SOW_MAC_Network_forCoast_Guard_Recruiting.docx

MAC NETWORK FOR THE UNITED STATES COAST GUARD RECRUITING COMMAND (CGRC)

STATEMENT OF WORK

18 September 2015

1.0 GENERAL.

1.1 Scope. The purpose of this task order is to procure MAC Network desktop hardware, software, server hardware and back up RAID, VPN/Wireless Router, IAW quote Q-86116 and Trade in/buy back/recycle existing server & MAC equipment.

1.2 Background. The equipment is critical for the successful operation of the CGRC Marketing Division (Mkt Div) and used in the day-to-day operations of the staff personnel assigned, to perform their specialized duties. The Mkt Div supports CGRC’s enlisted & officer, active duty and reserve recruiting mission, by providing advertising, outreach, and promotional services and products that promote Coast Guard opportunities and generate recruiting leads for accessioning and commissioning.

The equipment creates advertising, develops promotional products (flyers, brochures, and posters), manages gocoastguard.com recruiting website and content management system, and Go Coast Guard Face Book and You Tube video social media sites. Our personnel also develop recruiting office internal and external branding products, manage CGRC photography and imagery database and File Transfer protocol (FTP) site, and search and use Defense Visual Information Database System (DVIDS) photography and imagery database and FTP site. MAC is considered the industry standard and preferred by graphic designers, video producers, tech journalists, app developers etc.

MAC operating systems have increased processing speed and video processors that are more adept in handling large HD video files. New screens allow operators to easily spot image flaws and more effectively edit images and video. The high-quality imagery end product is easily noticed by graphic illustrators and external audiences. Apple systems also have a reputation for durability, ease of operation, and security. Operation System (OS) X with its advanced technologies work together to constantly monitor, encrypt, update — and ultimately keep the MAC safe. File Vault 2 encrypts the entire drive MAC, protecting data with XTS-AES 128 encryption. Initial encryption is fast and unobtrusive. System Preferences contains privacy controls for location sharing and diagnostic information sharing. The technically sophisticated runtime protections in OS X work at the very core of the MAC system to help keep the system safe. Built right into the processor, the XD (Execute Disable) feature creates a strong wall between memory used for data and memory used for executable instructions. This protects against malware that attempts to trick the MAC into treating data the same way it treats a program in order to compromise the system. CGRC relies on state of the art graphics hardware and software to create the products and services that inform and educate prospects about Coast Guard opportunities and motivate and inspire quality applicants to consider Coast Guard service. Coast Guard recruiters need every advantage in competing for the best and brightest America has to offer. Prospects act on memorable and motivating messaging and imagery. The leads generated through the advertising and outreach products CGRC produces and sustain, become the Coast Guard’s enlisted leaders and future officers.

Base-NCR Coast Guard C4IT, IT Division Chief, Mr. David Duffy recommended that CGRC upgrades its MAC network prior to CGRC move to Base-NCR Coast Guard in October 2015. CGRC will incur all costs associated with purchase and maintenance of the system.

1.3 PERIOD OF PERFORMANCE.

The period of performance for this task order is no later than three months after award.

1.4 PLACE OF PERFORMANCE.

2703 Martin Luther King Jr Ave SE Washington, DC 20593

1.5 HOURS OF OPERATION. Not Applicable

1.6 TRAVEL. Not Applicable

1.7 KICK-OFF MEETING. Not Applicable

1.8 PROJECT PLAN. Not Applicable

1.9 INTELLECTUAL PROPERTY.

Federal Acquisition Regulation (FAR) clauses 52.227-14 Rights in Data – General (Dec 2007) and 52.227.17 Rights in Data – Special Works (Dec 2007) shall apply to this contract.

1.10 Accessibility Requirements (Section 508)

Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-220) requires that when Federal agencies develop, procure, maintain, or use electronic and information technology (EIT), they must ensure that it is accessible to people with disabilities. Federal employees and members of the public who have disabilities must have equal access to and use of information and data that is comparable to that enjoyed by non-disabled Federal employees and members of the public.

All EIT deliverables within this work statement shall comply with the applicable technical and functional performance criteria of Section 508 unless exempt. Specifically, the following applicable EIT accessibility standards have been identified:

1.10.1. Section 508 Applicable EIT Accessibility Standards

36 CFR 1194.21 Software Applications and Operating Systems, applies to all EIT software applications and operating systems procured or developed under this work statement including but not limited to GOTS and COTS software. In addition, this standard is to be applied to Web-based applications when needed to fulfill the functional performance criteria. This standard also applies to some Web based applications as described within 36 CFR 1194.22.

36 CFR 1194.22 Web-based Intranet and Internet Information and Applications, applies to all Web-based deliverables, including documentation and reports procured or developed under this work statement. When any Web application uses a dynamic (non-static) interface, embeds custom user control(s), embeds video or multimedia, uses proprietary or technical approaches such as, but not limited to, Flash or Asynchronous Javascript and XML (AJAX) then 1194.21 Software standards also apply to fulfill functional performance criteria.

36 CFR 1194.23 Telecommunications Products, applies to all telecommunications products including end-user interfaces such as telephones and non end-user interfaces such as switches, circuits, etc. that are procured, developed or used by the Federal Government.

36 CFR 1194.24 Video and Multimedia Products, applies to all video and multimedia products that are procured or developed under this work statement. Any video or multimedia presentation shall also comply with the software standards (1194.21) when the presentation is through the use of a Web or Software application interface having user controls available.

36 CFR 1194.25 Self Contained, Closed Products, applies to all EIT products such as printers, copiers, fax machines, kiosks, etc. that are procured or developed under this work statement.

36 CFR 1194.26 Desktop and Portable Computers, applies to all desktop and portable computers, including but not limited to laptops and personal data assistants (PDA) that are procured or developed under this work statement.

36 CFR 1194.31 Functional Performance Criteria, applies to all EIT deliverables regardless of delivery method. All EIT deliverable shall use technical standards, regardless of technology, to fulfill the functional performance criteria.

36 CFR 1194.41 Information Documentation and Support, applies to all documents, reports, as well as help and support services. To ensure that documents and reports fulfill the required 1194.31 Functional Performance Criteria, they shall comply with the technical standard associated with Web-based Intranet and Internet Information and Applications at a minimum. In addition, any help or support provided in this work statement that offer telephone support, such as, but not limited to, a help desk shall have the ability to transmit and receive messages using TTY.

1.10.2 Section 508 Applicable Exceptions

Exceptions for this work statement have been determined by DHS and only the exceptions described herein may be applied. Any request for additional exceptions shall be sent to the COTR and determination will be made in accordance with DHS MD 4010.2. DHS has identified the following exceptions that may apply: 36 CFR 1194.3(b) Incidental to Contract, all EIT that is exclusively owned and used by the contractor to fulfill this work statement does not require compliance with Section 508. This exception does not apply to any EIT deliverable, service or item that will be used by any Federal employee(s) or member(s) of the public. This exception only applies to those contractors assigned to fulfill the obligations of this work statement and for the purposes of this requirement, are not considered members of the public.

1.10.3 Section 508 Compliance Requirements

36 CFR 1194.2(b) (COTS/GOTS products), When procuring a product, each agency shall procure products which comply with the provisions in this part when such products are available in the commercial marketplace or when such products are developed in response to a Government solicitation. Agencies cannot claim a product as a whole is not commercially available because no product in the marketplace meets all the standards. If products are commercially available that meets some but not all of the standards, the agency must procure the product that best meets the standards. When applying this standard, all procurements of EIT shall have documentation of market research that identify a list of products or services that first meet the agency business needs, and from that list of products or services, an analysis that the selected product met more of the accessibility requirements than the non-selected products as required by FAR 39.2. Any selection of a product or service that meets less accessibility standards due to a significant difficulty or expense shall only be permitted under an undue burden claim and requires authorization from the DHS Office of Accessible Systems and Technology (OAST) in accordance with DHS MD 4010.2.

1.11 DHS Enterprise Architecture Compliance: All solutions and services shall meet DHS and USCG Enterprise Architecture policies, standards, and procedures. Specifically, the contractor shall comply with the following Homeland Security Enterprise Architecture (HLS EA) and Coast Guard Enterprise Architecture (CGEA) requirements:

1.20 All hardware, software, and services provided must be compliant in accordance with 140-01 Information Technology Systems Security and the DHS Sensitive Systems Handbooks 4300A.

1.12 Access to Unclassified Facilities, Information Technology Resources, and Sensitive Information : The assurance of the security of unclassified facilities, Information Technology (IT) resources, and sensitive information during the acquisition process and contract performance are essential to the DHS mission. DHS Management Directive (MD) 11042.1 Safeguarding Sensitive but Unclassified (For Official Use Only) Information, describes how contractors must handle sensitive but unclassified information. DHS MD 140.01 Information Technology Systems Security and the DHS Sensitive Systems Handbook prescribe policies and procedures on security for IT resources. Contractors shall comply with these policies and procedures, any replacement publications, or any other current or future DHS policies and procedures covering contractors specifically for all Task Orders that require access to DHS facilities, IT resources or sensitive information. Contractors shall not use or redistribute any DHS information processed, stored, or transmitted by the contractor except as specified in the task order.

1.12 Security Review Clause

The Government may elect to conduct periodic reviews to ensure that the security requirements contained in this contract are being implemented and enforced. The Contractor shall afford DHS, including the organization of the DHS Office of the Chief Information Officer, the Office of the Inspector General, authorized Contracting Officer’s Technical Representative (COTR), and other government oversight organizations, access to the Contractor’s facilities, installations, operations, documentation, databases and personnel used in the performance of this contract. The Contractor will contact the DHS Chief Information Security Officer to coordinate and participate in the review and inspection activity of government oversight organizations external to the DHS. Access shall be provided to the extent necessary for the government to carry out a program of inspection, investigation, and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of DHS data or the function of computer systems operated on behalf of DHS, and to preserve evidence of computer crime.

1.13 Interconnection Security Agreement (ISA) Clause Interconnections between DHS and non-DHS IT systems shall be established only through controlled interfaces and via approved service providers. The controlled interfaces shall be accredited at the highest security level of information on the network. Connections with other Federal agencies shall be documented based on interagency agreements; memoranda of understanding, service level agreements or interconnect service agreements.

1.14 HSAR 3052.204-70 Security Requirements For Unclassified Information Technology Resources Clause

(a) The Contractor shall be responsible for Information Technology (IT) security for all systems connected to a DHS network or operated by the Contractor for DHS, regardless of location. This clause applies to all or any part of the contract that includes information technology resources or services for which the Contractor must have physical or electronic access to sensitive information contained in DHS unclassified systems that directly support the agency's mission.

(b) The Contractor shall provide, implement, and maintain an IT Security Plan. This plan shall describe the processes and procedures that will be followed to ensure appropriate security of IT resources that are developed, processed, or used under this contract.

(c) Examples of tasks that require security provisions include--

(d) At the expiration of the contract, the contractor shall return all sensitive DHS information and IT resources provided to the contractor during the contract, and certify that all non-public DHS information has been purged from any contractor-owned system. Components shall conduct reviews to ensure that the security requirements in the contract are implemented and enforced.

(e) Within 6 months after contract award, the contractor shall submit written proof of IT Security accreditation to DHS for approval by the DHS Contracting Officer. Accreditation will proceed according to the criteria of the DHS Sensitive System Policy Publication, 4300A (Version 5.5, September 30, 2007) or any replacement publication, which the Contracting Officer will provide upon request. This accreditation will include a final security plan, risk assessment, security test and evaluation, and disaster recovery plan/continuity of operations plan. This accreditation, when accepted by the Contracting Officer, shall be incorporated into the contract as a compliance document. The contractor shall comply with the approved accreditation documentation.

1.15 HSAR 3052.204-71 Contractor Employee Access Clause CONTRACTOR EMPLOYEE ACCESS (JUN 2006)

(a) Sensitive Information, as used in this Chapter, means any information, the loss, misuse, disclosure, or unauthorized access to or modification of which could adversely affect the national or homeland security interest, or the conduct of Federal programs, or the privacy to which individuals are entitled under section 552a of title 5, United States Code (the Privacy Act), but which has not been specifically authorized under criteria established by an Executive Order or an Act of Congress to be kept secret in the interest of national defense, homeland security or foreign policy. This definition includes the following categories of information:

(b) “Information Technology Resources” include, but are not limited to, computer equipment, networking equipment, telecommunications equipment, cabling, network drives, computer drives, network software, computer software, software programs, intranet sites, and internet sites.

(c) Contractor employees working on this contract must complete such forms as may be necessary for security or other reasons, including the conduct of background investigations to determine suitability. Completed forms shall be submitted as directed by the Contracting Officer. Upon the Contracting Officer's request, the Contractor's employees shall be fingerprinted, or subject to other investigations as required. All contractor employees requiring recurring access to Government facilities or access to sensitive information or IT resources are required to have a favorably adjudicated background investigation prior to commencing work on this contract unless this requirement is waived under Departmental procedures.

(d) The Contracting Officer may require the contractor to prohibit individuals from working on the contract if the government deems their initial or continued employment contrary to the public interest for any reason, including, but not limited to, carelessness, insubordination, incompetence, or security concerns.

(e) Work under this contract may involve access to sensitive information. Therefore, the Contractor shall not disclose, orally or in writing, any sensitive information to any person unless authorized in writing by the Contracting Officer. For those contractor employees authorized access to sensitive information, the contractor shall ensure that these persons receive training concerning the protection and disclosure of sensitive information both during and after contract performance.

(f) The Contractor shall include the substance of this clause in all subcontracts at any tier where the subcontractor may have access to Government facilities, sensitive information, or resources.

(g) Each individual employed under the contract shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence as evidenced by a Permanent Resident Card (USCIS I-551). Any exceptions must be approved by the Department’s Chief Security Officer or designee.

(h) Contractors shall identify in their proposals, the names and citizenship of all non-U.S. citizens proposed to work under the contract. Any additions or deletions of non-U.S. citizens after contract award shall also be reported to the contracting officer.

2.0 GOVERNMENT TERMS & DEFINITIONS.

3.0 GOVERNMENT FURNISHED INFORMATION.

4.0 CONTRACTOR FURNISHED PROPERTY.

The Contractor shall furnish all facilities, materials, equipment and services necessary to fulfill the requirements of this task order. The contractor shall receive the following equipment, trade-in, buy back, or recycle and credit the government for the value of the equipment:

FIS F1RM12 Fiber Termination Panel

QLogic SANbox 5600 - Switch - 16 ports - 4Gb Fibre Channel + 16 x SFP / 4 x XPAK (empty)

3COM BaseLine 2824 24 Port 10/100/1000 Switch (3C16479-US)

24 Port Switch Linksys SRW224G4P

2x2.8GHZ Quad Core Xeon (MDC1) Apple XSAN file server

-2x2.8GHZ Quad Core Xeon (MDC2) Apple XSAN file server

-2x2.26GHZ Quad Core Xeon (Backup/FTP) Tandberg

2x24 92455-LTQ Tape Backup

TQ810A Promise VTrak E-Class 16x BAY RAID

Linksys Smart Wifi Router n900

Quantity 4 Mac Pro 2x2.8GHz Quad Core Intel Xeon W/ Fiber NIC - LSILogic LSI7204EP 2-27" Apple Monitors Wacom PTZ-631W Wired Keyboard Magic Mouse APC Back-Ups RS 1200

Mac Pro 2x2.4GHZ GHz Six Core Intel Xeon W/ Fiber NIC LSILogic LSI7204EP 1 30" Apple Monitor 1 Wacom PTZ-631W Wired Keyboard Magic Mouse APC Back-Ups RS 1200

Apple Air Port Wifi router.

Quantity 6 15" MacBook Pros - 2.66 GHz Intel Core i7

5.0 REQUIREMENTS. Contractor shall procure install and test the following MAC Network desktop hardware, software, server hardware and back up RAID, VPN/Wireless Router, and .

5.3 Server Hardware:

Mac Mini Processor: 3.0 GHz Dual-Core Intel Core i7 (turbo Boost up to 3.5 GHz) Qty 1

PROMISE Pegasus2 R8 32TB (8 by 4TB) Thunderbolt 2 RAID System Qty 2 (One for DATA Storage & One for BACKUP Storage)

5.4 VPN/Wireless Router

Cisco Meraki MX64W Wireless Firewall Security Appliance Bundle, Qty 1 200Mbps FW, 5xGbE Ports

Meraki Z1 Cloud Managed Teleworker Gateway (5) GbE Ports Qty 6 Dual Radio 802.11n Wireless

5.5 Software

5.6 Data Security.

5.6.1 CGRC MAC network will not store sensitive security information, personal identifiable information, or classified information. Users are required to maintain and ensure the security of this Government property IAW all policy, procedures and security.

5.6.2 MAC encryption levels and Cisco Meraki wireless firewall security appliance bundle will provide the required security within the NCR Base Coast Guard VLAN.

5.7 Deployment and installation plan: Contractor shall develop a deployment and installation plan and timeline that include the following tasks: Pick up existing system listed in government property at CGRC (Ballston), 4200 Wilson Blvd Suite 600, Arlington, VA. Deliver and install, set-up, integrate and migrate from existing system into CGRC Ballston. Upon approval of the plan, the contractor shall initiate trade in and new item delivery and set up.

5.8 Maintenance: Contractor shall supply:

A. Three years of onsite hardware (parts and labor) warranty + email and phone support;

B. 3 years of carry in hardware warranty for laptops, C. Software licenses for Adobe creative cloud for teams, Microsoft office for home and business; Sophos endpoint protection;

D. 3 years onsite warranty for Mac mini, supporting server.

7 business days after award

COTR reviews the deployment and installation plan

Within 3 business days of COTR request

CONTRACTOR RECRUITING WEBSITE SUPPORT FOR THE UNITED STATES COAST GUARD RECRUITING COMMAND (CGRC)