planning, host platform architecture setup, Cloud deployment, making changes to provisioned software, infrastructure, and platform, installing patches/updates, related development, security assessments, analysis of data, reporting, and any other activities required for daily loud operations; 3) previously been awarded an information technology contract with commodity and professional labor elements valued at $30M or greater with the requirement for establishing a Cloud architecture.

The Contractor shall provide Cloud software, infrastructure, and platform deliverables as necessary for this contract. The Contractor shall provision software, infrastructure, and platform, and establish Government administrator accounts for these commodities.

The deliverables (Contractor provisioned Cloud software, infrastructure, and platform (i.e., rent infrastructure such as servers and drives maintained physically at Contractor data centers, but accessed by Government administrators) subscriptions and Government administrator accounts for them) shall be consistent with and further detail the approach contained in the Contractor’s proposal that resulted in the award of this contract and in compliance with the requirements stated in the clause mentioned under this task. The Contractor shall deliver these software, infrastructure, and platform administrator accounts to the COR within 15 calendar days of notification by the COR. The Contracting Officer and COR will provide an acceptance or feedback to the Contractor on submitted deliverables. If the Contractor receives corrective feedback, then the Contractor has seven calendar days to provide the Contracting Officer and COR the correct deliverables based on comments provided by the Government. The Contractor must provision deliverables that comply with Federal laws, regulations, and policies identified by the COR (e.g., DoD regulations, DoD Security Technical Implementation Guides (STIGs), TASKORD’s, Cybersecurity, and DMA and DISA policy requirements).

Cloud subscriptions must include Government administrator access to a 24 x 7 technical call center (i.e., response from customer agents on technical software, infrastructure, and platform issues and general customer support questions). The Contractor must provision software, infrastructure, and platform from Federal Risk and Authorization Management Program (FedRAMP) compliant data centers to provide a logical separation of tenants and other operational controls to provide security, high availability, and redundancy to satisfy the control requirements for the NIST 800-53 Moderate Baseline or the most current standards.

The Contractor shall provide software, infrastructure, and platform (which includes Microsoft Azure, vendor and partner products) and/or best industry products (which provide equal or greater capabilities as the products they are replacing) as approved by the COR for each contract award/task order. The Contractor shall provide provision software, infra-structure, and platform that provide the following capabilities:

Automated or manual notification of vendor planned maintenance outages at least two days prior to the event or as directed by the COR Retrieval of performance metrics below or other metrics as directed by the COR System and application availability Overall application response times Network infrastructure performance Cloud and instance level utilization Security, risk, compliance, and data integrity measurement

Includes, but is not limited to, Cloud Lock or best industry product(s) approved by the COR

Storage system utilization and I/O or response time Instance-based transaction response time Support response time across multiple transactions Client-based transaction response time

Secure, web-based tool for DMA to monitor bandwidth usage and analyze trends for all sites and site functionality in real time. Best industry standards or a minimum of 100 TB of content storage when required to meet customer requirements. Best industry standards or a minimum network capacity to upload content files one megabyte or smaller in seven seconds or less. The COR has the ability to waive this requirement if it's beyond the Contractor's control (e.g., insufficient NIPRNet connectivity).

Best industry standards or a minimum page load time of 10 seconds for all content management system pages.

The Government has the ability to waive this requirement if it is beyond the Contractor's control.

Secure communication channel with multi-factor authentication of remote access that allows Government designated personnel to perform duties on the infrastructure (i.e., DoD PKI or FIPS 140-2 compliant solution).

Best industry standards or a minimum steady-state VPN sustained bi-directional transfer rates of 50 mb/s between the Government’s existing infrastructure and the Cloud. The COR has the ability to waive this requirement if it's beyond the Contractor's control. Network storage, server and virtualization layer management to include performance of internal technology and refresh cycles applicable to the environment.

Tools and processes for monitoring the availability and overall health of the proposed infrastructure and all of its components, responding to system outages with troubleshooting activities designed to identify and mitigate operational issues quickly.

Aggregate and individualized load monitoring of all execution environments, including but not limited to processor load, number of processes, memory utilization, storage utilization, storage throughput, storage operations per seconds, storage seek time, network throughout, network packet loss, and network connections.

Automated and user-scheduled backup of Cloud content on a monthly basis or on a more frequent basis. Cloud content must be backed up in geographically separated locations for disaster recovery/contingency purposes.

Mechanism for the bulk retrieval of all data, scripts, software, virtual machine images, and so forth such as mirroring or copying. Content caching where appropriate. Customer technical support desk that provides 24/7 support with a response time of eight hours or less.

For the critical factors below, if the Contractor fails to perform work as necessary to meet the technical requirements, payment will be withheld and liquidated damages may be charged to the Contractor until the work is accomplished or accepted by the Government. Best industry standards or a minimum baseline bandwidth for websites served from the Cloud of 30 megabits per second (mb/s) for dynamic, non-streaming content at award with bursting capabilities of 10,000 – 15,000 mb/s Best industry standards or a minimum cloud availability threshold of 99.5% Best industry standards or a minimum scale storage and stream of 15 Petabytes of con-tent delivery per month.

Best industry standards or a minimum ability to ingest from LTO 5 media and S3 Snowball portable drive Best industry standards or a minimum high speed data transfer capability of 1 TB/month Secure Hash Algorithm (SHA2) and file size capture for prevention of degradation

Best industry standards or a minimum capability to increase available total bandwidth for streaming and non-streaming content to 100 gigabits per second (gb/s) to accommodate-date an unplanned event that places DMA content in high demand. In accordance with the requirements to provide commodities as requested by the Government above, the Contractor shall provision the following software services to support the delivery and security of the Web Enterprise Business program’s websites.

The contractor will provide appropriate program management plans including lifecycle plan, risk management plan, Monitoring and Quality Assurance Plan and others as requested.

6.2 Task 2: Akamai Service including Commodity, Labor and Program Management (Firm-Fixed

Price).

The Contractor shall furnish all the necessary commodity and labor, subscriptions, software and associated products as needed to perform the Performance Work Statement below. The DMA- Web.mil requires high performance, world-wide content distribution network (CDN) that will accelerate content delivery of public DoD websites to hundreds of DoD, Air Force, Navy, Marine Corps, Coast Guard, and Army clients and thousands of customers while simultaneously protecting the integrity and availability of DMA- Web.mil origin infrastructure located inside the DoD Information Network (DoDIN). The CDN must support the existing configurations leveraged in the Web Enterprise Business program including HTTPS delivery of all products utilizing industry standard certificate management, web application firewall to provide frontline security, caching services to reduce the load on origin servers, static content storage, enhanced domain name system (DNS) capabilities, reporting, and continual support of these services during the life of the contract.

Commodity Minimum Number

Akamai HTTPS Certificates with Domain Validation 15 certificates

Akamai HTTP Certificates with Organization Validation 2 certificates

Akamai FastDNS 20 zones

Akamai Edge Delivery 1250 domains

Akamai Web Application Firewall 1250 domains

Akamai NetStorage 50 TB

The Contractor will only be reimbursed for commodities incurred directly and specifically in the performance of this contract, claimed by the Contractor and accepted by the Contracting Officer.

The contractor shall provide a high performance, global content distribution network that will accelerate content delivery to hundreds of DoD, Air Force, Navy, Marine Corps, Coast Guard, and Army web properties while simultaneously protecting the integrity and availability of the Defense Media Activity origin infrastructure located inside the DoDIN. The contractor shall ensure the GCDN service is available on a 24-hour per day, 7 days per week, 365 days per year basis with 100% uptime.

Provide a monthly CDN monthly service report that is cumulative and also broken into separate reporting groups for DoD, Air Force, Navy, Marines, Army Corps of Engineers, and other groups as requested by the COR. The report must include all meaningful measurable metrics including:

Total monthly usage Total monthly file storage usage Percentage of origin requests offloaded Top user locations by country

Professional service hours used Include email subscriber counts in monthly reports.

The Contractor shall provide recommendations on content data network and implement COR approved changes to enable redundant, secure, geographically load balanced points of presence and accelerate both static and dynamic data delivery to users worldwide. Activities include, but are not limited to, the following tasks:

Develop, test, and deploy advanced failover/COOP rules for newly configured and existing DMA sites.

Provide troubleshooting assistance/root cause analysis when DMA- Web.mil websites are experiencing technical issues related to the content delivery network, including but not limited to, traffic spikes, malicious activity, site outages, misconfigurations, and slow delivery.

Provide ongoing consultative support and best practice recommendations pertaining to DMA- Web.mil’s use of the CDN. Make recommendations for website optimization, federally accredited CDN products, and technology.

Integrate CDN with other tools as directed by COR.

Provide dedicated CDN technical support to troubleshoot, configure, and provide custom solutions to ensure 24/7 availability.

Monitor CDN infrastructure to detect and repel attacks such as:

Web attacks – Examples include generic attacks such as SQL injection, remote file inclusion (RFI), or cross-site scripting (XSS).

Denial-of-service attacks – Examples include tools such as low-orbit ion cannon (LOIC), high-orbit ion cannon (HOIC), MyDoom, and Slow-loris to launch denial of service attacks.

Web scrapers – tools used to extract large amounts of data from web sites.

Scanning Tools – tools used to scan web applications for vulnerabilities during the reconnaissance phase of a web-based attack.

Monitor interface that allows DMA-Web.mil access to controls, investigation and reporting to:

Filter malicious clients based on their behavior and risk score by either alerting or denying access.

Investigation: Access aggregated data to investigate the cause of an attack.

Reports: Provide an overall view of attack data as well as risk scores of a particular IP address over a given period of time as well as the events that contributed to the risk score.

Provide a monthly CDN monthly service report that is cumulative and al-so broken into separate reporting groups for DoD, Air Force, Navy, Marines, Army Corps of Engineers, and other groups as requested by the COR. The report must include all meaningful measurable metrics including:

Total monthly usage Total monthly file storage usage Percentage of origin requests offloaded Top user locations by country Professional service hours used Include email subscriber counts in monthly reports.

6.2.1 Subtask Akamai 1: CONUS Based Acceleration of Web Content:

The Contractor shall provide points of presence in the continental U.S. (CONUS) and have the ability to accelerate data delivery to users worldwide. The GCDN must provide redundant, geographically load balanced points of presence in the United States and have the ability to significantly accelerate both static and dynamic data delivery to users worldwide. The GCDN must incorporate a robust and secure caching strategy to bring the right balance of acceleration, security, and privacy to dynamic elements.

6.2.2 Subtask Akamai 2: Direct Support and Administration of the GCDN

The Contractor shall provide troubleshooting, experienced technical development, and modifications that are unique to only the GCDN.

6.2.3 Subtask Akamai 3: Implement configuration enhancements/changes for DMA sites

The Contractor shall provide troubleshooting assistance/root cause analysis when DMA web properties are experiencing technical issues related to the GCDN including, but not limited to, traffic spikes, malicious activity, site outages, misconfigurations, and slow delivery.

The Contractor shall provide ongoing consultative support and best practice recommendations pertaining to DMA’s use of their GCDN. The Contractor shall make recommendations for website optimization, new GCDN products, and technology.

The Contractor shall provide dedicated Tier 3 GCDN technical support to troubleshoot, configure, and provide custom solutions and support all pro-jects interacting with the GCDN.

6.2.4 Subtask Akamai 4: GCDN Platform Reporting and Oversight The Contractor shall provide an interface that allows DMA access to all GCDN controls for administration, investigation, and reporting.

The Contractor shall ensure that the GCDN supports investigation through the access to all aggregated data in accordance with DoD policy on data and log retention.

The Contractor shall provide reports on detected attacks and the GCDN’s overall response to the attacks to include any recommendations for improving the GCDN.

The Contractor shall provide a monthly GCDN status report that is cumulative and also broken into separate reporting groups for DoD, Air Force, Navy, Marines, Army Corps of Engineers, other groups if requested by the COR. The report must include at minimum:

Total monthly usage Total monthly file storage usage Percentage of origin requests offloaded Top user locations by country Professional service hours used

6.2.5 Subtask Akamai 5: Security of the GCDN, Origin, and Web Property Delivery

The Contractor shall provide a tiered delivery system so that only intermediate servers shall ever connect to the DMA origin servers. These intermediate servers shall not be accessible to the general public.

The Contractor shall provide and support attack mitigations through a Web Application Firewall (WAF). The WAF must support signature based detection for the current web threat landscape and anomaly based detection for ab-normal traffic and threat patterns. The WAF must support blacklist and whitelist blocking for threat sources. The WAF must support detection and automatic mitigation of volumetric attacks that could compromise the delivery capabilities of the GCDN platform.

The Contractor shall monitor the WAF for attacks and alert the COR upon detection of an unmitigated threat or a large mitigated threat. The security logs of the WAF and GCDN as a system must be provided at the request of the COR to DMA and DMA's designated mission partners.

The Contractor shall ensure HTTPS delivery of all sites hosted through the GCDN solution by provisioning and supporting HTTPS certificates for all sites. As governed by DoD policy, all .MIL and .GOV sites shall be secured with Domain Validation Certificates and any other sites using Top Level Domains other than .MIL and .GOV shall be secured with Organizational (or Extended) Validation Certificates.

6.2.6 Akamai 6: Static Content Storage

The Contractor shall provide dedicated cloud storage for the sites hosted through the GCDN. This storage must be of sufficient capacity to host a static copy of all site content and be configured to be served as a tertiary delivery solution when DMA origin locations are unavailable.

The Contractor shall ensure that the static storage solution is configured to retrieve all site content on a regular basis as determined by the COR.

The Contractor shall support the use of the static storage solution to host static files and websites as needed by DMA and as approved by the COR.

6.2.7 Subtask Akamai 7: Secure DNS Platform for Sites Supported by the GCDN

The Contractor shall provide a scalable authoritative DNS solution for the sites hosted through the GCDN. This DNS solution must support all DoD policies regarding the configuration of DNS to include DNSSEC requirements.

The administrative sections are as follows:

Facilities, Equipment and Other Resources There are no additional Contractor responsibilities for meeting the government’s effort management requirements under this effort.

Project Management Contractor shall provide project management for all subtasks as defined in the base contract PWS (6.10.1) as required.

6.3 Task 3: Software Subscriptions. (Firm-Fixed Price)

The Contractor shall provide appropriate Azure bandwidth, storage, virtual networks, key vaults, Azure App Services, Advanced Data Security, Advanced Threat Protection Storage, SQL databases, security centers, virtual machines, Azure DNS, VPN Gateways, Log Analytics, Azure Active Directory, Service Buses, and Functions as required by Government as directed by COR. The contractor will maintain a comprehensive listing of all technology subscriptions required to maintain operations and provide such a list with the offering.

6.4 Task 4: Collaborative Communication Platform Subscription. (Firm-Fixed Price)

Web Enterprise Business requires a real-time communication and collaboration tool which allows government and contractor personnel to collaborate with each other and external customers and clients in a chat-room-like environment. Web.mil has been using Collaborative Communication Platform for the past several years to fill this need, and wishes to extend the current license which is set to expire 26 February 2022.The current contract uses Slack. Any migration to new system will require approval. In the event of migration to a new collaborative communication platform, the contractor will provide appropriate project management documents, including a migration plan, lifecycle plan, risk management plan, monitoring and Quality Assurance plan and others as requested.

In accordance with the requirements to provide commodity as requested by the Government above, the Contractor shall provision the following licenses for a minimum of one year.

Commodity Minimum Number

Collaborative Communication Platform License (per-seat cost)

125 seat annual license

6.5 Task 5: LMS Subscription and training support. (Firm-Fixed Price)

The contractor shall provide web hosting training to customers. This includes acquisition of Learning Management System (LMS) licenses as required to track and manage the training records of Web Enterprise Business customers/users. DMA Web.mil requires the continuation of our LMS subscription at a minimum service level of 3,000 licenses beginning 22 February, 2021. The current contract uses Accord. Any migration to new system will require approval. In the event of migration to a new collaborative communication platform, the contractor will provide appropriate project management documents, including a migration plan, lifecycle plan, risk management plan, monitoring and Quality Assurance plan and others as requested.

In accordance with the requirements to provide commodity as requested by the Government above, the Contractor shall provision the following licenses for a minimum of one year.

Commodity Minimum Number

Learning Management System (LMS) 3,500 LICENSES, Self-Hosted Annual License, P/N: LMS_SubSelf_3500

1 annual license

The Contractor will only be reimbursed for commodity incurred directly and specifically in the performance of this contract, claimed by the Contractor and accepted by the Contracting Officer.

The DMA-Web.mil requires training tasks to manage DMA- Web.mil’s training program. This includes reference documents, FAQs, moderated forums, web-based and in-person courses (e.g., webinars and classroom presentations), videos, interactive courseware, content management system (CMS) inline tips, and a custom training website that includes a Learning Management System (LMS). Maintain historical training records, user certificates, regularly update training essentials, and run analytics on training feedback.

The Contractor shall provide Content Management System (CMS) training support for all DMA- Web.mil websites, including all CMS types and associated products, for approximately 9,000 registered users based on guidance from DMA- Web.mil Management. Training will include comprehensive guides, quick reference documents, FAQs, moderated forums, videos, and interactive courseware. Training will be available via one-on-one support, live distance learning, social media outlets, and an online training site that is accessible worldwide. Training will also be integrated with the CMS with inline tips, help, and links to the training site. Training must be synchronized with current production software versions, targeted for the different levels of access to the CMS, and have the ability to be certified and tracked via an online Learning Management System. Activities include, but are not limited to, the following tasks:

Provide DMA-Web.mil customers with best-in-class training to ensure DMA-Web.mil staff and user base can work and train effectively, enabling them to meet and exceed their operational and organizational goals to accomplish their mission.

Provide a training staff available from 7:00 A.M. to 6:00 P.M. Eastern Time (ET), Monday through Friday.

Provide training to users and DMA-Web.mil staff via one-on-one training, live distance learning, and an online training website.

Provide Distance Learning via online video conference systems that are available to a worldwide audience.

Maintain and update an online training website. The training website shall include specific course material for each of the different American Forces Public Information Management System (AFPIMS) instances and shall include training targeted to the different roles of access to the CMS.

Populate, update, and maintain hints in all AFPIMS modules. Note: Hints are included in modules to provide guidance and links to detailed training material.

Develop, maintain, and update a DMA-Web.mil training plan.

Develop, maintain, and update a DMA-Web.mil training plan that follows the current DMA-Web.mil training plan matrix provided by the COR.

Develop, maintain, and update training plans and associated materials as required to keep the information current with the latest version of the DoD Web Enterprise Business CMS, including associated modules and applications.

Ensure training plan identifies key content areas, training audience, goals, learning objectives, and training evaluation for the latest DMA-Web.mil versions for customers.

Develop, provide, maintain, and update course curriculum to sup-port implementation of the training plan.

Develop, update, and maintain the AFPIMS training guide, which includes quick reference materials from the AFPIMS training site for offline viewing.

Update and maintain AFPIMS Learning Management Sys-tem (LMS)/equivalent software.

DMA-Web.mil will use the LMS/equivalent software to track and test user training and certification for DMA- Web.mil’s CMS for the Department of Defense, Air Force, Navy, Marine Corps, Coast Guard, Army, and all other websites hosted by DMA-Web.mil.

Provide individual weekly reports to DMA-Web.mil Government management and stakeholders on each major training project in progress.

Provide a weekly training report that identifies, tracks, and provides the current status for active website training projects, updates, and functionality as well as details any discrepancies along with the suggested solutions. Reports are due the first business day of each week.

Provide other related support as requested by the COR.

The Contractor shall provide a training staff that are subject matter experts on the applications and tools that DMA-Web.mil provides. The Contractor shall operate a training program to develop/maintain a training site, track training system users, create courseware, provide one-on-one/distance training, incorporate training content in CMS, and perform other support tasks as directed by the COR. The Contractor shall provide the DMA-Web.mil Training Plan, AFPIMS Training Guide, Weekly Training Report, Monthly Status Report, and Weekly Activity Report utilizing COR guidance. The Contractor must provide deliverables that comply with Federal laws, regulations, and policies identified by the COR.

6.6 Task 6. Migration and migration program management. (Cost Plus Fixed-Fee)

In accordance with the requirements to provide migration, migration planning, site structure and taxonomy solutions, execution, and follow up to ensure complete and effective website migrations as requested by the government below, the Contractor shall provide migration support for utilizing Government Task Manager Guidance and as directed by COR.

The Contractor shall provide support for the migration operations of websites to the DoD Web Enterprise Business end-state. The Contractor shall have migration specialists with a high level of knowledge on the CMS and all associated applications. The Contractor shall initiate, plan, execute, manage, and monitor website migration projects, and perform other support tasks as directed by the COR. The Contractor shall provide the Website Migration Plan, Website Migration Guide, Migration Quality Control Program, Weekly Website Migration Report, Monthly Status Report, Weekly Activity Report, JIRA project for each migration project, and Website Migration SOP utilizing COR guidance. The Contractor must provide deliverables that comply with government laws, regulations, and policies identified by the COR.

The Contractor shall provide support for the migration operations of websites to the DoD Web Enterprise Business end-state. The Contractor shall have migration specialists available from 7:00 A.M. to 6:00 P.M. Eastern Time (ET), Monday through Friday. The Contractor shall provide migration planning to initiate, plan, execute, manage, and monitor ongoing and future website migration projects. The Contractor shall also provide content and website migration counseling and one- on-one support for DoD Web Enterprise Business -identified website managers to optimize content migration, website structure, and taxonomy solutions using the best practices identified by industry standards to ensure complete and effective website migrations into the DoD Web Enterprise Business Pro-gram. The migration team members must have a high level of knowledge on the different versions of AFPIMS and all associated modules. Activities include, but are not limited to, the following tasks:

Develop a migration plan that follows the DMA-Web.mil Migration Standard Operating Procedure for each major migration project. A Major Migration Project shall be defined as 5 or more related websites totaling more than 100 web pages.

Ensure the migration effort follows current DoD instructions, guidance, policies, and directives.

Setup new website shells based on an approved website templates. This initial website setup will include the setup of permissions, modules, search, and site taxonomy.

Update and maintain a website migration guide.

Provide a website migration guide to all DMA-Web.mil website managers.

Assist website managers with the migration of content as outlined in the Government-approved Migration

Plan which includes all associated documents and media. The level of content migration can vary from 0% to 100% based on individual customer needs.

Provide one-on-one counseling to website managers during the migration process. Initially meet with the customer, in person, by phone, or via video teleconference, and be available to assist with the migration processes during approved business hours.

Develop and implement a migration quality control (QC) program that will be approved by the Government task manager.

Provide inputs to the DMA-Web.mil weekly status reports detailing major migration projects in progress.

Collect customer feedback to determine satisfaction.

Provide a weekly migration report that identifies, tracks, and provides the current status for active website migrations as well as details any discrepancies along with the suggested solutions. Reports are due the first business day of each week.

Develop, maintain, and update Migration Standard Operating Procedures (SOP) for setup, configuration, and migration of DMA- Web.mil web-sites.

Detail all the tasks that need to be completed from start to finish to fully migrate a website from initial contact with the customer to the final launch and quality assurance checks after launch.

Contain technical details, configuration settings, quality assurance checks, and workflow checklists for all individuals involved in the migration process to include military service account representatives,…