SATPC0031636 Tab 04 4 SOW.pdf

Strategic Planning, EA, and IT Policy/Governance

The Contractor shall provide Strategic Planning, Enterprise Architecture, IT Policy/Governance, IT Portfolio Management, Program/Project Management, and IT Assessment services that support the NSSC Information Resources Division (IRD), the Support Operations Directorate (SOD), the SSC OCIO consolidated office supporting NSSC IT operations, and adhere to the most current Federal, NASA and NSSC IT policies referenced in NSNPI-2800-0001. This position reports directly to the NSSC Chief Information Officer (CIO) and the NSSC Business Technology Strategist. The NSSC IRD anticipates transitioning the oversight role to the Stennis Space Center (SSC)Office of the CIO consolidated office to provide oversight and direction. The SSC Deputy CIO and Associate CIO shall have oversight responsibility once the function has transitioned to the SSC OCIO, however the referenced contractor support will be done in coordination with SOD.

1. General Requirements: The Contractor shall participate in weekly staff meetings, teleconferences, and project meetings supporting NSSC IT operations on a weekly basis and provide summaries of the activities that have affect the NSSC. The Contractor shall maintain constant internal relationships with NSSC stakeholders (i.e., government and service provider personnel) to foster improvements to the NSSC IRD division (i.e., future SSC OCIO consolidated office personnel supporting NSSC operations / projects) and the NSSC IT infrastructure. The Contractor shall produce summary reports of the weekly activities being supported.

2. Specialized Requirements: The scope of work encompasses the areas of specialization itemized below. The Contractor shall describe how it will perform in each area and include examples that relate the applied experience with the work performed and artifacts produced as evidence that the work has been performed.

2.1. Strategic Planning. Assist in fostering enhanced business performance by envisioning the NSSC target state, exploring problems that inhibit efficiency gains, performing gap analyses, and developing transition strategies for achieving NSSC goals that enhance business value. Foster executive leadership decision-making by drafting compelling and adaptive vision, mission, goals, objectives, strategies, and risk items for surviving changing or unanticipated conditions, transforming culture, and optimizing business operations. The Contractor shall support the government with identifying the strategic direction the NSSC IT infrastructure should pursue to support the various lines of business (e.g., Human Resource, Procurement, Finance, and Enterprise Services) that positions the NSSC to meet customer requirements, promote consumer confidence and position the NSSC for future growth in the referenced business units.

2.2. Enterprise Architecture (EA). Assist in the overall development of the EA program at the NSSC to ensure the appropriate alignment to NPR 2830.1x. This includes drafting, updating, and refining principles and guidelines that govern the NSSC’s IT Program design and evolution; maintaining current and target state views of its architectures based on how business is expected to change over time and how services and technologies are expected to change to meet business needs; work with the incumbent service provider in performing strategic planning, EA artifact development and maintenance, Business Process Re-engineering (BPR), IT Portfolio Management and CPIC processes, and EA program maturity assessments to ensure NSSC IT capabilities and systems are aligned with NSSC’s mission and institutional requirements, operations, and objectives.

2.3. Baseline Reference Models. In collaboration with the incumbent service provider, develop and maintain the NSSC EA Baseline Architecture (AS-IS) Reference models as the primary reference for IT planning and execution, linking the NSSC functional services to the information, technologies, and systems necessary to create and perform the services. The NSSC EA Reference Models shall be contained in the NSSC Document Management system and be accessible to the IT department CS and Contractor employees for reference.

2.4. EA Artifacts. During the formulation or initiation stage of an IT project, the Contractor shall develop new or modify existing EA artifacts to support BPR and technology investment approval processes performed by the NSSC ITPMB and/or Information Technology Council (ITC) and NASA Capital Planning and Investment Control (CPIC) Process. Updates to the NSSC EA Baseline Reference Models shall be made upon IT initiative or project completion.

2.5. IT Policy / Governance. Draft directives for implementing policy changes that affect investments and resources. Analyze statutory requirements against NASA directives to comply with new requirements. Disposition comments on revised directives during policy reviews and incorporate comments or resolve issues into the final directive. Support the interpretation and implementation of Agency and NSSC policy and guidelines. Coordinate with NSSC and Agency stakeholders to ensure consistent implementation of policy and governance.

2.6. IT Portfolio Management. Assist in the structured approach to select, manage, and measure performance in NSSC services and systems, and ensure each aligns with the Agency mission and support business needs while minimizing risks and maximizing returns. Recommend prioritization changes in portfolio items using quantitative and qualitative assessment methods to justify recommendations.

2.7. Capital Planning and Investment Control (CPIC). Assist in the annual Planning, Programming, Budgeting, and Execution (PPBE) process for selecting, controlling, and evaluating the portfolio of NSSC investments.

Apply systematic evaluation of NSSC investments, projects and activities for its programs, and recommend investment prioritizations based upon data-driven findings from annual program analysis of the portfolio of NSSC investments.

• Select. Assist in creating and updating the IT investment portfolio for each service domain, which may include preparing business cases that rationalize their business value, aligning them with the EA and strategic intent, addressing implementation risks, preparing mitigation strategies, conducting analysis of alternatives using cost and risk as driving factors, and defining the metrics for measuring the performance of portfolio items.

• Control. Assist in monitoring the performance of portfolios to ensure they return the expected value. Conduct root cause analyses for underperforming investments, then prepare and implement corrective actions to meet the desired baseline performance. Using empirical, data-driven metrics, identify trends for future performance prediction.

• Evaluate. Assist in examining the performance of all portfolio investments. Assess their operational value and estimate their end-of-life range, and from this analysis plan acquisition strategy items for the next phases of infrastructure modernization.

2.8. Program and Project Management. Manage special projects that have a significant effect on the delivery of support services. Represent the NSSC IRD in implementation planning of new systems, system upgrades, and new capabilities. Lead efforts that define post-implementation support requirements. Develop service level agreements (SLAs) that define requirements and expectations for the delivery of customer support services.

Develop and implement performance criteria to ensure that requirements are achieved. Lead and/or support teams in responding to customer service problems or issues. Consults with other experts in other specialty areas to develop integrated action plans. Develops and updates customer policies and procedures to ensure appropriate responses to future incidents of a similar nature. Coordinate work with industry partners and internal service provider IT personnel to ensure delivery of high-quality products, services, and business solutions to support NSSC IT operations.

2.9. Project Planning. Assist in planning complex projects involving interrelated disciplines and preparing artifacts for that align with the most current version of NASA policy (e.g., NASA Procedural Requirement – NPR 7120.7, and other NSSC IT Governance/work instruction documentation). Assist in identifying requirements, and developing project estimates, schedules, and contingency plans. Recommends the overall project plan, budget, tasks descriptions, WBS, and deliverables. Ensure projects align business requirements to achieve Agency goals. Conduct alternatives analysis and prepare cost assessments for various approaches and include timing, personnel, and equipment factors and priorities. Recommend updating legacy systems or purchasing or developing new systems, with supporting business case analyses that expresses best value at the lowest cost.

Present recommendations to the NSSC IRD for adopting new systems or requirements as directed.

2.10. Customer Liaison. Assist with customers’ technical, management, and budgetary matters concerning specific aspects of projects. Facilitate and participate in change management by championing change items through sprint reviews, monitoring project activities, and mitigating programmatic and institutional risks.

2.11. Change Management. Assist with transitioning individuals, teams, and programs using methods that re-direct the use of resources, business process, budget allocations to significantly reshape how to conduct business and transform employee activities toward achieving the target NSSC operating state.

2.12. Federal IT Policy Analysis. OMB, GSA, GAO, and NIST oversee NASAs (including NSSC) environment and evaluate the conformance of its implementations against standards specified through the referenced policy, executive orders, reports, or guidance documents. Provide sound research and analysis into areas of innovation and strategic relevance to further NSSC business goals. Draw on expert knowledge of NASA and its Directorates, programs, and projects, and OCIO planning and formulation activities.

Prepare information, advice, alternatives, cost benefit analysis, business case analyses, evaluations, and formal recommendations. Assist in drafting new policy documents or processes (e.g., NSSC IT governance documents and work instructions) internal to the NSSC that address business management conformance with Federal practices and approaches; perform studies that evaluate services, systems, and suppliers; prepare assessment reports, design documents, implementation plans, shared services leading practices, and continuous improvement studies to optimize operational performance. Recommend acceptance or rejection of products to the NSSC executive team.

2.13. IT Assessments - Assess the effect of management practices, business processes, delivery models, IT security compliance, audits, IT architectures, and technologies. Work closely with NSSC OCIO and functional service personnel to understand the business processes, how the processes affect IT solutions and how IT can better support the services. The Contractor may proactively suggest IT assessment initiatives by submitting a MFR to the COR and OCIO; suggested initiatives shall be approved by the COR and OCIO prior to work being performed. Upon request, perform an IT assessment and submit a leadership decision briefing identifying deficiencies and recommending courses of action, innovative technologies and IT services to reduce costs while maintaining or increasing service quality.

2.14. New Business Support – Support the NSSC’s efforts to explore new business opportunities and attract new customers. This support includes:

• Identifying new services that could be transitioned to the NSSC

• Developing business cases, cost and time estimates to support new opportunities

• Establishing transition strategies that address processes, metrics, timelines and IT requirements

• Implementing innovative service delivery approaches that limit Government investment and application and infrastructure costs

• Coordinate as needed with NSSC Lines of business (e.g., Human Resource - HR, Financial Management - FM, Procurement - PR, and Enterprise Services - ES) and SOD in support of new business opportunities

2.15. Software License Management (SLM). The Contractor shall support the

NSSC SLM program by recommending changes to the NSSC’s internal license management controls to effectively perform software license management that conforms to federal and NASA policies/procedures. In addition, the Contractor shall assess the accuracy of the NSSC’s license tracking solution and recommend updates to existing governance processes, documentation, and work instructions to support improving the NSSC’s software license posture. In addition, perform periodic internal software license validation audits, provide updates and refinements to the NSSC SLM training coursework to remain current with software licensing management trends and best practices, and review license agreements to identify potential risks to the NSSC and provide recommendations to improve upon future software license agreement. In addition, support the continuous development and evolution of SLM governance structure, continuous risk management, collaborative project management, ongoing business case development, and organizational performance measurement organization, and documentation.

3. Payment Schedule. The contractor must submit monthly invoices. Contractor to propose a payment schedule.

4. Government Furnished Materials. The contractor will be provided a computer.

5. Non-Disclosure Agreement. The contractor shall complete a Non-Disclosure

Agreement at contract award.

6. Mitigation of Organizational Conflict of Interest.

(a) Mitigation plan. The Organizational Conflict of Interest Mitigation Plan and its obligations are hereby incorporated in the contract by reference.

(b) Changes. (1) Either the Contractor or the Government may propose changes to the Organizational Conflict of Interest Mitigation Plan. Such changes are subject to the mutual agreement of the parties and will become effective only upon incorporating the change into the plan by contract amendment. (2) In the event that the Government and the

Contractor cannot agree upon a mutually acceptable change, the

Government reserves the right to make a unilateral change to the OCI

Plan as necessary, with the approval of the head of the contracting activity, subject to Contractor appeal as provided in the Disputes clause.

(c) Violation. The Contractor shall report any violation of the Organizational

Conflict of Interest Mitigation Plan, whether by its own personnel or those of the Government or other contractors, to the Contracting Officer. This report shall include a description of the violation and the actions the

Contractor has taken or proposes to take to mitigate and avoid repetition of the violation. After conducting such further inquiries and discussions as may be necessary, the Contracting Officer and the Contractor shall agree on appropriate corrective action, if any, or the Contracting Officer shall direct corrective action.

(d) Breach. Any breach of the above restrictions or any nondisclosure or misrepresentation of any relevant facts required regarding organizational conflicts of interests to be disclosed may result in termination of this contract for default or other remedies as may be available under law or regulation.

(e) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (e), in subcontracts where the work includes or may include tasks related to the organizational conflict of interest. The terms ―Contractor‖ and ―Contracting Officer‖ shall be appropriately modified to reflect the change in parties and to preserve the Government‘s rights.

7. Disclosure

(a) If the Contractor identifies an actual or potential organizational conflict of interest that has not already been adequately disclosed and resolved (or waived in accordance with FAR 9.503), the Contractor shall make a prompt and full disclosure in writing to the Contracting Officer. This disclosure shall include a description of the action the Contractor has taken or proposes to take in order or resolve the conflict. This reporting requirement also includes subcontractors’ actual or potential organizational conflicts of interest not adequately disclosed and resolved prior to award.

(b) Mitigation plan. If there is a mitigation plan in the contract, the Contractor shall periodically update the plan, based on changes such as changes to the legal entity, the overall structure of the organization, subcontractor arrangements, contractor management, ownership, ownership relationships, or modification of the work scope.

8. 1852.204-76 SECURITY REQUIREMENTS FOR UNCLASSIFIED IT RESOURCES

(JAN 2011)

9. 1852.242-72 DENIED ACCESS TO NASA FACILITIES (OCT 2015)

10. 1852.204-75 SECURITY CLASSIFICATION REQUIREMENTS (SEP 1989)

11. 1852.237-72 ACCESS TO SENSITIVE INFORMATION (JUN 2005)

12. 1852.237-73 RELEASE OF SENSITIVE INFORMATION (JUN 2005)

(a) The NSSC is required to enact and maintain appropriate physical security measures necessary to provide for protection of persons and property.

Positive entry controls have been established at all entry points to the Center and individually designated security areas and facilities, as deemed necessary, to preclude unauthorized access to critical areas, information, or personnel.

(b) NASA currently employs an Agency-specific employee photo-ID badge or

Center-specific visitor pass to ensure only properly authorized personnel are granted access to NASA Centers, facilities, and other resources. The NSSC

Security have developed local procedures pertaining to the issuance, utilization, control, and accountability of the NASA Photo-ID badge and any

Center-specific visitor passes. These photo-ID badges are required as official identification for entry to NASA facilities.

(c) The Contractor shall obtain, from the NSSC Chief of Security, guidance on

Center specific policies and procedures relative to the issuance, utilization, control, and accountability of the NASA Photo-ID badge and any Center specific visitor passes.

(d) Representatives at Centers have been delegated the responsibility to review and approve all requests for NASA Photo-ID badges consistent with the requirements of FAR 52.204-9, Personal Identity Verification of Contractor

Personnel, NPR 1600.1, NASA Security Program Procedural Requirements, and any local Center policies.