RFQ 1305M222QNCNA0080.pdf

RFQ IFB RFP

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER PAGE OF

2. CONTRACT NO. 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODEFACILITY

CODE

CODE

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

SEE ADDENDUM

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

29. AWARD OF CONTRACT: REF.

DATED . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

OFFER

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

17a CONTRACTOR/

OFFEROR.

CODE

8 (A)

SIZE STANDARD:

NAICS:

% FOR:SET ASIDE:UNRESTRICTED OR

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

10. THIS ACQUISITION IS

EDWOSB

SMALL BUSINESS PROGRAM

STANDARD FORM 1449 (REV. 2/2012) BACK

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

40. PAID BY

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELPHONE NUMBER OF AUTHORZED GOVERNMENT REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

PARTIAL FINAL

37. CHECK NUMBER

38. S/R ACCOUNT NO. 39. S/R VOUCHER NUMBER

36. PAYMENT

COMPLETE PARTIAL FINAL

SCHEDULE Continued

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Trade-in of Existing CatDV Software Licensing.(See details in Performance Work Statement.)

0001 Credit for existing CatDV Product upgrade for customers WITH support or maintenance ES - Enterprise Serversoftware (no clients included) - or separate CatDV Server software for archive plugin datamovement (S3, Spectra or B2), Oracle/MS SQL Server systems, CatDV Enterprise Client (5-user pack), CatDV Enterprise Worker Node Installation (or Web services API), CatDV Enterprise Client (single license), CatDV Pro Client (Mac) Stand-alone only, and Maintenance and support contract (rolling priority email support) and all CatDV upgrades during this time. Credit estimated to be $16,423.

PR NUMBER: NC-NA2600-22-00679

Period of Performance: 09/01/2022 to 08/31/2023

1.00 EA

CatDV Software Upgrades.(See details in Performance Work Statement.)

0002 Pegasus Server (no clients included), CatDV Pegasus Client (single license) (Quantity 7), CatDV Pegasus Worker Node Installation (or Web Services API license for plug-ins) - includes one process (Quantity 1), CatDV Pegasus Worker Node Additional Process (Quantity 3), CatDV Archive Plug In License for Microsoft Azure. Data mover on the CatDV Server (Quantity 1), Deployment and configuration assistance for CatDV Plugins - where customer already has end point set up and working before work begins (Quantity 1), Project creation template - Kick of creation of a new project which automatically assigns the next available ID, creates a folder structure, creates worker actions to monitor for incoming files and upload to the correct catalog and move to correct storage, plus automatic tagging based on folder structure and project number. This includes deployment (Quantity 1), and Maintenance and support contract (12 months rolling priority email and telephone support) and all CatDV upgrades during this time (Quantity 1).

PR NUMBER: NC-NA2600-22-00679

CatDV Training (See details in Performance Work Statement.)

0003 North Shore CatDV Training Package - Base - 101, 102 a&b, 103 a&b remote sessions for up to 5 users and CatDV Advanced Worker Node Training North Shore CatDV Advanced Worker Node Training.

PR NUMBER: NC-NA2600-22-00679

Quatum Xcellis Workflow Director and Metadata Storage (See details in Performance Work Statement.)

0004 Quantum Xcellis Workflow Director for StorNext 7, Dual Node, Requires StorNext 7 Licensing (Quantity 1), Quantum Xcellis workflow Director for StorNext 7/ Gen2 and Xcellis Workflow Extender for StorNext 7/ Gen2 Fibre Channel Kit, 16Gb, Quad-Port, Low-Profile, Optical, Four Cables, Single HBA requires quantity two for dual node systems) (Quantity 2), Quantum Xcellis Workflow Director for StorNext 7/Gen2 and Xcellis Workflow Extender for StorNext 7/Gen2 NIC Kit, PAGE 3 OF 46 1305M222QNCNA0080

25GbE/10GbE, Dual-Port, Low-Profile, No SFP (requires quantity two for dual node (systems) (Quantity 2), Quantum Xcellis Workflow Director for StorNext 7/ Gen2 and Xcellis Workflow Extender for StorNext 7/Gen2 NIC Kit, 100GbE/40GbE, Dual-Port, Low-Profile, No QSFP (requires quantity two for dual node systems) (Quantity 2), Quantum Xcellis Workflow Director for StorNext 7/Gen2 and Xcellis Workflow Extender for StorNext 7/Gen2 32GB Memory Upgrade Kit (requires quantity two for dual node systems) (Quantity 2), Quantum QXS-424 12G RAID Node, Fibre Channel SFPs, 7.2TB (12x0.6TB) Raw, 6TB (5.46TiB) Usable, HDD, SED (Quantity 1), Quantum StorNext 7 Public and Private Cloud Capacity License, 1 Year Subscription, per TiB, includes Gold (7x24TS) software support (Quantity 300), Quantum StorNext 7 File System Capacity License, 1 Year, per TiB, includes Gold (7x24TS) software support (Quantity 240), Quantum Xcellis Workflow Director for StorNext 7 and Xcellis Workflow Extender for StorNext 7/Gen1/Gen2 1U, per chassis, Non-Returnable Disk Drive; Support Plan, Fee; annual, all zones (Quantity 1), Quantum Xcellis Workflow Director for StorNext 7, Dual Node; Support Plan, Gold (7x24x4 CRU); annual, zone 1 (Quantity 1), Quantum QXS-424 12G RAID Node (Ethernet/Fibre Channel), 7.2TB (12x0.6TB), HDD (SED/ non-SED); Support Plan, Gold (7x24x4 CRU); annual, zone 1 (Quantity 1), and Quantum QXS-324 12G RAID (Ethernet/Fibre Channel), QXS-424 12G RAID (Ethernet/Fibre Channel), or QXS-x24 Expansion, 7.2TB (12x0.6TB), HDD (SED/non-SED), Non-Returnable Drive; Support Plan, Fee; annual, all zones (Quantity 1)

PR NUMBER: NC-NA2600-22-00679

Quantum QXS-412 Storage (See details in Performance Work Statement.)

0005 Quantum QXS-412 12G RAID Node, Fibre Channel SFPs, 144TB (12x12TB) Raw, 120TB (109.14TiB) Usable, HDD, SED (Quantity 1), Quantum QXS-x12 12G Expansion Node, 144TB (12x12TB) Raw, 120TB (109.14TiB) Usable, HDD, SED (Quantity 1), Quantum QXS-x12 12G Expansion Node, 144TB (12x12TB), HDD (SED/non-SED); Support Plan, Gold (7x24x4 CRU); annual, zone 1 (Quantity 1), Quantum QXS-312 12G RAID (Ethernet/Fibre Channel), QXS-412 12G RAID (Ethernet/Fibre Channel), or QXS-x12 Expansion, 144TB (12x12TB), HDD (SED/non-SED), Non-Returnable Drive; Support Plan, Fee; annual, all zones (Quantity 1), Quantum QXS-312 12G RAID (Ethernet/Fibre Channel), QXS-412 12G RAID (Ethernet/ Fibre Channel), or QXS-x12 Expansion, 144TB (12x12TB), HDD (SED/non-SED), Non-Returnable Drive; Support Plan, Fee; annual, all zones (Quantity 1), and Quantum QXS-412 12G RAID Node (Ethernet/ Fibre Channel), 144TB (12x12TB), HDD (SED/non- SED); Support Plan, Gold (7x24x4 CRU); annual, zone 1 (Quantity 1)

PR NUMBER: NC-NA2600-22-00679

StorNext File System and Storage Manager Training

0006 StorNext File System and Storage Manager 2.00 EA

PAGE 4 OF 46 1305M222QNCNA0080

Administration (1-3587 Instructor-Led Training) (Physical Classroom or Virtual Classroom)

Mellanox 1U SN2100 100GbE/10GbE Ethernet Switches

0007 SPECTRUM 100GBE 1U OPEN EBET SWPERP W/

MLNX-OS 16PORT QSFP 28P (Quantity 2), 0.5M

PASSIVE COPPER CABLE ETH CABL 100GBE

100GB/S QSFP28 BLACK 30AWG (Quantity 6), CABLE MODULE ETH 25GBE 100GB/S ADAP TO

25GB/S QSFP28 TO SFP28 EXT TEMP (Quantity 12), TRANSCEIVER 25GBE SFP28 LCLC PERP 850NM

SR UP TO 100M (Quantity 12), RACK INSTALLATION

KIT F/ SN2100RMKT SERIES SHORT DEPTH 1U

SWITCHES (Quantity 1), 1YR SILVER TECH SUP & WARR FOR SVCS SN2100 SERIES SWITCH (Quantity 2), and 10KM OPTICAL TRANSCEIVER 100GBEPERP (Quantity 4)

PR NUMBER: NC-NA2600-22-00679

Professional Services Project Fee (See details in Performance Work Statement.)

0008 Professional Services must include:

CatDV: Remote Upgrades and Configuration, CatDV: Cloud Archive Workflow, CatDV: Bulk Ingest of Communications Historical Content, CatDV:

Administrative Training, End-user Training, and Documentation, Quantum Storage: Preparation, Quantum Storage: Rack and Cable on-site, Quantum Storage: Infrastructure Configuration, and Quantum Storage: Administrative Overview & Documentation.

PR NUMBER: NC-NA2600-22-00679

Service Level Agreement (SLA) - 1 YEAR (See details in Performance Work Statement.)

0009 Annual Service Level Agreement (SLA) - 1 YEAR

PR NUMBER: NC-NA2600-22-00679

0010 Shipping (See details in Performance Work Statement.)

Freight charges

PR NUMBER: NC-NA2600-22-00679

Service and Support on installed Asset Management and Storage Systems (Option year 1) - (See details in Performance Work Statement.)

OPT

0011 Option year 1 - 1. CatDV maintenance and support contract (12 months rolling priority email support) on all CatDV licenses, and all CatDV upgrades during this time;

25% of CatDV software total based on: PS x1 - Pegasus Server software (no clients included), PC1 x7 - CatDV Pegasus Client (single user pack), WW5 x1 CatDV Web Client (5 floating licenses), PWNI x1 CatDV Pegasus Worker Node Installation (or Web Services API license

PAGE 5 OF 46 1305M222QNCNA0080

for plug-ins) includes one process, PWNP x3 CatDV Pegasus Worker Node Additional Process up to 7 can be added per Worker Node Installation, AZ1 x1 - CatDV Archive Plug In License for Microsoft Azure, Data mover on the CatDV Server, PCT x1 - Project creation template.

2. One-year of support on all Quantum Xcellis hardware/ software installed as part of this action.

3. Annual Service Level Agreement (SLA) on the systems installed as part of this action.

Period of Performance: 09/01/2023 to 08/31/2024

Performance Work Statement.)

OPT

0012 Option year 2 - 1. CatDV maintenance and support contract (12 months rolling priority email support) on all CatDV licenses, and all CatDV upgrades during this time; 25% of CatDV software total based on: PS x1 - Pegasus Server software (no clients included), PC1 x7

- CatDV Pegasus Client (single user pack), WW5 x1 CatDV Web Client (5 floating licenses), PWNI x1, CatDV Pegasus Worker Node Installation (or Web Services API license for plug-ins) includes one process, PWNP x3, CatDV Pegasus Worker Node Additional Process up to 7 can be added per Worker Node Installation, AZ1 x1 - CatDV Archive Plug In License for Microsoft Azure, Data mover on the CatDV Server, PCT x1 - Project creation template.

2. One-year of support on all Quantum Xcellis hardware/ software installed as part of this action.

3. Annual Service Level Agreement (SLA) on the systems installed as part of this action.

PR NUMBER: NC-NA2600-22-00679

Period of Performance: 09/01/2024 to 08/31/2025

Performance Work Statement.)

OPT

0013 Option year 3 - 1. CatDV maintenance and support contract (12 months rolling priority email support) on all CatDV licenses, and all CatDV upgrades during this time;

25% of CatDV software total based on: PS x1 - Pegasus Server software (no clients included), PC1 x7 - CatDV Pegasus Client (single user pack), WW5 x1, CatDV Web Client (5 floating licenses), PWNI x1, CatDV Pegasus Worker Node Installation (or Web Services API license for plug-ins) includes one process, PWNP x3, CatDV Pegasus Worker Node Additional Process up to 7 can be added per Worker Node Installation, AZ1 x1 - CatDV Archive Plug In License for Microsoft Azure, Data mover on the CatDV Server, PCT x1 - Project creation template.

2. One-year of support on all Quantum Xcellis hardware/ software installed as part of this action.

PAGE 6 OF 46 1305M222QNCNA0080

3. Annual Service Level Agreement (SLA) on the systems installed as part of this action.

Period of Performance: 09/01/2025 to 08/31/2026

Performance Work Statement.)

OPT

0014 Option year 4 - 1. CatDV maintenance and support contract (12 months rolling priority email support) on all CatDV licenses, and all CatDV upgrades during this time;

25% of CatDV software total based on: PS x1 - Pegasus Server software (no clients included), PC1 x7 - CatDV Pegasus Client (single user pack), WW5 x1, CatDV Web Client (5 floating licenses), PWNI x1, CatDV Pegasus Worker Node Installation (or Web Services API license for plug-ins) includes one process, PWNP x3, CatDV Pegasus Worker Node Additional Process up to 7 can be added per Worker Node Installation, AZ1 x1 - CatDV Archive Plug In License for Microsoft Azure, Data mover on the CatDV Server, PCT x1 - Project creation template.

2. One-year of support on all Quantum Xcellis hardware/ software installed as part of this action.

3. Annual Service Level Agreement (SLA) on the systems installed as part of this action.

PR NUMBER: NC-NA2600-22-00679

Period of Performance: 09/01/2026 to 08/31/2027

PAGE 7 OF 46 1305M222QNCNA0080

Table of Contents

Offeror Instructions

Evaluation Criteria

Performance Work Statement

52.203-11aa CERTIFICATION AND DISCLOSURE REGARDING PAYMENTS TO INFLUENCE CERTAIN FEDERAL TRANSACTIONS

(SEP 2007)

52.204-7aa SYSTEM FOR AWARD MANAGEMENT (OCT 2018)

52.204-13aa SYSTEM FOR AWARD MANAGEMENT MAINTENANCE (OCT 2018)

52.204-16aa COMMERCIAL AND GOVERNMENT ENTITY CODE REPORTING (AUG 2020)

52.204-17aa OWNERSHIP OR CONTROL OF OFFEROR (AUG 2020)

52.204-18aa COMMERCIAL AND GOVERNMENT ENTITY CODE MAINTENANCE (AUG 2020)

52.204-20aa PREDECESSOR OF OFFEROR (AUG 2020)

52.204-23aa PROHIBITION ON CONTRACTING FOR HARDWARE, SOFTWARE, AND SERVICES DEVELOPED OR PROVIDED BY

KASPERSKY LAB AND OTHER COVERED ENTITIES (NOV 2021)

52.204-25aa PROHIBITION ON CONTRACTING FOR CERTAIN TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES

OR EQUIPMENT (NOV 2021)

52.204-26aa COVERED TELECOMMUNICATIONS EQUIPMENT OR SERVICES--REPRESENTATION (OCT 2020)

52.209-10aa PROHIBITION ON CONTRACTING WITH INVERTED DOMESTIC CORPORATIONS (NOV 2015)

52.211-6aa BRAND NAME OR EQUAL (AUG 1999)

52.212-3aa OFFEROR REPRESENTATIONS AND CERTIFICATIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (MAY

2022)

52.212-4aa CONTRACT TERMS AND CONDITIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (NOV 2021)... 30

52.217-5aa EVALUATION OF OPTIONS (JUL 1990)

52.219-33aa NONMANUFACTURER RULE (SEP 2021)

52.222-22aa PREVIOUS CONTRACTS AND COMPLIANCE REPORTS (FEB 1999)

52.222-25aa AFFIRMATIVE ACTION COMPLIANCE (APR 1984)

52.232-39aa UNENFORCEABILITY OF UNAUTHORIZED OBLIGATIONS (JUNE 2013)

52.232-40aa PROVIDING ACCELERATED PAYMENTS TO SMALL BUSINESS SUBCONTRACTORS (NOV 2021)

52.233-3aa PROTEST AFTER AWARD (AUG 1996)

52.233-4aa APPLICABLE LAW FOR BREACH OF CONTRACT CLAIM (OCT 2004)

52.239-1aa PRIVACY OR SECURITY SAFEGUARDS (AUG 1996)

52.247-34aa F.O.B. DESTINATION (NOV 1991)

1352.201-70aa CONTRACTING OFFICER´s AUTHORITY (APR 2010)

1352.209-73aa COMPLIANCE WITH THE LAWS (APR 2010)

1352.209-74aa ORGANIZATIONAL CONFLICT OF INTEREST (APR 2010)

1352.233-71aa GAO AND COURT OF FEDERAL CLAIMS PROTESTS (APR 2010)

1352.237-71aa SECURITY PROCESSING REQUIREMENTS - LOW RISK CONTRACTS (APR 2010)

52.204-24aa REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES OR

EQUIPMENT (NOV 2021)

52.212-5aa CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS--COMMERCIAL

PRODUCTS AND COMMERCIAL SERVICES (MAY 2022)

52.217-8aa OPTION TO EXTEND SERVICES (NOV 1999)

52.217-9aa OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

52.252-1aa SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

52.252-2aa CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

1352.233-70aa AGENCY PROTESTS (APR 2010)

1352.237-75aa KEY PERSONNEL (APR 2010)

1352.239-70aa SOFTWARE LICENSE ADDENDUM (APR 2010)

1352.239-71aa ELECTRONIC AND INFORMATION TECHNOLOGY (APR 2010)

1352.239-72aa SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY RESOURCES (APR 2010)

1352.246-70aa PLACE OF ACCEPTANCE (APR 2010)

1352.270-70aa PERIOD OF PERFORMANCE (APR 2010)

PAGE 8 OF 46 1305M222QNCNA0080

Table of Contents

1330-52.222-70aa NOAA SEXUAL ASSAULT AND SEXUAL HARASSMENT PREVENTION AND RESPONSE POLICY (MAY 2018). 40

1330-52.237-70aa CONTRACTOR COMMUNICATIONS

1330-52.237-71aa NOAA GOVERNMENT-CONTRACTOR RELATIONS - NON-PERSONAL SERVICES CONTRACT (SEPT 2017)..42

1330-52.237-72aa CONTRACTOR ACCESS TO NOAA FACILITIES (SEPT 2017)

1330-52.242-70aa SUBMITTAL OF INVOICES

1330-52.243-70aa REQUESTS FOR EQUITABLE ADJUSTMENT (OCT 2017)

1330-52.270-304aa NOAA ACQUISITION AND GRANTS OFFICE OMBUDSMAN (OCT 2016)

PAGE 9 OF 46 1305M222QNCNA0080

CLAUSES

Offeror Instructions

PAGE 10 OF 46 1305M222QNCNA0080

OFFEROR INSTRUCTIONS

THE GOVERNMENT INTENDS TO EVALUATE PROPOSALS AND AWARD A

CONTRACT USING COMPARATIVE EVALUATION. THE GOVERNMENT RESERVES

THE RIGHT TO SELECT A RESPONSE PROVIDING BENEFIT TO THE GOVERNMENT

EXCEEDING THE MINIMUM QUALIFICATIONS, BUT IS NOT REQUIRED TO DO SO.

THEREFORE, THE OFFEROR’S INITIAL PROPOSAL SHOULD CONTAIN THE

OFFEROR’S BEST TERMS FROM BOTH A TECHNICAL APPROACH AND PRICE

STANDPOINT. THE GOVERNMENT RESERVES THE RIGHT TO AWARD A CONTRACT

TO OTHER THAN THE LOWEST PRICED OFFEROR, AWARD A CONTRACT WITHOUT

EXCHANGES, OR AWARD A CONTRACT AFTER EXCHANGES, WHICHEVER IS IN

THE BEST INTEREST OF THE GOVERNMENT.

QUOTES WILL BE EVALUATED BY PERFORMING A DIRECT COMPARISON OF ONE

OFFER WITH ANOTHER IN A UNIFORM MANNER TO DETERMINE WHICH QUOTE

PROVIDES THE GOVERNMENT WITH ITS NEEDS, AS IDENTIFIED IN THE RFQ.

THE GOVERNMENT RESERVES THE RIGHT TO CONSIDER A RESPONSE THAT OFFERS

MORE THAN THE MINIMUM AND SELECT THAT RESPONSE IF IT PROVIDES A BENEFIT TO

THE GOVERNMENT. THE GOVERNMENT HAS THE DISCRETION TO ACCEPT OTHER THAN

THE LOWEST PRICED OFFEROR THAT PROVIDES ADDITIONAL BENEFITS.

QUOTES IN RESPONSE TO THIS SOLICITATION SHALL BE NO MORE THAN 12 PAGES IN

LENGTH USING SINGLE SPACING IN STANDARD 12PT FONT AND SUBMITTED

ELECTRONICALLY VIA EMAIL BY (DATE/TIME) TO THE FOLLOWING GOVERNMENT

REPRESENTATIVE(S): ANTHONY CIOLLI (ANTHONY.CIOLLI@NOAA.GOV 816-426-3046),

AND TYRONE LEWIS (TYRONE.M.LEWIS@NOAA.GOV 816-426-7453). IT IS THE OFFEROR'S

SOLE RESPONSIBILITY TO ENSURE THAT ANY QUOTE, TO INCLUDE ANY OTHER EMAIL

CORRESPONDENCE, TRANSMITTED TO THE SPECIFIED GOVERNMENT

REPRESENTATIVE(S) IS RECEIVED PRIOR TO THE DUE DATE SPECIFIED HEREIN.

OFFERORS ARE HIGHLY ENCOURAGED TO CONTACT THE RFQ'S SPECIFIED

GOVERNMENT REPRESENTATIVE(S) VIA TELEPHONE PRIOR TO THE RFQ’S DATE FOR

RECEIPT OF PROPOSALS TO ENSURE THE GOVERNMENT RECEIPT OF THE

TRANSMITTED QUOTE AND TO ENSURE QUOTE ELIGIBILITY. QUOTES RECEIVED AFTER

THE DATE AND TIME SPECIFIED IN THE RFQ MAY RENDER IT INELIGIBLE FOR

CONSIDERATION OR EVALUATION.

FAXED QUOTES WILL NOT BE ACCEPTED. QUOTES SHOULD BE E-MAILED TO

ANTHONY.CIOLLI@NOAA.GOV (CC: TYRONE.M.LEWIS@NOAA.GOV) 816-426-3046.

OFFERORS MUST SUBMIT ALL QUESTIONS CONCERNING THIS SOLICITATION BY E-MAIL

WITHIN SEVEN (7) DAYS OF THE ISSUANCE OF THIS SOLICITATION.

THE RESULTANT CONTRACT WILL BE A FIRM FIXED PRICE AWARD.

CONTRACTORS MUST BE REGISTERED IN THE SYSTEM FOR AWARD

MANAGEMENT TO SUBMIT A QUOTE. YOU MAY REGISTER AT HTTPS://

HTTPS://WWW.SAM.GOV/SAM/PAGES/PUBLIC/LOGINFAQ.JSF A DUNS NUMBER

IS REQUIRED. THERE IS NO CHARGE FOR REGISTERING IN SAM.

THE FOLLOWING INFORMATION IS TO BE RETURNED:

PAGE 11 OF 46 1305M222QNCNA0080

1) PAGE 1 (COMPLETE BLOCKS 17A, 30A, 30B, AND 30C).

2) PAGE 3 PRICING SCHEDULE (FILL IN YOUR QUOTE/PRICES).

3) YOUR DUN & BRADSTREET (D&B) DUNS NUMBER. IF YOU DO NOT HAVE A DUNS

NUMBER, YOU MAY REQUEST ONE AT HTTP://FEDGOV.DNB.COM/WEBFORM THERE IS

NO CHARGE FOR GETTING A DUNS NUMBER.

4) CONTRACTOR REPRESENTATIONS AND CERTIFICATIONS SHALL BE COMPLETED IN

THE SYSTEM FOR AWARD MANAGEMENT WWW.SAM.GOV. CONTRACTORS SHALL

PROVIDE A STATEMENT THAT THEY EITHER ARE OR ARE NOT REGISTERED AND

ACTIVE IN SAM.

5) YOUR RESPONSE TO 1352.209-74(C), ORGANIZATIONAL CONFLICT OF INTEREST.

CONTRACTORS SHALL PROVIDE A STATEMENT THAT THEY EITHER DO OR DO NOT

HAVE A CONFLICT OF INTEREST.

6) AS REQUESTED IN 1352.237-75, PROVIDE YOUR KEY PERSONNEL

NAME, TITLE, TELEPHONE NUMBER, AND EMAIL ADDRESS. PLEASE FILL

IN INFORMATION ON PG. 37.

7) AS REQUESTED IN 52.212-2, PROVIDE RESPONSE TO ALL ELEMENTS

OF THE EVALUATION CRITERIA.

8) CONTRACTORS SHALL PROVIDE A STATEMENT THAT THEY ACKNOWLEDGE

CLAUSE 1330-52.222-70, NOAA SEXUAL ASSAULT AND SEXUAL HARASSMENT

PREVENTION AND RESPONSE POLICY AND AGREE TO PROVIDE SIGNED

DOCUMENTATION OF TRAINING COMPLETION FOR ALL ON-SITE EMPLOYEES

TO THE CONTRACTING OFFICER TEN (10) BUSINESS DAYS PRIOR TO THE

TASK ORDER START DATE.

(HTTPS://WWW.NOAA.GOV/ORGANIZATION/ACQUISITION-GRANTS/NOAA-

WORKPLACE-HARASSMENT-TRAINING-FOR-CONTRACTORS-AND-FINANCIAL)

9) IF CERTIFICATION OF 52.204-26(c)(1) AND/OR (2) IS MARKED “DOES” IN

SAM.GOV REGISTRATION, PROVIDE RESPONSE TO 52.204-24.

10)AN E-MAIL ADDRESS AND TELEPHONE NUMBER OF THE INDIVIDUAL WITH THE

AUTHORITY TO CONTRACTUALLY BIND THE AWARDEE OF THIS TASK ORDER.

IF 1 THROUGH 10 ARE NOT RESPONDED TO, THE QUOTE MAY BE

CONSIDERED NON-COMPLIANT WITH THE REQUIREMENTS OF THE

SOLICITATION AND MAY BE REMOVED FROM COMPETITION.

Evaluation Criteria

PAGE 12 OF 46 1305M222QNCNA0080

FAR 52.212-2 EVALUATION – COMMERCIAL ITEMS (OCT

2014) ADDENDUM

This provision has been tailored to this procurement.

The Government intends to award a Firm Fixed Price contract as a result of this solicitation in accordance with FAR 13.106-2(b)(3). Award will be made to the offeror whose proposal is most advantageous to the Government under the selection criteria set forth in this solicitation.

The proposals will be evaluated on the criteria listed below:

VOLUME I – Technical Approach

In accordance with FAR Clause 52.212-1, Instruction to Offerors-Commercial Items, proposals will be evaluated on the information contained in the technical approach that demonstrates the degree of understanding by the vendor of the requirements and proposed methodology.

MANAGEMENT APPROACH

In accordance with the “Offeror Instructions”, proposals shall include the vendor’s offered plan for staffing, management and oversight and ability to fulfill and execute the requirements of the Performance Work Statement (PWS).

PAST PERFORMANCE

Past performance will be used as a means of evaluating the relative capability of the vendor to successfully meet the requirements of this solicitation. Vendors are required to provide information on no more than three (3) of the firm’s most recently completed contracts/orders (not to exceed three (3) years since completion) for like or similar work. Vendors may submit performance data regarding current contract performance as long as a minimum of one year of performance has been completed as of the closing date of this solicitation.

Each Vendor shall submit, in writing, information on past performance. Vendors shall provide a detailed explanation demonstrating the relevance of the contract/order to the requirements of the solicitation.

The Government will conduct a past performance evaluation based upon the past performance of the vendor as it relates to the probability of vendor to provide the Government with quality service as covered within the solicitation.

Vendors are cautioned that the Government reserves the right to obtain information for use in the evaluation of past performance from any sources including sources outside of the Government. The Government will obtain whatever information it deems most relevant to the required effort by telephonic and/or written inquiry. This information may include Past Performance Information Retrieval System (PPIRS) reports, the Federal Awardee Performance and Integrity System (FAPIIS), or past performance information from any source.

The burden of providing thorough, complete, and relevant past performance information rests with the vendor.

PAGE 13 OF 46 1305M222QNCNA0080

Vendors lacking relevant past performance history, or for whom past performance information is either not available or has not been submitted to the Government, will receive a neutral rating for past performance. A neutral rating will not be evaluated favorably or unfavorably. However, the submission with no relevant past performance history, while rated neutral in past performance, may not represent the most advantageous submission to the Government and thus, may be an unsuccessful submission when compared to the submissions of other Vendors having an satisfactory (or better) past performance.

VOLUME II – PRICE PROPOSAL

Except when it is determined in accordance with FAR 17.206(b) not to be in the Government’s best interests, the Government will evaluate offers or quotations for award purposes by adding the total price for all options to the total price for the basic requirement to determine the total evaluated price. This includes options under FAR clause 52.217-8, Option to Extend Services, which applies to this solicitation. Evaluation of options will not obligate the Government to exercise the options.

Inclusion of FAR clause 52.217-8, Option to Extend Services, in the solicitation and resultant contract is for use by the Government as outlined at FAR 37.111, Extension of Services. The option will be exercised as needed at any time during the life of the contract using the rates applicable at the time of exercise.

Performance Work Statement

PAGE 14 OF 46 1305M222QNCNA0080

(NC-NA2600-22-00679/NOAA Studio Asset Management and Storage Upgrades) Performance Work Statement (PWS)

Version 3/25/2022

U.S. Department of Commerce NOS/AAMB/Communications and Education

Asset Management and Storage Upgrade for the NOAA Video Studio

Performance Work Statement

PAGE 15 OF 46 1305M222QNCNA0080

PART 1

INFORMATION

1.0 Detailed PWS Information

1.01 Background: The National Ocean Service (NOS) is a line office of the National Oceanic and Atmospheric Administration (NOAA), which is a bureau of the United States Department of Commerce. The mission of NOS is broad and includes a variety of technical and scientific services in support of coastal ocean natural resource stewardship and navigation support. Within NOS are program offices that are charged with carrying out the NOS mission.

The Communications and Education Division (CED) is a division of NOS’s Management and Budget (MB) Office located at NOS Headquarters in Silver Spring, MD. The CED manages the operation of a 1,389 square foot video studio space located on the 9 th floor of 1305 East-West Hwy, Silver Spring MD 20910. As part of this project the existing CatDV asset management system and the shared storage systems requires upgrading to optimize multiple editors working on multimedia assets that consist of video, audio, imagery and text documents. Shared access to all assets must begin with a project creation tool that the contractor configures and trains the NOAA Studio video staff on how to use. A minimum of 240 Terabytes (TB) of usable shared storage is required with the ability to be expanded. The contractor must install, configure, document, and train on all hardware devices installed as part of this system within the NOAA 6001 boundary. Supervision from NOS domain infrastructure staff that support the NOAA 6001 system must be present during all work that is within scope.

1.02 Objectives: The NOAA Video studio has the following objectives that are within the scope.

● Trade-in of Existing CatDV Software Licensing;

● CatDV Pegasus Software Upgrades;

● CatDV Pegasus Training,

● Quantum Xcellis Workflow Director and Metadata Storage,

● Quantum QXS-412 Storage (minimum 240 terabytes usable storage),

● StorNext File System and Storage Manager Training,

● Mellanox 1U SN2100 100GbE/10GbE Ethernet Switches,

● Professional Services, and

● a service level agreement.

The contractor shall deliver a fully functional and integrated CatDV Pegasus Studio Asset Management and Quantum Storage solution for the NOAA video studio according to the description and narrative described here-in.

1.03 Scope/High-level Description:

Asset Management System: The NOAA has a video studio that includes three dedicated edit bays, one shared edit bay for audio recording, an independent video studio and a shared producer’s space. The three design areas have unique needs with similar shared underpinnings. The NOAA video team currently uses a storage solution that is inadequate for shared editing. This action requires an authorized reseller to implement an upgrade and migration from our current CatDV Pro system to a CatDV Pegasus asset management system. A credit for our existing CatDV software and support is requested under the enterprise maintenance agreement currently in place. This includes upgrading and migrating our single CatDV worker node to a three instance CatDV Pegasus worker node to speed transcoding. We require licensing and installation of seven (7) CatDV Pegasus desktop clients and one (1) CatDV Pegasus web server with one process. We require a plugin and the configuration of this plugin to backup all media assets to our existing Microsoft Azure cloud service. We also require a project creation template that must allow for the creation of a new project which automatically assigns a unique ID to the project assets, creates a folder structure on the storage system, creates worker node actions to monitor for incoming files and uploads to the correct catalog and moves to correct level of storage, plus automatic tagging based on folder structure and project number. This includes deployment of this project creation template and training on its use. This system must include a workflow to allow for a video editor to publish selected clips to a publicly accessible website that will be known as the NOAA b-roll library. Licensing and setup of this website is an optional item that should be priced as well as training on its maintenance and use. Training is required to allow the NOAA video team to become familiar with the CatDV Pegasus system.

Maintenance and support of the entire Asset Management System as described is needed for a 12-month period from award with the opportunity for four (4) option year renewals through a service level agreement (SLA).

Storage System: We require an upgrade and migration from our existing Cohesity storage solution to a Quantum (or exact equivalent) storage solution certified to work with the CatDV Pegasus asset management solution described above. It must support multiple editors' access to the shared media assets for day-to-day creation and editing of projects over the existing NOAA fiber network to the existing fiber attached Mac workstations. Mellanox or exact equivalent network switches must be provided with the necessary

PAGE 16 OF 46 1305M222QNCNA0080

(NC-NA2600-22-00679/NOAA Studio Asset Management and Storage Upgrades) Performance Work Statement (PWS)

Version 3/25/2022 transceivers, adapters, and patch cables to support the engineered storage system. A minimum of 240 terabytes of usable storage is required with the ability for future expansion. We require the necessary software licensing and configuration of a tiered backup and archiving process of this system to the existing Cohesity storage system and the Microsoft Azure Cloud storage provided by NOAA.

Training on the use of the front-end system as well as training on the back-end hardware is required through the qualified firm. We also require a service level agreement (SLA) to support both the front-end and back-end systems with up to four (4) option year renewals of this agreement in support of both the CatDV Pegasus asset management and Quantum storage solutions as engineered.

Recommendations on how best to implement these systems are encouraged along with recommendations on the equipment.

Work associated with this action must take place under guidance from the staff of the Information Management Office’s Domain Infrastructure (DIT) and Network Infrastructure teams (NIT). This staff must be trained on how to diagnose and perform high-level maintenance. The SLA must include points of contact and a four (4) hour response time frame within normal business hours (see section 1.09 below).

1.04 Requirements and Functional Equivalency:

The contractor shall use the list and table below to engineer the components described above for a fully functional CatDV Pegasus asset management and storage systems for the NOAA video studio. The hardware components listed throughout this document are brand name or equal, any substitutions must be identified and approved. The vendor must certify and demonstrate that their engineered solution would fulfill the needs identified above. Specifically, the hardware items identified are:

● Quantum Xcellis Workflow Director and Metadata Storage- an equivalent system must combine compute, client access, and storage to create an efficient and powerful core of a workflow storage solution. It must support third-party workflow applications as virtual machines for flexible and cost-effective deployment. It must allow the ability to add storage arrays to scale from the initial 240 Terrabytes. It must support multi-protocol access enabling all clients access to the same data regardless of protocol, on a SAN or on a LAN. It must support billions of files across multiple virtual file systems. It must scale to hundreds of petabytes. It must also scale to include use of Azure or AMS cloud, object storage, or tape. It must support flexible connectivity options such as 16Gb FC, 8Gb FC, 1Gb Ethernet, 10Gb Ethernet, 40Gb Ethernet, and FDR InfiniBand.

Xcellis is designed to get the most out of StorNext, a Quantum solution. StorNext File System (SNFS) is a shared disk file system made by Quantum Corporation. StorNext enables multiple Windows, Linux and Apple workstations to access shared block storage over a Fibre Channel network. With the StorNext file system installed, these computers can read and write to the same storage volume at the same time enabling what is known as a "file-locking SAN." A functionally equivalent system must meet the shared disk file system requirements as described for a multi-video editor environment.

● Quantum QXS-412 Storage (minimum 240 terabytes usable storage) - an equivalent system must be a high-performance, reliable, expandable storage array, designed and demonstrated to cost-effectively accelerate video workflows. It must offer a storage foundation for StorNext or an equivalent locking file system that is proven to allow multiple video editors to simultaneously interact with and edit video and audio projects while connected to and using this storage solution. It must be optimized to deliver maximum throughput and sequential I/O performance, designed with no single point of failure with 99.999% uptime when properly maintained. It must be highly configurable and flexible with chassis options that do not require a forklift option for future replacement.

● StorNext File System and Storage Manager Training - as mentioned above when describing Xcellis, StorNext File System (SNFS) is a shared disk file system made by Quantum Corporation. StorNext enables multiple Windows, Linux and Apple workstations to access shared block storage over a Fibre Channel network. With the StorNext file system installed, these computers can read and write to the same storage volume at the same time enabling what is known as a "file-locking SAN."

A functionally equivalent system must meet the shared disk file system requirements as described for a multi-video editor environment. We require a file system that allows multiple editors to edit video and audio projects using Adobe Premiere and fiber attached Macintosh workstations.

PAGE 17 OF 46 1305M222QNCNA0080

● Mellanox 1U SN2100 100GbE/10GbE Ethernet Switches- a functional equivalent network switch must provide a high density, side-by-side 100GbE switching solution which scales up to 128 ports in 1RU for the NOAA Studio video demands as described above. The network switch is the spine that must allow maximum flexibility, with port speeds spanning from 10Gb/s to 100Gb/s per port and port density that enables full rack connectivity to any server at any speed. The uplink ports must allow a variety of blocking ratios that suit any video application requirement. The SN2100 or equivalent must have at least 16 ports running at 100GbE with a throughput of 3.2Tb/s and 2.38Bpps processing capacity in a 1RU form factor. A network switch equivalent must be demonstrated to meet these needs.

1.05 Deliverables:

Deliverable Frequency Medium/Format/# of Copies

Submit To

Kick Off Meeting Within 20 days of award

In person Consult with Task Manager or COR to schedule

Installation Calendar Within 7 days of kick off meeting

In person or via email

Task Manager

Follow up Meeting to review design and provide recommendations

Within 7 days of kick off meeting

In person Consult with Task Manager or COR to schedule

Weekly Activity Report By COB Friday of every week via email Task Manager

Detailed Interconnect Binder with Documentation

Within 2-days of completion

One physical binder with printouts of all documentation and an electronic copy (pdf format)

Task Manager

Hardware warranty and specifications Binder

At completion One physical binder that contains all warranty information organized by functional area

Task Manager

Hand Off Meeting and Training

At completion In person meeting and training session

Consult with TM, COR, and CO to schedule

1.06 Constraints:

Connecting any owner furnished equipment (OFE) equipment is outside the scope of this action. Additionally, access to the Cohesity and Microsoft Azure storage will be provided through the National Ocean Service DIT and NIT. Any issues arising from any delays will be mitigated by open communication between the parties. Any necessary personnel, network and Internet connections will be provided as needed through the task manager (TM) identified below or DIT/NIT staff the TM identifies.

1.07 Period of Performance: The period of performance shall be for one (1) Base Year and (4) Option Years. The Period of Performance reads as follows:

Base Year – September 1, 2022 – August 31, 2023 Option Year 1 - September 1, 2023 – August 31, 2024 Option Year 2 – September, 2024 – August 31, 2025 Option Year 3 – September, 2025 – August 31, 2026 Option Year 4 - September, 2026 – August 31, 2027

1.08 Type of Order: The government anticipates the award of a Firm Fixed Price (FFP) contract.

1.09 Hours of Operation/Place of Performance: The contractor is responsible for performing any installation and configuration work between the hours of 8AM to 5PM during weekdays, Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this

PAGE 18 OF 46 1305M222QNCNA0080

Performance Work Statement (PWS)

Version 3/25/2022 statement of work when the Government facility is not closed for any reason, including recognized holidays listed in section 1.011.

When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential.

Work will normally be performed in the studio area located on the 9th floor of 1305 East-West Hwy, Silver Spring, MD 20910.

1.010 Special Qualifications: The contractor is expected to provide a fully trained workforce to the government; therefore, personal development training costs and hours are not billable to the government.

1.011 Recognized Holidays:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

In addition to the days designated as holidays, the Government observes the following days:

Any other day designated by Federal Statute Any other day designated by Executive Order Any other day designated by a President's Proclamation

It is understood and agreed between the Government and the contractor that observance of such days by Government personnel shall not otherwise be a reason for an additional period of performance or entitlement to compensation except as set forth within the contract. If a contractor believes that an unplanned absence has an impact on the price or period of performance, it should notify the contracting officer (CO) of the changed condition and submit a claim for equitable adjustment (see FAR 52.233-1).

Nothing in this clause abrogates the rights and responsibilities of the parties relating to "stop work" provisions as cited in other sections of this contract.

1.012 Security Requirements

IT Hardware and/or Software

IT Security Requirements

a. The Assessment and Authorization (A&A) requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

b. The Contractor shall only supply Information Technology (e.g., hardware, software, firmware, etc.) and/or product license and shall not require the use of any contractor owned equipment. The contractor will not have remote access to any government owned equipment. The Contractor shall ensure the acquiring Information Technology provided disables “phone home” or similar capabilities.

c. The Contractor shall include the necessary product support and supporting documentation that allows the sanitization for the acquiring Information Technology and/or product license upon the disposal of the product. The Contractor shall not destroy any information unless specifically authorized by the Contracting Officer Representative/Task Manager. The Contractor

PAGE 19 OF 46 1305M222QNCNA0080

upon request of the COR/TM shall use one of the approved methods for secure destruction of unclassified but sensitive information. Approved methods include NIST Special Publications 800-88 Guidelines for Media Sanitization (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf) or the National Security Agency in the Media Destruction Guidance (https://www.nsa.gov/Resources/Media-Destruction-Guidance/).

d. The Contractor shall ensure the custom solutions and/or acquiring information technology are engineered for trustworthy and security. The Contractor shall work with the government assigned ISSO to determine the applicable security requirements that must be addressed. The Contractor shall throughout the lifecycle of this contract all custom/acquired solutions are consistent with the engineering-based trustworthy secure solutions as outlined in NIST Special Publication 800-160 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v2.pdf).

e. The Contractor shall provide sufficient documents demonstrating the acquiring information technology complies with Office of Management and Budget Memorandum M-07-18 Ensuring New Acquisitions Include Common Security Configurations and the Federal Acquisitions Regulations (FAR) 39.101(d) regulations require NIST common security configuration checklists including United States Government Configuration Baseline (USGCB) initiative. The Contractor shall provide sufficient documentation, which demonstrates the acquiring information technology or service(s) has implemented common security configuration checklists. Common security configuration checklists are available at National Checklist Program (NCP), (https://nvd.nist.gov/ncp/repository), the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low-level guidance on setting the security configuration of operating systems and applications. If the Contractor does not have common security configuration checklist for the acquiring information technology or service(s), then the Contractor shall provide a rationale for not meeting the OMB M-07-18 requirement.

f. The Contractor shall ensure that the acquiring information technology complies with the Homeland Security Presidential Directive 12 (HSPD-12) Policy for a Common Identification Standard for Federal Employees and Contractors requirements from FAR 4.1302 stating: (a) In order to comply with Federal Information Processing Standard (FIPS) 201, agencies must purchase only approved personal identity verification products and services, (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR Subpart 8.4. If the Contractor does not comply with HSPD-12 requirement for the acquiring information technology, then the Contractor shall provide a rationale for not meeting the HSPD-12 requirement.

g. The Contractor shall ensure that the acquiring information technology complies with Internet Protocol Version 6 (IPv6) requirements from FAR part 11.002 requirements. FAR part 11.002 requirements state that unless the agency Chief Information Officer waives the requirement, when acquiring information technology using Internet Protocol, the requirements documents shall include reference to the appropriate technical capabilities defined in the USGv6 Profile (https://www.nist.gov/programs-projects/usgv6-program) and the corresponding declarations of conformance defined in the USGv6 Test Program. DOC acquisition of IP protocol technology shall express requirements for IPv6 capabilities in terms of the USGv6 Profile (e.g., using the USGV6 Capabilities Check List) and vendors shall be required to document their product’s support of the requested capabilities through the USGv6 test program (reference https://www.nist.gov/programs-projects/usgv6-program) using the USGv6 Suppliers Declaration of Conformity. If the Contractor does not meet the IPv6 / FAR part 11.002 requirements for the acquiring information technology, then the Contractor shall provide a rationale for not meeting the FAR part 11.002 requirement.

h. The Contractor shall provide all supporting documentation or a reference to obtain the necessary material, which describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the acquiring information technology. The Contractor shall provide all supporting documentation or a reference to obtain the necessary material, which describes all information technology updates and enhancements when implemented. The information technology supporting documentation examples include, but not limited to the user guide, system administrator guides and/or hardening guide. The Contractor shall provide document(s) or a reference to obtain the information that describes the functional properties of the security controls employed to permit the analysis and testing of the security controls for the acquiring information technology.

i. The Contractor shall provide sufficient document demonstrating the acquiring information technology provided complies with the following:

a) The standard installation, operation, maintenance, updates and/or patching of software shall not alter the common secure configuration settings (e.g., USGCB and/or other secure baseline), PAGE 20 OF 46 1305M222QNCNA0080

Performance Work Statement (PWS)

Version 3/25/2022

b) Applications designed for normal end users shall run in the standard user context without requiring elevated system administration privileges.

Developed Solutions using GFE

The Contractor shall comply with the following DOC Department Administrative Orders (DAO): DAO 200-0 Department of Commerce Handbooks and Manuals and DAO 207-1 Security Programs (available at:

https://www.osec.doc.gov/opog/dmp/daos.html). The Contractor shall comply with the following DOC Department Organization Orders (DOOs) DOO 15-23 Chief Information Officer (available at:

https://www.osec.doc.gov/opog/dmp/doos.html). The Contractor shall comply with the NOAA Administrative Orders (NAO) NAO 212-13 NOAA Information Technology Security Policy and NAO 212-15 Management of Environmental Data and Information (available at: https://www.noaa.gov/organization/administration/noaa-administrative-orders). DOC issues policies under DAO 200-0, DAO 207-1 and DOO 15-23. NOAA issues cybersecurity policies under NAO 212-13. The DAO, DOO, NAO and corresponding policies are sensitive controlled unclassified information (CUI) documents that shall be limited to use only on Government Furnished Equipment and will be provide after contract award.

The DAOs, DOO and NAOs and corresponding policies may not specifically identify requirements for Contractor developed solutions residing within their area of responsibility (e.g.