SOW - SSN27-IHS-1532119.pdf

SSN27-IHS-1532119 Page 1 of 4

Statement of Work: Proofpoint Cloud Email Security Services

BACKGROUND

The Indian Health Service (IHS), Division of Information Technology and Operations (DITO), located at IHS Headquarters in Rockville, Maryland, is part of the Office of Information Technology (OIT) charged with providing Enterprise Information Technology (IT) services and support for the Agency. IHS is part of the Department of Health and Human Services (HHS).

OBJECTIVE

The objective of this acquisition is to replace an existing on-premise email security stack with the brand name Proofpoint email security solution, a unified FedRAMP approved email security cloud service.

SCOPE

The contract shall provide licensing and premium support of all needed email security features for approximately 20,000 Microsoft 365 Exchange Online mailboxes. This contract will also include training and implementation services.

PERIOD OF PERFORMANCE

The period of performance for the base year will be one (1) base year plus four (4) option years beginning 1/3/2027

CONTRACT TYPE

This will be a Firm-Fixed-Price order.

DELIVERY

Electronic Delivery to:

US Department of Health and Human Services Indian Health Service

REQUIREMENTS

The contractor shall provide the following:

Product List

LINE

PART # DESCRIPTION QTY

1 FDPP-M-EPFU-

S-A

PFPT Govt Email Protection F-Secure-S-PFPT Government Email & Information Protection Service F-Secure Protection only-12mo Term: 12 Months 20000 Users

20000

SSN27-IHS-1532119 Page 2 of 4

2 FDPP-M-TAPBU-

S-A

PFPT Govt TAP URL & Attachment Bundle-SPFPT Government Targeted Attack Protection Service for Email- SaaS-12mo Term: 12 Months 20000 Users

20000

3 FDAO-M-

SYSLOGU-S-A

PFPT Govt Remote Syslog Forwarding-PFPT Government Remote Syslog Forwarding is a feature available for PoD customers to receive mail logs (filtered & sendmail) from their PoD cluster in real-time. The logs are sent in syslog format. Customers can receive Term: 12 Months 20000 Users

4 1 PFPT-M-TRAP-

V-A

PFPT Threat Response Auto-Pull-V-Threat Response Auto- Pull is an entry-level version of the platform that moves malicious email out of users' hands & implements additional business logic to find & remove internal copies of the messages. Term: 12 Months 20000 Users

20000

5 PP-SUP-PS Platinum Level Support (12mo) provides 24x7, 365 days per year phone support. Term: 12 Months 20000 Users

6 PFPT-SUP-

PREM-A

Premium Support for Information Security Products- Premium Support for Information Security Products-12mo Term: 12 Months 20000 Users

7 PFPT-M-VET-V-

A

PFPT Virtual Edition Technology-PFPT Virtual Edition Technology-12mo Term: 12 Months 20000 Users

8 FDPP-M-FER-S-

A

Federal Email Relay subscription that provides up to 2GB per-hour throughput, and total annual throughput up to 250GB. Annual price. Term: 12 Months 20000 Users

9 PP-PST-IS-IMP InfoSec PS Implementation Services, 10% of net subscription - Tier 1 - 1000000 - Term 12 Months User:

20000

Deliverables:

Deliverables Performance

Period Item Due Date

Base Year Proofpoint Cloud Email Security Licenses 1/3/2027 On-Going Support 1/3/2027

Option Year 1 Proofpoint Cloud Email Security Licenses 1/3/2028 On-Going Support 1/3/2028

SSN27-IHS-1532119 Page 3 of 4

Deliverables Option Year 2 Proofpoint Cloud Email Security Licenses 1/3/2029 On-Going Support 1/3/2029 Option Year 3 Proofpoint Cloud Email Security Licenses 1/3/2030 On-Going Support 1/3/2030 Option Year 4 Proofpoint Cloud Email Security Licenses 1/3/2031 On-Going Support 1/3/2031

Travel Travel is not required.

Inspection and Acceptance The COR will perform inspection and acceptance of all products and services. The performance criteria for these products shall be timely delivery and closure of all activities and deliverables listed above and within the established Period of Performance.

All invoices shall be submitted for review within 30 calendar days of the end of the period of performance.

Authorized Contractor The Contractor must be an authorized Proofpoint support reseller capable of providing premium support from the manufacture necessary for this requirement under a service level agreement established by Original Equipment Manufacturer (OEM).

Security It is not anticipated that the contractor will be exposed to sensitive Agency information or data, but the contractor agrees that the contract personnel will not divulge or release information or data developed or obtained in connection with performance of this contract, unless made public by IHS or upon written approval by the COR.

Disclosure of the information/data, in whole or in part, by the Contractor can only be made after the Contractor receives prior written approval from the Contracting Officer. Whenever the Contractor is uncertain with regard to the proper handling of information/data under the contract, the Contractor shall obtain a written determination from the Contracting Officer.

508 Compliance Section 508 of the Rehabilitation Act of 1973 (found at 29 USC 794d) requires access to and use of information by individuals with disabilities. Electronic reports, video footage, and other electronic data are subject to Section 508 guidelines. The NASA SEWP IDIQ will be used to obtain the products included in this requirement. All IT products available from NASA SEWP comply with the applicable accessibility standards at 36 CFR 1194, which implements Section 508 of the Rehabilitation Act of 1973, as amended, and is viewable at http://www.section508.gov include any security information – (Entry to Federal buildings or access to systems, personnel clearances, computer security, 508 compliance, IPv6, etc.).

Standards applicable to this acquisition include:

http://www.section508.gov/

SSN27-IHS-1532119 Page 4 of 4

X Software Applications and Operating Systems 1194.21 ___ Web-based Intranet and Internet Information and Applications 1194.22 X_ Telecommunications Products 1194.23 ___ Video or Multimedia Products 1194.24 ___ Self-Contained, Closed Products 1194.25 ___ Functional performance criteria 1194.31 ___ Information, Documentation, and Support 1194.41

The full text of the above referenced standards can be found at: http://www.section508.gov.