SOW.pdf

DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

C.1.0 BACKGOUND

The defined scope of the DOS Dataminr Enterprise Agreement (EA) is the entire Department of State enterprise in that all Departmental entities are encouraged to use the contract to acquire all Dataminr First Alert licensing they require. The U.S. Agency for International Development (USAID) shall also be included within the scope of the Dataminr Enterprise Agreement.

The DOS Bureau of Information Resource Management (IRM) will administer the EA to provide First Alert licensing and support as required across the DOS enterprise. The EA will consolidate all existing bureau/program-level Dataminr requirements into a single enterprise agreement to improve visibility and management of Dataminr licensing and support across customers.

C.1.1 GENERAL REQUIREMENTS

The vendor’s software product shall meet the following general requirements:

Vendor shall provide potential new users the ability to access and test a web-based version of the product for a minimum of 30 days.

Vendor shall ensure the product aligns with relevant DOS technical and security standards and policies.

The product shall achieve DOS objectives via a single, integrated COTS (Commercial-off-the-shelf) product.

The product shall have the ability to effectively visualize, alert and notify users through both a desktop tool and a mobile application that provides substantially the same features and functionality as the desktop tool.

C.1.2 REQUIRED USE CASES

The vendor’s technical approach shall document capabilities covering the following core DOS use cases:

Product shall have one or more approved use cases supporting diplomatic security and crisis management requirements.

Product shall utilize AI to support global risk and emergency real-time event detection and dissemination requirements.

Product shall include modifications, safeguards and restrictions that prevent any use for surveillance purposes

C.1.3 INFORMATION DISCOVERY CAPABILITIES & SOURCES

The vendor’s technical approach shall document the product’s ability to meet the following requirements related to integration and processing of key information sources to generate required alerts.

The product must include among its integrated data sources, verified Twitter Official Data

Partner Program-level access to process 100% of public tweets in real time to support the diplomatic security and crisis management use case.

Product shall incorporate and integrate reputable and verifiable local news/information sources

(non-English source material) and "on-the-ground" social media sources as a means of identifying and validating relevant alerts, particularly in international locations or regions with limited access to, or usage of, Twitter.

Product shall provide the capability to effectively translate and present non-English sources (all major languages) in English, to include a concise caption in English for every alert, and provide the user with the original source content, where possible.

Product shall provide the ability to efficiently and effectively access, analyze, and contextualize information from non-textual data sources (e.g., image, video, sound, and machine sensor data).

Vendor shall be in compliance with the terms of service and data use policies of all third party

PAI (Publicly Available Information) data sources that are used to create news alerts and not have had access restricted or terminated from the major publicly available data sources.

Vendor shall provide documentation to DOS administrators outlining their process for validating and vetting of information provided to end users.

C.1.4 REAL TIME EVENT DETECTION & ALERTING CAPABILITIES

The vendor’s technical approach shall document the product’s ability to meet the following requirements related to real-time event detection and alerting capabilities.

Product shall effectively detect and display known and unknown global breaking events in real time via a real-time event dashboard.

Product shall effectively process and integrate both domestic and international public information sources and provide the capability to disseminate alerts to both domestic and overseas operations.

Product shall identify a variety of real-time events, both known and unknown, that could generate risk for DOS locations and personnel.

Product shall triage source data (for importance and/or urgency) using AI, machine learning or similar capabilities that do not rely on knowledge or provision of key words by the User to recognize patterns or anomalies to enhance the accuracy of alerts.

Product shall provide DOS users and administrators with the ability to directly customize news alerts and views based on specific geographic areas and event types and alter the display of information and alerts without significant vendor involvement.

Product shall provide DOS users and administrators with the ability to directly customize / control / adjust dissemination of information based on user without significant vendor involvement.

Product shall provide the ability to visualize the event location of alerts and notify users who may be impacted by those real time events.

Product shall offer a range of notification mechanisms including displaying console alerts, emails, and mobile alerts.

C.1.5 MAINTENANCE & SUPPORT

DOS anticipates the potential to significantly scale up deployments of First Alert during the contract period. These additional deployments may be requested in large quantities and/or deployed in a short period of time and may cover a wide range of geographic locations. The vendor’s technical proposal shall clearly outline the approach that will be used to ensure that new user accounts are provisioned, configured and sufficiently supported (including training) in a timely manner to effectively and efficiently support any DOS expansion of First Alert usage across the Department. All required provisioning, configuration, help desk support, training and other support offered by the vendor shall be included in the subscription pricing proposed and not charged separately.

Vendor shall provide a dedicated account manager (single point of contact) to oversee and manage the DOS enterprise account, supported by sufficient personnel to meet DOS needs.

Vendor’s technical proposal shall describe vendor’s approach to enterprise account management.

Vendor shall provide enterprise license management capability to enable DOS to see all active users under this contract across all DOS and USAID users at any given time. Vendor’s technical proposal shall describe available dashboard tools or other reporting or management tools available to DOS customers and to the overall DOS enterprise account administrator.

Vendor shall provision new accounts within two (2) business days of request, to include initial configuration for the user’s specific topic, area, priority, and delivery preferences.

Vendor shall provide access to training upon user account creation and when substantive platform changes occur and/or upon request. Vendor’s technical proposal shall describe how training will be made available to new users, including but not limited to, use of web-based or mobile app access to training, opportunities for live/in-person training, provision of written documentation or user guides, and other flexible options to ensure new users receive training in a timely manner regardless of work location.

Vendor shall describe the availability of training beyond new user training (if any) that is included in the First Alert subscription. Such training may include, but is not limited to, continuing education opportunities or advanced user training options, if available.

Vendor shall provide administrator platform training upon request.

Vendor shall provide access to 24-hour helpdesk support.

Vendor shall document the timeframe within which users and administrators will be notified of serious events such as source connection failures, alert and dissemination delays, and similar impacts on real-time capability.

Vendor shall notify DOS administrators of proposed product update timeframes and distribute updates to capabilities with limited disruption to service.

Vendor shall notify DOS administrators of substantive updates prior to implementation and offer training to accompany changes.

C.1.6 DATA MANAGEMENT & SECURITY

Vendor shall ensure that all DOS data provided to Dataminr that is maintained outside of DOS’s environments (if any) follows all security guidelines, processes/procedures, and policies mandated by DOS and Federal government requirements.

Vendor shall agree to adhere to regulations for unlimited data rights outlined in CFG 53.227-14.

Full rights to data and information will remain with DOS, per CFR 53.227-14 Rights in Data-

General. This clause prevents the vendor from restricting access and rights to any data stored on behalf of DOS.

Vendor shall ensure that DOS end users retain uninterrupted rights to continue use of currently deployed First Alert products during the migration of existing accounts to the new enterprise contract. Existing customers shall retain license rights and uninterrupted support for the

Dataminr First Alert product during this migration.

Vendor shall acknowledge and agree that DOS shall retain and manage the data ownership rights, always have access to the data, and will determine how DOS shall sanitize data throughout the product lifecycle. The vendor shall not access any DOS data without written permission from DOS Government Managers.

Vendor shall assist in the delivery of software upgrades, security upgrades, patches, patch sets, and supporting documentation to the COR for the specified product, including change management information, in an efficient and timely manner to help ensure a secure environment on the DOS Enterprise network infrastructure.

Vendor shall acknowledge and agree that the Government reserves the right to add, delete and or modify the security requirements as necessary or as directed by the Bureau of Information

Resource Management or other U.S. Government agencies overseeing Federal IT security policies.