RFP Combined Synopsis 2032H5-20-Q-00146.docx

COMBINED SYNOPSIS/SOLICITATION

This requirement is a sole source requirement being issued in accordance to Federal Acquisition Regulation (FAR) Part 12. This requirement is for an Unemployment Compensation Benefit System for the Department of the Treasury and its bureaus. The sole source authority used is in accordance with the authority under 41 U.S.C. 3304(a)(1), FAR 6.302-1– Only one responsible source; or brand name specification. A determination by the Government not to compete the proposed requirement based on responses received to this notice is solely within the discretion of the Government. All responsible sources may submit a capability statement, which will be considered by the agency.

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested and a written solicitation will not be issued.

Request for Quotes (RFQ) 2032H5-20-Q-00146 This RFQ is for NAICS code: 541612 This requirement includes a base period and four option years. The base year period of performance is from date of award to September 30, 2021. Please refer to the attached documents for a detailed description of the requirement, pricing information, and applicable clauses. The offeror must include a completed copy of Section I, Pricing, provision at 52.212-3, Offeror Representations and Certifications -- Commercial Items, and a copy of the required subscriptions VPAT to determine full compliance with the Section 508 applicable standards and provisions. If the offeror’s Representations and Certifications are registered in the System for Award Management (SAM) system, it must be indicated in the offer. In addition, the included Department of Treasury Representation and Certifications must be completed as well. Quotes received will be reviewed for technical acceptability in accordance with the SOW and overall price reasonableness. The Government may determine that an offer is unacceptable if the price is not able to be determined fair and reasonable.

Proposals in response to this solicitation are due by All other information regarding submission requirements and applicable clauses or provisions are contained in the attached document, title “2032H5-20-Q-00146”.

Date, time and place offer is due: September 16,2020 The offer is due no later than 12:00 pm Submit offer to the following e-mail address by the offer due date and time: Tonya.H.Yeldell@irs.gov

.SECTION I: PRICING

The Contractor shall provide pricing for the Employee Benefit Compensation System in the attached pricing workbook.

Date of award through 9/30/2021 Option Year 1 10/01/2021 through 9/30/202 Option Year 2 10/01/2022 through 9/30/2023 Option Year 3 10/01/2023 through 9/30/2024

Option Year 4 10/01/2024 through 9/30/2025

SECTION II: STATEMENT OF WORK (SOW)

U.S. Department of the Treasury Unemployment Compensation for Federal Employees (UCFE)

RFQ 2032H5-20-Q-00146

1. GENERAL DESCRIPTION

The United States Department of the Treasury Enterprise Business Solutions (EBS) intends to award a single award Enterprise-wide Blanket Purchase Agreement (BPA) vehicle to provide full service Unemployment Claims review, defense, mitigation, and processing at a state by state level for Treasury and its stakeholder Bureaus and Offices.

2. BACKGROUND

Since 1955, Government civilian employees have had unemployment insurance protection under US Code Title 5, Chapter 85. The Omnibus Reconciliation Act of 1980 (P.L. 96-499, December 5, 1980) amended the Unemployment Compensation for Federal Employees (UCFE) law by establishing the requirement for each Government Agency to contribute to State unemployment benefits for former Government employees, effective January 1, 1981. 20 CFR, Part 609 sets forth the Secretary of the Department of Labor (DOL) regulations to implement the UCFE program.

The DOL is responsible for 1) advising State and Government agencies of their responsibilities under the law and 2) developing administrative procedures and forms for State and Government agency use. States pay Unemployment Compensation (UC) to former Government employees in the same amount and under the same laws, terms and conditions that apply to unemployed claimants from the private sector.

Benefits are provided to unemployed Federal civilian workers in the same amount, on the same terms, and subject to the same conditions as the compensation which would be payable under the UC law of the State if their Federal service and Federal wages had been included as employment and wages under that State law. All State laws require that an individual have qualifying earnings during a past period specified by the law; file a claim and report regularly as directed; and be able and available for work.

State UC laws and policies are not uniform and vary significantly with regards to eligibility requirements, payment amounts and period of eligibility. This makes it difficult for Government agency personnel who are not familiar with detailed State requirements: to track unemployment benefit payments; ensure payments have been properly applied; and, verify, review and appeal claims within prescribed time limits (Enclosure 1). Therefore, a contractor is required to support administrative functions of Government agency Civilian Personnel Offices (CPO) and Human Resource Offices (HRO) UCFE requirements in responding to State Employment Security Agency requests for employee data.

3. OBJECTIVE

· To make available to the U.S. Department of the Treasury and other designated Government entities serviced by the National Finance Center (NFC) the most effective and efficient system of handling UC claims while ensuring that Treasury and its stakeholder Bureaus and Offices meet the Federal Employee Unemployment Compensation Laws as provided by the Department of Labor individual states

· To minimize cost and streamline the UC claims process

· To provide government wide metrics on UC claims

· To improve overall management of the Government agencies UC process

4. SCOPE

A single contractor will be retained to fulfill the participating agencies responsibility for UC management. The contractor shall be able to provide various administrative services utilizing the detailed information provided for unemployment purposes indicated below to include storing of payroll/separation data. The contractor shall perform all administrative functions in managing UC claims and have a mastery of UC statutes and regulations in all fifty states, US territories and protectorates and the District of Columbia. However, Government officials will retain responsibility for reviewing all claims that the contractor deems protestable and determine which claims will be challenged. Each Bureau and Office using this contract will provide confirmation to Treasury EBS of their intent to continue use of the services provided by the contractor on an annual basis.

At present, there are 11 Treasury Bureaus and Offices serviced by the NFC with approximately 95,000 employees that could be serviced.

The contractor shall make available the following services through this IDIQ:

Verification (E/SV)

The above line items shall include the following services:

· Separation document processing (Includes transfers, resignations, retirements, terminations, etc.)

· Employment Verification

· Lender Verification

· Claims Processing

· Assist Agencies with Protested/Disputed Claims

· Perform Appeals Administration

· Provide State Charge Detail Processing

· Reconciliation of State benefit payments including DOL reconciliation

· Conduct Training Workshops (Onsite or Virtual)

· Provide Social Services Verification (SNAP, ACA, WIC, etc.)

· Provide Annual and Quarterly Management Reports

· Participate in annual Contract Review

5. SPECIFIC REQUIREMENTS

A. STORING OF PAYROLL/SEPARATION DATA

· Maintain a secure electronic interface for receipt, input and confirmation of the payroll/ separation data transmitted from the USDA National Finance Center (NFC) and by various payroll and personnel locations including the capacity for expansion of the standard pay plan fields when additional payroll/ separation data is required.

· Securely maintain the payroll/separation data that will be submitted from various payroll and personnel locations, and will be transmitted in multiple formats.

· Provide for receipt and input of the payroll/separation data in the format submitted by the Government agencies. This includes the incorporation of the required Government location identifiers -Agency Identification Code – (AIC) into the contractor's system. These location identifiers range from 2 to 15 characters. (www.gsa.gov/graphics/pbs/eRETA_Agency_Bureau_Codes.xls)

· Provide for receipt, input and storage of expanded comments/ remarks for certain Agencies when additional separation information is available.

· Have the ability to create/modify a database that does not require a Social Security Number (SSN) to access (e.g., name, airport, etc.).

· Provide a feature to attach documents to each individual case file as designated by AIC identifier.

· Provide a secure data storage feature that is capable of receiving up to two years of historical payroll/separation data and storing and maintaining a historical database of all separation data collected. See Section 16.0 - Controlled Unclassified Information Data Privacy and Protection.

Notes:

· Agencies will provide up to two years of historical payroll/separation data at contract initiation

· Agencies will provide pay schedules to Contractor at beginning of each Fiscal Year and as required for any mid-year modifications to their pay schedules

· Treasury will provide payroll/separation information to the Contractor on a bi-weekly basis concurrent with scheduled agency payroll

B. CLAIMS PROCESSING

· The contractor shall be designated as the addressee of record for the receipt of Request for Wage and Separation Information – UCFE (Form ES·931) and other related inquiries as appropriate.

Note: ES-931 forms must be returned to the state UC office no later than the 12th calendar day from the “date of request” or the state is authorized by DOL regulation to pay benefits to the ex- federal civilian employee based on their affidavit.

· Using the payroll data the contractor must:

· Determine whether the claimant is a former employee of the respective Government agency.

Identify the sub-unit within the agency, which employed the claimant at the time of separation.

· Note: Agencies shall provide current and updated sub-unit listings throughout the period of performance.

· Contractor must Complete claims forms and return them to the State agency within four days but no later than the last calendar day authorized by the state “date of request.”

· Contractor must review employee separation documents to ensure that needed employment information is provided.

· Contractor must review claimants' circumstances of separation, availability for work, and allocation or severance or other special payments.

· Contractor will review all claims and refer questionable State determinations to the appropriate Government agency officials.

· Contractor must be able to interface with the Federal Interstate Connection (ICON) System to electronically receive inquiries from the various state unemployment offices and respond electronically. The contractor must have the hardware / software necessary and agrees to work with the ICON administrator regarding procedural matters.

· The Contractor shall have the ability to coordinate all procedural matters with the ICON administrator.

· When processing a claim, the Contractor shall ensure that the employee’s Form SF-50 provides a decision or resignation cause, and (if it includes a decision), attach:

· A copy of all witnesses' statements supporting the decision.

· 2.2.7.2 Guidance on conduct or performance.

· 2.2.7.3 Any other documents that supported the action.

· Upon receipt of a claim or appeal, the Contractor shall within 24 hours contact the appropriate agency point-of- contact (POC) to convey the information contained therein.

· Contractor shall ensure that the notice of a claim or appeal has been received by the appropriate agency POC not later than ten business days before any hearing or appeal is scheduled.

· Contractor shall establish and maintain a methodology for electronic tracking of all claims-related correspondence to ensure that timely responses are made to all claims or appeals.

· Contractor shall scan documents received in hard copy and send them to agency POCs via email. Data containing Personally Identifiable Information (PII) must be encrypted prior to transmission. Passwords for opening encrypted documents may be passed telephonically or via separate email. (Faxing of these documents is not permissible.)

· Contractor shall verify that documents sent to the respective agency are legible.

· Contractor shall provide and maintain the necessary hardware/software required for processing unemployment claims in accordance with the requirements of this SOW.

· Contractor shall audit its incoming correspondence – both written and electronic – and the means of delivery to ensure that it is receiving all notices of claims and appeals in a timely manner, and if necessary take the appropriate steps to resolve any problems with such delivery.

· Contractor shall notify the appropriate agency POCs for the case in writing (includes email) within five days of the State’s Unemployment Compensation Case determination in order to send out all decision notices.

· Contractor shall update the agency POCs in writing for the case and within five days of the State’s Unemployment Compensation Case decision Contractor shall provide the following:

· Employee Name.

· Social Security number (SSN).

· Government location identifiers (Agency Identification Code – AIC).

Note – This may require additional detailed information (e.g., location, airport [TSA], etc.).

· Issue being decided.

· State or Territory decision as either “Qualified” or “Not Qualified.”

· Contractor shall ensure that each notice of a claim or appeal is given to each agency POC to ensure the message is conveyed to the primary or alternate POC.

· Agency specific deliverables will be provided as addendums to this agreement.

· Contractor may be required to provide a secured interface capability with agencies for needed employment and wage information on a pay period or quarterly basis.

· Contractor shall be responsible for Benefits Accuracy Measurement (BAM) and complete any necessary research and documentation and return to the responsible Bureau/Office.

· Contractor shall have the ability to utilize a file sent by Treasury to map Employee ID to SSN that can be used for displaying data for specific claimants

C. APPEALS ADMINISTRATION/CONSULTATION/REPRESENTATION

· Government agency officials will determine whether to appeal or accept State/ Territory determinations within 72 hours of receipt of the determination of claim. Contractor must ensure that the Federal official or Agency POC having first-hand knowledge of the situation/claimant must attend any hearing to give testimony and present evidence. Otherwise, any testimony given would be considered hearsay, if objected to by the claimant. In support of the Federal official, the Contractor shall:

· Represent the Government agency and attend all hearings to provide responses to procedural questions and issues unless directed otherwise by the agency.

· Ensure that all claim documentation is complete, accurate and complies with the specific states' guidelines and laws when filing an appeals case.

· Ensure that all appeals and any supporting documents are filed prior to the filing deadline.

· Provide quality assurance checks on all appeals and claim filings to ensure the filings are complete and any additional Government agency data is promptly provided.

· When an appeal is filed, the Contractor will obtain the appropriate documentation and provide the necessary review, witness preparation and consultation throughout the appeal process as set-forth by the respective State laws. Appeals/Hearings deadlines are provided in Attachment (1).

D. RECONCILIATION OF STATE BENEFITS PAID DATA TO DOL BILLINGS

· The contractor shall reconcile State benefit paid data with the amounts DOL bills to participating agencies. This includes follow up with the State unemployment offices for any missing benefit paid data or benefit paid in error.

· Reconciliation shall occur within 30 days following receipt of each state unemployment benefit charge statement.

· Contractor will conduct audits of all UC payments to claimants to evaluate the validity of payments and determine the possibility of fraudulent activity.

E. TRAINING

· The Contractor shall meet with Government agency CPO or HRO personnel at locations designated by the agencies to train claims processors and managers on procedures for day-to-day UC management. The Contractor shall conduct workshops geared to the responsibilities of Government supervisory personnel and provide follow-up sessions on an “as needed” basis at no additional cost (except for travel) in the areas of:

· Hearings and Appeals Training.

· Procedures for day-to-day Unemployment Compensation management.

· Cost of unemployment claims.

· Hiring practices.

· Part-time employment.

· Use of probationary periods.

· Separation terminology.

· Proper documentation.

· UC Law and process of unemployment claims.

· Employee eligibility.

· Additional areas as deemed necessary by contractor.

· The contractor shall provide training to supervisors and human resource staff for new hires at the Government agency headquarters location. Training may include: information on the UC laws of the specific area/region; how to process unemployment claims; how to determine employee eligibility; the hearing and appeal process; reference handouts; test for understanding; and, assess level of competency at a minimum with other topics deemed necessary to the unemployment compensation process.

· Training may be via conference call, video-teleconference, webinar or in- person. The contractor shall provide any necessary training materials.

F. MANAGEMENT REPORTS

· The contractor shall provide participating Government agencies when required with Unemployment Compensation Management Reports (i.e., Executive Summary Report) on a monthly basis, with cumulative quarterly and annual reports, and the most recent four (4) quarters as of the end of the third quarter (June 30). Reports shall be available in either hard or soft copy.

· Using the location identifiers, the contractor will present the required information nested to the 4th organizational level of each participating agency. The contractor must also have the capability to roll up the data and present summary information at the first, second and third organizational levels.

· The management reports must include both summary and detailed information for:

· The number, type, classification, individual percentage and potential cost liability associated with received claims. This report should include protest/appeals with associated win/loss ratios; Hearings scheduled and win/loss ratios; Hearing Run Off factor; Disputed Claims Percentage; and any Compliance related issues with related cost liability; and overall financial impact.

Note: Compliance issues – Ex.: - Failure of Agency witness to appear

- Claims received too late (ES-931), etc.

· All inquiries, claims, and appeals that were initiated during the reporting period, with status of each.

· A summary of the disposition of claims determinations and appeal decisions shown as pending on previous reports. Agency specific reports will be added as addendums to this agreement.

· Charges and credits to each agency during the current quarter resulting from claims filed in a previous report.

· Notification of any Benefit Integrity Violations.

· A detailed report on the reconciliation of the State benefits paid data to the DOL billings. (Separate reports will be provided for payments made for each prior quarter.)

· A supplemental report covering charges and credits from the previous quarters.

· Contractor shall reconcile the State benefits paid data with the amounts that the Department of Labor (DOL) bills to the Government agency.

· Contractor shall follow up with the State/Territorial unemployment offices for any missing benefit paid data. The Contractor shall notify the Government agency POCs when there is missing benefit paid data and when and how the issue is resolved.

· Contractor shall note that DOL bills Government agencies each quarter. The bill may include supplemental charges from previous quarters.

· The Contractor shall participate in Program Management Review (PMR) meetings to provide status on current activities, review performance metrics, submit problems and make recommendations. The quarterly PMR meetings will be scheduled by Bureaus/Offices and occur via conference call, video-teleconference or in- person.

G. LENDER/VERIFIER/AGENCY SERVICES

· The contractor shall respond to requests for employment and wage information on any individuals employed by a department/agency that may be generated by mortgage, lending or credit institutions (hereinafter referred to as '·Lenders"), verifiers of employment, (hereinafter referred to as "verifiers"), and, family service government agencies (hereinafter referred to as ''Agencies").

· Each Government agency’s payroll department or its agent shall securely transmit employment and income data to the contractor on a regular cycle so the information remains current.

· When an employee applies for credit or other services where proof of employment or income is required, the employee provides consent to the credit grantor to verify that information when signing the application.

· The verifier – who has been carefully screened and credentialed before gaining access to the system – uses the assigned employer code and the employee Social Security Number to look up the record on the database.

· The verifier must provide a valid reason or permissible purpose for requesting the information, as defined by the Fair Credit Reporting Act (FCRA). The verifier must also have the consumer consent before requesting income or salary information.

· With the above conditions met, the verifier can validate employment or income in seconds.

· The Lender / Verifier Service should provide three different levels of information to authorized users based on written access granted by the employee:

· Basic Employment verification including:

· Employee Name.

· Employee SSN.

· Employer Name.

· Initial Hire Date.

· Most recent Hire Date (if applicable).

· Current employment status (active or inactive).

· Total employment time with employer in years or months.

· Position/Title.

· Basic employment verification with salary information including:

· All basic information above.

· Current rate-of-pay and most recent period earnings.

· Basic employment verification, salary information and salary history including:

· All basic information above.

· Rate of pay.

· Year to date gross wages.

· Two previous years’ total gross wages (when available).

Note: If an employee desires, they shall be able to block or unblock access to their wages via online access or a toll-free number.

H. SOCIAL SERVICES VERIFICATION

· Contractor shall be able to provide verification for issuance of benefits related to social programs (e.g., Supplemental Nutrition Assistance Program [SNAP], Temporary Assistance for Needy Families [TANF], WIC, ACA, etc.).

6. DELIVERABLES

All deliverables, work products, software, hard-copy and electronic documents including data and any potential source code including any other products to support this requirement or developed by the Contractor while working on this IDIQ are the sole property of the United States Government. The Contractor shall have no rights of ownership.

All Contractor deliverables or work products shall remain categorized as “Official Use Only.” The release of any portion must be authorized in writing by the Government.

A. DELIVERABLE ACCEPTANCE CRITERIA

Final inspection and acceptance of all work performed, reports and other deliverables will be performed at the Government site. Deliverables are not final until reviewed and approved by the COR or Government Technical Operations Manager.

All Contractor-produced deliverables shall be reviewed using the following criteria:

1. Accuracy Work products shall be accurate in presentation, technical content, and adherence to accepted elements of style.

2. Clarity Work products shall be clear and concise. All diagrams shall be easy to understand and relevant to the supporting narrative.

3. Specifications Validity All work products must satisfy the requirements of the Government as specified herein

4. File Editing All text and diagrammatic files shall be editable by the Government

5. Format - Work products shall be submitted in hard copy (where applicable) and in media as required by the project per COR direction.

6. Timeliness – Work products shall be submitted on or before the due date as mutually agreed upon by the COR and the Contractor On-Site Manager.

7. TASK ORDER MANAGEMENT

The Contractor shall provide monthly status reports to the Task Order Contracting Officer’s Representative (COR) and Government Technical Operations Manager for professional services Task Orders. Within the first 30 days after contract award, the government and the Contractor will design and agree upon a standard reporting format that includes the following information at a minimum:

In addition to progress reporting, the Contractor shall be proactive in informing the designated government Project Managers and Contracting Officer Representatives of any issues, problems and recommendations that should be addressed in order for the overall effective accomplishment of task order goals. Recommendations for actions that need to be taken by Treasury staff, or other contractors, shall be clearly defined and communicated to the responsible party and the government, and have identified dates for completion.

8. PERFORMANCE STANDARDS

Performance standards shall be defined at the individual task order level.

9. DELIVERABLES

All deliverables, work products, software, hard-copy and electronic documents including data and any potential source code including any other products to support this requirement or developed by the Contractor while working on task orders under this IDIQ are the sole property of the United States Government. The Contractor shall have no rights of ownership.

All Contractor deliverables or work products shall remain categorized as “Official Use Only.” The release of any portion must be authorized in writing by the Government.

10. PERSONNEL

The contractor shall ensure that all Contractor support personnel are adequately trained, possess the credentials specified in the appropriate labor categories, and are otherwise fully qualified to provide the high level of support required by each task order prior to being assigned to task orders awarded. All personnel shall complete required security forms and trainings prior to being granted access to Treasury systems. All personnel shall complete annual training requirements.

11. PERSONNEL SECURITY

The clauses listed below apply to the Prime Contractor and any of its subcontractors employed during the course of this contract. The clauses below also apply to tasks, work requests or other identified method of requesting work be performed that flow from this document. No Contractor personnel may perform any work under this Contract until the Government grants specific permission to do so, regardless of existing clearance or investigation.

All personnel must have a favorable Tier 4/High Risk Public Trust investigation prior to beginning work on this task and must maintain it for the life of the contract.

Contractors are required to comply with the Treasury Directive P 15-71, Treasury Security Manual in the handling, protection, and safeguarding of government information in their possession. The TD P 15-71 will be followed as it specifies Treasury-specific personnel, physical, industrial and information security policy, processes and requirements that apply to this contract.

Department of Treasury, otherwise known as the Department, retains the right to request removal of Contractor personnel, regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government. Lack of the ability to obtain or maintain the required investigation level is included in the reasons the Department may remove a contractor employee. The reason for removal shall be documented in writing by the Contracting Officer. Additionally, the Contractor must notify the OSP of all terminations/resignations within 24 hours of occurrence. When and if such removal occurs, the Contractor is responsible for assigning qualified replacement personnel in a timely manner or ensuring that performance of the contract is not adversely affected. The Contractor shall return all Departmentally issued identification cards, building passes, keys, and any other government issued material of those terminated employees to the COR. If government issued material is not available to be returned, a report must be submitted to the COR referencing the number, name of individual to whom it was issued, the last known location, and disposition of the items. Failure to return government materials may result in remedial actions against the contractor. Contractor personnel shall visibly wear Departmentally issued identification badges when working in Government facilities. If any current or prospective employee is found to be ineligible for access to Government facilities or information by the Department, the COR will notify the contractor that the employee shall not continue to work or to be assigned to work under the contract. The Department may require drug screening for probable cause at any time. The contractor must also ensure that, prior to the end of the contract, all Departmental information, systems and equipment is returned to the appropriate Department personnel. All contractors must be vetted and approved by OSP prior to beginning work on any portion of this contract.

Any employee assigned to support the Department shall comply with Personal Identity Verification One and Two (PIV-1, PIV-2) requirements as described in Homeland Security Presidential Directive 12 (HSPD-12), “Policy for a Common Identification Standard for Federal Employees and Contractors,” and “Federal Information Processing Standard 201, Personal Identity Verification Standards for Federal Employees and Contractors,” dated August 2013. T4/High Risk contract employees must be a U.S. Citizen. Contractor personnel will have access to Department facilities, information and equipment limited to that which is needed to perform contract scope.

The Contractor shall provide the CO the name of all entities to be used as subcontractors for each type of work to be performed prior to performing any work under this contract in accordance with the FAR Subpart 44.2. The Government reserves the right to accept or reject any subcontractors proposed. Contractors should not serve as the escort for their subcontractors or for any other contractor; escorts used should be Departmental Federal employees.

The Contractor is responsible for obtaining the approval of the CO prior to release of any information received or generated under the contract per 48 CFR 252.204-7000. The CO should complete this item as required by internal agency directives to direct the prime contractor to the appropriate office that has public release authority. Prime contractors should serve as focal point for their subcontractors’ public release requests and refer them to the CO. SBU (also known as Controlled Unclassified Information (CUI)) must be protected in accordance with EO 13556, 32 CFR 2002 (full implementation expected to be reached in November 2018), and Treasury Security Manual (TD P 15-71). For Official Use Only must be protected in accordance with the providing Agency’s directives. Data contained within all Department computer systems are governed by Agency Security Regulations as well as the Federal Privacy Act of 1974. Contractor personnel assigned to this project will be held accountable for adherence to these regulations. If the security classification or security requirements are changed by the Government subsequent to the date of this Contract, and if the changes cause an increase or decrease in security costs or otherwise affects any other term or condition of this Contract, any resulting financial burden will be the sole responsibility of the Contractor.

Contractors and their subcontractors must perform all initial, annual, contemporaneous, specialized and termination training required per Department guidance and TD P 15-71 as appropriate for their position. This is in addition to any training their company requires them to have.

Per the TD P 15-71, the Contractor shall report to the COR within 24 hours any adverse information coming to its attention concerning employees working under this contract, to include loss or suspension of favorable adjudication, or security issues involving the scope being completed for the contract. Reports based on rumor or innuendo should not be made. The subsequent termination of an employee does not obviate the requirement of the contractor to submit this report. The report shall include each employee’s name, social security number, and the adverse information. The Contractor shall also report within 24 hours any event the Contractor becomes aware of that would be deemed a potential security incident, violation or any compromise involving Treasury systems, material, or data or systems with Treasury material or data on them. The Contractor shall comply with all Federal laws and regulations regarding computer security, information security and privacy.

While the Contractor’s personnel are at the government facility, the Contractor is responsible for compliance with all laws, rules, and regulations governing conduct with respect to security – not only as they relate to its employees and agents, but also to other personnel who are government employees or agents of the government and to property at the site regardless of ownership. While on government premises and in possession of government property, the Contractor is responsible for such property and any damages or compromise thereto by Contractor’s employees. The Contractor and its employees shall exercise the utmost discretion in regard to all matters relating to their duties and functions, and in the safeguarding of pre-decisional or sensitive information (privacy, etc.) from inadvertent release. At the completion of the contract vehicle, the Contractor shall send a written notice from the authorized principle of the company attesting that all file records pertaining to this contract in possession of the Contractor was destroyed.

The contractor will avoid any improprieties located in FAR Part 3 and 52.203-16 regarding gratuities, kickbacks, conflicts of interest and other ethics issues.

Work on this contract may require personnel to have access to private information covered by the Privacy Act, Title 5 of the U.S. Code, Section 552a (in addition to other types of non-public information). All Contractor personnel shall adhere to the requirements of the Privacy Act as well as any applicable Department or Federal rule/regulation regarding private information or other types of non-public information.

As a condition for access for Government‐Owned Systems and data, all Contractor personnel must pass background investigations in accordance with OMB Circular A‐130 which requires screening of all individuals involved with sensitive applications or data in Federal automated information systems.

Contractor will abide by requirements set forth in the applicable guidance for the protection of unclassified information. If Contractor fails to follow requirements above, this may result in revocation of favorable public trust adjudication for offending employees and potential negative actions against the contract vehicle itself.

Per FAR 52.222-54, the contractor is required to comply with enrollment and verification requirements for all contractors except those previously verified by acceptable means.

The contractor agrees and understands that the latest version (if superseded) of the U.S.C., CFRs, Executive Orders, Treasury policies and all other government issued documents that are referenced above will be followed.

Ref: SA-4_T.190 For contractors operating a Departmental system at a contractor facility, bureaus shall: (1) include specific language in contracts to ensure applicability of Treasury IT security program policies to all personnel (requiring logical access to Departmental systems); (2) ensure compliance with Treasury IT security policies through the conduct of self-assessments; (3) ensure that contracts provide for the performance of unannounced, on-site inspections of contractor facilities to ensure that an adequate level of security is being maintained.

Ref: SA-4_T.192 Bureaus shall ensure that their security requirements, including FIPS 199 system and data sensitivity, are provided to other agency service providers and documented in the formal shared service arrangement (Memorandum of Understanding (MOU), Memorandum of Agreement (MOA), Data Exchange Agreement, or other vehicle), and that the security provide meets the appropriate level.

Ref: SA-4_T.193 Except for systems principally supporting overseas Federal/Treasury personnel and/or activities, Treasury systems shall be located and operated within the U.S.

INFORMATIVE: This includes Treasury contractor systems.

INFORMATIVE: For brevity, "U.S." is used here to refer to the United States, its possessions, and territories. “Non-U.S. Support” is used here to mean use of contractors or other non-Federal service providers located outside the U.S., its possessions, and territories. (This informative also applies to SA-4_T.194,195)

Ref: SA-4_T.194 Bureaus shall ensure that operations and maintenance of systems located in the U.S. are conducted by personnel physically located within the U.S. or its territories.

INFORMATIVE: This prohibits, for example, foreign remote maintenance, systems monitoring, foreign “call service centers,” “help desks,” and the like.

Ref: SA-4_T.195 Bureaus shall ensure (including through contract requirements, when a contract developer is used) that Treasury systems (i.e., beyond commercial products used as components) that will be located within the U.S. must be developed physically within the U.S. by U.S. citizens or those with lawful permanent resident status.

INFORMATIVE: Detailed personnel security requirements, including requirements for U.S. citizenship, waivers, and employee/contractor screening are promulgated by the Office of Security Programs and are not reproduced here.

Ref: SA-4_T.197 When forming agreements with extra-Bureau entities for operation and maintenance of Bureau-owned IT systems, Bureaus shall include in the agreement language addressing responsibility for Risk Management Framework activities and access to SA&A documentation.

Ref: SA-4_T.198 In acquiring information technology, Bureaus shall ensure the use of common security configurations, when applicable, by (a) requiring vendors to configure IT with common security configurations (when available and applicable, e.g., USGCB) prior to delivery or (b) configuring acquired IT to meet bureau-tailored, secure parameters (e.g., USGCB with approved deviations) after delivery but prior to deployment.

INFORMATIVE: In the latter case, Bureaus do not need to require that vendors securely configure IT for delivery.

SA-5 INFORMATION SYSTEM DOCUMENTATION

The organization:

a. Obtains administrator documentation for the information system, system component, or information system service that describes:

1. Secure configuration, installation, and operation of the system, component, or service;

2. Effective use and maintenance of security functions/mechanisms; and

3. Known vulnerabilities regarding configuration and use of administrative (i.e., privileged) functions;

b. Obtains user documentation for the information system, system component, or information system service that describes:

1. User-accessible security functions/mechanisms and how to effectively use those security functions/mechanisms;

2. Methods for user interaction, which enables individuals to use the system, component, or service in a more secure manner; and

3. User responsibilities in maintaining the security of the system, component, or service;

c. Documents attempts to obtain information system, system component, or information system service documentation when such documentation is either unavailable or nonexistent and take action as appropriate in response;

d. Protects documentation as required, in accordance with the risk management strategy; and

e. Distributes documentation to at a minimum, the ISSO (or similar role within the organization)]..

Ref: SA-11_T.196 Custom Software Security. All software custom developed for Treasury shall be scanned with software code vulnerability detection software before the custom software is accepted by Treasury.

Applicable to MODERATE and HIGH systems:

SA-4(1) SYSTEM AND SERVICES ACQUISITION | FUNCTIONAL PROPERTIES OF SECURITY CONTROLS The organization requires the developer of the information system, system component, or information system service to provide a description of the functional properties of the security controls to be employed.

SA-4(2) DESIGN / IMPLEMENTATION INFORMATION FOR SECURITY CONTROLS

The organization requires the developer of the information system, system component, or information system service to provide design and implementation information for the security controls to be employed that includes: [security-relevant external system interfaces; high-level design; low-level design; source code or hardware schematics; system-designed design/implementation information at system-defined level of detail].

SA-4(8) CONTINUOUS MONITORING PLAN

The organization requires the developer of the information system, system component, or information system service to produce a plan for the continuous monitoring of security control effectiveness that contains [at least the minimum requirement as defined in control CA-7].

Note: Guidance: CSP must use the same security standards regardless of where the system component or information system service is acquired.

SA-4(9) FUNCTIONS / PORTS / PROTOCOLS / SERVICES IN USE

The organization requires the developer of the information system, system component, or information system service to identify early in the system development life cycle, the functions, ports, protocols, and services intended for organizational use.

SA-4(10) USE OF APPROVED PIV PRODUCTS

The organization employs only information technology products on the FIPS 201-approved products list for Personal Identity Verification (PIV) capability implemented within organizational information systems.

12. DELIVERY

A. CONTRACT TYPE

The products and services to be provided to the Government under this IDIQ shall be under firm fixed price task orders

B. PERIOD OF PERFORMANCE

13. CONTRACT ADMINISTRATION

The Contracting Officer responsible for administration of this contract is:

Lachon N. Langham., the Contracting Officer, in accordance with FAR Subpart 1.6, is the only individual authorized to enter into, administer, and terminate work under this contract. Notwithstanding any clauses contained elsewhere in this contract, this said authority remains solely with the Contracting Officer. In the event the Contractor makes any changes at the direction of any person other than the Contracting Officer, the change will be considered to have been made without authority and no adjustment will be made in the contract price to cover any increase in cost incurred as a result thereof.

All correspondence related to this IDIQ shall be directed as follows:

Contracting Officer:

Brenda L. Musgrove

OS:A:P:I:C

5000 Ellin Road Lanham, MD 20706

DT1052.201-70 COR Appointment and Authority (APR 2004) The Contracting Officer Representative (COR) for the contract is:

Ryan Yee Department of Treasury Enterprise Business Solutions (EBS) 1750 Pennsylvania Avenue, NW - 10th Floor Washington, DC 20006 Phone: 202-288-0738 Ryan.Yee@treasury.gov

statement;

Contracting Officer Representative (COR) and Alternate (ACOR) The COR has responsibility for receipt and acceptance of the contract-level deliverables and reports and past performance reporting for the contract. The COR supports the CO and PM in the general management of the program.

Alternate Contracting Officer Representative (COR) is: TBD The CO may designate CORs for individual Orders that will be responsible for the day-to-day oversight of the Order. The COR will represent the CO in the administration of technical details within the scope of the order. The COR is also responsible for the final inspection and acceptance of all order deliverables and reports, and such other responsibilities as may be specified in the order. The COR is not otherwise authorized to make any representations or commitments of any kind on behalf of the CO or the Government. The COR does not have authority to alter the Contractor’s obligations or to change the order specifications, price, terms or conditions. If, as a result of technical discussions, it is desirable to modify order obligations or the specification, changes will be issued in writing and signed by the CO.

(A) The designated COR may provide written technical direction to the Contractor concerning the work performed under the contract. Technical direction is limited to direction that fills in details or otherwise completes the general description of the work set forth in the contract. Technical direction includes:

(B) Technical direction must be within the general scope of work stated in the contract.

Technical direction may not be used to:

(C) All technical…