Attachment B.pdf

Attachment B

RFP

PROGRAM MANAGEMENT SUPPORT

STATEMENT OF WORK (SOW)

1. BACKGROUND

In the period after the tragic events of September 11, 2001 the requirement for a national information exchange and collaboration system became obvious. The Homeland Security Information Network (HSIN) evolved from a Department of Defense, state and local law enforcement program implemented in early 2003 for sharing information and intelligence. That program, known as the Joint Regional Information Exchange System (JRIES), was transferred to the Department of Homeland Security in late 2003 and became HSIN in February 2004. The system was broadened to include not only the original intelligence sharing functions afforded to law enforcement but to also include, State Homeland Security Advisors, Governors’ offices, emergency services managers, first responders, the National Guard and an international component. HSIN was also modified to include a component for cyber defense and for private sector entities concerned with infrastructure protection. As the primary nation-wide information sharing and collaboration network, HSIN provides secure, encrypted information exchange over the Internet, is an umbrella for several specialized information exchange networks and services, and is a system of collaborative communication tools used in routine, daily functions for information sharing, collaboration, alerting and prevention in support of national critical infrastructure protection and threat mitigation as determined by HSPD 5 and 7.

The objectives of this effort are to provide overall program management, development oversight, technical direction, and program support for the HSIN. The success of HSIN depends on the coordination and cooperation of multiple agencies and personnel at the Federal, state, and local levels, as well as the private sector. This effort shall support the need to ensure continued successful operation and expansion of the HSIN. Enhanced development of the HSIN tool will be informed by the U. S. Chief Information Officer’s 25 Point Implementation Plan to Reform Federal Information Technology Management as well as DHS Systems Engineering Life Cycle (SELC) policies and guidance in the pursuit of best practices and operational efficiencies. The overall design of HSIN will be consistent with DHS standards for system and data management architecture. HSIN will promote and use Federal and DHS approved open standards, technologies, and demonstrated best practices.

2. OBJECTIVES

The objectives of this Statement of Work (SOW) are to secure overall program administration, operations, management, and governance oversight services in support of the HSIN Program Management Office (PMO).

3. SCOPE

DHS anticipates that the work to be performed in this statement of work shall require a base period of one year with one (1) one-year option period, for a total two year performance period.

The scope of this SOW, outlined in detail in Section Four- Specific Tasks, includes an outline of four major task areas and optional task area with subtask definitions.

4. SPECIFIC TASKS

These tasks shall support the Homeland Security Information Sharing Network Program Office (PMO) in fulfilling its mission of implementing best practices to improve the lifecycle acquisition processes and in assisting the PMO to apply policy and regulations.

Task 1: Program Administration and Management, Task 2: Program Operations.

Task 3: Requirements Administration and Management Support Task 4: Program Testing and Evaluation Task 5: Optional Tasks

TASK 1: PROGRAM ADMINISTRATION AND MANAGEMENT

The Contractor shall track all work activities under contract to provide current status as well as forecasts requirements and issues related to program management including resource loading, work breakdown structure, schedules, deliverables, earned value analysis, and funds expenditure tracking and status. The Contractor shall provide support to Government oversight of all contract activities to ensure the quality of work effort and deliverables and their traceability to all program requirements, and to identify and remedy potential technical, cost and schedule risks and issues. The Contractor shall support the monitoring of contractual compliance between various subcontractor task orders.

Subtask 1.1: Program Management Processes and Methodologies

The Contractor shall support the program office in the maintenance of an Enterprise Lifecycle Methodology (ELCM) that guides the execution of activities related to planning, delivery, operation and evaluation of mission capabilities and program office functions. The Contractor shall integrate all functional areas (e.g., risk management, integrated master planning and schedule, document management, configuration management, management reporting and capital investment planning, earned value management, budget and cost estimating, governance, quality assurance, integrated logistics support) and define the specific objectives to be accomplished for the successful execution of the program.

Subtask 1.1.1: Risk Management - The Contractor shall assess and provide recommendations to improve upon, as warranted, HSIN processes pre-established to identify and mitigate program management risks. The Contractor shall establish a program risk management practice and report monthly on cross functional work performance risks and issues. The scope of risk and issues considerations shall include but not be limited to program administration, management, and implementation risks associated with all active projects and key program initiatives. The Contractor shall support Government oversight of the orchestration and risk assessment of all work activities with designated project PMs in a collaborative effort to mitigate all program implementation risks.

Subtask 1.1.2: Integrated Master Planning and Scheduling - The Contractor shall support the Government's development of five year HSIN strategic and tactical plans. The Contractor shall recommend the need for, and help facilitate the development of individual project plans and support oversight of the incorporation of individual plans into program level integrated master schedule to effectively manage causal relationships across the program, tracking and reporting on coordination activities across all approved program management activities.

The Contractor shall also organize and conduct a monthly program management review for the PMO and other designated staff encompassing the status of the Contractors and subcontractors work.

Subtask 1.1.3: Document Management - The Contractor shall maintain the HSIN SharePoint site which serves as a centralized repository of program documentation, products, and deliverables. The scope of services shall include document creation, editing, graphics support, and web publishing. The Contractor shall provide deliverable and document management services for all major program documents in support of SELC, Acquisition and Enterprise Architecture Board reviews and including but not limited to responses to management inquiries. These documents shall be uploaded into the repository. The Contractor shall prepare, recommend and support monitoring a workflow acceptance process for all SELC documents and Contractor deliverable acceptance. The Contractor shall review both the HSIN Concept of Operations and Program Operating Model) annually with relevant stakeholders and recommend/incorporate necessary updates.

Subtask 1.1.4: Configuration Control - The Contractor shall assist in administering and managing the HSIN Configuration Control Board by coordinating and facilitating biweekly meetings, performing quality review on each proposed system change request or problem report, and biweekly reviewing and auditing the requirements database. The Contractor shall assist in refining and continuously improving the configuration control process to encompass program level process, technical, architectural, policy a procedural change controls.

Subtask 1.1.5: Business Management and Information Reporting and CPIC support - The Contractor shall provide management information reports to internal and external partners on a routine, recurring, and as-needed basis.

Federal managers use this information to assess the programs. The Contractor shall assist in updating nPRS monthly and update milestones. The Contractor shall work with the PM to align information provided in the Exhibit 300, nPRS, and the OMB dashboard. The Contractor shall support the development and documentation of Program acquisition planning and reporting documentation to include by not limited to: capital asset planning (OMB A-11 definition), program Lifecycle Cost Estimate, acquisition life cycle management, acquisition performance review processes.

The Contractor shall follow a repeatable cost estimating process adapted from the GAO Cost Estimating and Assessment Guide. To support the HSIN PM in producing pricing estimates for contracts and technology adoptions. The Contractor shall be knowledgeable on the full Life Cycle Cost Estimation documentation required for each investment including Independent Government Cost Estimates (IGCE) and Task Order modifications.

Subtask 1.1.6: Earned Value Management - The Contractor shall track the progress of the development Contractor using industry standard earned value management suitable for agile development. Standard EVM reports shall be collected, analyzed, and results combined into the overall Program monthly reporting.

Subtask 1.1.7: Governance Review Board Support - The Contractor shall support governance board reviews as requested, which include but not limited to the following: Acquisition Review Boards (ARB), Enterprise Architecture Review Boards (EARB) and IT Acquisition Review (ITAR) reviews. The Contractor shall track all questions and conditions for approval. The Contractor shall work with the PM to incorporate timely reviews into program schedules.

The Contractor shall help the PM with contract updates.

Sub Task 1.1.8: License and Inventory Support - The Contractor shall assist the HSIN in maintaining program asset inventories and property books to include tracking hardware, mobile devices, and software licenses. This includes, but is not limited to: Test & Evaluation lab equipment, government furnished laptops loaned to Contractors, and security token provisioning

Subtask 1.2: Program and Task Order Control

Contractor support services may include, but are not limited to in the following:

preparation and implementation of templates, models, guides and workshop facilitation;

development and maintenance of databases and executive reporting systems;

development and implementation of program documents, plans and performance measures; providing program management service, advice, assessments, and tracking; the financial management support; provide preliminary contract negotiation preparation support, excluding participation in negotiations or evaluations.

Subtask 1.3: Training and Performance Support

The Contractor shall support the delivery of the HSIN system by supporting the development and execution of varying types of training and information sessions. The Contractor shall support the Government in determining appropriate training and support the training efforts. The Contractor shall help develop and implement a standard training methodology for the HSIN r Program. The training will integrate new policies, processes, and procedures with technical system training so that users understand the full context and operations of HSIN system.

TASK 2: PROGRAM OPERATIONS SUPPORT

The Contractor shall support the integrated management of all PMO functional areas (e.g., systems engineering, software engineering, testing, configuration management, quality assurance, integrated logistics support) for the successful execution of the HSIN program.

Subtask 2.1 Technical Monitoring

In conjunction with both the DHS and the HSIN Program Configuration Control Boards, the Contractor shall monitor the use of technology supporting HSIN to ensure that the system is making best use of the existing or target technical architecture. The Contractor shall review for suitability proposed HSIN design, and technical solutions. The Contractor also shall review system development activities (the COTR will provide access) for conformance to government development standards as appropriate to the CIO standards and industry best practices. The Contractor shall provide recommendations to the government for technical improvements to HSIN as business or technology requirements change, and as applicable new technologies reach maturity.

Subtask 2.2 DHS Data Center Liaisons

The Contractor shall assist the PMO in managing the relationships critical to monitor and influence the scope of services provided by the DHS Data Centers. The Contractor shall maintain a schedule of activities for implementing new capabilities and changes to the infrastructure and assets maintain by the DHS Data Centers. The Contractor shall provide weekly and monthly status on all activities associated with the DHS Data Centers.

Subtask 2.3 Operations & Maintenance (O&M) Support

The Contractor shall provide coordination support for the HSIN PM with O&M service providers. This includes but is not limited to coordinating with configuration control boards, release management, testing, and status reporting.

TASK 3. REQUIREMENTS ADMINISTRATION AND

MANAGEMENT SUPPORT

The Contractor shall support the identification, analysis, and documentation of the business requirements, technical specifications, and policy requirements associated with a “to be” business architecture.

Subtask 3.1 Agile Software Development Administrations

The Contractor shall support the PMO’s adoption of the Agile software development methodology (i.e. user stories, backlogs, product owner management, etc.).

Subtask 3.1.1: Scrum Manager - The Contractor shall provide an experienced and qualified scrum master for development and facilitation of the HSIN PMO’s systems development and integration processes. This individual shall support communications related to the adoption and effective use/management of agile across and/with all functional teams and HSIN end user forums.

Subtask 3.2: HSIN Requirements Process and Governance Structure

The Contractor shall assist in refining and improving the HSIN Requirements Management methodology, practice and processes including roles, responsibilities, authorities, and procedures necessary to support enterprise business integration and achievement of “To Be” architectures. The Contractor shall assist in implementing the requirements management process, recommend and implement an automated tool for the tracking and management of the HSIN enterprise requirements baseline and maintenance of the baseline.

Subtask 3.3: Requirements Analysis

The Contractor shall create and maintain an electronic inventory of all requirements, backlog, user stories, use cases and business process work flows. The Contractor shall also develop and maintain the Requirements Traceability Matrix and Use Cases/Mission scenarios, documented and stored in a requirements repository consistent with industry best practices. The Contractor shall provide and use an automated requirements management and status reporting tool.

Subtask 3.4: Release Management

The Contractor shall assist in the development and facilitation of the process by which the PMO compiles requirements into sprints and/or release packages capable of being implemented by an agile software development teams.

Subtask 3.5 Knowledge Management Support

The Contractor shall support the development, implementation, and continued updating of the HSIN Knowledge Management Plan. Contractor support shall require research, as well as written and coordination support to the HSIN Program Knowledge Manager.

This support includes all facets of knowledge management requiring senior level experience and acumen with business process definition and technical design knowledge for optimal information sharing in a portal environment.

Subtask 3.6 Policy Developments and Management Support

The Contractor shall assist the HSIN PMO in creating Program Policy and Governance road map(s) for establishing, coordinating, and integrating IT policies, processes, and governance structures (including EA, PfM, Information Assurance, and IT Security and Privacy) that align with the DHS Strategic Plan. The Contractor shall participate in the research, collection of information, preparation, and staffing of white papers, point papers, impact statements, analysis, briefs, and recommendations for the development of the OPS IT policies, processes, and governance structures as required.

TASK 4. TEST AND EVALUATION SUPPORT

Subtask 4.1: Test Administration and Management

The Contractor shall develop a Test and Evaluation Master Plan (TEMP) for the integration of systems and processes in the “To Be” business and solution architectures.

The TEMP shall define the goals, objectives, and activities required to validate new technical infrastructure and services against requirements. The TEMP shall include testing of critical incremental integration and transition steps incorporating the nuances of the Agile software methodology.

Subtask 4.2: Test and Evaluation Support

The Contractor shall participate in the test planning, observation, and results review for solutions delivery services and/or technical integration during the transition to the interim and final “To Be” architectures. The Contractor shall review the results of integrated service and technology testing to assess the readiness of new infrastructure and service components for production operation, leveraging any results of testing conducted during development, integration, and implementation of those components

Subtask 4.2.1: Test Lab Support - The Contractor shall maintain the HSIN test lab schedule, manage testing configurations, and provide test support as requested..

Subtask 4.2.2: User Acceptance Testing Support - The Contractor shall assist with user acceptance testing. The Contractor shall provide support for the necessary access control paperwork required to enable users to access the test environment.

TASK 5. OPTIONAL TASKS

Subtask 5.1 Portal Consolidation Solutions Delivery Projects

The Contractor shall provide implementation and development project team resources to support the consolidation, integration, or interoperability of existing DHS Sensitive but Unclassified (SBU) Information Sharing and Collaboration Portals or Applications on the HSIN Platform.

Subtask 5.2 Support for Emerging Tasks

The dynamic nature of the HSIN mission and rapidly changing technology environment results in the occurrence of unplanned support by the HSIN PMO. There may be work surges attributable to a shift in world events that may present a threat and concern to the United States. The HSIN mission requires the HSIN platform, resources, and solutions to be available in support of event driven DHS information sharing and collaboration requirements. Additional resources may be needed to drive a range of efforts from systems of systems interoperability, a HSIN applications market place, identity management, mobility services, to automated person screening, as examples. The nature of the emergent tasking shall not exceed 25% of the original tasks, and will consist of providing short term personnel, administrative, training and field deployment support.

Subtask 5.3 Technical and Mission Subject Matter Expertise (SME)

The HSIN Program must be able to quickly respond to requirements stemming from incidents and events of national significance. The contractor shall provide SMEs in all areas associated with Enterprise portal development. The HSIN Program will request specific SME services for finite durations as the need arises. A pool of hours will be set aside to meet SME needs as they arise.

Subtask 5.4 Program Service Center and Helpdesk Support

The Contractor shall provide assistance in the areas of standard operating procedure (SOP) development, documentation, knowledge management, and testing and simulation.

Work will include, but will not be limited to, drafting initial operating procedures/documents to manage and operate a tier 1 and tier 2 help desk; and assisting in recommendation of equipment, requirements, staffing, facilities and continuation of development of processes and procedures for Program interaction with ~75K+ users.

5. DELIVERABLES/DELIVERY SCHEDULE

All deliverables shall be prepared in Contractor format using Microsoft Office Suite tools and delivered electronically to the COTR and alternate COTR. Weekly deliverables are due by 3PM on Friday. All days listed are calendar days. Monthly deliverables are due on the 5th business day.

6. GOVERNMENT-FURNISHED EQUIPMENT (GFE)/GOVERNMENT

FURNISHED INFORMATION (GFI)

All referenced GFI will be provided by the COTR, including products and materials from other Contractors on which this Contractor shall perform quality assurance review. The actual HSIN system hardware and software are owned and operated by the Government, the HSIN can be accessed on any computer connected to the Internet.

7. SECURITY

7.1 General

7.1.1 DHS has determined that performance of this contract requires that the Contractor, subcontractor(s), vendor(s), etc., have access to classified National Security Information (herein known as classified information) at the Secret level, and will require access to sensitive but unclassified (SBU) information. Classified information is government information that requires protection in accordance with Executive Order 12958, Classified National Security Information and supplementing directives. SBU is unclassified information for official use only.

7.1.2 SECRET personnel clearances are required. “Interim SECRET” clearances are acceptable. A small number of key positions shall require TOP SECRET personnel clearances, some with Sensitive Compartmented Information (SCI) access, may be required and TOP SECRET facility clearance may be required. "Interim top secret" clearances would not be acceptable. The Contractor shall abide by the requirements set forth in the DD Form 254, Contract Security Classification Specification, included in the contract, and the National Industrial Security Program Operating Manual (NISPOM) for the protection of classified information at its cleared facility, if applicable, as directed by the Defense Security Service. If the Contractor has access to classified information at a DHS or other government facility, it shall abide by the requirements set by the agency.

7.2 Security Requirements

(a) This applies to the extent that this contract involves access to information classified “Secret.”

(b) The Contractor shall comply with—

(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M); and

(2) Any revisions to that manual, notice of which has been furnished to the Contractor.

(c) If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

(d) The Contractor agrees to insert terms that conform substantially to the language of this clause, including this paragraph (d) but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information.

7.3 Employment Eligibility

7.3.1 The Contractor must agree that each employee working on this contract shall have a Social Security Card issued and approved by the Social Security Administration. The Contractor shall be responsible to the Government for acts and omissions of his own employees and for any subcontractor(s) and their employees.

7.3.2 Subject to existing law, regulations, and other provisions of this contract, illegal or undocumented aliens shall not be employed by the Contractor, or with this contract. The Contractor shall ensure that this provision is expressly incorporated into any and all subcontracts or subordinate agreements issued in support of this contract.

7.4 Suitability Determination

7.4.1 DHS shall have and exercise full control over granting, denying, withholding or terminating unescorted government facility and/or sensitive Government information access for Contractor employees, based upon the results of a background investigation. DHS may, as it deems appropriate, authorize and make a favorable entry on duty (EOD) decision based on preliminary security checks. The favorable EOD decision would allow the employees to commence work temporarily prior to the completion of the full investigation. The granting of a favorable EOD decision shall not be considered as assurance that a full employment suitability authorization will follow as a result thereof.

7.4.2 The granting of a favorable EOD decision or a full employment suitability determination shall in no way prevent, preclude or bar the withdrawal or termination of any such access by DHS, at any time during the term of the contract. No employee of the Contractor shall be allowed unescorted access to a Government facility without a favorable EOD decision or suitability determination by the Security Office. Contract employees assigned to the contract not needing access to sensitive DHS information or recurring access to DHS’ facilities will not be subject to security suitability screening.

7.4.3 Contract employees awaiting an EOD decision may begin work on the contract provided they do not access sensitive Government information. Limited access to Government buildings is allowable prior to the EOD decision if the Contractor is escorted by a government employee. This limited access is to allow Contractors to attend briefings, non-recurring meetings and begin transition work.

7.5 Background Investigations

7.5.1 Contract employees (to include applicants, temporaries, part-time and replacement employees) under the contract, needing access to sensitive information, shall undergo a position sensitivity analysis based on the duties each individual will perform on the contract. The results of the position sensitivity analysis shall identify the appropriate background investigation to be conducted. All background investigations will be processed through the Security Office. Prospective Contractor employees shall submit the following completed forms to the Security Office through the COTR no more than 30 days before the starting date of the contract or 30 days prior to entry on duty of any employees, whether a replacement, addition, subcontractor employee, or vendor:

Standard Form 85P, “Questionnaire for Public Trust Positions” FD Form 258, “Fingerprint Card” (2 copies) Conditional Access to Sensitive But Unclassified Information Non-Disclosure Agreement Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act

7.5.2 Required forms will be provided by DHS at the time of award of the contract.

Only complete packages will be accepted by the Security Office. Specific instructions on submission of packages will be provided upon award of the contract.

7.5.3 Be advised that unless an applicant requiring access to sensitive information has resided in the United States for three of the past five years, the government may not be able to complete a satisfactory background investigation. In such cases, DHS retains the right to deem an applicant as ineligible due to insufficient background information.

7.5.4 The use of non-U.S. citizens, including Lawful Permanent Residents (Lars), is not permitted in the performance of this contract for any position that involves access to or development of any DHS IT system. DHS will consider only U.S.

citizens and LPRs for employment on this contract. DHS will not approve LPRs for employment on this contract in any position that requires the LPR to access or assist in the development, operation, management or maintenance of DHS IT systems. By signing this contract, the Contractor agrees to this restriction. In those instances where other non-IT requirements contained in the contract can be met by using LPRs, those requirements shall be clearly described.

7.6 Continued Eligibility

7.6.1 If a prospective employee is found to be ineligible for access to government facilities or information, the COTR will advise the Contractor that the employee shall not continue to work or to be assigned to work under the contract.

The Security Office may require drug screening for probable cause at any time and/ or when the Contractor independently identifies, circumstances where probable cause exists.

The Contractor shall report any adverse information coming to their attention concerning contract employees under the contract to DHS’ Security Office.

Reports based on rumor or innuendo should not be made. The subsequent termination of employment of an employee does not obviate the requirement to submit this report. The report shall include the employees’ name and social security number, along with the adverse information being reported.

7.6.2 The Security Office must be notified of all terminations/resignations within five days of occurrence. The Contractor shall return any expired DHS issued identification cards and building passes, or those of terminated employees to the COTR. If an identification card or building pass is not available to be returned, a report must be submitted to the COTR, referencing the pass or card number, name of individual to whom issued, the last known location and disposition of the pass or card.

7.7 Security Management

7.7.1 The Contractor shall appoint a senior official to act as the Corporate Security Officer. The individual shall interface with the Security Office through the COTR on all security matters, to include physical, personnel and protection of all Government information and data accessed by the Contractor.

7.7.2 The COTR and the Security Office shall have the right to inspect the procedures, methods, and facilities utilized by the Contractor in complying with the security requirements under this contract. Should the COTR determine that the Contractor is not complying with the security requirements of this contract; the Contractor will be informed in writing by the Contracting Officer of the proper action to be taken in order to effect compliance with such requirements.

7.7.3 All services provided under this task order must be compliant with DHS 4300B DHS National Security System Policy and the DHS 4300B National Security System Handbook.

7.8 Information Technology Security Clearance

7.8.1 When sensitive government information is processed on DHS telecommunications and automated information systems, the Contractor agrees to provide for the administrative control of sensitive data being processed and to adhere to the procedures governing such data as outlined in DHS IT Security Program Publication DHS Management Directive 4300. Contractor personnel must have favorably adjudicated background investigations commensurate with the defined sensitivity level.

7.8.2 Contractors who fail to comply with DHS security policy are subject to having their access to DHS IT systems and facilities terminated, whether or not the failure results in criminal prosecution. Any person who improperly discloses sensitive information is subject to criminal and civil penalties and sanctions under a variety of laws (e.g., Privacy Act).

7.9 Information Technology Security Training and Oversight

7.9.1 All Contractor employees using DHS automated systems or processing DHS sensitive data will be required to receive Security Awareness Training. This training will be provided by the appropriate component agency of DHS.

7.9.2 Contractors, who are involved with management, use, or operation of any IT systems that handle sensitive information within or under the supervision of DHS, shall receive periodic training at least annually in security awareness and accepted security practices and systems rules of behavior.

7.9.3 All personnel who access DHS information systems will be continually evaluated while performing these duties. Supervisors should be aware of any unusual or inappropriate behavior by personnel accessing systems. Any unauthorized access, sharing of passwords or other questionable security procedures should be reported to the local Security Office or Information System Security Officer (ISSO).

7.10 Non-Disclosure of Protected Critical Infrastructure Information

7.10.1 The parties agree to implement an interim rule promulgating new regulations at Title 6 Code of Federal Regulations Section 29.8 (c) to govern procedures for handling critical infrastructure information. The regulations detailed in the interim rule, which was effective upon publication pursuant to Section 808 of the Congressional Review Act, were promulgated pursuant to Title II, Section 214 of the Homeland Security Act of 2002, known as the Critical Infrastructure Information Act of 2002 (CII Act).

7.10.2 The Contractor shall comply with all requirements of the Protected CII (PCII) Program set out in the CII Act, in the implementing regulations published in the Interim Rule, and in the PCII Procedures Manual as they may be amended from time to time, and shall safeguard Protected CII in accordance with the procedures contained therein.

7.10.3 The Contractor shall ensure that each of its employees, consultants and subcontractors who work on the PCII Program have executed Non-Disclosure Agreements (NDAs) in a form prescribed by the PCII Program Manager. The Contractor shall ensure that each of its employees, consultants and subcontractors has executed a NDA and agrees that none of its employees, consultants or subcontractors will be given access to Protected CII without having previously executed a NDA.

8. PERIOD OF PERFORMANCE

8.1 Base period: 365 calendar days

8.2 Option Period 1: 365 calendar days after base period

9. KEY PERSONNEL

9.1 Key Personnel The (1) HSIN Project Manager, (2) HSIN Technical Lead, (3) Scrum Master shall be designated as Key Personnel.

9.1.1 The HSIN Project Manager shall perform the duties enumerated in the

SOW. The minimum qualifications are:

9.1.1.1 Four (4) to six (6) years of specific experience in managing large, complex projects in a task order/contract environment; experience performing the day-to-day management of overall contract/task order support operations involving multiple projects and groups of personnel;

experience organizing, directing and coordinating the planning and production of contract/task order support activities; excellent written and oral communication skills; experience managing the client interface at the senior levels of the client organization. Has the ability to establish and alter, as necessary, technical approach to directly affect task order/contract support activities. Knowledge of the DHS SELC and PMI certification (or demonstrated understanding and experience with the

PMBOK).

9.1.1.2 A Bachelor’s degree from an accredited institution of higher learning and a Secret security clearance with eligibility for access to Sensitive Compartmented Information (SCI).

9.1.2 The HSIN Technical Lead shall provide identification/fixing of problems within existing systems, design/implementation of new systems and enhancement of existing systems. Participate in analysis, design and new construction of next generation IT systems. Be responsible for understanding the needs of the customers and the realities of commercially available IT products, and creating requirements that will allow implementation by the architecture and engineering team and COTS products. The minimum qualifications are:

9.1.2.1 Four (4) to six (6) years of specific experience as a systems engineer on one or more IT portal platform development efforts is preferred, must have technical background with a focus on IT systems, must possess experience of system engineering in one or more areas including telecommunications concepts, computer languages, operating systems, database/DBMS and middleware and have experience managing other team members. Must have experience with Microsoft SharePoint implementation.

9.1.2.2 A four year college degree from an accredited institution of higher

Sensitive Compartmented Information (SCI).

9.1.3 The Scrum Master shall perform the duties enumerated in the SOW. The minimum qualifications are:

9.1.3.1 Four (4) to six (6) years of specific experience in managing large, complex agile development projects in a task order/contract environment;

experience performing the day-to-day scrum management duties;

experience organizing, directing and coordinating the planning and production of user story from the Program backlog; excellent written and oral communication skills; experience managing the client interface at the senior levels of the client organization. Knowledge of the DHS SELC and PMI certification (or demonstrated understanding and experience with the PMBok).

9.1.3.2 A Bachelor’s degree from an accredited institution of higher

Sensitive Compartmented Information (SCI).

9.1.4 Substitution of Key Personnel - The Contractor shall notify the CO and

COTR prior to making any changes in Key Personnel. All proposed substitutes shall have qualifications equal to or better than the qualifications of the person to be replaced. The CO and COTR must be notified in writing of any proposed substitutions at least fifteen (15) calendar days in advance of the proposed substitution. The notification shall include: an explanation of the circumstances necessitating the substitution; and a resume for the proposed substitute.

The CO will evaluate substitutions and notify the Contractor of their approval or disapproval in writing.

9.2 Removal of Contractor Employees

The Contracting Officer, through COTR recommendations, may require dismissal from work of those Contractor employees which he/she deems incompetent, careless, insubordinate, unsuitable or otherwise objectionable, or whose continued employment he/she deems contrary to the public interest or inconsistent with the best interest of national security. The Contractor must fill out, and cause each of its employees on the contract work to fill out, for submission to the Government, such forms as may be necessary for security or other reasons.

10. WORKING HOURS AND HOLIDAYS

Normal working hours are between 8:00 a.m. – 5:00 p.m. Monday through Friday, unless otherwise required in support for an emergent task.

11. OTHER CONSIDERATIONS

12.1 All data, regardless of media, is owned solely by the Government; any use without government/owner permission is prohibited

11.2 The successful Contractor is precluded from bidding on any development and/or HSIN integration requirements proposed for quotation or proposals

11.3 All solutions and services shall meet DHS Enterprise Architecture policies, standards, and procedures. Specifically, the contractor shall comply with the following Homeland Security Enterprise Architecture (HLS EA) requirements:

• All developed solutions and requirements shall be compliant with the

HLS EA.

• All IT hardware and/or software shall be compliant with the HLS EA Technical Reference Model (TRM) Standards and Products Profile.

• Description information for all data assets, information exchanges and data standards, whether adopted or developed, shall be submitted to the Enterprise Data Management Office (EDMO) for review and insertion into the DHS Data Reference Model and Enterprise Architecture Information Repository.

• In compliance with OMB mandates, all network hardware shall be IPv6 compatible without modification, upgrade, or replacement. ”

12. APPLICABLE DOCUMENTS

Government specifications, standards and other documents including, but not limited to, those listed below shall apply to work performed under this contract as specified in individual task orders. Task orders will also specify date and revision to be used and any tailoring requirements.

DHS MD 4200.1: Information Technology Capital Planning and Investment Control Portfolio Management

Department of Homeland Security Acquisition Directive 102-01, including the Systems Engineering Life Cycle (SELC) in Appendix B, Interim, Version 1.9, dated November 7, 2008

MD 0007.1, OCIO/OCPO IT Acquisition Review Checklist Homeland Security Enterprise Architecture (HLS EA) HLS EA Technical Reference Model (TRM) Standards and Products Profile DHS MD 4300.1: Information Technology Systems Security DHS IT Strategic Plan Federal Enterprise Architecture National Information Exchange Model (NIEM) Clinger Cohen Act of 1996 Government Performance and Results Act of 1993 Paperwork Reduction Act of 1995 Computer Security Act of 1987 Government Information Security Reform Act of 2000 Federal Information Security Management Act of 2002 Privacy Act of 1974 OMB Circular A-130 Appendix III OMB Circular A-123 OMB Circular A-11 Section 508 of the Rehabilitation Act of 1973 (amended) Executive Order 13011, Federal Information Technology, July 1996

President’s Management Agenda