PWS Maximo 2019 - Final_7JAN2020.docx

Performance Work Statement National Institute of Standards & Technology United States Department of Commerce

325 Broadway Boulder, CO 80305

DESCRIPTION

The contractor shall provide the upgrade, subscription and support services (to include training) for the software, Maximo Asset Management, located at the National Institute of Standards and Technology (NIST), Boulder Colorado site. The work is to be performed in accordance with this Performance Work Statement (PWS).

PURPOSE

The purpose of this project is to provide for the upgrade and maintenance, subscription and support services for our production and test environment of the current version Maximo Asset Management v7.6.1.1, which is used for the work order and preventive maintenance program for equipment and requests for service on the NIST Boulder site. The work will consist of software upgrades/maintenance, to include the installation of bug/defect fixes via patches and updates/upgrades in function and technology to maintain the operability and usability of the software product.

· Annual renewal of Maximo Asset Management Support and Subscription

· Support

· Training Summary of the Work Support and Subscription Annual renewal of Maximo Asset Management Support and Subscription shall include, but is not limited to the following:

Contractor shall provide the annual renewal of subscription and support with IBM. The software annual subscription will run from January 1, 2021 to December 31, 2021 with four additional option periods.

The following Passport Advantage Product Numbers are required:

Proof of Entitlement (POE) shall be sent to the COR within 30 days of renewal.

Contractor shall be or work with an authorized IBM Software reseller for the annual renewal of the subscription and support.

Support Support shall include, but is not limited to the following:

Maximo system availability. Contractor shall provide a Telephone Hotline or Internet Email during regular business hours (7:00 am-4:00 pm Monday-Friday MST, excluding Federal Holidays) to allow the COR in reporting errors and in providing first-line support in the use and operation of Maximo. The Maximo system shall be available and operational 95% of the time except for scheduled system maintenance.

If there is an error that results in Maximo being substantially or completely nonfunctional or inoperative: The contractor will make reasonable efforts to correct or provide a work-around solution for errors resulting in Maximo being substantially or completely nonfunctional or inoperative. Response time of 2 hours during normal business hours for voice and electronic problems submissions. Correction or workaround within 2 business days with a final resolution within 15 business days. If IBM support is needed the contractor shall open a trouble ticket on NIST’s behalf.

The contractor shall provide the expertise necessary for the install of fix packs/upgrades. The fix packs/upgrades shall be applied to both the production and test servers. Contractor shall be responsible for performing the proper installation, management, and customization of Maximo. Contractor shall install the latest fix packs/patches at least once per year.

Contractor shall ensure the Maximo applications fix packs/ upgrades are compatible with ancillary software required for OFPM Boulder.

Data migration is an essential part and is the responsibility of the contractor to ensure no data is lost during any upgrades.

The contractor shall prepare a work-up plan, that will be evaluated and accepted prior to the start of an upgrade. The contractor shall submit to the Contracting Officer and the NIST Maximo Administrator by e-mail, the plan in an electronic Word document. The NIST Maximo Administrator shall review the upgrade plan and provide a written response within 10 working days. No work shall start until the plan is reviewed and approved.

The upgrade and maintenance are considered complete when NIST Maximo Administrator has verified that the version of Maximo Asset Management is the most current version available, is operational, and provides a completed work-up documents with any redline changes.

Training Section The contractor shall provide training for two NIST government employees after the completed upgrade. The training shall be equal to or exceed what IBM offers for that version’s fundamental training. The training shall be scheduled with the NIST Maximo Administrator within two weeks of the completed upgrade, and the training shall occur within two months of the completed upgrade.

The contractor shall provide to the NIST Maximo Administrator a training manual on the usage of all the new upgrade aspects and changes. The training manual shall be provided during training and be capable of being reproduced.

General NIST Maximo production and test environment are running on local servers located on the NIST Campus.

NIST current version of Maximo is 7.6.0.5.

Remote access will only be utilized under limited circumstances in order to provide critical support to avoid outages through the explicit use of “GoToMeeting”, and only in the direct observation of the Maximo System Administrator monitoring the actions 100% of the time.

NIST will provide hardware, software requirements for VMs needed to host Maximo production and test environment.

IT Security Requirements Ensure Maximo meets all NIST IT Security requirements. Answer questions or help with technical documents relating to NIST IT Security Reviews. Provide support resolutions for IT Security Scan findings. Meet NIST IT Security requirements 100% of the time.

Hardware and software must be Buy America compliant Hardware and software must be TAA (Trade Agreements Act) compliant FAR Clause 52.225-13 RESTRICTIONS ON CERTAIN FOREIGN PURCHASES (JUN 2008) FAR Clause 52.225-18 PLACE OF MANUFACTURE (AUG 2018) FAR Clause 52.225-25 PROHIBITION ON CONTRACTING WITH ENTITIES ENGAGING IN CERTAIN ACTIVITIES OR TRANSACTIOS RELATING TO IRAN REPRESENTATION AND CERTIFICATION *AUG 2018) FAR Clause 52.225-5 TRADE AGREEMENTS (AUG 2018) FAR Clause 52.225-6 TRADE AGREEMENTS CERTIFICATE (MAY 2014) Contractor personnel requiring access to NIST IT systems must be screened at an appropriate level in accordance with the Department of Commerce IT Security Program Policy. The screening should be appropriate to the highest risk level of the IT systems and information accessed, using, as a minimum, National Agency Check with Inquiries (NACI).

Contractor personnel must complete NIST IT security awareness training or provide certificate of completion of an IT security training prior to accessing NIST information and/or technological resources.

Each contractor personnel must read and sign the NIST IT Access and Use (Rules of Behavior) prior to being granted access to any NIST IT accounts.

The contractor shall properly protect all information used, gathered, or developed as a result of work under the PWS.

NIST documentation is considered proprietary and will not be shared. All documentation created by and used by the contractor for the project will be provided back to NIST at the end of the contract.

In the event that performance of any work under the PWS causes the contractor/subcontractor to gain access to proprietary and/or confidential information, the contractor shall comply with non-disclosure requirements (e.g., non-disclosure agreement).

The contractor shall perform a backup of the system and database prior to any maintenance, upgrades, patching or installations performed on the system. Backups will be maintained on the NIST government systems and will not be removed from the NIST site.

Contractor will be required to follow NIST directives, per NIST Directive S 6102.23, Policy on Personnel Security and Directive S 6102.31, Information Security Training and NIST N Directive 6103.14 Access and Use of Remote Connection to NIST:

· Contractor will abide by the policies and procedures outlined within the Access and Use of remote connections to NIST document.

DELIVERABLE SCHEDULE

End of performance work statement