SON.pdf

NOAA Office for Coastal Management

Imagine Maintenance and Support

Statement of Need

SCOPE

The Department of Commerce (DOC), National Oceanic and Atmospheric Administration (NOAA), National Ocean Service’s (NOS), Office for Coastal Management (OCM) has a requirement for obtaining maintenance and support for Imagine software licenses as well as purchasing new licenses.

DESCRIPTION

To provide maintenance and support on ten current Imagine software license products in the table under the Task section for a base period of twelve (12) months and two option periods of twelve

(12) months each. Additionally, the purchase of five new Imagine licenses along with twelve (12) months and two option periods of twelve (12) months each.

TASK

To provide maintenance and support on Imagine software license products in the table under this section for twelve (12) months and two option periods of twelve (12) months each. Additionally, the purchase of five new Imagine licenses along with twelve (12) months and two option periods of twelve (12) months each. Site ID # S60000270

Must be an authorized reseller. No substitutions.

PRODUCT # DESCRIPTION QUANTITY

ERD.M.ERDX1376K Imagine Professional maintenance and support 10

GEO.M.GSPX5057 Imagine Expansion Pack 1

ERD.P.ERDX1376 Imagine Professional new licenses 5

ERD.M.ERDX1376 Imagine Professional maintenance and support on new licenses

PERIOD OF PERFORMANCE

The base period of performance shall be from April 1, 2024 to March 31, 2025.

Option Period One period of performance shall be from April 1, 2025 to March 31, 2026.

Option Period Two period of performance shall be from April 1, 2026 to March 31, 2027.

IT SECURITY REQUIREMENTS

The Certification and Accreditation (C&A) or Assessment and Authentication (A&A) requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

The contractor will only supply software, product license and will not require the use of any contractor owned equipment. The contractor will not have remote access to any government owned equipment.

The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the product or services being provided for this acquisition.

The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes all product or service updates and enhancements as they are implemented.

The product or service supporting documentation could be the user and system administrator guides, which is documents the functional properties of the security controls employed to permit the analysis and testing of the security controls.

The contractor must provide sufficient document demonstrating the software being provided complies with Office of Management and Budget Memorandum M-07-18 entitled Ensuring New Acquisitions Include Common Security Configurations. For Windows applications, the provider of information technology shall certify applications are fully functional and operate correctly as intended on systems using the Federal Desktop Core Configuration (FDCC), United States

Government Configuration Baseline (USGCB) initiative or other NIST identified (http://checklists.nist.gov) secure configuration. The standard installation, operation, maintenance, updates and/or patching of software shall not alter the configuration settings from the approved FDCC/ USGCB/other secure configuration. The information technology should also use the

Windows Installer Service for installation to the default “program files” directory and should be able to silently install and uninstall. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

The contractor must provide sufficient documentation which demonstrates the acquiring information technology has implemented common security configurations. Common security configurations are available from the National Institute of Standards and Technology’s website at http://checklists.nist.gov.

The contractor includes the necessary product support and supporting documentation for the hardware and/or software that allows the sanitization (following NIST Special Publications 800-88 Guidelines for Media Sanitization) of the hardware and/or software upon the disposal of the product.

The contractor must ensure that the product being purchased complies with the Homeland Security Presidential Directive 12 (HSPD-12) requirements from FAR 4.1302 stating: (a) In order to comply with FIPS PUB 201, agencies must purchase only approved personal identity verification products and services. (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR Subpart 8.4.

The contractor must ensure that the product being purchased complies with Internet Protocol Version 6 (IPv6) requirements from FAR part 11.002 (g) stating: when acquiring information technology using Internet Protocol, the requirements documents must include reference to the appropriate technical capabilities defined in the USGv6 Profile (NIST Special Publication 500-267) and the corresponding declarations of conformance defined in the USGv6 Test Program. The applicability of IPv6 to agency networks, infrastructure, and applications specific to individual acquisitions will be in accordance with the agency's Enterprise Architecture (see OMB

Memorandum M-05-22 dated August 2, 2005).

http://checklists.nist.gov/ http://checklists.nist.gov/