Sol_140G0221Q0074.pdf

SEE ADDENDUMIS CHECKED

CODE 18a. PAYMENT WILL BE MADE BY

CODE

FACILITYCODE

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

OFFEROR

GDB

DENVER CO 80225-0046

204 DENVER FEDERAL CENTER

PO BOX 25046

USGS OAG DENVER ACQUISITION BRANCH

0006366867 CODE 16. ADMINISTERED BYCODE

X

X

X

541511

SIZE STANDARD:

100.00 % FOR:SET ASIDE:UNRESTRICTED ORGDB

RFPIFB

10. THIS ACQUISITION ISCODE

RFQ

14. METHOD OF SOLICITATION

13b. RATING

NAICS:

SMALL BUSINESS

08/23/2021 1430 MD

08/10/2021

303-236-9327Lisa Williams (No collect calls)

INFORMATION CALL:

FOR SOLICITATION 8. OFFER DUE DATE/LOCAL TIMEb. TELEPHONE NUMBER a. NAME

4. ORDER NUMBER3. AWARD/ 6. SOLICITATION

140G0221Q0074

5. SOLICITATION NUMBER

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 1. REQUISITION NUMBER PAGE OF

1 76 0040529157OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

TELEPHONE NO.

17a. CONTRACTOR/

Denver CO 80225 Box 25046 Denver Federal Center

MS 966

USGS Geologic Hazards Team

15. DELIVER TO

DENVER CO 80225-0046

204 DENVER FEDERAL CENTER

PO BOX 25046

9. ISSUED BY

7.

2. CONTRACT NO.

EFFECTIVE DATE

$30.00

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

ISSUE DATE

DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

11.

SEE SCHEDULEX

12. DISCOUNT TERMS

THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13a.

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

8(A)

USGS OAG DENVER ACQUISITION BRANCH

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Software Maintenance and Development Support Services Edge/Continuous Waveform Buffer (CWB) and Hydra for USGS, Geologic Hazards Science Centers Advanced National Seismic Network (ANSS), Golden, CO

COMBINED SYNOPSIS/SOLICITATION

1. This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, as supplemented with

(Use Reverse and/or Attach Additional Sheets as Necessary)

HEREIN, IS ACCEPTED AS TO ITEMS:

X

XX

DATED

Lisa Williams

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ARE

ARE

31c. DATE SIGNED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

OFFER

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

30b. NAME AND TITLE OF SIGNER (Type or print)

30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA

29. AWARD OF CONTRACT:

REF.

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

40. PAID BY39. S/R VOUCHER NUMBER38. S/R ACCOUNT NUMBER

37. CHECK NUMBER

FINALPARTIAL

36. PAYMENT

FINALPARTIAL

35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER33. SHIP NUMBER

COMPLETE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

42d. TOTAL CONTAINERS42c. DATE REC'D (YY/MM/DD)

42b. RECEIVED AT (Location)

42a. RECEIVED BY (Print)

41c. DATE41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

STANDARD FORM 1449 (REV. 2/2012) BACK

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

additional information included in this notice.

2. This announcement constitutes the only solicitation; quotations are being requested.

3. This solicitation is issued as a Request for

Quotations (RFQ). Submit written quotations on

RFQ Number 140G0221Q0074. This solicitation will utilize the policies contained in the Federal

Acquisition Regulation (FAR) Part 12, Acquisition of Commercial Items, and in conjunction with the policies and procedures for solicitation, evaluation, and award prescribed in FAR Part 13.5

Simplified Procedures for Certain Commercial

Items, as appropriate for this acquisition.

4. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC)

2021-06.

5. The solicitation is 100% Small Business

Set-Aside. The North American Industry

Classification System (NAICS) code is 541511

(Custom Computer Programming Services) and the size standard is $30 million.

6. Vendors are required to be registered in

System for Award Management (SAM) when submitting

Continued ...

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

76 2 of

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

3 76

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0221Q0074 an offer or quotation. Register at https://www.sam.gov/index.html prior to submitting your quotation. See FAR provision

52.204-7(b)(1).

7. Please download attached Solicitation

140G0221Q0074 for all Clauses and Provisions and

Attachments provided in this announcement.

Delivery: 09/24/2021

Period of Performance: 09/25/2021 to 09/24/2022

00010 Base Year: Software Maintenance and Development

Support Services Edge/Continuous Waveform Buffer

(CWB) and Hydra for USGS, Geologic Hazards

Science Centers Advanced National Seismic Network

(ANSS), Golden, CO

Services, non-personal to provide all plant, equipment, labor, supervision, and materials

(unless otherwise provided herein) necessary to provide Software Maintenance and Development

Support Services in accordance with attached

Performance Work Statement and all Terms and

Conditions, and price contained herein.

The Contractor shall bill monthly firm-fixed pricing in arrears: $_______ per month X 12

Months = NTE $_____ per year.

Anticipated Award Type: Firm-fixed-price

IT Approval Num: 0070026607

00020 Option Year I: Software Maintenance and

Development Support Services Edge/Continuous

Waveform Buffer (CWB) and Hydra for USGS, Geologic Hazards Science Centers Advanced

National Seismic Network (ANSS), Golden, CO

Services, non-personal to provide all plant, equipment, labor, supervision, and materials

(unless otherwise provided herein) necessary to provide Software Maintenance and Development

Support Services in accordance with attached

Performance Work Statement and all Terms and

Continued ...

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA

FAR (48 CFR) 53.110

4 76

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0221Q0074

Conditions, and price contained herein.

The Contractor shall bill monthly firm-fixed pricing in arrears: $_______ per month X 12

Months = NTE $_____ per year.

Anticipated Award Type: Firm-fixed-price

IT Approval Num: 0070026607

(Option Line Item)

09/19/2022

Period of Performance: 09/25/2022 to 09/24/2023

00030 Option Year II: Software Maintenance and

Development Support Services Edge/Continuous

Waveform Buffer (CWB) and Hydra for USGS, Geologic Hazards Science Centers Advanced

National Seismic Network (ANSS), Golden, CO

Services, non-personal to provide all plant, equipment, labor, supervision, and materials

(unless otherwise provided herein) necessary to provide Software Maintenance and Development

Support Services in accordance with attached

Performance Work Statement and all Terms and

Conditions, and price contained herein.

The Contractor shall bill monthly firm-fixed pricing in arrears: $_______ per month X 12

Months = NTE $_____ per year.

Anticipated Award Type: Firm-fixed-price

IT Approval Num: 0070026607

(Option Line Item)

09/18/2023

Period of Performance: 09/25/2023 to 09/24/2024

00040 Option Year III: Software Maintenance and

Development Support Services Edge/Continuous

Waveform Buffer (CWB) and Hydra for USGS, Geologic Hazards Science Centers Advanced

National Seismic Network (ANSS), Golden, CO

Services, non-personal to provide all plant, equipment, labor, supervision, and materials

(unless otherwise provided herein) necessary to

Continued ...

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

5 76

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0221Q0074 provide Software Maintenance and Development

Support Services in accordance with attached

Performance Work Statement and all Terms and

Conditions, and price contained herein.

The Contractor shall bill monthly firm-fixed pricing in arrears: $_______ per month X 12

Months = NTE $_____ per year.

Anticipated Award Type: Firm-fixed-price

IT Approval Num: 0070026607

(Option Line Item)

09/16/2024

Period of Performance: 09/25/2024 to 09/24/2025

00050 Option Year IV: Software Maintenance and

Development Support Services Edge/Continuous

Waveform Buffer (CWB) and Hydra for USGS, Geologic Hazards Science Centers Advanced

National Seismic Network (ANSS), Golden, CO

Services, non-personal to provide all plant, equipment, labor, supervision, and materials

(unless otherwise provided herein) necessary to provide Software Maintenance and Development

Support Services in accordance with attached

Performance Work Statement and all Terms and

Conditions, and price contained herein.

The Contractor shall bill monthly firm-fixed pricing in arrears: $_______ per month X 12

Months = NTE $_____ per year.

Anticipated Award Type: Firm-fixed-price

IT Approval Num: 0070026607

(Option Line Item)

09/15/2025

Period of Performance: 09/25/2025 to 09/24/2026

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Combined Synopsis/Solicitation 140G0221Q0074

Table of Contents

Performance Work Statement Contractor Performance Assessment Reporting System (DEC 2015) DOI Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013) ...13 FISMA Information Technology Security Requirements Summary INTERNET PROTOCOL version 6 (June 2012) SECURITY REQUIREMENTS: FACILITY ACCESS and INFORMATION TECHNOLOGY (AUG 2016)

1452.201-70 AUTHORITIES AND DELEGATIONS (SEPT 2011)

GS0199 Prevention of Malicious Code (JUN 2018) GS0301 General Requirements. (Jul 2001) GS0330 Section 508 Applicable Standards (JUL 2001) GS0339 Green Acquisition (JUL 2018) GS0905 Place of Performance. (JUL 2001) GS0919 Legal Holidays. (JUN 2021) GS0925 Unscheduled Closures – Fixed Price. (MAR 2003) GS0931 Monthly Progress Report – Fixed Price. (JUL 2001) GS1101 Contract Administration Office. (JUL 2001) GS1131 Unilateral Deobligation of Unexpended Funds. (MAY 2013) GS1330 Key Personnel. (JUL 2001) GS1332 Contractor’s Representative. (JUL 2001) GS1348 Accident Reporting. (APR 2003) GS1359 Travel and Transportation (JULY 2001) GS1364 Nonpersonal Services and Supervision of Contractor’s Employees (SEP 2017) GS1371 Availability of IT Security Standards, Guides and Other Publications (JUL 2018) GS1406 Confidentiality of Data (OCT 2005) GS1420 Use of Government Computers (September 2018) GS1440 Wage Determination Applicable (JUL 2001) 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders - Commercial Items. (JUL 2021) 52.217-9 Option To Extend the Term of the Contract. (MAR 2000)

LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

52.252-2 Clauses Incorporated by Reference. (FEB 1998) GS2101 Inquiries (FEB 2007) GS2102 Incurring Costs (JUL 2001) GS2115 Independent Review of Protests to the Agency (Jul 2001) 52.204-20 Predecessor of Offeror. (AUG 2020) 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment. (OCT 2020) 52.204-26 Covered Telecommunications Equipment or Services-Representation. (OCT 2020) 52.209-7 Information Regarding Responsibility Matters. (OCT 2018) 52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law. (FEB 2016) 52.212-3 Offeror Representations and Certifications-Commercial Items. (FEB 2021) 52.216-1 Type of Contract. (APR 1984) 52.219-1 Small Business Program Representations. (NOV 2020) 52.222-22 Previous Contracts and Compliance Reports. (FEB 1999) 52.222-25 Affirmative Action Compliance. (APR 1984) 52.229-11 Tax on Certain Foreign Procurements-Notice and Representation. (JUN 2020) 52.212-2 Evaluation - Commercial Items. (OCT 2014) Basis for Award GS2301 Single Award (AUG 2001) Quotation Preparation Instructions Electronic Submission of Quotations – Required

Questions – Cutoff 52.252-1 Solicitation Provisions Incorporated by Reference. (FEB 1998)

Clauses:

Performance Work Statement

I. Introduction:

The USGS Geologic Hazards Science Center’s Advanced National Seismic Network (ANSS) Project has an ongoing need for software maintenance and development in support of the ANSS mission to provide rapid estimate of global earthquake locations, magnitudes, emergency response products and other earthquake source properties computed using mission-critical acquisition and processing systems (Edge/Continuous Waveform Buffer (CWB) and Hydra).

II. Background:

The USGS Geologic Hazards Science Center’s Advanced National Seismic Network (ANSS) Project continues to improves its overall completeness, reliability, and timeliness of seismic information available from the National Earthquake Information Center (NEIC), which is the National Operation Center (NOC) for the ANSS Program. This information serves earthquake hazard responders, public officials, the media, the seismological research and earthquake engineering communities, and the general public. The ANSS Project is an integrated effort including the extension and maintenance of real-time national and global seismograph networks; operational support for automated seismic processing, analyst review, and catalog production; development of a complete automated processing and analyst support system; and operational personnel. The ANSS Program involves the exchange of real-time data from more than 100 cooperating institutions including the NEIC. Because NEIC operates as a 24x7 response facility, the ANSS Project develops its customized software to be highly robust, redundant and easily configurable to ensure earthquake products are distributed 24 hours/day, 7 days/week. This effort requires specialized real-time programming of the field processors (at the stations) and interface software at cooperating data centers, handling telemetry on satellite and terrestrial links under TCP/IP protocols, and acquiring, processing, managing, archiving, and distributing data at the NEIC. This task is significantly complicated the deployment of many different types of station processors that are received in real-time either directly or mediated by a variety of data center hardware and software and received over numerous private and public wide area computer networks.

III. Scope:

The contractor shall work independently on computer hardware and software systems that are complex to analyze, plan, program, and operate. The contractor shall participate in all phases of planning, system design, prototyping, development, testing, documentation, and software maintenance.

The core software is available at https://github.com/usgs/edgecwb for review.

This has historically been completed by one developer working full time (1800 hours), however a growing workload can support 2 full time developers. A possible configuration is a lead senior developer working at 1000-1200 hours and a junior-mid developer working 1800 hours. The project management is handled in house. We work in an agile environment and priorities often change depending on scientific advances and societal events.

IV. Technical Requirements:

During the contract period, the contractor shall perform specific integration and programming tasks as outlined below:

1) Writing new code to add new functionality to the system(s).

https://github.com/usgs/edgecwb

2) Enhancing existing code to extend the functionality of the system(s).

3) Upgrading existing code to improve its operating characteristics.

4) Monitor existing and newly developed software and correcting faults.

The development tasks can be divided into three categories:

1) Network related tasks

2) Database management system (DBMS) related tasks

3) Real-time programming

4) Multi-threaded programming

5) General programming

6) High level and detailed software design, and

7) Programming of scientific algorithms

8) 24/7 monitoring and debugging

9) General software maintenance

Note that the development tasks support core earthquake response activities (e.g., acquiring and managing seismic waveform data, state-of-health information, and station metadata). The monitoring and maintenance task is to support 24/7 data acquisition functionality which in turn supports 24/7 seismic detection, monitoring, and analysis systems, as well as maintenance for support infrastructure already developed. The contractor shall perform work on existing government owned servers that operate supported Linux versions. All available documentation of existing software will be provided to the contractor. There will be some tasks that need to be performed on premise at GHSC due to network or security concerns and in person collaboration. The Contractor shall develop general data management and scientific/engineering analysis applications and real-time data acquisition and process control applications.

He or she shall develop, support, and interface with highly specialized real-time field data acquisition software. The contractor shall participate in the monitoring and maintenance of applications and systems software to ensure maximum uptime of existing and newly developed software in an active operational environment. The contractor shall provide limited system support including hardware fault recovery and the installation of new layered systems software packages.

All software developed under this contract will adhere to NEIC systems architecture and Hazards Development Best Practices. Details of these standards are widely discussed, documented in code, and practiced in the center and can be provided to the Contactor by the COR.

The contractor shall make up to two trips per year for the purpose of attending specialized user-group meetings, leading training courses in data acquisition and data exchange protocols, and to occasionally visit selected field stations for coordination and debugging of data exchange protocols.

Presentations: Provide support as required in the form of oral or written presentations, program/project reviews and meeting preparation and attendance at such training and places designated by the Government.

Note that in cases of a rare emergency situation involving significant loss of irreplaceable data, the monitoring and maintenance activity requires that the contractor shall, upon oral or written notification by the Government of an emergency situation within the contractor's area of responsibility, immediately begin work to resolve the crisis by means of patches, work around, etc. on a 24-hour/day, 7-day/week basis.

(Based on past occurrences, emergency situations requiring immediate response typically occur between 3 to 7 times per month.) However, past experience may not be an indicator of future requirements. The following sections describe specific development and support activities for which the contractor will be responsible:

Development tasks may include:

Because of additional features such as real-time picking, modify Edge/CWB/QueryMom to allow better status monitoring by ICINGA or other tools

Support any code changes needed for Java version upgrade

Support code changes needed for exploring migration of Edge/CWB nodes to running in the USGS Cloud Hosting Solutions (CHS) approved cloud infrastructure

Support Fetcher gap filling from SeedLink, EW WaveServers, and Baler44 on Q330 Further enhance QueryMom for faster access to real-time waveform data to enable development of new real-time picking, machine learning, and detection processing Support GeoMag and Landslide Programs use of Edge/CWB software by improved near real-time handling of low rate data, including support for data acquisition from ObsRio dataloggers

Work with researchers on requirements for improved CWB access methods for machine learning applications

Work with researchers using a wide range of data types (e.g. IMS arrays, 3-component broadband) and new machine learning models to improve seismic detection, association and locations.

Develop machine learning models that use seismic amplitudes or coda envelopes for determining seismic magnitudes.

Participate in the technology transfer from research algorithms to production modules, particularly for time series analysis applications.

Facilitate the conversion of NEIC station metadata to StationXML either by modification to Inv or migration to SIS

Algorithm Reconfiguration for Expanded Use includes:

Work with IT and Hydra Development staff on migrating standard processing algorithms (e.g.

locator, filterPicker) from tightly coupled Hydra modules to service-oriented processing (e.g.

client-server, webservices)

Work with IT and Hydra Development staff on best business practices for configuring and deploying robust operational software systems

Maintenance Tasks:

Participate in recovery efforts following failures of Edge, CWB and station-specific metadata services. The contractor shall ensure the continued operation of real-time processes to the greatest extent possible given the nature of the failure before aiding in general recovery procedures.

Maintain software to allow Volcano Hazards Program to send all data to the NEIC and allow NEIC 24/7 personnel to performance monitoring duties (e.g. view spectrograms)

Maintain and enhance interfaces and methods (e.g. Kafka) for distributing to NEIC systems and researchers detections, picks, and other waveform-derived measurements on waveform quality, phase type, amplitude or amplitude ratio that are generated by and/or used in operational and research instances of detectors, associators and locators.

Maintain StationXML data integration to populate the NEIC MetaDataServer Support operation and maintenance of subsystems that distribute waveform data and earthquake source parameter data to seismic monitoring partners and data archives Support ASL field staff in the deployment of new station hardware and software systems and ensure routine delivery of QC data to ASL analysts Support as needed the deployment and/or configuration of waveform acquisition and process systems used by NEIC and ASL for seismic monitoring and QC Support communications from remote seismic field stations as needed. Note that this includes support of routing within the NEIC, station configuration software, and new and/or modified data formats/protocols

Maintain automated SeedLink scanning software to acquire near-earthquake strong motion data that exceeds predicted ground acceleration

Maintain Edge/CWB and RRP software for acquiring Albuquerque Seismological Laboratory (ASL) supported stations (GSN and Backbone) thru RTS2 and Slate field computers

Continue to update documentation as needed.

Continue to support education (on the job style training) of Edge/CWB software debugging and operations to other support staff

V. Deliverables:

The contractor shall be required to verbally report on progress approximately once per week. The COR will keep a log of the dates and content of these verbal reports. At these meetings, the contractor's design and implementation work on active tasks will be reviewed in the context of the project design goals and interface standards. Priorities and coordination of the schedule with other elements of the project development will be discussed and milestones will be established as needed.

All code should be peer reviewed and submitted in code.usgs.gov and include inline documentation as well as supporting user, installation, and configuration documentation.

All code release deployments are coordinated (e.g. via email) prior to changes in production environments

Assessment of schedule progress to date, and include changes to schedule assumptions, variance of schedules, causes for variances and potential impact and recommended corrective action to minimize schedule.

Identify the magnitude and impact of actual and potential problems causing significant cost and schedule variances.

Development of and/or preparation of recommended databases on project strategies, management plans and schedules.

VI. Reporting:

At the conclusion of each task, the contractor shall demonstrate that the software operates correctly and shall provide source code, executable images, listings, linking information, test results if appropriate, documentation, and copies of relevant notes. Comments within the code shall be considered to be adequate documentation provided that they are sufficiently detailed for personnel who are familiar with the system to understand the function of each routine, how it is implemented, and what other routines it depends upon. At a minimum, all external variables shall be defined in the comments of each routine. The COR will inspect all materials delivered to the government under this contract and determine that they are complete and that the documentation is adequate. If deficient, the COR will issue a short memorandum rejecting the materials delivered. If the materials are deemed unacceptable, the COR will provide complete information detailing the shortcomings. The contractor shall be given two weeks from the date of such a memorandum, to correct the shortcoming. All software developed under this contract shall become the property of the U. S. Government. At the kickoff meeting the COR with work with the contractor to prioritize tasks and determine the first set of deliverables and the timelines from the items noted above. Upon acceptance we will select the next items and define the timelines.

VII. Quality Assurance Surveillance Plan:

Task Timeliness Quality Surveillance Delivered Code 90% on agreed schedule with COR, changes to schedule approved by

COR

100% Major features will be peer reviewed

COR review

Coordination of releases 90% of releases to releases are within time frame coordinated with Technical staff and

COR

100% of releases to production are coordinated with technical staff and COR

COR review

Maintenance tasks 90% on agreed schedule with COR, changes to schedule approved by

100% of features tested and functional when deployed to production

COR review

COR

Development tasks 90% on agreed schedule with COR, changes to schedule approved by

COR

100% of high level plan approved by technical staff, 100% of designed approved by technical staff, 75% of code peer reviewed

COR review

(End of Performance Work Statement)

Contractor Performance Assessment Reporting System (DEC 2015)

1) FAR 42.1502 directs all Federal agencies to collect past performance information on contracts.

The Department of the Interior (DOI) has implemented the Contractor Performance Assessment Reporting System (CPARS) to comply with this regulation. One or more past performance evaluations will be conducted in order to record your contract performance as required by FAR 42.15.

2) The past performance evaluation process is a totally paperless process using CPARS. CPARS is a web-based system that allows for electronic processing of the performance evaluation report. Once the report is processed, it is available in the Past Performance Information Retrieval System (PPIRS) for Government use in evaluating past performance as part of a source selection action.

3) We request that you furnish the Contracting Officer (CO) with the name, position title, phone number, and email address for each person designated to have access to your firm's past performance evaluation(s) for the contract no later than 30 days after award. Each person granted access will have the ability to provide comments in the Contractor portion of the report and state whether or not the Contractor agrees with the evaluation, before returning the report to the Assessing Official (AO). Information in the report must be protected as source selection sensitive information not releasable to the public.

4) When your Contractor Representative(s) are registered in CPARS, they will receive an automatically generated email with detailed login instructions. Further details, systems requirements, and training information for CPARS is available at https://www.cpars.gov/.

5) Within 60 days after the end of a performance period, the AO will complete an interim or final past performance evaluation, and the report will be accessible at https://www.cpars.gov/.

a) Contractor Representatives may then provide comments in response to the evaluation, or return the evaluation without comment.

b) Your comments should focus on objective facts in the AO's narrative and should provide your views on the causes and ramifications of the assessed performance.

c) All information provided should be reviewed for accuracy prior to submission.

d) If you elect not to provide comments, please acknowledge receipt of the evaluation by indicating "No comment" in the space provided, and then selecting “Accept the Ratings and Close the Evaluation”.

https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%2042_15.html https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%2042_15.html https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%2042_15.html https://www.cpars.gov/ https://www.cpars.csd.disa.mil/ https://www.cpars.gov/

e) Your response is due within 60 calendar days after receipt of the CPAR. On day 15, the evaluation will become available in PPIRS-RC marked as “Pending” with or without comments and whether or not it has been closed.

f) If you do not sign and submit the CPAR within 60 days, it will automatically be returned to the Government and will be annotated: "The report was delivered/received by the contractor on (date). The contractor neither signed nor offered comment in response to this assessment."

6) The following guidelines apply concerning your use of the past performance evaluation:

a) Protect the evaluation as source selection information. After review, transmit the evaluation by completing and submitting the form through CPARS. If for some reason you are unable to view and/or submit the form through CPARS, contact the CO for instructions.

b) Strictly control access to the evaluation within your organization. Ensure the evaluation is never released to persons or entities outside of your control.

c) Prohibit the use of or reference to evaluation data for advertising, promotional material, pre-award surveys, responsibility determinations, production readiness reviews, or other similar purposes.

7) If you wish to discuss a past performance evaluation, you should request a meeting in writing to the CO no later than seven days following your receipt of the evaluation. The meeting will be held in person or via telephone or other means during your 60-day review period.

8) A copy of the completed past performance evaluation will be available in CPARS for your viewing and for Government use supporting source selection actions after it has been finalized.

DOI Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

'Payment request' means any request for contract financing payment or invoice payment by the Contractor.

To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is:

https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice: A copy of the Contractor’s internally generated invoice shall include the following:

The Contractor shall submit monthly invoices plus the Monthly Status Report in accordance with Clause GS0931.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

FISMA Information Technology Security Requirements Summary

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

1 N/A Background Investigations. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology.”

2 N/A

Contractor will have access to Privacy Act System of Records - Work under this contract will involve design, development or operation of (access to) system(s) of records containing personal information protected by the Privacy Act (5 U.S.C. Section 552a).

Non-disclosure Agreement. Prior to receiving access to USGS computers, contractor employees shall be required to sign nondisclosure or other system security agreements, depending on the systems to be used and level of access granted.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services

Privacy Act System: [Identify covered system(s) to which the contractor may have access]

Work to be performed: [Summarize nature of the contractor's use of such records, such as]

User-level access to system containing protected records Operation or maintenance of Privacy Act System of records or computers hosting such system Design or modification of a Privacy Act system of records]

The contractor is not required or permitted to respond to requests for Privacy Act data or to make decisions about

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

releases of data under the Act. Contractor shall ensure its employees are instructed to safeguard against improper use or release of such data and advise them that violation of the Act may involve criminal penalties. The contractor will comply with FAR clause 52.224-2, Privacy Act, incorporated herein by reference and with DOI Privacy Act regulations at 43 CFR 2, Subpart D

3 N/A Training. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor employees must successfully complete DOI’s end-user computer security awareness training prior to being granted access to DOI data or being issued a user account. Training must be renewed annually. Additionally, the contract employees must sign a Statement of Responsibility (SOR) that states they have read the appropriate Rules of Behavior and other applicable Information security policies.

4 N/A Personnel Changes. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - The contractor must notify the COR immediately when an employee working on a DOI system is reassigned or leaves the contractor’s employ.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications *

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services *

*May not be applicable for off-site performance.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

5 N/A Contractor Location. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services

No portion of the services to be performed hereunder may be performed outside the United States without the express written permission of the Contracting Officer.

If services are proposed to be performed abroad, the Contractor shall provide an acceptable security plan that addresses mitigation of problems related to communication, control, and protecting the confidentiality, integrity, and availability of IT systems and information.

A Security Plan Template is available upon request from the Contracting Officer.

6 N/A N/A Applicable Standards. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor must follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64 and the DOI SDLC Security Integration Guide.

7 N/A Asset Valuation-Security Categorization: The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

User Access to USGS IT Systems – The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

IT Support Services greater than User-Level Services

Choose one:

The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

https://insight.usgs.gov/aei/offices/oa/oag/AOP/guidefordevelopingsecurityplans.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

- The Government has defined the [insert name of system to be developed, operated or maintained by the contractor] to be a [Major Application], [Minor Application] or [General support system] as defined in OMB Circular A-130, Appendix III and NIST SP800-

53. The following risk and sensitivity levels have been assigned based on the FIPS 199 and the NIST SP 800- 60.

Mission impact:

Data sensitivity:

Risk level:

Bureau/departmental/national criticality:

Off-Site Oversight and Management of IT System- The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

IT Security Services - Applies only if the purpose of the contract includes obtaining asset valuation services.

The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

The Government shall be granted unlimited rights in software or data produced hereunder as described in FAR clause 52.227-17, Rights in Data— Special Works, incorporated by

Select either COTS or custom software language as applicable. If both apply, identify software/data deliverables governed by each clause.

Property Rights.

1. For Federal Supply Schedule orders or orders under an existing contract, rights to software acquired hereunder are set forth in the basic contract.

2. For open market contracts, the Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software-Restricted Rights, whichever is greater.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

reference herein.

9 N/A Independent Verification and Validation (IV&V). The

Government is responsible for independent software verification and validation prior to being moved into production.

On-Site Contractor Support and Management of IT System Choose one:

Software will be independently verified and validated by the Government or another selected contractor prior to being moved into production.

Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

Off-Site Contractor Operation and Management of IT System-Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

IT Security Service - Applies only if the purpose of the contract includes obtaining IV&V services.

10 N/A Applies if the purpose of the contract includes obtaining C&A services.

Certification & Accreditation.

User Access to USGS IT Systems or IT Supports Services (Greater than User Access Certification and Accreditation on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

Development or Maintenance of Custom Applications The contractor will perform Certification and Accreditation (C&A) services on the application developed or maintained hereunder prior to going into production.

The application must be re-accredited every three years or whenever there is a major change that affects security.

C&A documents will be provided to the COR in both hard copy and electronic forms. The contractor must follow

NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A,

Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ FIPS documents are available on the internet at

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government reserves the right to conduct the ST&E using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

On-Site Contractor Support and Management of IT System or Off-Site Contractor Operation and Management of IT System The Contractor must maintain systems that are compliant with NIST SP 800-18, 800-30, 800-37, 800-53A, 800-60, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. As required by the above, Major Applications and General Support Systems shall be certified and accredited (C&A) prior to going into production and re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government will reserve the right to conduct the ST&E, using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

11 N/A for

COTS HW

& SW, User Access to

USGS IT

Systems (other than IT services), IT Support Services (User Level or greater access)

N/A Internet Logon Banner. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Development or Maintenance of Custom Applications OR On-Site Contractor Support and Management of IT System OR Off-site Contractor Oversight and Management of IT System- Web-based applications developed or maintained under this contract must contain a USGS approved logon banner:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT Standards/IT Security/DOI Security Control Standards (based on NIST SP 800-53 Revision 3)/Access Control v1.4.pdf

12 N/A Incident Reporting. The Contractor shall perform in accordance with contract clause “Security Requirements:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Facility Access and Information Technology” - The contractor must report computer security incidents affecting DOI data or systems in accordance with the DOI Computer Incident Response Guide.

13 Quality Control. All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

14 N/A N/A Self-Assessment. The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology” - The contractor must conduct an annual self-assessment in accordance with annual DOI guidance on all information systems in production.

15 N/A Vulnerability Analysis. Vulnerability Analysis on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

16 N/A Logon Banner. Contractor employees who access DOI information systems must acknowledge a government-approved legal warning banner prior to logging on to the system. This includes contractor owned information systems hosting DOI data.

17 N/A Security Controls.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” – The Contractor shall ensure compliance with the security control requirements of the current version of NIST SP 800-53, Rev.1, which are applicable to the security categorization of the data or system. FIPS 199 and the NIST SP 800-60 will be used to determine information types and security categorizations.

18 N/A N/A Contingency Plan.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology.”

For IT Support Services: The Contractor shall submit a contingency plan in accordance with NIST SP 800-34 and DOI IT Systems Contingency Plan Guide.

INTERNET PROTOCOL version 6 (June 2012)

1. Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet…