SECHQ113Q0083.pdf

SEE ADDENDUMIS CHECKED

CODE 18a. PAYMENT WILL BE MADE BY

CODE

FACILITYCODE

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

OFFEROR

SEC - SECHQ

MAILSTOP 4010

100 F STREET NE

OFFICE OF ACQUISITIONS

US SECURITIES EXCHANGE COMMISSION

SEC - OIT-OPC CODE 16. ADMINISTERED BYCODE

X

X

X

517210

SIZE STANDARD:

100.00 % FOR:SET ASIDE:UNRESTRICTED ORSEC - SECHQ

RFPIFB

10. THIS ACQUISITION ISCODE

RFQ

14. METHOD OF SOLICITATION

13b. RATING

NAICS:

SMALL BUSINESS

05/16/2013 1700 ES

05/09/2013

202-551-7303PURNELL DREW

(No collect calls)

INFORMATION CALL:

FOR SOLICITATION 8. OFFER DUE DATE/LOCAL TIMEb. TELEPHONE NUMBER a. NAME

4. ORDER NUMBER3. AWARD/ 6. SOLICITATION

SECHQ113Q0083

5. SOLICITATION NUMBER

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 1. REQUISITION NUMBER PAGE OF

1 26 63000-13-0245OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

WASHINGTON DC 20549-2000

TELEPHONE NO.

17a. CONTRACTOR/

ALEXANDRIA VA 22312

202 551-7023

ATTN RAY THORPE

6432 GENERAL GREEN WAY

OFFICE OF INFORMATION TECHNOLOGY

US SECURITIES EXCHANGE COMMISSION

15. DELIVER TO

9. ISSUED BY

7.

2. CONTRACT NO.

EFFECTIVE DATE

1,500

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

ISSUE DATE

DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

11.

SEE SCHEDULE

12. DISCOUNT TERMS

THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13a.

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

8(A)

US SECURITIES EXCHANGE COMMISSION

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOSB PROGRAM

EDWOSB

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Delivery: 30 Days After Award

0001 Web Load Testing Solution that will load test the Oracle WebCenter Sites Solution by simulating realistic user traffic against various portions of the SEC.gov sites in accordance with the attached statement of work.

Continued ...

(Use Reverse and/or Attach Additional Sheets as Necessary)

HEREIN, IS ACCEPTED AS TO ITEMS:

X

XX

DATED

PURNELL DREW

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ARE

ARE

31c. DATE SIGNED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDEND

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

OFFER

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

30b. NAME AND TITLE OF SIGNER (Type or print)

30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA

29. AWARD OF CONTRACT:

REF.

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

40. PAID BY39. S/R VOUCHER NUMBER38. S/R ACCOUNT NUMBER

37. CHECK NUMBER

FINALPARTIAL

36. PAYMENT

FINALPARTIAL

35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER33. SHIP NUMBER

COMPLETE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

42d. TOTAL CONTAINERS42c. DATE REC'D (YY/MM/DD)

42b. RECEIVED AT (Location)

42a. RECEIVED BY (Print)

41c. DATE41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

STANDARD FORM 1449 (REV. 2/2012) BACK

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

0002 Performance Monitoring Solution that will monitor the SEC's public website through scripted transactions in accordance with the attached statement of work.

0003 Web Load Testing Solution that will load test the

Oracle WebCenter Sites Solution by simulating realistic user traffic against various portions of the SEC.gov sites in accordance with the attached statement of work.

(Option Line Item)

0004 Performance Monitoring Solution that will monitor the SEC's public website through scripted transactions in accordance with the attached statement of work.

(Option Line Item)

0005 Web Load Testing Solution that will load test the

Oracle WebCenter Sites Solution by simulating realistic user traffic against various portions of the SEC.gov sites in accordance with the attached statement of work.

Continued ...

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

26 2 of

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

3 26

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

SECHQ113Q0083

(Option Line Item)

0006 Performance Monitoring Solution that will monitor the SEC's public website through scripted transactions in accordance with the attached statement of work.

(Option Line Item)

0007 Web Load Testing Solution that will load test the

Oracle WebCenter Sites Solution by simulating realistic user traffic against various portions of the SEC.gov sites in accordance with the attached statement of work.

(Option Line Item)

0008 Performance Monitoring Solution that will monitor the SEC's public website through scripted transactions in accordance with the attached statement of work.

(Option Line Item)

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA

FAR (48 CFR) 53.110

Page 4 of 26 SECHQ113Q0083

DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

C.1 Scope

The Offeror shall provide the U.S. Securities and Exchange Commission (SEC) Office of Information Technology (OIT) with a Web Load Testing and Monitoring solution in support of their SEC.gov Modernization program. Specifically, the SEC is seeking a solution that includes the following components:

1. Licenses / subscriptions for all software required as part of the proposed solution

2. Consulting Services to assist the SEC in determining what to test, development of a Test Plan, developing test scripts, and testing and execution of load test scripts.

3. Initial training on the setup, configuration, and ongoing use of the proposed solution

4. First year support for all proposed software and services, with three one-year options

The four (4) items listed above are required for the Solution being proposed. The Offeror shall propose any additional items/tasks that are required by the proposed Solution in performing the requirements of this SOW, as well as any optional items that are recommended in the proposed Solution. Detailed explanations and line item pricing shall be provided for any items deemed optional.

C.2 Background

The SEC maintains four inter-related information technology environments that provide services to both the general public and participants in the securities industry: the SEC.gov Public Website, the SEC Investor Website (www.investor.gov), the Public EDGAR Repository, and the External Applications Environment (collectively referred to as the “SEC Websites”). The SEC Websites receive over 51 million hits per day and 1.6 billion hits per month. Although these environments have been operational for years, and have reached a high degree of operational maturity, the SEC recognizes that improvements can and should be made to reduce life cycle costs, increase capabilities, streamline management functions, and improve operational controls.

The SEC is in the first year of a multi-year effort to modernize its web presence, to be built on the Oracle WebCenter Sites solution. The SEC has adopted an iterative release approach to this modernization project, with new functionality and content being added to the WebCenter Sites solution every several months. In support of these iterative releases, the SEC is seeking to procure a tool that will allow the SEC to simulate external web traffic to the site at normal and peak performance levels in order to quickly identify and resolve potential performance issues prior to production deployments. Additionally, once in production, the SEC is seeking a tool that is hosted externally to the SEC that can monitor the website’s performance at regularly defined intervals. The SEC is seeking a flexible solution set that can grow over the life of the SEC.gov Modernization program to accommodate the additional scope, volume, and therefore additional test and monitoring scenarios that will need to be added.

C.3 Applicable Documents C.3.1 Federal Requirements and Industry Standards C3.1.1 Institute of Electrical and Electronic Engineers (IEEE), Standard 1074-2006, IEEE Standard for

Developing Software Life Cycle Processes. ISBN: 073814957X, Jan 1, 2006 C3.1.2 Software Engineering Institute (SEI), Capability Maturity Model® Integration (CMMI) Version

1.3 for Development (CMMI-DEV), for products and services C3.1.3 United Kingdom Treasury, Office of Government Commerce (OGC), Information Technology

Infrastructure Library (ITIL) Version 3 C3.1.4 International Organization for Standardization (ISO) 9000 Standard Series

Page 5 of 26 SECHQ113Q0083

C3.1.5 World Wide Web Consortium (W3C), Web Content Accessibility Guidelines (WCAG), Version

2.0 – W3C Recommendation, December 11, 2008 http://www.w3.org/TR/WCAG20/

C.3.1.6 E-Government Act of 2002 and the Federal Information Security Management Act (FISMA) of 2002 (Title 3 of the E-Government Act of 2002), Public Law 107-347 and 44 U.S.C. § 3601 et seq. Includes Section 208 privacy provisions

C.3.1.7 Assistive Technology Act of 1998 as amended 2004, Public Law 105-394 and 29 U.S.C. § 2201 C.3.1.8 Clinger-Cohen Act of 1996 (Information Technology Management Reform Act of 1995), 40

U.S.C. § 1401 et seq.

C.3.1.9 Government Performance and Results Act of 1993, P.L. 103-62 C.3.1.10 Americans with Disabilities Act of 1990 as amended 2008, P.L. 110-325 C.3.1.11 Privacy Act of 1974, Public Law No. 93-579, 5 U.S.C. § 552a as amended, December 31, 1974 C.3.1.12 The Electronic Communications Privacy Act of 1986, Public Law 99-508, 100 Stat. 1848, 18

U.S.C. § 2510, October 21, 1986 C.3.1.13 Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. § 794d) as amended by P.L. 105-220 under Title IV (Rehabilitation Act Amendments of 1998) C.3.1.14 U.S. Architectural and Transportation Barriers Compliance Board (also known as the Access

Board), Electronic and Information Technology Accessibility Standards, 36 C.F.R. Part 1194 C.3.1.15 U.S. Access Board, Section 508 Guidelines and Standards at http://www.access-board.gov/gs.htm C.3.1.16 U.S. Access Board, Draft Information and Communication Technology (ICT) Standards and

Guidelines, released for public comment March 2010 C.3..1.17 U.S. Chief Information Officer (CIO) Council, Federal Enterprise Architecture Practice

Guidance, December 15, 2008 C.3.1.18 U.S. General Accounting Office Executive Guide, “Information Technology: A Framework for

Assessing and Improving Enterprise Architecture Management” (Version 1.1), GAO-03-584G, April 2003

C.3.1.19 U.S. Office of Management and Budget (OMB) Circular No. A-11, Preparation, Submission and Execution of the Budget, August 7, 2009, revised November 16, 2009, March 31, 2010, July 21, 2010, and August 18, 2011. Exhibit 300, Information Technology Management and Reporting, http://www.whitehouse.gov/omb/circulars_a11_current_year_a11_toc/

C.3.1.20 OMB Circular No. A-130 Revised, Management of Federal Information Resources, November 28, 2000 Appendix III, A Security of Federal Automated Information Systems, http://www.whitehouse.gov/omb/circulars_a130_a130trans4

C.3. 1.21 OMB Memorandum M-09-29, FY 2009 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Management

C.3. 1.22 OMB Memorandum M-03-22, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002, September 30, 2003

C.3. 1.23 OMB Memorandum M-00-13, Privacy Policies and Data Collection on Federal Web Sites, June 22, 2000

C.3. 1.24 OMB Memorandum M-99-18, Privacy Policies on Federal Web Sites, June 2, 1999 C.3. 1.25 U.S. Department of Commerce, National Institute for Standards and Technology (NIST), Guide to Protecting the Confidentiality of Personally Identifiable Information (PII), SP 800-122, April

C.3. 1.26 NIST, Technical Guide to Information Security Testing and Assessment, SP 800-115, September 2008

C.3. 1.27 NIST, Information Security Handbook: A Guide for Managers, SP 800-100, October 2006 C.3. 1.28 NIST, Computer Security Incident Handling Guide, SP 800-61 Rev. 1, March 2008 C.3. 1.29 NIST, Recommended Security Controls for Federal Information Systems and Organizations, SP

800-53 Rev. 3, August 2009 C.3. 1.30 NIST, DRAFT Guidelines on Security and Privacy in Public Cloud Computing, SP 800-144, January 28, 2011

Page 6 of 26 SECHQ113Q0083

C.3. 1.31 NIST, DRAFT Information Security Continuous Monitoring of Federal Information Systems and Organizations, SP 800-137, December 16, 2010

C.3. 1.32 NIST, DRAFT Guide for Security Configuration Management of Information Systems, SP 800- 128, March 18, 2010

C.3.2 SEC Administrative Regulations C.3.2.1 Electronic Mail SECR 5-10, approved 5/20/1996 C.3.2.2 Safeguarding Non-Public Information, SECR 23-2A, approved 1/21/2000 C.3.2.3 Enterprise Architecture SECR 24-1.6, approved 11/25/2002 C.3.2.4 Information Technology Capital Planning and Investment Control, SECR 24-2 (SECR 24-02), version 2 approved 3/11/2011 C.3.2.5 Technical Bulletin: Enterprise Backup of Electronic Data, SECR 24-2.6, approved 6/09/2003 C.3.2.6 Information Technology Security Program, SECR 24-4 (SECR 24-04), approved 10/04/2005 C.3.2.7 Rules of the Road, SECR 24-04.A01, version 7 approved 3/16/2011 C.3.2.7 Use of SEC Office Equipment SECR 24-4.3, revised 4/28/2009 C.3.2.8 Use of Personal Digital Assistant (PDA) Devices SECR 24-5.2, revised 1/06/2010 C.3.2.9 Management and Protection of Privacy Act Records and Other Personally Identifiable

Information, SECR 24-8 (SECR 24-08), approved 4/14/2010 C.3.2.10 Electronic and Information Technology (EIT) Section 508 / Accessibility Program, SECR 24-

10, approved 5/06/2011

C.3.3 SEC OIT Information Security Please see Attachment B for SEC OIT Information Security Guidelines.

C.3.4 SEC OIT Project Control C.3.4.1 Information Technology Investment Management, OD 24-02.01, approved 8/14/2006 C.3.4.2 IT Investment Status Report Template, OP 24-02.01.02.01.T01, approved 2/27/2005 C.3.4.3 Information Technology Project Management, OD 24-02.02, approved 8/29/2007 C.3.4.4 Life Cycle Management, OD 24-02.03, approved 5/31/2011 C.3.4.5 Standard Life-Cycle Phases, OD 24-02.03.A01, approved 12/07/2004 C.3.4.6 Life Cycle Configuration Control Board (L-CCB), OD 24-02.03.C01, approved 1/21/2010 C.3.4.7 System Development Life Cycle Phase Reviews, II 24-02.03.02, approved 8/06/2008 C.3.4.8 Standard Operating Procedures (SOP), OIT-00005-002.0, approved 8/20/2002 C.3.4.9 Enterprise Architecture Steering Committee, SECR 24-03.C01, approved 9/3/2009 C.3.4.10 Process and Product Assurance Management, OD 24-03.01, approved 9/17/2009 C.3.4.11 Operational Configuration Control Board (O-CCB) Charter, OD 24-03.01.C01, approved

3/24/2010 C.3.4.12 Process and Product Assurance Management: Quality Management, II 24-03.01.01, approved

12/21/2005 C.3.4.13 Quality Assurance Plan, OP 24-03.01.01.01.T01, approved 8/06/2008 C.3.4.14 Quality Management: Quality Assurance, OP 24-03.01.01.04, approved 7/26/2006 C.3.4.15 Quality Assurance Independent Verification and Validation (IV&V) Procedures, 80-27-007-

001.0, approved 12/04/2001 C.3.4.16 Process and Product Assurance Management: Configuration Management, II 24-03.01.02, approved 9/17/2009 C.3.4.17 Configuration Management Planning, OP 24-03.01.02.01, approved 9/17/2009 C.3.4.18 Configuration Management Plan Template, OP 24-03.01.02.01.T01, approved 9/17/2009 C.3.4.19 Configuration Control: Version Control, OP 24-03.01.02.04, approved 6/9/2010 C.3.4.20 Configuration Control Version Description Document (VDD), OP 24-03.01.02.06.T01, approved 2/16/2010 C.3.4.21 Configuration Control: Change Management, OP 24-03.01.02.07, approved 5/3/2011 http://security.sec.gov/policy/r23-2A.html http://security.sec.gov/policy/r24-2.html http://security.sec.gov/policy/r24-2.html http://opc-ad-mossfe1/sites/ofa/irm/policy/OD/OD24-02-01_Information_Technology_Investment_Management.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Templates/OP24-02-01-02-01-T01_Project_Status_Report_Template.ppt http://opc-ad-mossfe1/sites/ofa/irm/policy/OD/OD24-02-02_Information_Technology_%20Project_Management.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OD/OD24-02-03_IT_Life_Cycle_Management.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Attachments/OD24-02-03-A01_Standard_Life-Cycle_Phases.ppt http://opc-ad-mossfe1/sites/ofa/irm/policy/Charters/OD24-02-03-C01_Life_Cycle_Configuration_Control_Board.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/II/II24-02-03-02_SDLC_Phase_Reviews.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Public/sop_proc.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Charters/SECR24-03-C01_EASC_Charter.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OD/OD24-03-01_Process_And_Product_Assurance_Management.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Charters/OD24-03-01-C01_Operational_Configuration_Control_Board_Charter.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/II/II24-03-01-01_Process_Product_Assurance_Management_QM.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Templates/OP24-03-01-01-01-T01_Quality_Assurance_Plan.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OP/OP24-03-01-01-04_Quality_Management_Quality_Assurance.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Public/QA_IVVPlan_proc.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/II/II24-03-01-02_Process_Product_Assurance_Management_CM.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OP/OP24-03-01-02-01_Configuration_Management_Planning.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Templates/OP24-03-01-02-01-T01_CM_Plan_Template.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OP/OP24-03-01-02-04_Configuration_Control_Version_Control.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Templates/OP24-03-01-02-06-T01_Configuration_Control_Version_Description_Document.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OP/OP24-03-01-02-07_Configuration%20Control_Change_Management.doc

Page 7 of 26 SECHQ113Q0083

C.3.4.22 Change Management Supplemental Documentation, OP 24-03.01.02.07.A01, approved 7/15/2009

C.3.4.23 Configuration Control: Configuration Identification – CM Master Library, OP 24-03.01.02.10, approved 9/17/2009

C.3.4.24 CM Master Library File Naming Standards, 24-03.01.02.10.A01, approved 9/17/2009 C.3.4.25 Review of Application Code, 24-07.04.01.01, approved 9/16/2008 C.3.4.26 OIT Code Review Certification, 24-07.04.01.01.T01, version 2 approved 10/27/2008 C.3.4.27 SEC Technical Reference Model, no identifier, approved 2/23/2009 C.3.4.28 IT Definitions and Glossary, OD Standard 24-03.01.S01, no date C.3.4.29 Technology Review Board (TRB), II 24-05.02.03.C01, approved 6/04/2008 C.3.4.30 Project Review Board (PRB), no identifier, version 3 approved 1/04/2010

C.3.5 SEC OIT Data Management C.3.5.1 Database Design Checklist, no identifier, no date C.3.5.2 Data Administration Configuration Control, no identifier, approved 4/10/2006 C.3.5.3 Data Management Policy, no identifier, version 2.1 approved 5/03/2006 C.3.5.4 Database Audits, OP 24-07.06.01.01, version 2 approved 2/10/2011 C.3.5.5 Data Modeling Rules of the Road, OD Standard 24-07.07.S01, version 1.6 approved 8/11/2010 C.3.5.6 Data and Database Administration Guidelines, 31-09-001-001.0, approved 4/25/2002 C.3.5.7 Data Administration Standards and Guidelines, OIT-00037-001.0, version 2.7 approved

3/30/2006

C.3.6 SEC OIT Section 508 Compliance C.3.6.1 Rehabilitation Act Section 508 Exemption or Remediation Plan, 24-10-BOD-508, 10/31/2002 C3.6.2 Section 508 of the Rehabilitation Act of 1973 http://www.access-board.gov/sec508/guide/act.htm C3.6.3 Implementing Section 508 http://www.section508.gov/index.cfm?fuseAction=stdsSum

C.3.7 Document Updates The Offeror shall refer to the SEC internal web sites and use any documents and standards that supersede or supplement the above-cited documents during the course of this contract.

C.4 Requirements Management C.4.1 Security. The Offeror’s work shall adhere to the security requirements defined in the above-referenced Section C.3.1 and C.3.3 documents.

C.4.2 Policies and Procedures. The Offeror shall comply with the SEC policy and procedures on life-cycle development efforts published at http://intranet.sec.gov under Policies and Procedures. This includes the documents in sections C.3.2 through C.3.6.

C.4.3 Section 508. The Offeror’s work shall comply with all applicable provisions of the standards issued by the Architectural and Transportation Barriers Compliance Board (Access Board) (http://www.access-board.gov/sec508/guide/) to ensure the accessible use of Federal electronic and information technology. Section 508 technical requirements apply to web applications, websites, including all types of electronic information and posted web content. All embedded charts, graphs, pictures, videos, etc., within the web content must be accessible and understandable using a screen reader and able to be navigated without a mouse.

The Offeror shall indicate for each line item in the schedule whether each product or service is compliant or non-compliant with the accessibility standards at 36 CFR 1194 using a document defined as a Voluntary Product Accessibility Template (VPAT) and is viewable at VPAT Info. Further, the quote http://opc-ad-mossfe1/sites/ofa/irm/policy/Attachments/OP24-03-01-02-07-A01_Change_Management_Supplemental_Documentation.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/OP/OP24-03-01-02-10_Configuration_Identification-CM_Master_Library.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Attachments/OP24-03-01-02-10-A01_CM_Master_Library_File_Naming_Standards.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Charters/II24-05_02_03_C01_Technology_Review_Board.doc http://opc-ad-mossfe1/sites/ofa/irm/policy/Charters/PRB_Charter.pdf http://www.section508.gov/index.cfm?fuseAction=stdsSum http://www.access-board.gov/sec508/guide/ http://www.itic.org/index.php?submenu=Resources&submenu=Resources&src=gendocs&ref=vpat&category=resources

Page 8 of 26 SECHQ113Q0083 must indicate where full details of compliance can be found (e.g., vendor’s website or other exact locations).

For contracts issued on or after June 25, 2001, Subsection 508(a)(1) of the Rehabilitation Act of 1973 requires that: When federal departments or agencies develop, procure, maintain, or use Electronic and Information Technology (EIT) they must ensure that the EIT allows Federal employees with disabilities to have access to and use of information and that data is comparable to the access to and use of information and data by other Federal employees; and, that individuals with disabilities who are members of the public seeking information or services from a Federal Department or agency, have access to and use of information and data that is comparable to that provided to the public without disabilities. The Offeror agrees to abide by this law and to ensure that all information created or used under this contract conforms to the above requirements. See also document C.3.2.10 and section C.3.6.

C.4.4 Solution Requirements. The Offeror shall provide at least 5 accounts to the SEC to manage and configure the Web Load Testing Solution and the Web Performance Monitoring Solution.

C.4.4.1 Web Load Testing Solution. The Offeror shall deliver a Web Load Testing Solution that will load test the Oracle WebCenter Sites solution by simulating realistic user traffic against various portions of the SEC.gov sites described in Section C.2.

The Web Load Testing Solution shall provide a realistic ramp up to the maximum number of users / sessions identified for the test.

o The Solution’s execution methodology shall take into account user abandonment rates of users as performance degrades.

The Web Load Testing Solution shall utilize the Offeror’s network – no software is expected to be installed within the SEC’s firewall.

The Web Load Testing Solution shall generate traffic from both Internet Explorer and Firefox browsers.

The Web Load Testing Solution shall generate traffic from 9 different locations across North

America.

The Web Load Testing Solution shall be executed in an environment that includes the SEC’s

Akamai service.

The Web Load Testing Solution shall utilize a User Agent that includes a string that identifies load test vendor The Web Load Testing Solution shall execute tests where the load testing traffic volume does not exceed 300Mb/s from a given geographic area + ISP combination.

The Web Load Testing Solution shall produce a series of reports after each test’s execution o Average response times by page and load o Origination location of any performance issues

The Web Load Testing Solution shall be able to execute tests unmonitored by SEC staff during off hours.

o Specifically, the window shall be between 11:00 PM and 5:00 AM Eastern Time.

As described in Section C.2, the SEC is iteratively delivering the SEC.gov Modernization program, and therefore will have increasing load testing scope. Below are the projected requirements for each year. The Offeror should include appropriate licensing / subscriptions for this scope in its technical and pricing proposals. Please see the requirements and table below that outlines the requirements for the base year and each option year of this RFQ.

Each test session shall be 2 hours in length.

Ramp up to the peak visitors per hour shall not occur faster than 0 to full in 15 minutes Each visitor’s duration on the site shall be 5 minutes.

The number of page views per visitor shall be 4.

Page 9 of 26 SECHQ113Q0083

Year Releases Tests Per Release Pages Per Test Peak Visitors per hour Base 3 5 10 15,000 Option 1 3 4 20 15,000 Option 2 3 4 30 25,000 Option 3 3 4 40 25,000

C.4.4.2 Performance Monitoring Solution. The Offeror shall deliver a Web Performance Monitoring Solution that will monitor the SEC’s public website through scripted transactions.

The Web Performance Monitoring Solution shall monitor the SEC.gov website’s performance from 5 different locations across North America.

o One internet provider backbone from each city

The Web Performance Monitoring Solution shall be capable of monitoring the SEC.gov site using Internet Explorer, Firefox, Chrome, and Safari via emulated browsers.

The Web Performance Monitoring Solution shall be able to monitor transaction-type activities, such as search and web form submissions. These activities are labeled as “Apps Monitored” in the table below.

The Web Performance Monitoring Solution shall provide a proactive alert should an issue be identified.

o The Proactive Alerts shall be configurable by the administrator.

The Web Performance Monitoring Solution shall utilize the Offeror’s network – no software is expected to be installed within the SEC’s firewall The Web Performance Monitoring Solution shall have an intuitive user interface that allows the

SEC to see performance trends over time, change the pages being monitored, and change the frequency of the monitoring.

The Web Performance Monitoring Solution shall store the detailed monitoring data for at least 1 month.

The Web Performance Monitoring Solution shall provide data summaries for up to 18 months.

As described in Section C.2, the SEC is iteratively delivering the SEC.gov Modernization program, and will therefore have increasing scope for the web monitoring solution. Below are the projected requirements for the base and option years of this contract. The Offeror should include appropriate licensing for this scope in its technical and pricing proposals. The Offeror shall assume that the monitoring shall be from 5 different points of presence across North America.

Year Pages Monitored Apps Monitored Frequency Base 5 2 5 Minutes Option 1 10 4 5 Minutes Option 2 15 6 5 Minutes Option 3 20 8 5 Minutes

C.5 Services Requirements The Offeror shall provide technical support in fulfilling SEC requirements for testing solution prior to activating it for use. The Offeror shall provide the required configurations necessary for using its solution in the SEC’s internal environments. Additionally, the Offeror shall support, at a minimum, application information security certification and accreditation (C&A) testing and Section 508 testing, as required.

The Offeror shall provide the Contracting Officer’s Representative (COR) with all information necessary to complete required test and remediation documentation.

Page 10 of 26 SECHQ113Q0083

C.5.1 Testing Deliverables. The Offeror shall provide consulting services in support of the SEC’s Load Testing efforts:

The Offeror shall work with the SEC to finalize the scope of each load test, to include the pages to be tested, the peak number of concurrent sessions, the duration of the test, and the timing of the test.

The Offeror shall deliver a Test Plan that documents the scope of the testing that will be completed for each SEC.gov Modernization Release. As previously stated, the Offeror should assume 3 releases per year.

The Offeror shall write the script(s) that will be used for each load test.

The Offeror shall perform a calibration test of the script(s) prior to the execution of the full load test.

o The Offeror shall not exceed 10 Mbps during this calibration test.

The Offeror shall execute the script(s) based on the parameters agreed upon in the Test Plan.

The Offeror shall deliver conclusions and recommendation to the SEC based on each test’s results.

C.5.2 Training. The Offeror shall provide all necessary and appropriate technical, administrative, and support personnel training. The Offeror shall provide support to no more than 5 SEC OIT personnel or contractors in learning and practicing the tasks required to administer the Web Load Testing and Performance Monitoring solutions. The Offeror shall deliver a Training Plan to the COR that outlines the schedule of training, recommended attendees, and topic for the training session. The Offeror shall conduct a group training session via webex and provide associated training materials.

C.6 Project Management C.6.1 Project Coordination. The Offeror shall coordinate with the COR and/or existing Program/Project Managers and provide regular project updates. It is expected that the Offeror will provide regular and appropriate updates to the COR.

C.6.2 Project Meetings C.6.2.1 Kick-Off Meeting. Within one week after contract award, the Offeror shall participate in a kick-off meeting attended by key Offeror personnel, the SEC Contracting Officer (CO), the COR, and other key SEC personnel to introduce project members and discuss their roles and responsibilities, introduce the SEC “rules of the road”, and discuss the high level requirements of the system, the project schedule, testing expectations, testing environments, security requirements, connections, and restrictions, at a minimum.

C.6.3 Program/Project and Schedule C.6.3.1 The Offeror shall coordinate and assist the COR and/or existing Program/Project Managers to identify and insert the appropriate tasks into the program’s Project Schedule to ensure the following:

timelines are appropriate for the size and scope of the project; resources are adequately assigned; and all appropriate milestones and checkpoints are included. The Offeror shall provide comments and recommendations regarding the Load Testing portions of the Project Schedule to the SEC.

The Offeror shall review the Project Schedule at least weekly and immediately notify the COR of any deviations from the Project Schedule that may impact major milestone delivery dates. The Offeror shall immediately notify the COR of any deviations from the project schedule.

C.6.4 Single Point of Contact The Offeror shall designate a single point of contact (POC) with the SEC for communicating issues, concerns, or problems that arise on this project. The POC shall have the authority to commit the Offeror

Page 11 of 26 SECHQ113Q0083 and make decisions for the Offeror, and shall be the single Offeror representative responsible for resolving all issues, concerns, or problems. The POC shall readily respond to SEC questions, concerns, and comments. The POC shall proactively alert the SEC of potential contractual issues.

C.6.5 Ad Hoc Support. During the initial planning process or during the execution of these activities, additional activities to be performed or work products to be developed by the Offeror may be identified by the SEC.

PACKAGING AND MARKING

2002.00 Marking

All information submitted to the Contracting Officer, the POC, or his/her designated contact shall clearly indicate the number of the contract for which the information is being submitted.

2003.00 Additional Shipping Instructions

The Offeror shall include the SEC contract/delivery order number on all packing slips that accompany items shipped to the SEC.

INSPECTION AND ACCEPTANCE

3001.00 Inspection and Acceptance (Mar 2012)

Ngoc Vu, vun@sec.gov will accomplish inspection and acceptance of the supplies and/or services to be furnished under this contract and inspection and acceptance of the final delivery. Inspection and acceptance will be performed at the Securities and Exchange Commission, Office of Information Technology 6432 General Green Way ATTN: Ray Thorpe for Ngoc Vu

(202) 551-7023.

DELIVERIES OR PERFORMANCE

4003.01 Schedule of Deliverables

Section Deliverable Schedule 1 C.5.1 Test Plan 2 Weeks after Kick-off 2 C.5.1 Test Scripts 3 Weeks after Kick-off 3 C.5.2 Training Plan 2 Weeks after Kick-off 4 C.5.2 Training Materials 3 Weeks after Kick-off 5 C.7.3.1 Project Schedule Input 1 Week after Kick-off

4004.00 Documenting, Inspecting, and Accepting Contract Deliverables (6/3/11) The Offeror shall submit all deliverables requiring a transmittal sheet with either the attached Deliverable Transmittal sheet or an alternative transmittal sheet that contains substantially the same information.

4001.00 Period of Performance w/Option Years

The purchase order’s basic period of performance shall be from the effective date of the purchase order award through the purchase order month 12 (one year). Beyond the base period, there are three one-year option periods. Taken together with the base period and option periods, the purchase order term may last for a total period not to exceed four years.

The period of performance for the base period, CLINs 0001 and 0002, is 365 days after award.

Page 12 of 26 SECHQ113Q0083

The period of performance for option period 1, CLINs 0003 and 0004, is 365 calendar days after the base period.

The period of performance for option period 2, CLINs 0005 and 0006, is 365 calendar days after the option period 1.

The period of performance for option period 3, CLINs 0007 and 0008, is 365 calendar days after the option period 2.

Schedule of Deliverables The Offeror shall prepare deliverables using Microsoft Office Suite 2007 or compatible formats, as approved by the COR. For all deliverables the Offeror will provide electronic copies (unless otherwise requested) to the COR or other contacts when designated. All deliverable materials must comply with applicable laws, regulations, polices and other directives for the U.S. federal executive branch. The COR will review all deliverables and provide comments and/or approvals/disapprovals within one week.

a. Offeror personnel shall complete tasks on time; ensure work products are thorough and accurate; and work and interact professionally and effectively with all levels of management and staff in completing tasks. Unprofessional behavior will not be tolerated and is grounds for immediate removal at the Offeror’s expense.

b. The Offeror shall provide the COR with a monthly activity report supporting the invoice price -- e.g., employee name, hours worked per pay period, and hourly rate. The report shall show the total charged for that month of services as well as the cumulative charges from the date of award. The report shall be submitted by email no later than the fifth business day of each month.

c. Any materials created by the Offeror as a work product of this contract will become the sole property of the SEC.

4003.00 Place of Delivery- FOB Destination

The deliverables to be furnished under this purchase order shall be delivered to the following address:

U.S. Securities and Exchange Commission Office of Information Technology Regional Office 6432 General Green Way Alexandria, VA 22312 Attn: ATTN: Ray Thorpe for Ngoc Vu Phone Number: (202) 551-7023 E-mail: thorpeR@sec.gov

Contract Administration Data

5001.00 Contract Administration

This contract will be administered by the SEC’s Office of Acquisitions. All inquiries should be directed to the following address:

Securities and Exchange Commission Office of Acquisitions Attn: Purnell Drew, (202) 551-7303 Email: drewp@sec.gov Room 4164 mailto:thorpeR@sec.gov

Page 13 of 26 SECHQ113Q0083

100 F Street ST NE Washington, DC 20549-2000

5003.00 Submission of Invoices (Apr 2012)

The Securities and Exchange Commission accepts only electronic/e-mail invoices.

Invoices shall be submitted on a monthly, after inspection and acceptance by SEC basis.

Contractors should submit invoices in accordance with the SEC Prompt Payment Provision of the contract. Contractors are cautioned against submitting an invoice prior to goods and services being received/accepted. Invoices submitted prematurely may be rejected.

Electronic/e-mail Invoice Instructions:

Invoices must be in PDF Format and may not exceed 10MB Subject Line: Company name and the invoice number e-mail Message:

Company logo or letterhead Company name and payment address Company point of contact (POC) for the invoice with phone and e-mail Invoice Number SEC Contract or Order number

SEC COR

For supplies: contract line item number, item description, quantity delivered, and unit and extended price, per Section B CLIN structure

For services: contract line item number, item description, period of performance and associated costs, per Section B, contract line item, CLIN, structure

Shipping and handling charges, if applicable

Clearly mark duplicates of previous invoice submissions with "DUPLICATE"

Clearly mark the final invoice with "FINAL INVOICE"

Attach the invoice and any supporting documents in a secure tamper-proof or tamper-resistant format compatible with Adobe Acrobat.

Electronic signatures are acceptable in scanned documents. Each page of a document must be clearly marked with information identifying it with the company, the contract, the invoice, and any other information required by the contract.

E-mail invoices to the following address: 9-AMC-AMZ-SEC-Invoices@faa.gov

5003.02 Software license Maintenance and Subscription Service Invoicing

It is customary commercial practice to pay for software licenses maintenance at the beginning of the contract period of performance, after submittal of a proper invoice. CLINs 0001 and 0002 through the option periods if exercised ( CLINs 0003 through 0008) may be invoiced at the beginning of the month of service.

5004.00 Appointment of Contracting Officer’s Representative (COR) (Mar 2012)

Page 14 of 26 SECHQ113Q0083

a. The Contracting Officer shall appoint, in writing, a Contracting Officer’s Representative (COR) for this award. The COR and Alternate COR shall have a current Federal Acquisition Certification for CORs (FAC-COR) at the appropriate certification level for the contract. A COR may serve on a contract requiring certification at or below his/her level, but not on one requiring a higher level. The COR has no authority regarding the terms and conditions of the contract. The Contractor shall be provided a copy of the appointment letter identifying the tasks for which the COR is responsible. The COR may not re-delegate his or her authority.

b. The COR will act as the liaison to coordinate activities between the Contractor and Contracting Officer, as required, in the performance of the work under this contract.

c. Only the Contracting Officer has the authority to change the terms and conditions of this contract. The COR may not agree to or issue a change to the contract terms and conditions. In the event the Contractor effects changes to the contract at the direction of any person other than the Contracting Officer, the changes will be considered to have been made without any authority and no adjustments will be made to the contract.

5007.00 Payment Information (Feb 2012)

Payment will be made to small business contractors within 15 days of receipt of a valid invoice.

Unless otherwise stated, and the contractor is not a small business, payment will be made within the guidelines of the Prompt Payment Act and requires that payment is made within 30 days from receipt of a valid invoice.

Special Contract Requirements

6002.00 Type of Contract

This is a firm-fixed price type contract.

6012.00 Security and Privacy Act Matters

The security classification for work performed under this contract is Public Trust. The documents that shall be reviewed and produced are non-public and sensitive in nature and shall be protected from unauthorized disclosure. Work on this project request that personnel have access to Privacy Act Information. Personnel shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations.

6012.02 SEC 508 Requirements (March 2011)

Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998, all electronic and information technology (EIT) products and services developed, acquired, maintained, and/or used under this contract/order must comply with the Electronic and Information Technology Accessibility Provisions set forth by the Architectural and Transportation Barriers Compliance Board (also referred to as the ¿Access Board¿) in FAR 39.2.The complete text of Section 508 Final Provisions can be accessed at http://www.access-board.gov/sec508/provisions.htm.

All EIT products must comply with the following standards. Descriptions of the standards are viewable at the link Section 508 Standards.

Page 15 of 26 SECHQ113Q0083

¿ 36 CFR 1194 Section 21-Software applications and operating systems ¿ 36 CFR 1194 Section 22-Web-based Intranet and Internet Information and Applications ¿ 36 CFR 1194 Section 23-Telecommunication Products ¿ 36 CFR 1194 Section 24-Video and Multimedia Products ¿ 36 CFR 1194 Section 25-Self- contained, closed products ¿ 36 CFR 1194 Section 26-Desktop and Portable Computers ¿ 36 CFR 1194 Section 31-Functional Performance Criteria ¿ 36 CFR 1194 Section 41-Information, documentation, and support Offerors that fail to demonstrate compliance with the above standards, or provide equivalent salient characteristics, may be eliminated from further consideration for award.

The Contractor shall indicate for each line item in the schedule whether each product or service is compliant or non-compliant with the accessibility standards at 36 CFR 1194 using a Voluntary Product Accessibility Template (VPAT). Further, the quote must indicate where full details of compliance can be found (e.g., vendor’s website or other exact location). The offeror further represents that all EIT products and services that are less than fully compliant have been reviewed and plans to correct are in place.

Respondents to this solicitation must provide any additional detailed information necessary for determining applicable Section 508 standards conformance, as well as for documenting EIT products and/or services that are incidental to the project, which would constitute an exception to Section 508 requirements. If a vendor claims its products and/or services, including EIT deliverables such as electronic documents and reports, meet applicable Section 508 standards, and it is later determined by the Government ¿ i.e., after award of a contract/order, that products and/or services delivered do not conform to the described accessibility, remediation of the products and/or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its expense.

(End of Provision)

6012.04 Electronic and Information Technology Accessibility (Mar 2011)

Each Electronic and Information Technology (EIT) product or service furnished under this contract shall comply with the Electronic and Information Technology Accessibility Standards (36 CFR 1194 ). If the Contracting Officer determines any furnished product or service is not in compliance with the contract, the Contracting Officer will promptly inform the Contractor in writing. The Contractor shall, without charge to the Government, repair or replace the non-compliant products or services within the period of time to be specified by the Government in writing. If such repair or replacement is not completed within the time specified, the Government shall have the following recourses:

The right to Termination of the contract, delivery or task order, purchase or line item without termination liabilities pursuant to the contract termination clauses; or In the case of custom Electronic and Information Technology (EIT) being developed for the Government, the Government shall have the right to have any necessary changes made or repairs performed by itself or by another firm and the contractor shall reimburse the Government for any expenses incurred thereby.

For every EIT product or service accepted under this contract by the Government that does not comply with 36 CFR 1194, the contractor shall, at the discretion of the Government, make every effort to replace or upgrade it with a compliant equivalent product or service, if commercially available and cost neutral, on either the planned refresh cycle of the product or service, or on the contract renewal date, whichever shall occur first.

In the event of a modification(s) to this contract/order, which adds new EIT products and services or revises the type of, or specifications for, products and services the Contractor is to provide, including EIT deliverables such as electronic documents and reports, the Contracting Officer may require that the contractor provide an update of information provided in the solicitation to identify EIT compliance.

Under any maintenance agreement, Contractor agrees to maintain compliance with Section 508 of the Rehabilitation Act of 1973 for all EIT.

Page 16 of 26 SECHQ113Q0083

In order to comply with 36 CFR 1194 Section 41, the Contractor shall submit all soft copies (e.g., user manuals, product documentation, etc.) in a format that will be readable using assistive technology, (e.g., screen reader). All imbedded charts, graphs, pictures, etc., must be accessible and understandable using a screen reader.

(End of Clause)

6014.00 Use of Contractor Data and/or Materials

The Contractor acknowledges and agrees to the following: The SEC anticipates using the data and/or materials to conduct analyses for use in reports, studies, memoranda, and presentations. The SEC anticipates the following types of situation where analyses based on underlying data may be made public:

by the SEC itself (E.g., SEC rulemaking and/or analysis done as part of an inspection or enforcement action), by SEC staff where the SEC is directing or facilitating the publication (e.g., a staff study in response to a Congressional request), by SEC staff facilitating their own private publication where the Commission has not taken a position regarding the publication of the analysis(e.g., a research report to be submitted by the individual staff to an academic conference or journal), and a former employee of the SEC who has substantially completed the analysis while on staff and is facilitating his/her own private publication( e.g., a research report to be submitted to an academic conference or journal). In all of these situations, only ¿insubstantial amounts¿ of the licensed data and/or material would be made public and no raw data would be made public, the authors would agree to abide by all contractual terms and conditions, and as the owner/licensor of the data the Contractor would receive attribution and be cited as the data source. ¿Insubstantial amounts¿ means an amount that has no independent commercial value and could not be used as a substitute for the service or product or any part of it.

Contract Clauses

52.212-1 Instructions to Offerors - Commercial Items. (Feb 2012)

52.212-3 Offeror Representations and Certifications-Commercial Items. (Dec 2012)

52.212-4 Contract Terms and Conditions - Commercial Items. (Feb 2012)

52.212-5 Contract Terms and Conditions Required to Implement Statutes or Executive Orders - Commercial Items. (Jan 2013)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.222-50, Combating Trafficking in Persons (Feb 2009) (22 U.S.C. 7104(g)).

___Alternate I (Aug 2007) of 52.222-50 (22 U.S.C. 7104(g)).

(2) 52.233-3, Protest After Award (Aug 1996) (31 U.S.C. 3553).

(3) 52.233-4, Applicable Law for Breach of Contract Claim (Oct 2004) (Pub. L. 108-77, 108-78).

Page 17 of 26 SECHQ113Q0083

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

[Contracting Officer check as appropriate.]

_x_ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Sept 2006), with Alternate I (Oct 1995) (41 U.S.C. 253g and 10 U.S.C. 2402).

__ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (Apr 2010) (Pub. L. 110-252, Title VI, Chapter 1 (41 U.S.C. 251 note)).

__ (3)…