Solicitation W912EE21R0008.pdf

SEE ADDENDUM

(No Collect Calls)

W912EE21R0008 01-Apr-2021

b. TELEPHONE NUMBER

601-631-5642

8. OFFER DUE DATE/LOCAL TIME

04:00 PM 03 May 2021

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W912EE9. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

MOLLY OKEEFE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED ORX

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

VICKSBURG CONTRACTING OFFICE

4155 CLAY ST

VICKSBURG MS 39183-3435

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE 16. ADMINISTERED BY

SEE SCHEDULE

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

601-631-7261FAX:

TEL: 601-631- SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$30,000,000

NAICS:

541511

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF71

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

W912EE21R0008

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Job Five year ordering period

FFP

Contractor shall provide all labor necessary to provide Dam and Levee Safety Toolbox Maintenance and Enhancement support for the U.S. Army Corps of Engineers Dam and Levee Safety Programs.

FOB: Destination

PSC CD: DA01

NET AMT

Section C - Descriptions and Specifications

STATEMENT OF WORK

The Dam and Levee Safety Toolbox Maintenance and Enhancements Performance Work Statement

C.1 INTRODUCTION

General: This Performance Work Statement (PWS) describes the Technical Support tasks required by the U.S. Army Corps of Engineers (USACE) Dam and Levee Safety Programs.

Background: The U.S. Army Corps of Engineers (USACE) Dam and Levee Safety Programs are tasked with maintaining and enhancing web applications including the National Levee Database, Levee Screening Tool, National Inventory of Dams, Levee Inspection System and other Inundation Consequence analysis tools. These tools are deployed for both internal use on the DoD/Army environment and for public use. The Dam and Levee Safety Program has a requirement to continually refine the dam and levee safety applications for new and changing business processes.

Objective: The overall objective of this procurement is to acquire technical support to maintain and update existing systems as well as create, deploy and manage new systems and tools as new requirements emerge supporting the USACE Dam and Levee Safety Programs and Risk Management Center.

C.2 SCOPE

This Indefinite Delivery/Indefinite Quantity (IDIQ) Multiple Award Task Order Contract (MATOC) will consist of a five year ordering period. Up to three awards are anticipated with a total capacity of $15 million.

The U.S. Army Corps of Engineers (USACE) Dam and Levee Safety Programs are tasked with maintaining and enhancing web applications including the National Levee Database, Levee Screening Tool, National Inventory of Dams, Levee Inspection System and other Inundation Consequence analysis tools. These tools are deployed for both internal use on the DoD/Army environment and for public use. The Dam and Levee Safety Program has a requirement to continually refine the dam and levee safety applications for new and changing business processes. The objective of this contract is to provide technical support to maintain and update existing systems as well as create, deploy and manage new systems and tools as new requirements emerge supporting the USACE Dam and Levee Safety Programs and Risk Management Center. The technical support will include comprehensive web support to include web design and development; writing system design and documentation plans; developing processes to manage large data; graphic design; creating flood inundation applications; and user interface design.

The major systems involved include:

National Levee Database (NLD) – The NLD is a congressionally authorized database inventorying levees for the nation. The database contains almost 10,000 levee systems from USACE, other Federal partners and states and local entities. The system documents the location, condition and risk associated with the project. It is a very complex database with almost 500 data elements and over 25 spatial features using online data management tools to update data directly on the website. The site also includes a robust document storage and spatial and non-spatial API/web services. The NLD is bult on angular web framework with Node JS, service APIs, mapserver/openlayers, other open source libraries for charts and other functions and ESRI-based mapping service capabilities.

Levee Inspection System (LIS) – The Levee Inspection System is directly tied to the NLD and consists of two major components. The first component is an android based field collection application that synchronizes data directly to the NLD by an API. Field collection consists of spatial data, photos and descriptive information. The second component is an online inspection report generator that is built into the NLD. The generator takes the field collected data and allows the user to build a formatted inspection report that summarized the findings and creates a final formatted PDF file for posting to the NLD.

Levee Inspection Tool (LST) – The levee screening tool is a robust risk assessment tool that is connected to the NLD.

This tool takes levee information from the NLD and walks a user through a risk assessment process to assess levee system performance. It involves complex mathematical algorithms to calculate levee performance, life loss and consequences based on user inputs. The tool is primary a database exercise with a modest charting and minimal mapping function. It is currently built on Oracle APEX with open source charting and mapping libraries. A new version is being deployed that moves to full open source components and removes the APEX piece.

National Inventory of Dams (NID) - The NID is a congressionally authorized database documenting dams in the U.S.

and territories. It Includes dams owned and operated by federal agencies, the military, states, territories, tribes, local governments, public utilities and private entities. The database includes information on more than 90,000 dams including their location, size, purpose, type, last inspection and regulatory facts. USACE collects and compiles this information from all 50 states, Puerto Rico and 18 federal agencies and publishes the database on the internet.

Currently, the NID platform is migrating to the same architecture of the National Levee Database (NLD) to ensure efficiency and future data sharing opportunities between the dam and levee safety programs. This new NID will also incorporate inundation maps and risk communication information on USACE dams.

Flood Inundation Mapping (FIM) Viewer – The FIM viewer is an interactive web viewer that displays flood extents, related data and documentation for USACE projects including dams and levees. The primary user of the FIM viewer is USACE; however the viewer is also accessible to partner federal agencies and data is shared with other applications including NID and NLD. The FIM data is stored in an Oracle database utilizing relations and indexes for quick inspection of the data. All raster data has been exported as a cloud optimized geotiff and is stored in a s3 bucket.

Mapserver is utilized to provide OGC compliant WMS and WFS layers as well as XYZ tile services. A NodeJS API provides routes for other applications to connect and read data from the FIM Database. The front end is created using ReactJS with Openlayers providing the map component of the website.

C.3 SUMMARY OF REQUIREMENTS

The contractor will perform work and provide technical support to maintain and enhance web applications and develop new systems to support the missions of USACE Dam and Levee Safety and the Risk Management Center. The technical support will include comprehensive web support to include web design and development; writing system design and documentation plans; developing processes to manage large data; graphic design; creating flood inundation applications; and user interface design.

Typical services of this initiative will include:

• Software Programming and Development: Provide comprehensive web application development and support of existing and new websites and web portals. Perform maintenance and operations of these applications including page modifications, hotfix and bug fixes. Develop system architecture and administer databases in cloud environments, such as Amazon Web Services and Microsoft Azure. Develop web applications in technology stack system architecture and programming frameworks to include Node, Docker, Redis, Angular, React/Redux and other associated JavaScript libraries. Develop and administer databases for PostgreSQL and Oracle enterprise databases.

Develop mobile applications across multiple platforms (Android, IOS). Modify existing mobile applications to add new features or edit existing features.

• User Experience Design: Provide user experience/user interface design for public facing web applications including 508 compliance. Design effective user experience/user interface with complex data entry and processing applications. Modify user experience/user interface for existing web applications based on new workflows and requirements.

• Flood Inundation Modeling and Mapping: Create custom analysis tools using hydrologic and hydraulic models for dams, levees and river systems. Modify and analyze hydrologic and hydraulic data output from Hydrologic Engineering Center Software including HEC-RAS and RASMapper.

• Geospatial/Web Mapping: Perform geospatial data processing and analysis using tools such as ESRI ArcPortal and ArcServer. Design and develop interactive web mapping interfaces, using Web Map Service (WMS) protocol, GDAL libraries, Openlayers libraries and Leaflet libraries. Write APIs using NodeJS or Golang for use in other applications such as Qlik Sense, Tableau, and internal and external web applications.

• Data Science: Manage large data including analysis, processing, and distribution of large data. Use techniques to enhance existing data or create new data to support hydrologic and hydraulic models, flood inundation mapping and related risk assessments. Build visualizations of large data including dashboards and infographics.

• Documentation: Writing system documentation, design and development plans, application requirements documentation, and technical application guidance documents. Writing and editing of technical manuals, help documents, and training documents.

Project-specific requirements will be described in each individual task order’s Statement of Work.

C.4 GENERAL REQUIREMENTS

This section describes the general requirements for this effort. The following sub-sections provide details of various considerations on this effort.

C.4.1. Non-Personal Services The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Procuring Contracting Officer (PCO) immediately.

C.4.2. Business Relations The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

C.4.3. Contract Administration and Management This section describes the contract administration and management for this effort. The following sub-sections provide details of various considerations on this effort.

C.4.4. Overtime Requirements The extent of overtime will be specified in each respective Task Order.

C.4.5. Travel / Temporary Duty (TDY) Travel to Government facilities or other contractor facilities may be required and will be specified at the task order level.

If authorized at the task order level, travel shall be in accordance with the limitations set forth in FAR 31.205-46, Travel Costs.

C.4.6. Period of Performance for Task Orders The IDIQ Contract period of performance will be five years. A separate period of performance will be specified for each task order. Rates in effect at the time of ordering (in accordance with the contract yearly rate schedule) apply.

C.4.7. Deliverables Deliverables will be specifically detailed for each task order. Unless specified otherwise in the task order PWS, the Contractor shall provide reports and other print deliverables in publication quality format and provide web publishable versions of such deliverables. All deliverables, including software, shall be provided to the Government with unlimited rights. Format and delivery schedule for deliverables shall be outlined in Contract Data Requirements List and/or in the applicable section of the PWS.

Archive of Deliverables. The Contractor shall maintain an electronic, indexed, archival record of all unclassified deliverables delivered under this contract. The Contractor shall deliver the archive to the COR upon request or at a minimum at contract completion.

C.5.0. OTHER REQUIREMENTS

C.5.1. Protection.

C.5.1.1. Information Assurance (if applicable).

C.5.1.2. Information Assurance (IA) Training. All Contractor personnel with access to Government information systems and networks shall successfully complete all required initial and annual IA awareness training as specified in AR 25-2 and as specified by the Government requiring activity. Training is available at https://ia.signal.army.mil

C.5.1.3. Contractor employees and subcontractor employees performing work under this contract who have access to Government information systems and networks shall create a user account and profile in the Army Training and Certification Tracking System website (ATCTS) at https://atus.army.mil, in the unit container managed by the COR.

Certificates of successful completion of IA training, Acceptable Use Policies (AUP), applicable baseline and computing environment certifications, and continuing professional education credits, as required by DoD 8570.01- M, shall be uploaded to the ATCTS and provided to the COR for continuous compliance monitoring and reporting.

C.5.1.4. The Contractor shall ensure that all contractor employees and subcontractor employees requiring IA awareness training complete the training at the start of work performance on this contract and annually thereafter for the duration of this contract.

C.5.1.5. Information Assurance Workforce Certification. DFARS clause 252.239-7001 (Information Assurance Contractor Training and Certification) applies to this contract. This contract is subject to the mandates of DoD 8570.01-M, which establishes baseline technical and management IA skills for personnel performing IA functions within DoD. Functions spanning multiple levels require certification of the highest level functions. Contractor personnel performing functions in multiple categories or specialties shall hold certifications appropriate to the functions performed in each category or specialty.

C.5.1.6. The Contractor shall ensure its IA workforce members have the baseline certifications corresponding to their IA functions, as defined in Chapters 3, 4, 5, 10, and 11, and Appendix 3 of DoD 8570.01-M at work performance start date. Contractors will obtain all required Computing Environment (CE) certificates within 6 months of being engaged. The IAT Level I baseline certification is the minimum requirement for unsupervised privileged access. The Contractor shall ensure that all employee certifications remain active and are renewed prior to expiration.

C.5.1.7. The Contractor shall ensure that all employees IA certifications are released to the Department of Defense through the Defense Workforce Certification Application at https://www.dmdosd.mil/appj/dwc/index.jsp.

C.5.1.8. Non-Government-owned computing systems or devices (if applicable). The Contractor shall comply with AR 25-1 and AR 25-2. The Contractor shall not install or connect non-Government-owned computing systems or devices to Government networks without the COR’s coordinating and obtaining proper authorization from the appropriate Information Assurance Program Manager (IAPM), ensuring that all software has a Government Certificate of Networthiness. The non-Government-owned computing systems or devices include, but are not limited to, personal or Contractor-owned thumb drives (e.g., memory sticks, flash drives, Universal Serial Bus (USB) drives, jump drives, pen drives), removable or external hard drives, Personal Digital Assistants (PDA), PC

Cards/Express Cards, MP3 players, cell phones, digital media, floppy disks, compact disc (CD)/digital video disk (DVD) burners, optical recordings, photo flash cards, laptops, or any devices that can store data.

C.5.1.9. Protection of Sensitive Unclassified Data (if applicable). The Contractor shall ensure any sensitive information, including, but not limited to, Personally Identifiable Information (PII) and For Official Use Only (FOUO), and proprietary information residing on Mobile Computing Devices (MCD) or other external media, is protected in accordance with current Data at Rest (DAR) guidelines and requirements. The Contractor shall use an authorized, approved, and prescribed DAR solution. The MCDs include, but are not limited to, laptop, netbook, notebook, or tablet computers, and Blackberry or equivalent devices. External media include optical disk media such as CDs, DVDs, USB drives (also referred to as flash or thumb drives) (when authorization to use them is restored), floppy disks, and other portable digital storage devices. Guidance for protecting DAR information appears in DoD Policy Memorandum, 3 Jul 07, subject: Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Media and in DoD Component implementing instructions.

C.5.2. Antiterrorism/Operations Security (OPSEC).

C.5.2.1 Army Training Certification Tracking System Registration. All contractor employees with access to a government info system must be registered in the Army Training Certification Tracking System (ATCTS) (https://atus.army.mil/iastar/login.php) at commencement of services, and must successfully complete the DOD Information Assurance (IA) Awareness training prior to access to the information systems and then annually thereafter in accordance with personnel security standards listed in AR 25-2 (Information Assurance), an appropriate background investigation will be conducted prior to accessing the government information systems

C.5.2.2 Operational Security (OPSEC) Training. All new contractor employees will complete Level I OPSEC Training within 30 calendar days of NTP. Additionally, all contractor employees must complete annual OPSEC awareness training. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites:

https://www.iad.gov/ioss/ or http://www.cdse.edu/catalog/operations-security.html.

C.5.2.3 E-Verify: The Contractor must pre‐screen candidates using the E‐verify Program (http://www.dhs.gov/E‐ Verify) website to meet the established employment eligibility requirements. The vendor must ensure that the candidate has two valid forms of government issued identification to ensure the correct information is entered into the E‐verify system. An initial list of verified/eligible candidates must be provided to the COR no later than 5business days after the initial contract award.

C.5.2.4 Common Access Card (CAC): The Contractor will obtain a CAC card for all contractor employees requiring access to Government networks. This is a four step process: 1) Sponsorship and Eligibility; 2) Registration & Enrollment; 3) Background Investigation 4) Obtain Card. These steps are explained in more detail at the following website: http://www.cac.mil/common-access-card/getting-your-cac/for-contractors/ . Note that this process includes two in-person visits (1. Registration in the Trusted Associate Sponsorship System (TASS) and fingerprinting; and 2.

card-issuance) at a RAPIDS site (location list here: http://www.dmdc.osd.mil/rsl ). Registration in TASS and obtaining a CAC requires close coordination with a USACE Sponsor and Trusted Agent. Contact the COR for contact information for the nearest Sponsor and Trusted Agent.

C.5.3. Quality Control/Quality Assurance

C.5.3.1. Quality Control (QC). The Contractor shall develop a quality control plan (QCP) and implement a quality control program to satisfy the specific requirements of this contract. An optimal QCP shall identify potential problem areas and evolve over the life of the contract. The Contractor shall provide the QCP to the KO and COR for approval no later than 30 calendar days after contract award. The Contractor shall update the QCP as required and provide copies to the KO and COR for approval.

C.5.3.2. Quality Assurance (QA). The Government will monitor the Contractor's performance under this contract.

The Government has the right to conduct inspections and performance evaluation at any time and at any place where contract performance occurs. If any aspect of the performance is not in conformance with the requirements of this contract, the Government has the right to issue to the Contractor a Contract Discrepancy Report (CDR). The Contractor shall explain in writing why performance was not in conformance with the requirements of the contract, how performance will be returned to conformance, and how recurrence of the problem will be prevented in the future. The Contractor shall complete and return the CDR to the Contracting Officer and COR within five workdays after receipt of the CDR. The Contractor shall maintain copies of all inspection and evaluation reports. Government review of contractor deliverables will be guided by the QASP. The QASP will be based on the requirements and acceptance criteria in the PWS and aligned with the design, implementation and testing plans in coordination with the contractor.

C.6 DATA RIGHTS/SOURCE CODE

The Government has unlimited rights to all source code, documents and material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

C.7 APPLICABLE DOCUMENTS

The following publications form a part of this contract. The publications below with which the Contractor shall comply are mandatory. The Contractor shall use current commercial practices and publications whenever possible.

A significant number of Army regulations that govern the conduct of the required work are listed below. The PWS may set a higher standard of performance than an applicable Army regulation. The PWS will have precedence over the regulations unless a particular PWS provision is in direct conflict with the applicable provision of the Army regulation. Unless otherwise noted, the publications can be accessed at www.apd.army.mil. Upon request, the Government will provide those publications not available on a web site. The Contractor shall comply with changes to publications. The Contractor shall inform the KO of any changes to a publication or documents that impact the cost of the contract.

AR 25-1 Army Information Technology

AR 25-2 Information Assurance

AR 380-5 Department of the Army Information Security Program

AR 525-13 Antiterrorism (FOUO requires AKO access)

AR 530-1 Operations Security (OPSEC) (FOUO requires AKO access)

DoDM 5200.01-V4 DoD Information Security Program: Controlled Unclassified Information (CUI)

DoDD 5205.02E DoD Operations Security (OPSEC) Program

DoDD 5400.11 DoD Privacy Program

DoD 8570.01-M Information Assurance Workforce Improvement Program

DoDI 8500.01 Cybersecurity

DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT)

C.8 MINIMUM QUALIFICATIONS FOR LABOR CATEGORIES

The following labor categories are anticipated to be utilized on task orders:

1. Principal: Firm Owner or Senior Vice President, used only for very large high visibility projects.

2. Senior Project Manager: Project Manager for large complex projects typically with more than 10 years of project management experience in development and implementation of assigned projects.

3. Project Manager: Project manager for small and routine projects with at least three years of project management experience.

4. Quality Assurance Analyst: Analyst responsible for quality control of project deliverables. Reviewing of content, written materials and overall quality, with at least three years of experience in quality assurance.

5. Senior Web Developer: Web Developer for large and complex web development projects. Involving complex application programming interface development and page interaction workflows. More than 10 years experience in application programing and development.

6. Journeyman Web Developer: Web Developer with 3 – 5 years of experience able to handle most development situations. Majority of the development work will be included in this category.

7. Junior Web Developer: Web Developer with less than 3 years experience assisting in testing, bug fixes and other small routine tasks in support for the Senior or Journeyman developer.

8. Senior Database Admin/Analyst: Senior staff with more than 10 years of experience in large and multi-tiered database creation, operations and maintenance and database support to web development. Used primarily for larger projects.

9. Database Admin/Analyst: Experienced database staff able to handle all routine and normal size projects for database creation and maintenance. More than 5 years experience in database creation and maintenance.

10. Data Scientist/Analyst: Staff for analysis and interpretation of complex digital data with the use of statistics algorithms and dashboards. Skills in database SQL and web development to support decision making tools. More than 3 years experience in the analysis and interpretation of complex digital data.

11. Geospatial Analyst: Technical analyst specializing in the analysis and processing of spatial data. More than three years experience in analysis and processing of spatial data.

12. User Experience (UX) Analyst: An experienced developer specializing in website analysis for user workflows and content display. Formulates most effective content and site navigation routines. More than 5 years experience in user experience design.

13. Graphics Artist: Graphics artist developing graphic for web pages and documentation. More than 3 years experience in graphic art design for web applications.

14. Writer/Editor: Technical Writer or Editor developing web content, help and procedural documentation. More than 3 years expertise in technical writing for web content, help and procedural documents.

15. Clerical/Admin: Responsible for administrative needs required during the task.

C.9 CONTRACTOR EMLOYEE CONDUCT

The contractor’s employees shall observe and comply with all applicable departmental and agency regulations, policies, and procedures (e.g., fire, safety, sanitation, environmental protection, security, etc.). The contractor shall ensure that all contractor employees represent a professional appearance at all times, and that their conduct does not reflect discredit on the United States Government.

When contractor employees are working on Government facilities or participating at Government meetings, they shall wear identification badges distinguishing themselves as such. The badges at a minimum must have the employee name and word “contractor” displayed. Ideally, the company name will appear on the badge. Additionally, not withstanding any other provisions in the PWS, the contractor shall identify themselves as a contractor in meetings, telephone conversations, all written communications and work situations so that their actions cannot be construed as acts of a Government official. The contractor shall take no actions that bind the government to a final decision or results in the exercise of governmental discretion.

C.10 REMOVAL OF CONTRACTOR EMPLOYEES FOR MISCONDUCT OR SECURITY REASONS

The Government may, at its sole discretion, direct the contractor to remove any contractor employee from Government facilities for misconduct or security reasons. Such removal does not relieve the contractor of the responsibility to provide sufficient qualified personnel for adequate and timely service. The Contracting Officer will provide the contractor with an immediate written rationale for removal of the employee.

C.11 CONFLICT OF INTEREST

Neither the contractor nor its on-site employees shall utilize their knowledge of or access to information, sensitive or otherwise, for individual or company gain. Each on-site contractor employee shall be required to sign a Non- Disclosure Statement.

C.12 PHASE IN AND PHASE OUT OF CONTRACT AND CONTINUITY OF SERVICES

The Contractor must recognize that services under this contract must continue without interruption and that upon contract receipt and expiration, the preceding contractor or a successor, either the Government or another Contractor, may continue services. The Contractor agrees to exercise its best effort and cooperate effectively in an orderly and efficient transition from any preceding contractor and to any successor contractor. If a successor contract is awarded prior to the final expiration date of this contract, the Government may issue task orders to the successor Contractor prior to this contract’s expiration date. The Contractor shall provide coordination of phase-in and phase-out, services at no additional cost to the Government, as long as there is an active task order.

C.13 GOVERNMENT FURNISHED PROPERTY

It is not anticipated that the contractor will be working at Government facilities. In cases where the Government provides equipment or materials, it will be specified in the individual task order PWS.

Government furnished computers may be hand-receipted to the Contractor. The liability for the repair of damaged Government property shall be subject to the terms of the “Government Property” clause set forth in Section I of this solicitation. When Government property is furnished to the Contractor, a Government property control receipt will be completed and signed by the Contractor. The property control receipt will indicate the assigned location for use of the property by the Contractor. A copy of the property control receipt will be furnished to the Contractor. Upon the return of the Government property to the Government, the Government property control receipt will be completed indicating the return of the property by the Contractor. A copy of the returned property control receipt will be furnished to the Contractor. All Government property furnished to the Contractor shall be accomplished in accordance with this procedure. The Contractor shall be responsible and accountable for all Government property furnished to the Contractor. The Contractor shall establish a property control system for the use, control, protection, and preservation of Government property assigned to the contractor.

Unless otherwise specified in a particular task order, the contractor(s) with a valid National Agency Check (NAC), will be provided access to the host base’s unclassified computer network. The NAC must be verified through the Automated Security Clearance Approval System (ASCAS) roster of validation from the contractors security manager will be provided access to the host base’s unclassified computer network and its inherent capabilities including, but not limited to: Internet access, electronic mail, file and print services, and dial-in network access. The contractor shall be aware of and abide with all government regulations concerning the authorized use of the government’s computer network, including the restriction against using the network to recruit government personnel or advertise job openings.

Veterans Employment Emphasis for U.S. Army Corps of Engineers Contracts

In addition to complying with the requirements outlined in FAR Part 22.13, FAR Provision 52.222-38, FAR Clause 52.222-35, FAR Clause 52.222-37, DFARS 222.13 and Department of Labor regulations, U.S. Army Corps of Engineers (USACE) contractors and subcontractors at all tiers are encouraged to promote the training and employment of U.S. veterans while performing under a USACE contract. While no set-aside, evaluation preference, or incentive applies to the solicitation or performance under the resultant contract, USACE contractors are encouraged to seek out highly qualified veterans to perform services under this contract. The following resources are available to assist USACE contractors in their outreach efforts:

- U.S. Department of Labor Veterans’ Employment and Training Service (VETS):

https://www.dol.gov/vets/

- Federal Veteran Employment Information: https://www.fedshirevets.gov/

- Veterans Opportunity to Work (VOW) Program: https://www.benefits.va.gov/vow/

- U.S. Army Warrior Transition Command Employment Index:

https://wct.army.mil/modules/employers/index.html

- Hiring Our Heroes: https://www.uschamberfoundation.org/hiring-our-heroes

(End of special contract requirement)

Section E - Inspection and Acceptance

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 N/A N/A N/A Government

Section F - Deliveries or Performance

DELIVERY OR PERFORMANCE

F.1. Place(s) of Delivery.

The Contracting Officer’s Representative (COR) is responsible for inspection and acceptance of all deliverables provided under this contract. Originals and copies of all correspondence that require Government certification and signature shall be delivered to the COR.

F.2. Notice Regarding Late Delivery.

The contractor shall notify the COR in writing as soon as it becomes apparent that a scheduled delivery will be late.

The contractor shall include in the notification the rationale for late delivery, the expected date for the delivery and the project impact. The COR will review the documentation, establish a new delivery schedule and notify the contractor.

F.3. Period of Performance/Funding Limitation The ordering period for the resulting contract is five years. Maximum ordering limit is $15,000,000.00 and the minimum guarantee is $5,000.00

F.4. Place of Performance Specific requirements for performance location will be specified in each task order.

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 N/A N/A N/A N/A

Section G - Contract Administration Data

CONTRACT ADMIN DATA

G.1. Invoicing Details for invoicing will be listed in individual task orders.

G.2. Other Payment Office Task orders may be issued under this contract that designate different payment offices. Specific payment instructions will be stated at the task order level.

G.3. Identification of Correspondence All correspondence whether submitted electronically or via mail by the Contractor under this contract shall reference the Contract Number, the Task Order Number(s) and contain a subject line. In addition, the Contractor shall develop and provide for acceptance by the Contracting Officer a sequential serialization format for all correspondence submitted to and received from the Government.

G.4. Contracting Officer’s Representative The Contractor will be notified in writing of the Contracting Officer's Representative (COR) and the authority which the COR will exercise under the terms of this contract. The COR will be the Government's contact person for the Contractor in all matters relating to this contract.

G.5. Contractor Representative The Contracting Officer shall be notified in writing of the name, address and telephone number of the person who will represent the Contractor. The notification shall also state the authority which the Representative can exercise under the terms of this contract.

G.6. Application of Service Contract Act Some of the disciplines covered in this solicitation are covered by a Service Contract Act (SCA) exemption, as they are considered “Executive, Administrative or Professional”; however, offerors shall be responsible for ensuring compliance with the SCA for applicable Labor Categories. Wage Determinations will be issued for particular localities with the issuance of each task order.

Section H - Special Contract Requirements

SPECIAL CONTRACT REQ.

H.1 Ordering Methods The contracting officer will order the supplies/services hereunder by the issuance of task orders using SF Form 1449.

Orders will be firm-fixed-price (FFP). All orders shall be issued on a SF Form 1449, and the orders shall incorporate the terms and conditions of this contract.

H.2 Minimum Guarantee The Government’s minimum guarantee is $5,000.00.

Section I - Contract Clauses

CLAUSES INCORPORATED BY REFERENCE

52.203-12 Limitation On Payments To Influence Certain Federal

Transactions

JUN 2020

52.204-9 Personal Identity Verification of Contractor Personnel JAN 2011 52.204-13 System for Award Management Maintenance OCT 2018 52.204-18 Commercial and Government Entity Code Maintenance AUG 2020 52.209-10 Prohibition on Contracting With Inverted Domestic

Corporations

NOV 2015

52.219-9 Alt II Small Business Subcontracting Plan (JUN 2020) Alternate II NOV 2016 52.232-40 Providing Accelerated Payments to Small Business

Subcontractors

DEC 2013

52.233-4 Applicable Law for Breach of Contract Claim OCT 2004 52.245-1 Government Property JAN 2017 52.245-9 Use And Charges APR 2012 52.252-6 Authorized Deviations In Clauses NOV 2020 252.201-7000 Contracting Officer's Representative DEC 1991 252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7003 Agency Office of the Inspector General AUG 2019 252.204-7004 Antiterrorism Awareness Training for Contractors. FEB 2019 252.204-7009 Limitations on the Use or Disclosure of Third-Party

Contractor Reported Cyber Incident Information

OCT 2016

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

DEC 2019

252.204-7014 Limitations on the Use or Disclosure of Information by Litigation Support Contractors

MAY 2016

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support

MAY 2016

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services

JAN 2021

252.204-7020 NIST SP 800-171 DoD Assessment Requirements NOV 2020 252.204-7021 Contractor Compliance with the Cybersecurity Maturity

Model Certification Level Requirement

NOV 2020

252.205-7000 Provision Of Information To Cooperative Agreement Holders DEC 1991 252.211-7003 Item Unique Identification and Valuation MAR 2016 252.211-7007 Reporting of Government-Furnished Property AUG 2012 252.219-7003 Small Business Subcontracting Plan (DOD Contracts) DEC 2019 252.225-7972 (Dev) Prohibition on the Procurement of Foreign-Made Unmanned

Aircraft Systems (DEVIATION 2020-O0015)

MAY 2020

252.226-7001 Utilization of Indian Organizations and Indian-Owned Economic Enterprises, and Native Hawaiian Small Business Concerns

APR 2019

252.227-7015 Technical Data--Commercial Items FEB 2014 252.227-7037 Validation of Restrictive Markings on Technical Data SEP 2016 252.232-7003 Electronic Submission of Payment Requests and Receiving

Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006 252.232-7017 Accelerating Payments to Small Business Subcontractors--

Prohibition on Fees and Consideration

APR 2020

252.237-7010 Prohibition on Interrogation of Detainees by Contractor Personnel

JUN 2013

252.239-7010 Cloud Computing Services OCT 2016 252.243-7002 Requests for Equitable Adjustment DEC 2012 252.244-7000 Subcontracts for Commercial Items JAN 2021 252.246-7003 Notification of Potential Safety Issues JUN 2013 252.246-7008 Sources of Electronic Parts MAY 2018 252.247-7023 Transportation of Supplies by Sea FEB 2019

CLAUSES INCORPORATED BY FULL TEXT

52.204-23 PROHIBITION ON CONTRACTING FOR HARDWARE, SOFTWARE, AND SERVICES

DEVELOPED OR PROVIDED BY KASPERSKY LAB AND OTHER COVERED ENTITIES (JUL 2018)

(a) Definitions. As used in this clause--

Covered article means any hardware, software, or service that--

(1) Is developed or provided by a covered entity;

(2) Includes any hardware, software, or service developed or provided in whole or in part by a covered entity; or

(3) Contains components using any hardware or software developed in whole or in part by a covered entity.

Covered entity means--

(1) Kaspersky Lab;

(2) Any successor entity to Kaspersky Lab;

(3) Any entity that controls, is controlled by, or is under common control with Kaspersky Lab; or

(4) Any entity of which Kaspersky Lab has a majority ownership.

(b) Prohibition. Section 1634 of Division A of the National Defense Authorization Act for Fiscal Year 2018 (Pub. L.

115-91) prohibits Government use of any covered article. The Contractor is prohibited from--

(1) Providing any covered article that the Government will use on or after October 1, 2018; and

(2) Using any covered article on or after October 1, 2018, in the development of data or deliverables first produced in the performance of the contract.

(c) Reporting requirement.

(1) In the event the Contractor identifies a covered article provided to the Government during contract performance, or the Contractor is notified of such by a subcontractor at any tier or any other source, the Contractor shall report, in writing, to the Contracting Officer or, in the case of the Department of Defense, to the website at https://dibnet.dod.mil. For indefinite delivery contracts, the Contractor shall report to the Contracting Officer for the indefinite delivery contract and the Contracting Officer(s) for any affected order or, in the case of the Department of Defense, identify both the indefinite delivery contract and any affected orders in the report provided at https://dibnet.dod.mil.

(2) The Contractor shall report the following information pursuant to paragraph (c)(1) of this clause:

(i) Within 1 business day from the date of such identification or notification: The contract number; the order number(s), if applicable; supplier name; brand; model number (Original Equipment Manufacturer (OEM) number, manufacturer part number, or wholesaler number); item description; and any readily available information about mitigation actions undertaken or recommended.

(ii) Within 10 business days of submitting the report pursuant to paragraph (c)(1) of this clause: Any further available information about mitigation actions undertaken or recommended. In addition, the Contractor shall describe the efforts it undertook to prevent use or submission of a covered article, any reasons that led to the use or submission of the covered article, and any additional efforts that will be incorporated to prevent future use or submission of covered articles.

(d) Subcontracts. The Contractor shall insert the substance of this clause, including this paragraph (d), in all subcontracts, including subcontracts for the acquisition of commercial items.

(End of clause)

52.204-25 PROHIBITION ON CONTRACTING FOR CERTAIN TELECOMMUNICATIONS AND VIDEO

SURVEILLANCE SERVICES OR EQUIPMENT (AUG 2020)

(a) Definitions. As used in this clause--

Backhaul means intermediate links between the core network, or backbone network, and the small subnetworks at the edge of the network (e.g., connecting cell phones/towers to the core telephone network). Backhaul can be wireless (e.g., microwave) or wired (e.g., fiber optic, coaxial cable, Ethernet).

Covered foreign country means The People's Republic of China.

Covered telecommunications equipment or services means--

(1) Telecommunications equipment produced by Huawei Technologies Company or ZTE Corporation (or any subsidiary or affiliate of such entities);

(2) For the purpose of public safety, security of Government facilities, physical security surveillance of critical infrastructure, and other national security purposes, video surveillance and telecommunications equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company (or any subsidiary or affiliate of such entities);

(3) Telecommunications or video surveillance services provided by such entities or using such equipment; or

(4) Telecommunications or video surveillance equipment or services produced or provided by an entity that the Secretary of Defense, in consultation with the Director of National Intelligence or the Director of the Federal Bureau of Investigation, reasonably believes to be an entity owned or controlled by, or otherwise connected to, the government of a covered foreign country.

Critical technology means--

(1) Defense articles or defense services included on the United States Munitions List set forth in the International Traffic in Arms Regulations under subchapter M of chapter I of title 22, Code of Federal Regulations;

(2) Items included on the Commerce Control List set forth in Supplement No. 1 to part 774 of the Export Administration Regulations under subchapter C of chapter VII of title 15, Code of Federal Regulations, and controlled--

(i) Pursuant to multilateral regimes, including for reasons relating to national security, chemical and biological weapons proliferation, nuclear nonproliferation, or missile technology; or

(ii) For reasons relating to regional stability or surreptitious listening;

(3) Specially designed and prepared nuclear equipment, parts and components, materials, software, and technology covered by part 810 of title 10, Code of Federal Regulations (relating to assistance to foreign atomic energy activities);

(4) Nuclear facilities, equipment, and material covered by part 110 of title 10, Code of Federal Regulations (relating to export and import of nuclear equipment and material);

(5) Select agents and toxins covered by part 331 of title 7, Code of Federal Regulations, part 121 of title 9 of such Code, or part 73 of title 42 of such Code; or

(6) Emerging and foundational technologies controlled pursuant to section 1758 of the Export Control Reform Act of 2018 (50 U.S.C. 4817).

Interconnection arrangements means arrangements governing the physical connection of two or more networks to allow…