HQC007-22-Q-0004 (WebCTRL Software and Maintenance Support) Performance Work Statement.doc

PERFORMANCE WORK STATEMENT (PWS)

1. Requiring Activity (RA) Point of Contact.

a. WAWF Acceptor.

Department of Defense Activity Address Code (DODAAC):

HQCAAA

ATTN: IT Directorate

1300 E. Avenue

Fort Lee, VA 23801

Fax Number:

b. Project Manager.

Fax Number:

2. Title. WebCTRL Software and Maintenance Support

3. Description. The WeBCTRL software provides DeCA’s managers with operational decision support capability developed from the incorporation of state-of-the-art technology. As an integral part of DeCA’s enterprise architecture, the WEBCTRL software solution continues to evolve and modernize. The current business information architecture includes the tools and technologies required to turn data contained in the enterprise data warehouse and other data sources into meaningful information that can be used by business analysts and managers for advanced analytics and to make operational, analytical, and strategic decisions.

4. Scope. The Contractor must provide the technical personnel to support the WebCTRL program life cycle and incorporate emerging technologies, data sources, and business enhancements for the WebCTRL program.

5. Performance Requirements.

5.1 Task - Software Implementation

The vendor must provide and install new software and provide documentation for the new software to the DeCA staff upon completion of the product installation and the tuning process IAW industry standards.

5.1.1 The vendor must install and configure the software for use in the DeCA environment.

1.) Provide and install the most current version of WebCTRL software to work on a Linux / Unix server or appliance version which can be run as virtual machine.

2.) Install any new patches 3.) Upgrade the database to the latest version utilizing the factory upgrade process 4.) Verify communications to infrastructure equipment and upgrade module drivers 5.) Provide the license for the Advanced Security and Advanced Alarming software add-ons

6.) Verify that SNMP traps are received from the APC Struxureware Expert software

7.) Verify that SNMP traps are configured in WebCTRL software and being successfully sent to DeCA’s centralized monitoring system (IBM Tivoli Netcool).

8.) Verify and provide single sign-on capability to any front-end UI, to use certificate-based authentication.

9.) Provide access to software, MIBs required to process the traps, knowledge bases/portals and telephone troubleshooting support.

5.1.2 – The requirements apply to all software services for monitoring at DeCA’s West Data Center for which software, licenses, and services are being sought for WebCTRL.

The vendor must:

· Conduct an implementation review/Kickoff meeting (CDRL A001)

· Perform firmware or license upgrades, where applicable.

· Verify the installation and configuration results

· Validate DeCA’s environment to ensure successful implementation

· All software products successfully installed, online, operational, and available for use by DeCA.

· DeCA personnel has successfully tested and utilized the product for its intended purposes and the product performs as required.

· Provide all documentation for the software (CDRL A002).

· Perform knowledge transfer during and post-implementation.

5.2 Task - Contractor must provide qualified personnel. The following personnel are considered qualified personnel and must provide the described duties:

5.2.1 – Implementation Delivery Engineer:

The Implementation Engineer must:

· Perform installations, purchased upgrades, and basic level implementation services for products at DECA West Region Office, including pre-site inspection, initial installation, implementation, minor customization, integration, and outline orientation for DECA (CDRL A003).

· Work closely with DeCA-appointed personnel, Project Managers and other technical services personnel, Corporate Technical Support, and DeCA to ensure a smooth implementation, verification of solution and transition from start-up to integration/production mode (CDRL A003).

5.3 Task – Post Implementation Services

The vendor must provide annual support services following the software implementation to maintain the system and keep it running efficiently.

The vendor must:

· Meet with system operators to discuss any priority issues two (2) times per year

· Perform a visual check of system operation from the graphics level view. Check for zones that are away from set point (indicated by the thermo-graphic floor plans) and mechanical systems graphics two (2) times per year

· Perform a “locked value” report for the site and evaluate the reason for the locked point if possible. Save the report in the archive folder and discuss with the operator as necessary two (2) times per year

· Review system trends and monitor for proper system operation. Make parameter changes or tune loops for optimum operation one (1) time per year

· Review system alarms. Check for recurring alarms and diagnose. Make parameter changes or recommendations as necessary two (2) times per year.

· Archival of system log files and backup of the system databases. A copy will be kept both on site and on our backup server two (2) times per year

· Perform basic server maintenance including defragmentation of the hard drive and basic operating system updates (if not applied by the IT support group) one (1) time annually

· Review problems\issues with the system operators two (2) times per year

· Calibrate field devices as necessary after review of system operation. Full system calibrations are discussed under the next heading two (2) times per year

· Apply any available software patches released by the manufacturer to address problems or issues with the system. (Frequency: As Available, 4 months after release.)

· Provide on-the-spot training to on-site operators as necessary. (Frequency: As requested, up to 30 minutes per visit.) (Make recommendations for factory training if interested.)

· Review system for performance.

6. Performance Standards.

6.1 Reports

Provide a detailed report that includes findings, and summarizes services performed, at the conclusion of each on-site visit (CDRL A004).

requested services to the Defense

Commissary Agency with minimal downtime to its affected/associated

Systems and devices. Downtime, if any, will be predetermined and agreed upon between DeCA and the contractor before implementation of

Services.

100% Inspection. All applicable tasks performed and completed by the contractor will be inspected by DeCA appointed

Individuals for test, acceptance, and validation.

7. Incentives. None.

8. Place of Performance. The implementation of the DeCA West Data Center Infrastructure monitoring system must take place at the Defense Commissary Agency West Region office. The Government intends to provide space to the contractor work force in Government facilities. The contractor must provide on-site support during the implementation and post-implementation services at DeCA, Sacramento, CA as specified in performance requirements.

Travel Costs - All travel costs will be approved in accordance with Joint Travel Regulation guidelines.

9. Period of Performance. Period of performance will be one (1) base year with four (4) option years after contract award.

10. Security. This effort is UNCLASSIFIED.

10.1 Background Investigation/Security Clearance.

All contractor personnel with access to Government computer systems must meet the requirements of DOD 5200.2R as implemented by DeCA. This requirement includes access to the local area network at the DeCA data center currently located at Fort Lee, Virginia. All contractor personnel must have a satisfactory IT sensitivity background investigation (DOD 5200.2R) completed before they are allowed to access the DeCA network and meet requirements outlined in DoD-I 8500.2 for IT level restrictions and requirements. Personnel must receive a favorable investigation commensurate with their level of access based on position sensitivity. All requests for background investigations as required by DOD 5200.2R must be submitted to the COR as soon as personnel are assigned to this contract.

10.2 Information Security.

The contractor must not divulge any information about files, data, processing activities or functions, user identifications, passwords, or other knowledge that may be gained, to anyone who is not authorized access to such information. All contractor personnel must be subject to the Privacy Act of 1974(5U.S.C 552A as amended). Personal information contained in DeCA systems may be used only by authorized persons in the conduct of official business.

Any individual responsible for unauthorized disclosure or misuse may be subject to fines up to $5000. In addition, all personnel working under this contract must provide the Government with an executed non-disclosure agreement.

10.3 Network Access.

All contractor personnel requiring access to the local area network must require satisfactory background investigations. This requirement includes access to the local area network at the DeCA development center currently located at Ft. Lee, Virginia. All requests for background investigations must be submitted in compliance with DOD 5200.2-

R, DOD Personnel Security Program.

10.4 Information Assurance.

The contractor must be in compliance with DoD Directive 8570.1, Information Assurance Training Certification and Workforce Management. The Government is not responsible to provide training for the Contractor. It must be the responsibility of the Contractor to train his current, additional and replacement personnel. The Contractor may request training slots in regularly scheduled Government training classes. The Government may provide training to the Contractor on a “space available” basis in the Government training classes. The Government will not be responsible for any costs incurred by the Contractor to attend any training classes, including the Government training classes.

11. Government-Furnished Equipment (GFE)/Government-Furnished Information (GFI). The government will furnish the contractor’s representative with suitable access to the operating and storage environments necessary to carry out the tasks required of the contractor.

12. Other Pertinent Information or Special Considerations.

a. Identification of Potential Conflicts of Interest (COI). Not Applicable.

b. Identification of Non-Disclosure Requirements. The contractor cannot release information outside of DeCA without approval by the Contracting Officer and coordination with the legal department. The contractor must be required to have all employees, prime and sub-contracted, sign a sensitive but unclassified non-disclosure agreement prior to soliciting data from DeCA. The agreement must prohibit the contractor from divulging any information. It must be the contractor’s responsibility to exercise reasonable diligence to ensure other persons have proper authority before providing them with official information. While access to classified information will not be required in the performance of this task order, the contractor may be required to have access to information, records, or data that may be highly sensitive. The contractor must not divulge any information about DeCA business processes, backup procedures or locations, data processing activities or functions, source selection activities, Information Assurance measures, user IDs, or passwords, or any other knowledge that may be gained as a result of this task to anyone who is not authorized to have access to such information. Direct any questions regarding non-disclosure to the COR. Contractor personnel must abide by applicable office rules, procedures and standards of conduct.

c. Packaging, Packing and Shipping Instructions. DeCA physical locations as referred to in this PWS are as follows:

Defense Commissary Agency

DeCA Headquarters

1300 E Avenue, Building 11200

Fort Lee, VA 23801

Defense Commissary Agency

DeCA West

3401 Acacia St - Bldg. 950

McClellan Park

Sacramento, CA 95652-1002 -End-

DeCA Server Refresh, PWS

Page 1 of 8 Pages

15 June 15

PAGE