FOB_SOW_4_30_15.docx

USDA - NASS

Statistical Graphics Services

STATEMENT OF WORK

Table of Contents

Purpose

National Agricultural Statistics Service (NASS) produces Agriculture Statistics that are used by industry and educators across the Nation. As a data provider we are always looking for new and innovative ways to share agriculture data with our customers. One item that is has been a part of the NASS Long Range plan for many years is interactive data maps. This contact will provide expert geoinformatics personnel that will work with NASS to implement the use of interactive statistical graphics on our external websites to help to improve the interpretability and applicability of the data we produce.

Objective As a result of this contract, NASS will leverage resources to implement interactive maps on our external facing website.

Background The National Agricultural Statistics Service (NASS) is one of the primary suppliers of statistics covering U.S. agriculture. NASS conducts hundreds of surveys and the Census of Agriculture, and prepares reports covering virtually every facet of U.S. agriculture -- production and supplies of food and fiber, prices paid and received by farmers, farm labor and wages. In addition, NASS' various Field Offices (FO's) publish data about many of the same topics for local audiences. NASS publications cover a wide range of subjects, from traditional crops, such as corn and wheat, to specialties, such as mushrooms and flowers; from calves born, to hogs slaughtered; from agricultural prices to land in farms.

Scope of Work NASS is looking for a company that has in depth knowledge of NASS statistical outputs to develop and implement a fully-executed, interactive web/cloud based solution. Initially, this solution will focus on a single commodity (e.g., corn) in order to establish a strong framework and solid prototype for potential future development. This will ensure faster development times for future commodities in subsequent projects. The solution will be delivered with the following features:

Task 1: Develop System Design and Prototype The Contractor will work with NASS to outline, brainstorm, document through a system design and subsequently develop a web-based mapping solution for Corn. The mapping solution will leverage exiting APIs and tools where possible and will contain multiple interaction features including the following:

· Historical Data available via USDA-NASS QuickStats API [Planted Acreage, Harvested Acreage, Yield, and Production]

· Navigation controls [pan, zoom, drag, etc.]

· Multiple choropleth classification methods, number of classes, and colors

· Dot density

· Data aggregation level controls [county, agricultural district, or state]

· Map layer visibility and transparency via Table of Contents

· Background layers [Topography, “slippy” map .png tiles, etc.]

· Print/save current mapping view

· Export data as CSV

· Help/FAQ

· Map animations over time

· Map Gallery

Task 2: Incorporate Statistical Graphics The maps will also be accompanied by statistics/analytics and graphing elements that are deemed necessary by the team to extract full value from the maps, including:

· Sparklines

· Histogram

· Trend Line/time series/temporal trend plots

· Scatter plots

· Bubble Plots

· Data statistics [count, minimum, maximum, sum, mean, standard deviation, and variance]

Task 3: Live Demonstration, Knowledge Transfer and Support In addition to the above tasks NASS would like to request that the contractor be available to present in person the working prototype and work with NASS staff to discuss the transition of the application into the NASS environment. NASS will pay for the travel to and from if required. We expect that two trips to NASS will be required, one to present the version, and one to assist with the transition to the NASS environment. NASS would also like the contractor to be available for an additional 50 hours after the solution is moved to production to assist with additional functionality and questions related the integration of the solution into other NASS processes.

4. Task 4: Provide cloud-hosting services for the application for contract period for one year after the contract agreement is fulfilled.

This will allow seamless transition of the application to the internal NASS environment, and provide the time needed to configure and test the application in-house. It will also allow NASS the opportunity to better conceive of any potential additional development that may be required in subsequent work.

Development Considerations The contract will use open-source software to build a responsive and efficient spatial database and web framework to manage a mapping API based on criteria determined in the design stage of the project. The mapping API will retrieve data from two different sources: 1. public survey and census agricultural data from the USDA-NASS QuickStats API; 2. US spatial data (shapefiles, GeoJSON, etc.) from an internal spatial database run by the contractor; and 3. if needed/applicable google maps API.

NASS will provide the following to the Contractor spatial files (.shp, .dbf, etc.) or external web links to the following spatial layers [generalized to 1:20,000,000 scale], which will in turn be included in the Application; States, Agricultural Statistical Districts, Counties, Cities, Major Roads, Major Railroads, Rivers, and Ethanol Plants. In addition, NASS will work with the contractor to determine the “best” projection for which to display the US maps and spatial data.

Contractor will also use multiple open-source JavaScript libraries on the front-end to build the spatial and graphical elements of the Application. The contractor should also take into consideration the NASS Standard Information Technology infrastructure which includes the following; Linux Operating System, MySQL database, Apache or Tomcat, Glass Fish or Catalyst, and Subversion SVN. The contractor will be expected to present their design documentation to NEAC (NASS Enterprise Architecture Council), technology not listed above and the design of the system will need to be reviewed by NEAC prior to developing the solution.

Deliverables

Reporting

The assigned resources shall provide weekly updates to technical representative and COR, attend any meeting as request in relationship to the work being conducted and or as requested by the COR to provide an opportunity to discuss issues and review status.

The contractor shall:

1. Discuss any business, technical, or personnel issues that are relevant to making expected progress on work assignments.

2. Highlight progress toward milestones and/or work products.

NASS Project Manager/Contracting Officer’s Representative (COR)

COR: TBD

Place of Performance Work will be performed at the contractor’s place of business and NASS located at the following address:

1400 Independence Ave. SW Washington, DC 20250

It is anticipated that any work on NASS internal systems or with NASS confidential data will be at NASS office located in Washington, DC. If the contractor plans to utilize off-site support for any task under this agreement prior approval must be obtained from the COR before off-site work is performed.

Period of Performance The period of performance shall be from May 22, 2015 to May 21, 2016.

Government Furnished Information/Government Furnished Workspace

If work must be complete at NASS facilities, NASS will:

1. Provide work space and equipment, to include network access, desktop computer, required software, and normal office supplies to on-site personnel.

2. Provide access to technical and business experts concerning the system.

3. Provide timely feedback and response to questions.

Security Contractor personnel shall have a “Modified Background Investigations” for moderate risk personnel at the cost of the contractor.

Due to NASS data security and confidentiality requirements, work requiring access to sensitive data will be accomplished at NASS, 1400 Independence Ave, SW, Washington, DC.

As mandated by the USDA Office of the Chief Information Officer, contractors that have access to NASS computer systems or data are required to complete the annual USDA Information Security Awareness (ISA) and Rules of Behavior (ROB) Mandatory Training, in accordance with the Federal Information Security Management Act (FISMA), at the cost of the contractor

1. Return of Data Data and information developed, entered, and processed under this contract shall be considered Government property. All data and/or materials provided to the contractor to accomplish individual deliverables shall be returned to the Government or destroyed at the end of each applicable deliverable, unless the contractor specifically requests and receives approval from the COTR to maintain copies of this data. The Contractor is responsible for distributing data and/or materials given to members of the contractor’s team. None of this data will be released to any other Government organization or other organizations of individuals without the express written approval of USDA unless otherwise specified.

Confidentiality and Non-Disclosure Any USDA/NASS proprietary information, data, and/or equipment that the Contractor has been granted access to will be returned to the USDA/NASS when no longer required to perform work under this order. The public release of the above USDA/NASS Proprietary information must be authorized in writing by the Contracting Officer.

The component parts of this effort and reports are expected to contain highly sensitive information that may act as a guide for hostile entities to cause harm to the Department’s critical infrastructure. Any such information made available in any format shall be used only for the purpose of carrying out the provisions of this agreement. Such information shall not be divulged or made known in any manner to any person. The Contractor shall immediately notify the Contractor Program Manager, the Contractor on-site Manager, the COTR, the USDA TPMs and the Contracting Officer upon discovery of any inadvertent disclosures of information. The Contractor shall not retain any information regarding vulnerabilities, to include summaries, the actual vulnerability report, etc., at the end of the task order. All information arising from this task, both hard copy and electronic, shall be returned to the COTR and USDA TPMs at task completion.

The Contractor must agree that:

The draft and final deliverables and all associated working papers and other materials deemed relevant by the USDA TPMs that have been generated by the Contractor in the performance of this task order are the property of the U.S. Government and must be submitted to the USDA TPM at the conclusion of the tasks.

All documents produced for this project are the property of the U.S. Government and cannot be reproduced or retained by the Contractor. All appropriate project documentation will be given to the USDA TPM during and at the end of this contract. The Contractor will release no information. Any request for information relating to this Statement of Work presented to the Contractor must be submitted in writing to the USDA TPM and the CO, who in turn will provide a written response. The Contractor employees must sign Non-Disclosure Statements, under each assigned Individual BPA Call Order.

Sensitive Information Storage and Disclosure Sensitive information, data, and/or equipment will be disclosed only to authorize personnel on a Need-To-Know basis. The holder shall ensue that appropriate administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, and/or equipment will be returned to Government control; destroyed; or held until otherwise directed. Destruction of items shall be accomplished by tearing into small parts; burning; shredding or other method that precludes the reconstruction of the material, consistent with GSA guidelines.

Work on this BPA/Individual BPA Call Order may require that personnel have access to Privacy Information. Personnel shall adhere to the Privacy Act, Title 5 of the U. S. Code, Section 552a and applicable agency rules and regulations.

The Contractor Program Manager shall ensure that all contract personnel take the required USDA Security Awareness and Rules of Behavior Training.

Physical Security Contractor custody of sensitive information must be protected under The Privacy Act of 1974, 5 U.S.C. § 552a -- as amended. The Contractor shall be responsible for safeguarding Personally Identifiable Information (PII) data against unauthorized disclosure, dissemination or modification in accordance with the requirements, law and USDA PII policy and regulations. This shall include, but is not limited to: Privacy and PII data located in IT Systems, software, research data / information, personnel (institutional knowledge) and buildings/offices.

All contractor personnel who work at USDA must be US Citizens, and obtain approval for facility access.

Personal Security Requirements Contractor personnel must comply with USDA Homeland Security Presidential Directive (HSPD-12), “Policy for a Common Identification Standard for Federal Employees and Contractors,” and Federal Information Processing Standards Publication (FIPS PUB) 201, “Personal Identity Verification (PIV) of Federal Employees and Contractors.”

Although the information being processed through this service is not classified, the information is considered sensitive and must be protected accordingly. It is imperative that company personnel, such as Database Administrators, System Administrators, etc., or anyone who possibly could access the data being processed, have an appropriate level of background investigation on file. The company would be responsible for insuring that only personnel possessing the appropriate level of background investigation were instrumentally involved with the data processed by this service.

Only US citizens are authorized to work under this contract.

USDA requires government issued identification badges and display of them at all times while on the premises.

Background investigations and fingerprinting are required for all government and Contractor employees. If the government receives an unsuitable report of any Contractor employee after review and processing of security background information, the Contractor will be advised immediately and such employee shall not continue to work at USDA or be assigned work under this or any USDA contract. The Contractor shall replace such employee with a new employee within 30 days.

The Contractor shall ensure that all Contractor employee identification badges are returned to USDA, if employees are dismissed, when the contract expires, or whichever comes first. The Government will have and exercise full and complete control over granting or denying of identification cards or other required security identification badges. It shall be the Contractor’s responsibility to account for all identification cards/badges issued to Contractor personnel. Final Contractor payment will be withheld until all identification cards and security identification badges as well as keys or other Government assigned items have been accounted for.

National Agency Check with Inquiries (NACI). The minimum Personnel Security Investigative (PSI) requirements for a Contractor is a NACI. All positions within the USDA are assigned Position Sensitivity Designations (PSDs) based upon the risk/damage an unauthorized disclosure would cause to the Agency and/or National Security. The COTR will advise the Contractor of the assigned designation and investigative requirements at the kickoff meeting/at the onset of contract discussions. Based upon the assigned sensitivity designation, the minimum level PSI may not meet the requirements and a higher level of investigation and/or Security Clearance may be required.

A list of all Contractor personnel assigned to this task with the dates and types of security background investigation checks completed will be submitted to the COTR prior to the initiation of any work effort charged against this PWS.

SECURE CODING REQUIREMENTS

Commercial off the Shelf (COTS) and software developed by contractors can have security vulnerabilities. Contractors should certify that at least one member of their programming team working on any code (including C, Java, .Net, ASP.NET, Visual Basic) has earned the Global Information Assurance Certification (GIAC) for Secured Software Programming or its equivalent.

Prior to delivery of completed application, contractor will provide source code testing results showing all potential security flaws identified by IBM’s Security AppScan, or comparable commercially-available source code testing tool. On the report, the contractor will highlight all vulnerabilities rated "critical" and "high". The contractor must then correct the vulnerabilities, rescan the code, and ensure delivered source code is secure. All web applications must pass application penetration testing. Results of the scan must be provided to the COTR.

By delivering applications or programming code to the Federal Government, the vendor or contractor certifies that they have the proper authority to transfer the property and will defend the government against copyright or other lawsuit resulting from the application or programming delivered.

Section 508 – Accessibility of Electronic and IT

(a) This (SOW, PWS, or TO name) is subject to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) as amended by the workforce Investment Act of 1998 (P.L. 105-220). Specifically, subsection 508(a)(1) requires that when the Federal Government procures Electronic and Information Technology (EIT), the EIT must allow Federal employees and individuals of the publicwith disabilities comparable access to and use of information and data that is provided to Federal employees and individuals of the public without disabilities. The EIT accessibility standards at 36 CFR Part 1194 were developed by the Architectural and Transportation Barriers Compliance Board ("Access Board") and apply to contracts and task/delivery orders, awarded under indefinite quantity contracts on or after June 25, 2001.

Each Electronic and Information Technology (EIT) product or service furnished under this contract shall comply with the Electronic and Information Technology Accessibility Standards (36 CFR 1194), as specified in the contract, as a minimum. If the Contracting Officer determines any furnished product or service is not in compliance with the contract, the Contracting Officer will promptly inform the Contractor in writing. The Contractor shall, without charge to the Government, repair or replace the non-compliant products or services within the period of time to be specified by the Government in writing. If such repair or replacement is not completed within the time specified, the Government shall have the following recourses:

Cancellation of the contract, delivery or task order, purchase or line item without termination liabilities; or in the case of custom Electronic and Information Technology (EIT) being developed by a contractor for the Government, the Government shall have the right to have any necessary changes made or repairs performed by itself or by another firm for the noncompliant EIT, with the contractor liable for reimbursement to the Government for any expenses incurred thereby:

The contractor must ensure that all EIT products that are less than fully compliant with the accessibility standards are provided pursuant to extensive market research and are the most current compliant products or services available to satisfy the contract requirements.

For every EIT product or service accepted under this contact by the Government that does not comply with 36 CFR 1194, the contractor shall, at the discretion of the Government, make every effort to replace or upgrade it with a compliant equivalent product or service, if commercially available and cost neutral, on either a contract specified refresh cycle for the product or service, or on a contract effective option/renewal date; whichever shall occur first.

Section 508 Compliance for Communications The (Name of Vendor or Application) shall comply with the standards, policies, and procedures below. In the event of conflicts between the referenced documents and this SOW, PWS, or TO, the SOW, PWS, or TO shall take precedence.

Rehabilitation Act, Section 508 Accessibility Standards

1. 29 U.S.C. 794d (Rehabilitation Act as amended)

2. 36 CFR 1194 (508 Standards)

3. www.access-board.gov/sec508/508standards.htm (508 standards)

4. FAR 39.2 (Section 508)

5. USDA Standards, policies and procedures (Section 508) In addition, all contract deliverables are subject to these 508 standards as applicable.

Regardless of format, all Web content or communications materials produced, including text, audio or video - must conform to applicable Section 508 standards to allow federal employees and members of the public with disabilities to access information that is comparable to information provided to persons without disabilities. All contractors (including subcontractors) or consultants responsible for preparing or posting content must comply with applicable Section 508 accessibility standards, and where applicable, those set forth in the referenced policy or standards documents above. Remediation of any materials that do not comply with the applicable provisions of 36 CFR Part 1194 as set forth in the SOW, PWS, or TO, shall be the responsibility of the contractor or consultant.

The following Section 508 provisions apply to the content or communications material identified in this SOW, PWS, or TO:

36 CFR Part 1194.21 a - l 36 CFR Part 1194.22 a - p 36 CFR Part 1194.31 a - f 36 CFR Part 1194.41 a – c The contractor shall provide a completed Section 508 Product Assessment Template and the contractor shall state exactly how proposed EIT deliverable(s) meet or does not meet the applicable standards.

The following Section 508 provisions apply for software development material identified in this SOW, PWS, or TO:

For software development, software applications, and operating systems the Contractor/Developer/Vendor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For web-based applications (intranet, internet information and applications, 16 rules), the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.22 (a – p) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For Telecommunication products the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.23 (a – k) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For video and multimedia applications (including training), the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.24 (a – e) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For self contained, closed products, the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.25 (a – j) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For Desktop and portable computers, the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.26(a – d) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

All Electronic Information Technology that is subject to the 36 CFR 1194 standards will have a Section 508 acceptance test and Section 508 will be validated upon acceptance.

All maintenance for Electronic Information Technology that requires upgrades, modifications, installations and purchases will adhere to the Section 508 Standards and 36 CFR 1194.

5 | Page image2.png