GARFIT2 SOW FY25 .pdf

DEPARTMENT OF COMMERCE (DOC) NATIONAL OCEANIC ATMOSPHERIC

ADMINISTRATION (NOAA) NATIONAL MARINE FISHERIES SERVICE (NMFS) GREATER

ATLANTIC REGIONAL FISHERIES OFFICE (GARFO) STATEMENT OF WORK (SOW)

1.0 Introduction

The Greater Atlantic Regional Fisheries Office (GARFO) of the National Marine

Fisheries Service (NMFS) located in Gloucester, Massachusetts, administers the

National Oceanic and Atmospheric Administration’s (NOAA’s) programs in the Northeast

United States to manage living resources for optimum use. It represents the Assistant

Administrator for Fisheries with other Federal, state, and private conservation agencies;

commercial and recreational fishing industries and interests; consumers; other constituents; and the general public for the eastern coastal states of Maine, New

Hampshire, Massachusetts, Rhode Island, Connecticut, New York, New Jersey, Pennsylvania, Delaware, Maryland, Virginia, and North Carolina. GARFO provides the administrative and technical infrastructure to support the information requirements and decision-making processes of Regional Fishery Management Councils. GARFO is responsible for planning, organizing, and implementing programs for fishery management, resource allocations, and habitat and protected species conservation.

GARFO does extensive analysis of impacts associated with fishery management activities; implements programs to maintain robust habitats and stocks of living marine resources; coordinates state/Federal cooperative programs with and among the states, fishery management councils, marine fisheries commissions, and other Federal agencies.

2.0 Scope

GARFO’s Technology and Data Management (TDM) division is responsible for providing technical support for approximately 250 internal and many external customers (fisheries management councils, states, other fishery management groups, and commercial fishing industry users). TDM requires Information Technology (IT) Support Services to meet its mission. The services will be provided to GARFO, including all of its sites on the Eastern

Seaboard, from Maine to North Carolina and external customers in the fishing management and fishing communities.

The Contractor shall provide services as provided below. The services will also provide support for Northeast Fisheries Information Management Systems and the Fisheries

Dependent Data Initiative Project’s (FDDI) IT requirements.

Through the issuance of Call Orders under the Blanket Purchase Agreement (BPA), the

Contractor shall provide services within the scope of this BPA. A Call Order will be issued on an “as-needed” basis and may be for on-site contractor support or a task/project to be completed remotely by qualified contractor personnel. As such, Call

Orders may be of short duration, such as a single project services or coordinating and providing a training class to GARFO personnel, Fishing Industry & NOAA Affiliates, or be in the nature of ongoing Technical Support services. All things considered, the

Contractor shall be prepared to recruit and staff qualified personnel to perform the services listed in sections 5.1 through 5.11 of this SOW. In the event that a task or project call order is made to be completed offsite, the contractor shall ensure the staff they use to complete it have a NOAA CAC and compliant PC and is responsible for providing them.

3.0 Performance Requirements

3.3 Software Developer - 5640 hours / Software Engineer - 3760 hours

The contractor personnel shall work with software development teams, help desk team, and other groups at GARFO, (science centers, fisheries management councils, states, other fishery management groups, and the commercial fishing industry) to support fisheries management in GARFO with software, troubleshooting and resolving software or database problems, in an efficient and timely manner. Work with these same groups to design, develop, test, deploy, maintain, document, and improve fisheries management software, using agile deployment methodology. Work with internal and external customers to the extent possible, using innovative and new technologies to accomplish work, within industry best practice standards and GARFO limitations. Be responsive to system problems identified in the field by end-users utilizing the software. Coordinate testing of software systems with the end-user and other project team members. Support the end-user during system deployment and research and resolve problems with the system after go-live. Attend meetings with the project management team and end user as necessary. The task includes the following:

3.3.1 Work on development teams to assist in design, development, testing, deployment, maintenance, and documentation of an extensive library of software tools used for fisheries management at GARFO, using a variety of web front end, mobile application and Oracle back end technologies (primarily PL/SQL). These tools include systems that support the region’s various fishery management plans, including but not limited to allocation management, permit issuance and tracking, sector and IFQ (individual fishing quota) management, vessel trip reporting (both electronic and paper), dealer reporting, protected resource data management, an extensive variety of derived data products, and many others.

3.3.2 Provide system documentation for these systems, sufficient for potential use by other developers in troubleshooting or maintaining the documented software.

Technical Environment:

Oracle Enterprise Database 19C and above, both on-premise and cloud-based

Oracle Cloud Control, SQL Developer and PL/SQL Developer, Oracle APEX, Oracle Forms, Oracle Weblogic Server 12C, PHP version 8 and above, PHP

Storm IDE, Python, BASH Shell, Apache HTTP Server, JIRA, Javascript, JQuery, AJAX, HTML5, USWDS, SOA, React version 18 and above, Git

This technical environment is not inclusive of all required programming language skills. Additional programming skills will be determined on an as-needed basis, dependent on specific projects.

3.4 Programmer Analyst - 5640 hours The Contractor support personnel shall provide support as follows:

3.4.1 The Contractor personnel shall research, plan, analyze, model, design, develop, test, and deploy software to meet GARFO business requirements, using analytical, technical, and interpersonal skills. The software will support fisheries management at GARFO.

3.4.2 Support and optimize IT systems using SQL, PL/SQL, PHP, Service

Oriented Architecture (REST) or other necessary tools and languages. Analytical

Reporting using Oracle R, or various other analytical tools deemed necessary.

The programmer analyst position at GARFO may have significant overlap with the software developers, and use many of the same tools, but will likely be more focused on back end software development with emphasis on database development tools.

The technical environment is the same as in section 3.3

3.5 (FFP) Help Desk Specialist: - 3760 hours

The TDM help desk staff will provide IT hardware and software support to GARFO staff, several Fisheries building tenants (Inspection, Highly Migratory Species, General

Counsel, Finance), the fishing industry and to a lesser extent, fisheries management councils, states, other fishery management groups. The help desk staff are computer professionals who provide the expertise required to implement and maintain a computing environment designed to meet the needs of the users and to comply with NOAA/NMFS

IT architecture.

The TDM help desk staff will also support the fishing industry with IT issues relating to

GARFO mobile application access. This will enable GARFO staff and the fishing community to continue their vital work and not spend excessive amounts of time on computer issues. The need for Fishing Industry IT support is growing and the staff may need to learn how new apps work in order to continue to support this community.

The task includes the following:

3.5.1 Shall provide IT software and hardware setup and support to all GARFO staff located locally and remotely in an efficient, courteous and timely manner.

3.5.2 Shall provide database connection support to NOAA Affiliates (Northeast

Science Center, New England and Mid Atlantic Council and Mid-Atlantic and

Northeast State Marine Fisheries Staff).

3.5.3 Shall provide web applications support to the GARFO fishing community.

3.5.4 Shall provide multimedia support to all GARFO staff.

3.5.5 Contract staff may be required to act as a backup for mail admin and google sites admin and backup duties. Installation of SQL Developer and some knowledge of setting up data connections within SQL dev. Changing Oracle passwords.

3.5.6 Shall create clear and concise documentation for use by other help desk staff and instructions for customers. This may include creating video tutorials and creating and running training labs for staff.

3.5.7 Shall accurately record all equipment transactions on a hand receipt and any other means of tracking inventory.

3.5.8 Staff may be required to visit field offices and drive a government vehicle.

3.5.9 Shall be required to pack outgoing IT equipment and deliver it to the mail center. Shall pick up received IT equipment from mail area and will unpack and make property custodian aware of all equipment going to and from GARFO and any paperwork arriving with equipment. Shall make sure hand receipts and property passes are filled out for all users taking equipment out of the building or sending equipment to GARFO. Shall update listings of any equipment going to and from GARFO.

Technical Environment:

Windows 10/11 Windows Active Directory JIRA Service Management JIRA

Cisco Anyconnect Trellix antivirus and encryption, EPolicy Orchestrator (EPO)

BeyondTrust remote support tool Dell laptops and desktops HP, Canon and

Xerox printers Google Voice Google Apps Google Meets Adobe Professional

Microsoft Office Suite Webex and other webinar platforms. Multimedia equipment (projectors, microphones, recording equipment). Macbook Pro and iPad Camtasia and Snagit. Oracle SQL Developer, R and RStudio.

3.6 DB Specialist - 3760 hours

GARFO manages multiple data sets consisting of Fisheries Dependent Data (FDD) collected pursuant to federal fisheries regulations. These are stored in an Oracle DBMS.

Multiple projects are underway to support the modernization and management of this data. These involve data architecture, the implementation of Oracle DBMS in Amazon

Web Services (AWS), data migration from legacy systems, and PL/SQL development in support of these efforts. Scope Data design, architecture, analysis, and PL/SQL development working within Oracle Databases located at NMFS facilities and in AWS.

Analyze legacy NOAA Fisheries databases. Create new architectures for these, with the goal of modernizing them and consolidating them where possible. Designing IT architecture and database systems for NOAA on an enterprise level. Define system and application architecture and provide vision, problem anticipation, and problem solving to

NOAA Fisheries. Deliverables Completed Oracle DDL and PL/SQL compiled and implemented in NMFS Oracle DBMS systems.

3.7 Software Documentation Specialist - 1880 hours

4.0 Physical Security

In accordance with Commerce Acquisition Regulation (CAR) 1352.237-71, Security

Processing Requirements - Low Risk Contracts, the Contractor shall be responsible for safeguarding all Government equipment, information and property provided for

Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured. If a continuation of service for the same contractor and staff will happen under a new contract, the equipment can simply be verified by a property custodian at the end of the existing contract. The office location/work of this BPA and associated Calls are generally within a secure area. Those Contractor staff assigned laptops must use proper discretion and must safeguard the property. The Contractor shall be responsible for coordinating the process. The contractor shall be responsible for safeguarding all Government property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured. If a continuation of service for the same contractor and staff will happen under a new contract, the equipment can simply be verified by a property custodian at the end of the existing contract.

4.1 Lock Combinations. The contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons.

The contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the contractor’s Quality

Control Plan.

4.2 Key Control. The contractor shall establish and implement methods of making sure all keys/key cards issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the contractor by the

Government shall be duplicated. The contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Task Manager (TM).

a. In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon direction of the TM, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the

Government and the total cost deducted from the monthly payment due the contractor.

b. The contractor shall prohibit the use of Government issued keys/key cards by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the TM.

5.0 OVERTIME, TRAVEL, AND TRAINING

Travel

Domestic travel may be required as follows: work-related workshops, conferences, and meetings; tour fishing vessels, ports and work sites; and travel among facilities. Travel will be reimbursed in accordance with the Federal Travel Regulations, and all contractor travel must be approved prior to the actual travel by the COR, using a NMFS-approved form.

Training

Training is authorized for NMFS/NOAA/DOC specific systems and requirements only as required by the task order. Completion certificates must be submitted to the COR within 3 business days of the start of the contract/task order. Examples:

● NOAA IT security

● NOAA Safety training

● Records Management 101

○ Complete the course at https://www.corporateservices.noaa.gov/audit/records_management/Training.ht ml using Internet Explorer or Mozilla Firefox; COR to send completion certificate to records.management@noaa.gov .

● NSC Defensive Driving Course (required for all contractors driving a Government vehicle).

● Department of Homeland Security (DHS) Active Threats to the Workplace Awareness

Seminar.

6.0 PLACE OF PERFORMANCE

The Contractor shall provide services under this contract for NOAA/NMFS/GARFO at 55 Great

Republic Drive, Gloucester, MA 01930. Contractor shall be required to be in the office three days a week for meetings and other interactions unless stated otherwise and will be monitored by GARFO IT Supervisory Staff and must comply with the Department of Commerce

Information Technology Requirement (CITR) 0008: Remote Access.

7.0 OPERATIONAL HOURS

The Contractor is responsible for conducting business hours between core work hours 7:00 am to 5:30 pm, Eastern, Monday through Friday. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this Blanket

Purchase Agreement (BPA) Statement of Work, and awarded Call Orders Performance Work

Statements (PWS). If work is to be performed outside of the core work hours, the activity/support tasking services to be performed will be identified in writing by the Contractor employee through the Contractor for approval. The Contractor shall receive concurrence by the

Contracting Officer Representative (COR) via email communication. The start and end times may vary at times to meet task requirements. In extreme situations (example: A crucial application that the contractor is familiar with is not working) the COR may request that certain contractor personnel be available on evenings or weekends. The Contractor shall provide approval.

Federal offices are closed on the following federal holidays: New Year's Day, Martin Luther

King's Birthday, Washington's Birthday, Memorial Day, Juneteenth, Independence Day, Labor

Day, Columbus Day, Veterans Day, Thanksgiving Day, and Christmas Day. When any such day falls on a Saturday, the preceding Friday is observed as a federal holiday. When any such day falls on a Sunday, the following Monday is observed as a federal holiday. Observance of such days by government personnel shall not be cause for an extension to the delivery schedule or period of performance or adjustment to the price, estimated cost, or fee(s), if any, except as set forth in the call order. Except for designated around the clock or emergency operations, the contractor shall not be able to perform on-site under this call order during federal holidays set forth above. In the event the contractor works during a holiday observed by the contractor other than those above, no form of holiday or other premium compensation will be reimbursed as either a direct or indirect cost.

In the event that the Department of Commerce or NOAA grants administrative leave to its government employees at the site, on-site contractor personnel shall continue to work on-site

(or telework if an agreement is in place).

8.0 PROGRESS MEETINGS

The Contractor shall attend weekly progress meetings requested by the Contracting Officer’s

Representative and/or the Contracting Officer. The Contracting Officer (CO), Contracting

Officer’s Representative (COR), and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings, the

CO will apprise the Contractor of how the Government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. The meetings may be held monthly if there is satisfactory progress and it is mutually determined by the parties that there is no operational basis for requiring weekly meetings. These meetings shall be at no additional cost to the

Government.

9.0 REMOVING CONTRACTORS FOR MISCONDUCT OR SECURITY REASONS

The Government may, at its sole discretion (in coordination with the Contracting Officer where practical), direct the Contractor to remove any Contractor employee from NOAA facilities for misconduct or security reasons. Removal does not relieve the Contractor of the responsibility to continue providing the services required under the contract. The Contracting Officer will provide the Contractor with a written explanation to support any request to remove a Contractor.

10.0 CONFIDENTIALITY AND DATA PRIVACY

This contract may require that services contractors have access to Privacy Information.

Services contractors are responsible for maintaining confidentiality of all subjects and materials and may be required to sign and adhere to a Non-disclosure Agreement (NDA).

11.0 INTELLECTUAL PROPERTY RIGHTS

All deliverables are the property of the U.S. Government. All documents, analyses, files (digital or other), reports, notes and photos are to be used only by Contractor personnel assigned to this Task Order. Documents, files and other data are to be stored exclusively on Government owned equipment and at no point should be saved or archived on personal drives or devices.

Copies are not to be disseminated to anyone outside of the NMFS or to any other contractor personnel without explicit release from the NMFS Project Leader.

12.0 IT SECURITY

The contractor must meet the Department of Commerce IT Security Program Policy and

Minimum Implementation Standards (found at https://connection.commerce.gov/collection/it-security-policy-and-fismareporting-program). The contractor must also adhere to NOAA and

NMFS security policies (found at https://www.csp.noaa.gov/policies/).

13.0 SECTION 508 COMPLIANCE

Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) as amended by P.L.

105-220 under Title IV (Rehabilitation Act Amendments of 1998), all Electronic and Information

Technology (EIT) developed, procured, maintained and/or used under this contract shall be in compliance with the “Electronic and Information Technology Accessibility Standards” set forth by the Architectural and Transportation Barriers Compliance Board (also referred to as the

“Access Board”) in 36 CFR Part 1194. The complete text of Section 508 Standards can be accessed at http://www.access-board.gov/ or at http://www.section508.gov.

14.0 TELEWORKING

When the Place(s) of Performance is/are closed for holidays, weather, or other circumstances, the contractor may not work on site. Performance may be performed from remote or alternate locations away from the primary place of performance. This is known as “Telework.” Telework may be authorized on a non-regularly scheduled (intermittent or episodic) basis for work activities that can be performed effectively outside the primary place of performance and that can be clearly identified, measured or that are project oriented.

The Contractor must have a Telework policy in place that sets forth a clear understanding between the employer and the employee regarding pertinent matters such as, safety, conduct, and liability. It is the sole responsibility of the Contractor to ensure its employees have the resources necessary to provide the required support and services while Teleworking, unless otherwise authorized and appropriate to the Telework instance at hand.

The activity/support tasking services to be performed will be identified in writing by the

Contractor employee through the Contractor to the COR via email communication. The COR shall provide concurrence that there will be no negative impact to the mission if the Contractor worked off-site. The request shall be submitted a minimum of 24 hours in advance prior to the telework period being requested and will be reviewed and approved by the Contractor. The

Contractor will be required to follow-up the day of Telework with a summary of work accomplished, with submission of deliverables as applicable. The summary shall be provided to the Contractor upon arrival at the primary place of performance. In addition, at the conclusion of each Telework instance, the Contractor shall provide a summary to the Contracting Officer.

15.0 SECURITY CLEARANCES

The Contractor is responsible to ensure employees obtain a DOC identification badge after the proper background check in accordance with current DOC security requirements. The employee security clearance shall be in accordance with CAR 1352.237-72 Security Processing

Requirements-Low Risk Contracts. Also a list of employees must be provided to the COR.

Employees must have a badge to identify the company they work for.

16.0 TRAINING

The Contractor shall provide trained, knowledgeable technical personnel capable of performing the SOW in accordance with the requirements stated herein. NOAA will not provide or pay for training, conferences, or seminars for Contractor personnel in order for them to perform their tasks, with the exception of NOAA specific and specialized training not obtainable outside

NOAA. If it is determined during the performance of the contract that training, conferences, or seminars are required for contractor personnel, and this is not specified in a work request, then prior approval is required. The Contractor must submit a written request for approval to the

Contracting Officer at least 30 days prior to the training, conference, or seminar. This written request must refer to the contract number and must include a detailed justification for the training event including how this training is either necessary or beneficial to NOAA. The COR will have five (5) days to approve or disapprove the request in writing.

Contractors must ensure their personnel are aware of and receive training so as to perform their duties utilizing the most up to date technology and resources.

17.0 ALL HANDS The Contractor personnel may attend ‘All-Hands’ events that are for the benefit of all NOAA/NMFS/GARFO personnel and Contractor staff. In accordance with

Acquisition Alert 17-03 Proper Roles of the Services Contractor, Contractors providing onsite support services to NOAA may be permitted to All Hands meetings. There may be instances where it is appropriate for contractors to attend staff meetings and/or off-site meetings where mission-related items are discussed. The COR will notify the contractor if they are allowed to attend these meetings and will specify whether the meetings are billable. Examples of such meetings might include an internal meeting to discuss ways to improve a system/application for which contractors regularly utilize or an “off-site” team meeting focused on a special project for which a contractor is part of the project team