Attachment_1_-_PWS_SharePoint_and_Web_Content_11-18-13.docx

Attachment 1

RFP SP3300-14-R-0003

Performance Work Statement (PWS) for DLA Information Operations SharePoint Portal Server Administration Support and Web Content Management

1.0 Introduction:

1.0.1. Defense Logistics Agency (DLA) Information Operations at New Cumberland requires contractual services for support of the SharePoint environment for the DLA Distribution installation and other depot locations.

1.0.2. The DLA Information Operations at New Cumberland is responsible for the support of all IT equipment, to include network/web/application servers, End User Hardware, COTS Software, DLA Distribution Portal, Applications, and total infrastructure. The DLA Information Operations network is a Microsoft Windows Operating System environment. This PWS requires the performance of services to more efficiently support and deploy the developing Microsoft Technology environment, to incorporate state-of-the-art Microsoft SharePoint technologies, administration support with the approved local DLA Distribution portal and collaboration tool to enhance DLA Distribution’s onboard Microsoft SharePoint expertise during planning, deploying, and maintaining IT projects.

1.0.3. SharePoint server administration support is required to ensure that all associated server hardware and software are functioning optimally to support the DLA Information Operations’ mission requirements. These objectives include maintenance, recommendations, enhancements, backup/recovery, data integrity and security of servers and components.

1.0.4. DLA Information Operations at New Cumberland is responsible for supporting an environment consisting of 36 worldwide sites that include over 11,000 personnel. With expansion directives, the coverage range could extend to cover over 14,000 people.

J-6N is the DLA HQ POC and representative to DLA HQ for the DLA Internet Council and DLA Knowledge Management (Integrated Product Team) Council. As a result, J-6N is responsible for the DLA Web Architecture and Infrastructure, DLA web-enabled application development, and the structure, processes, and procedures required for DLA Web Content Management. Additionally, J-6N is required to prepare and provide Information Technology (IT) policies, guidelines, specifications, baselines, and operational procedures applicable to not only J-6N and DLA HQ directorates, but also for all DLA sites. As an organization, J-6N is required to provide daily operational support, policy, and strategic planning for the entire DLA, which currently encompasses twenty-five (25) distribution centers and eleven (11) mapping activities.

1.0.5 Web content management support is required to maintain current Internet and Intranet website environments, to include maintenance, updates, 508 compliance, backup/recovery, and data integrity. Currently there are six (6) intranet sites and one (1) internet site used by our DLA Distribution depots, throughout the enterprise.

1.0.6 As, the current initiative is to migrate the existing intranet sites into SharePoint, the scope of support will gradually shift and require less web content management support.

Section 2 GENERAL CONDITIONS AND REQUIRMENTS

2.1 Scope of Work:

A. DLA Information Operations at New Cumberland requires Server Administration Support Services in the maintenance and enhancement of existing hardware, software and infrastructure throughout DLA Distribution and all associated distribution locations in the Microsoft SharePoint atmosphere. DLA Information Operations at New Cumberland is responsible for ensuring continuing operations of the DLA Distribution SharePoint infrastructure by creating, testing, validating and implementing new technologies and DLA/DoD directives. The objective is to utilize on-site contractual support to supplement DLA Information Operations at New Cumberland’s expertise to maintain and/or enhance the existing hardware/software; and troubleshoot and resolve all related SharePoint problems that require DLA Information Operations at New Cumberland’s expertise and reach back to upgrade, deploy, maintain, and enhance hardware and software configuration and SharePoint services for all DLA Distribution locations.

2.2 General Operating Condition

This Section provides general information relating to the conditions of operation and general requirements relating to the IT support services required.

2.1 Scope of Work:

A. The primary focus of this PWS is to enable the DLA to successfully provide web content management for not only J-6N, but also for all DLA HQ directorates, and all DLA sites. In addition, the DLA must work with the DLA contacts to plan the enterprise rollout of the DLA Content Management program. The objectives of the web content management support service contract are as follows:

· Coordinate the DLA content management planning and deployment with the J-6N web/SharePoint Administrator, DLA Command Affairs Office, J6N Information Assurance and DLA OPSEC Officer, and DLA HQ POCs.

· Act as the primary POC for all DLA Web Content issues.

· Define, deploy, maintain, and manage the DLA Web Content Management support structure and configuration based upon the guidelines, policies, and procedures, which were defined, architectured, and maintained by the J-6N Web/SharePoint Administrator , DLA Command Affairs, and DLA HQ.

· Ensure to obtain a well-defined web content management structure and environment to provide a robust and effective environment for web content sharing.

· Train DLA personnel responsible for DLA-wide, web content management support.

· Once the DLA web content management architecture and services are established and in production, transition support responsibilities for these to identified DLA personnel responsible for DLA Web and SharePoint content management support.

B. The secondary focus of this PWS is to enable the DLA to successfully provide standardized Content Management/portal policies, guidelines, specifications, baselines, and operational procedures to all of the DLA Centers, both CONUS and OCONUS locations, as identified in the deployment plan. Production and distribution of Content Management/portal documentation (both technical and non-technical) shall identify the necessary software interfaces and mechanisms to be integrated into the DLA IT architecture, specifically the DLA Web architecture, allowing DLA end-users to update/revise web-accessible content in real-time. A web content delivery plan and strategy is essential to a successful and effective implementation of Content Management/portal. The objectives of an effective web content delivery plan and strategy are summarized as follows:

· Allow DLA end-users to update web-accessible data, information, and documentation real-time.

· Establish and provide a dynamic enterprise-wide data and information-sharing environment that supports corporate e-collaboration requirements.

· Provide easy and timely access to DLA corporate policies, guidelines, and procedures.

· Provide critical input and language into the SharePoint Governance Operations document.

C. Although sharing data and information is not a new J-6N requirement, defining and providing an on-line environment that allows end-users to share, collaborate, and update data, information, and documentation in real-time is done through SharePoint 2010.

D. This is a non-personal services contract to provide information technology support services. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn, is responsible to the Government. The Government and the Contractor understand that the services to be provided under this contract by the Contractor are non-personal services and that no employer-employee relationship exists between the Government and the Contractor. The Government may provide technical direction which will assist the Contractor in accomplishing the PWS; however, the Government will not control the methods used by the Contractor to perform the service requirements set forth in the PWS.

2.2.1 Place of Performance, duty hours and access to the host installation A. Work will be accomplished primarily at DLA Distribution in New Cumberland, PA 17070, to include regional locations.

B. The Contractor shall perform services required under this PWS in accordance with the Duty Hours identified in the PWS except Federal holidays and base closures.

C. The Contractor shall provide occasional on-call support for SharePoint Support. On call support is estimated to occur no more than one telephone call a month.

DLA Distribution New Cumberland PA

Monday - Friday

2.0.1. Contractors shall be required to travel periodically throughout the year. The contractor may have to travel to provide training to other sites and for disaster recovery exercises. All travel charges will be in accordance with the Joint Travel Regulations (JTR). Receipts for all travel expenses must be provided when the travel voucher is submitted.

D. Due to changing traffic requirements brought on by construction, changing missions, and security concerns within the host installation, access to the host installation is subject to change, sometimes with little or no warning. Inbound and outbound traffic restrictions exist.

2.2.2 Period of Performance

A. The period of performance for this contract action will be for a one year base period with four (4) one (1) year options.

2.2.3 Federal Holidays

Federal holidays generally observed by government personnel include:

Observed Federal Holidays

In the event an Executive Order issued by the President of the United States declares Agencies of the Federal Government closed for a regularly scheduled workday, the Contracting Officer (KO) or Contracting Officer’s Representative (COR) will determine and advise the Contractor on whether services are required for that day.

2.3 Management Personnel

A. The Contractor shall appoint a Team Lead who shall be on-site at the place of performance designated in paragraph 2.2.1. The Team Lead shall be available via telephone or email during the normal hours set forth in paragraph 2.2.1 for emergency problem resolution. The Contractor shall determine the labor category for the Team Lead based on the Contractor’s proposed staffing plan.

2.4 Personnel Qualifications and Certifications

Contractor personnel must be proficient in reading and capable of communicating effectively in English.

2.4.1 Computing Environment (CE) and Operating Systems

A. The following list identifies the computing environment (CE), operating systems and data systems for which the Contractor shall be required to provide support (or use) which includes but is not limited to:

· Windows 2008 or higher enterprise servers.

· Various models of Dell servers, Microsoft SharePoint Services 2010 at minimum

· Microsoft SQL 2008 at a minimum

· Avepoint DocAve Backup and Restore Contractor personnel performing tasks under this PWS shall have appropriate level DoD 8570 IT level certifications for Information Assurance Technical (IAT) as identified in Table 2.4.1, IAT Requirements.

Table 2.4.2, IAT Requirements

NOTE: Refer to Section 3.2 for Acronym Definitions

* All tasks performed under this PWS are categorized under Information Assurance Technical (IAT) Level II positions as outlined in DoD 8570.01-M. No waivers or extensions will be provided for mandatory DoD IA or DLA CE certification requirements. Contractor personnel who fail to maintain the required certifications are subject to KO directed removal for performance under Section 2.5 of the PWS.

SYS ADMIN (WIN) –Primary Responsibilities set-up and configuration of the Microsoft SharePoint Services and the maintenance of the SharePoint services. Connection of the SharePoint services to the SQL back end and backup and recovery of the SharePoint application and user data.

Personnel assigned to or utilized by the Contractor in the performance of this contract shall possess the qualifications and skills set forth below and shall be fully capable of performing in an efficient, reliable, and professional manner. If the KO or COR questions the qualifications or competence of any person performing under the contract, the burden of proof that the person is qualified as prescribed herein shall be upon the Contractor.

The Contractor shall be responsible for obtaining all necessary licenses and certifications and for complying with all applicable Federal, State, and local laws. The Contractor shall maintain updated copies of any applicable licenses and certifications for all employees and provide copies to the COR.

Contractor personnel that operate motor vehicles shall maintain a valid state driver’s license with all class and commodity endorsements required by Public Law 99-570 and state law for the type of vehicle operated.

2.5 Technical Personnel

2.5.1 SharePoint and Server Support Skills

A. Personnel utilized by the Contractor in the performance of work required under this contract shall possess the certifications, qualifications and skills set forth below.

2.5.2 Required for All Personnel Provided

A. Good Communication/Analytical skills. Must have excellent communications skills, as face-to-face interaction with people is required, the use of the telephone, and the use of e-mail is essential and a prerequisite of the position.

B. Working knowledge of Internet/Intranet/Extranet architectures and security of each with emphasis on how it applies to domains in a Windows environment.

C. Capability to identify problems, debug and resolve malfunctions.

D. Ability to analyze, diagnose, recommend and implement solutions for functionality problems.

E. Ability to understand and interpret DLA’s current policy, procedures, guidance and content management or equivalent DoD Enterprise system.

F. In-depth knowledge and hands on work environment experience with the Microsoft SharePoint Portal server, web parts, and search.

G. In-depth knowledge and hands on experience of Rehabilitation Act Amendments of 1998 – Section 508 (IAW Section 508 Standards) and ability to comply with web pages and SharePoint is required.

H. Must have the knowledge and ability to repair the Section 508 failures.

I. Ability to understand and has experience in Enterprise Web structures; including Access Control List permissions, secure file transfers, firewalls ports, virtual webs, and ability to fix security vulnerabilities; e.g. Cross Site Scripting and SQL Injection. Knowledge and experience with the DLA Web architecture, implementation, and DLA-unique method is a plus.

J. Keeping up-to-date on all software upgrades are assumed. Any required training for any COTS software products required throughout this PWS is solely at contractor expense.

2.5.3 Senior SharePoint Administration

2.5.3.1. Proven working knowledge of, SharePoint Portal 2010 and 2013 Internet Information Server (IIS) 6.0 and later, Windows scripting, all aspects of Windows Security, and Microsoft server products and the integration of Microsoft products. Working knowledge with the above software is required.

2.5.3.2. Working knowledge with SharePoint Portal Server Software, Index Server, SQL Server, clustering and related Hardware.

2.5.3.3 Working knowledge in using TCP/IP networking.

2.5.3.4 Ability to monitor designated servers to determine sizing, efficiency, processing quality and throughput to recommend changes, resource and additional hardware/software.

2.5.3.5 Working knowledge of Symantec and McAfee Anti-virus products.

2.5.1.6 Ability to troubleshoot hardware and software problems related to SharePoint servers.

2.5.3.7 Working knowledge with Exchange software configuration as it applies to the Sharepoint environment.

2.5.3.8 Ability to backup and restore software, specifically as it relates to the SharePoint 14 hive and databases.

2.5.3.9 Working knowledge with SharePoint upgrade and migration technologies, currently DLA is utilizing Quest Migration software.

2.5.3.10 Working knowledge with Adobe Live Cycle workflow software and how it integrates with SharePoint.

2.5.3.11 Ability to understand and abide by the Mobile Code policy, OPSEC (Operational Security) and other DoD, DLA, and DLA Distribution Internet and Intranet and Information Assurance guidance, policy, and directives. Examples may include the ability to correct SQL Injection or Cross Script Vulnerabilities of an application program.

2.5.3.12 Working capability designing and maintaining database structure, the database engine, dictionaries, data integrity, security, user accounts, jobs, roles, indexes, complex SQL statements and all necessary structures in a distributed application environment.

2.5.4 Junior SharePoint Administration/Content Management

2.5.4.1 Ability to take requirements from a non-technical user and create a workable solution within the functional capabilities of SharePoint.

2.5.4.2 Ability to create documentation for users and administrators of varying skill levels.

2.5.4.3 Working knowledge of industry best practices with SharePoint governance.

2.5.4.4 Proficiency with statistical analysis software (Web Trends) installation, configuration, and administration as it applies to the current application.

2.5.4.5 Experience in training over long distances, through Video and/or Teleconference. Ability to train groups of varying sizes in a classroom or auditorium setting. Knowledge to create training material for different user levels from basic to advanced.

2.5.4.6 Must have the knowledge, work environment experience and ability to update or create assigned web pages from scratch.

K. The Contractor personnel shall have working knowledge and hands on use of the following tools, databases, and IT infrastructure as listed below, to include current versions or later.

Table of Skills and Knowledge for personnel:

Quest Migration SW SharePoint Designer 2007 & 2010 AvePoint Backup/Restore AvePoint Archiver AvePoint Administration HiSoftware Compliance Sheriff (508-web) AvePoint Compliance Guardian (508-sharepoint)

Photoshop .Net JavaScript

HTML

DHTML

XML

IIS 6.0 and 7.5 Kerberos

ASP

SQL

Access Load Balancing Search SharePoint Central Administration TCP/IP networks WorkFlows

***Knowledge of competitor products will be accepted. Please list any deviations within the proposal as well as compatible features between the products.

Familiarity in the following technical support areas is expected:

Technical Support Areas:

Information Assurance

Firewall Administration and Support

Proxy Configuration

Storage Area Network (SAN) support

Disaster Recovery/ Continuity of Operations

Active Directory (AD)

Web-based Application Development and Content Management

HIPS

EWorkplace

2.6 Security

A. The Homeland Security Presidential Directive 12 (HSPD-12) dated 27 August 2004 has established criteria for contractors who require a Common Access Card (CAC) for either physical access to a U.S. Government controlled installation or access to government information technology (IT) systems. The Government requires Personnel Security Investigations (PSI) to establish that applicants or incumbents either employed by the Government or working for the Government under contract are suitable for the job and/or are eligible for a public trust position. These positions have been designated as IT Level I and require a Secret clearance. Contractors shall be required to provide appropriate background investigation for IT-I with Secret clearance as required in accordance with DoD 5220.22-M, “National Industrial Security Program Operating Manual” (NISPOM) and DoD 5200.2-R. The appropriate background investigation for IT-I with Secret clearance is a Single Scope Background Investigation (SSBI). The Contractor shall forward their employee clearance information to:

DLA Intelligence Office ATTN: Personnel Security Officer 2001 Mission Drive New Cumberland, PA 17070

B. All personnel employed by the Contractor in the performance of this contract, or any representative of the Contractor entering a U.S. Government installation, shall abide by all security regulations and policies of the installation including access badges, parking, access to controlled or restricted areas, classified information, controlled unclassified information, data and IT resources.

C. DLA reserves the right to direct the removal of an employee, whose actions, while assigned to this contract, clearly conflict with the interests of the Government, regardless of prior clearance or adjudication status. DLA also reserves the right to direct the removal of an employee for misconduct, security violations, or performance reasons. The reason for removal shall be fully documented in writing by the Contracting Officer. When and if such removal occurs, the contractor shall assign qualified personnel to any vacancy(s) thus created within 10 working days. This action does not relieve the contractor from total performance of the contract tasks specified herein.

D. Contractor shall return immediately all Government issued identification, access badges, and vehicle passes to the KO or COR upon termination of service.

E. The provisions outlined above apply to the prime contractor and any subcontractors the prime contractor may employ during the course of this contract. No contractor personnel performing sensitive duties shall be allowed to commence work on this effort until his or her trustworthiness has been favorably adjudicated.

2.6.1 DoD Common Access Card (CAC)/Access Identification Badge (ID Badge)/Electronic Key Card Every Contractor employee shall obtain and possess a DoD Common Access Card (CAC) and an Access ID Badge as required. Upon favorable review and initiation of the PSI to establish the suitability of an employee for the job and the approval for temporary Automated Information System (AIS) access pending final adjudication of the PSI, the Contractor shall submit to the KO a request for the DoD CAC and ID Badge.

The Contractor shall safeguard CAC and ID Badges furnished to them. Contractor employees shall not share CAC and ID Badges. Each Contractor employee shall wear the ID Badge conspicuously on his or her outer clothing above the waist at all times while working on the installation. Personnel may be challenged and removed from the work area or denied access to the host installation if the ID Badge is not worn.

In the event that a Contractor employee damages or loses his or her CAC and ID Badge, the Contractor shall report the lost or damaged CAC and ID Badge within two (2) working hours of damage or loss to the KO or COR who will arrange for a replacement CAC or ID Badge. The Government will issue the Contractor employee a temporary ID Badge to be used for an eight to ten (8-10) working day waiting period until a new permanent ID Badge is issued. The Contractor shall return all government-furnished CAC or ID Badges to the Government either within one (1) working day of the completion of the contract or upon termination of an individual’s employment, whichever comes first. Contractor personnel failing to return their Government CAC or ID Badge are subject to criminal charges under USC Title 18, Chapter 1, Section 499 and 701.

The KO or COR will provide and maintain electronic key cards for the security access system. The electronic key card allows access to specific controlled areas of the facilities. The KO, COR or designee will approve and provide the electronic key cards to the Contractor for access to the facilities.

2.6.2 Information System Security

Upon favorable review and initiation of the PSI to establish the suitability of an employee for the job and the approval for temporary AIS access pending final adjudication, but not less than fourteen (14) working days prior to the employee’s start date, the Contractor shall request Information Technology (IT) eligibility for an employee requiring access and passwords to the government-furnished data systems. All positions involving computer activities require a minimum IT I category eligibility. The Contractor shall submit a Contractor Investigative Request (CIR) and a DD Form 2875 for temporary IT I eligibility, with final eligibility contingent upon receiving a favorably adjudicated background investigation.

All Contractor personnel provided with access to government-furnished computers and systems shall observe local AIS security policies and procedures as provided by the KO or COR. The Contractor shall notify the KO or COR within 12 hours when, for reasons of personnel resignation, reassignment, termination, or completion of portions of the contract, Contractor personnel no longer require access to government systems.

The Contractor shall observe all copyright agreements. In the interest of protecting government systems from computer viruses, the Contractor shall not use public domain software nor shall Contractor personnel download software from public bulletin boards or Internet websites. The Contractor shall use only commercial off-the-shelf (COTS), Contractor-developed, or government-furnished software in performance of the contract requirements. Should the introduction of a computer virus or malicious destruction of computer software, stored information, or hardware result from the use of public domain software or from software taken from a public bulletin board or Internet website, the Contractor shall be required to repair the damage and incur all costs at no expense to the Government and without impact on delivery schedules.

2.6.3 Contact of a Suspicious Nature

Contractor personnel who have been contacted under suspicious circumstances shall report that contact immediately, either verbally or in writing, to their supervisor who shall report it within two (2) hours to the KO or COR for action. Key contacts for reporting purposes are defined as:

1. Contact with an individual (regardless of nationality) that suggests to the Contractor employee that an intelligence gathering or terrorist organization may have targeted him or her for possible intelligence exploitation.

2. A request by anyone (regardless of nationality) for illegal or unauthorized access to classified or unclassified sensitive information.

3. Contact with a known or suspected intelligence officer from any country.

4. Contact with a foreign diplomatic establishment, whether in the U.S. or abroad, for personal or official reasons. Certain Contractor personnel in positions designated as “sensitive” by the Government may also be required to inform their chain of command in advance of the nature and reason for contacting a foreign diplomatic establishment or travel to countries on the State Department list whose interests may be adverse to the United States.

Additionally, Contractor personnel who have information about activities pertaining to espionage, terrorism, unauthorized technology transfer, sabotage, sedition, subversion, spying, treason, unauthorized release of classified or unclassified controlled information, or unauthorized intrusions into automated information systems shall report that information immediately to the KO or COR for action.

2.6.4 Safeguarding Information

The Contractor shall not allow access or disclosure of information regarding the operations of DLA to any government agency, non-government agency, or individual unless specifically authorized by the KO or COR. The Contractor shall provide documents and files requested by such parties to the KO or COR within one hour of receipt of the authorized request.

The Contractor may be required to access data and information that is proprietary to a government agency or contractor or that is of such nature that its dissemination and use other than as specified in this contract would be adverse to the interests of the Government or others. The Contractor and its personnel shall not divulge or release data or information developed or obtained under performance of this contract except to government personnel who are authorized to receive the information or upon written approval of the KO or COR. The Contractor shall not use, disclose, or reproduce proprietary data that bears a restrictive legend other than as specified in this contract.

Disclosure of information regarding operations and services of DLA to persons not entitled to receive it, or failure to safeguard any classified information that may come into the Contractor’s control in connection with work under this contract, may subject the Contractor, its agent, or its employees to criminal liability under USC Title 18, Crimes and Criminal Procedure, Part I, Crimes, Chapter 37, Espionage and Censorship, Sections 793, Gathering, Transmitting or Losing Defense Information, and Section 798, Disclosure of Classified Information. Neither the Contractor nor its employees shall disclose or cause to be disseminated any information concerning the operations of the activity which could result in, or increase the likelihood of, the possibility of a breach of DLA’s security or interrupt the continuity of DLA’s operation.

2.6.5 Potential Operational Constraints

Force Protection Conditions (FPCONs) may affect access to the host installations and DLA facilities. The FPCON is established by the host installation or higher national command authorities, and the Installation Commander is responsible for implementing the proper response to progressive levels of terrorist threats. FPCONs are normally displayed at most entrance gates, building entrances and office entrances. The Contractor shall adhere to and operate IAW any restrictions imposed as a result of a FPCON. Measures implemented under the various levels of terrorist threat may impact the Contractor’s normal operational approach to IT support services. The Contractor shall ensure that IT support services are sustained during heightened security measures.

2.7 Environmental, Safety, and Occupational Health (ESOH)

The Contractor shall formulate and maintain a written safety and health plan and make available to the Government upon request. The written plan shall include the details of the Contractor’s responsibilities, method of program implementation, and how hazards and deficiencies shall be identified and corrected. It shall detail Contractor personnel responsibilities for: protection of Government property and safety of others, personnel responsibilities for reporting all mishaps, and establish procedures for reporting to correcting unsafe conditions, hazards, or practices. The Contractor shall have a central POC for safety and health related issues. The POC shall be identified in writing to the KO or COR.

The Contractor shall ensure employees have safety education when engaged in activities involving Government facilities, personnel, or equipment.

The Contractor shall notify the KO or COR immediately after the occurrence of all accidents and incidents resulting in either personal injury, loss of life, impact to the environment or property damage to a government facility or equipment. The Contractor shall submit a completed copy of DLA Form 1591 and supplemental information within four (4) working days of the accident or incidents.

The Contractor shall comply with all federal, state, and local environmental laws to include but not limited to Resource Conservation and Recovery Act (RCRA), Safe Water Drinking Act (SWDA), the Clean Air Act (CAA), and Federal Facilities Compliance Act (FFCA).

2.8 Phase-in Period

A. The phase-in period shall begin on the effective date of the contract and shall not exceed one (1) month, at which time full performance shall commence.

Prior to twenty (20) calendar days of the date of effective date of the contract, the Contractor shall complete all hiring actions for personnel required to perform the requirements of the Contract and complete any associated training and certification requirements. The Contractor shall ensure that all new employees are trained and ready to begin working on the first day of full performance.

2.9 Preparedness Exercises

As directed by the KO or COR, the Contractor shall participate in preparedness exercises relating to security disaster preparedness and response, wartime response, and emergency and environmental and similar preparedness exercises.

The Contractor shall participate in emergency and recall notification and personnel accountability exercises. The Contractor shall establish emergency notification and recall and personnel accountability procedures in accordance with DoDI 3001.02, Personnel Accountability in Conjunction with Natural or Manmade Disasters, and test those procedures twice a year when directed by the KO or COR. During the exercise, the Contractor shall determine the status and whereabouts of assigned personnel, report the status of each Contractor employee to the KO or COR within established timelines, and continue to report periodic status until further direction by the KO or COR. The Contractor shall follow their personnel accountability procedures in the event of a real emergency as directed by the KO or COR.

2.10 Certification and Acceptance

A. The KO or COR is designated as the point of final inspection and acceptance by the Government of all items and services required by the contract.

SECTION 3 DEFINITIONS AND ACRONYMS

3.1 DoD Dictionary

The DoD Dictionary of definitions and terms is available on the Internet at: http://www.dtic.mil/doctrine/dod_dictionary/.

3.2 Acronyms

A. Following are acronyms from Table 2.4.1, IAT and CE Certification Requirements:

SECTION 4 GOVERNMENT FURNISHED PROPERTY (GFP), SYSTEMS, TRAINING AND SUPPORT SERVICES

4.1 General Information

The Government will provide access to resources and information to include Government transactional data systems required in the performance of this PWS.

The Government will furnish on-site training for unique Government systems (GOTS) in performance of this PWS.

The Government may require Contractor personnel attend mandatory on-site or off-site training on DLA’s IT equipment, systems and/or network environment. The Government will be responsible for instructor costs associated with this Government-furnished training. The Government will reimburse the Contractor for travel costs allowed under FAR Part 31.205-46, Travel Costs for attending Government-furnished off-site training.

The Government will provide on-site office space with furniture, to include computer and network printer, office supplies and desk telephone.

At no cost to the Contractor, the Government will furnish the services to be used exclusively to perform the requirements of this contract that include custodial services, refuse and recycling collection, government forms, emergency medical services, police and fire protection, telephone and utilities.

The Government will provide all materials, parts, equipment and supplies that Contractor personnel will need to perform this requirement. This does not include contractor furnished motor vehicles (i.e. cars, vans and/or trucks).

SECTION 5 CONTRACTOR RESPONSIBILITY FOR GOVERNMENT FURNISHED EQUIPMENT AND TRAINING

5.1 Contractor-Furnished Training

A. The Contractor shall provide training (not designated as Government furnished) which may be required for Contractor personnel to comply with the contract requirements. The Contractor shall be responsible for all costs associated with this training. The Contractor shall maintain copies of training records, designation letters and certificates on site and make them available for the KO or COR to review upon request. The training records shall include, at a minimum, the name of the employee, the name of the course, the source of the training, a description of the training provided and the date the employee successfully completed the training. The Contractor shall furnish the following training:

INFORMATION ASSURANCE (IAT) TECHNICAL TRAINING:

Contractor personnel performing tasks associated with this PWS that will be performing an IA function shall be trained and certified in accordance with DoD Directive 8570.1 Information Assurance Training, Certification, and Workforce Management and DoD 8570.1-M Information Assurance Workforce Improvement Program. IA functions are defined in chapters 3 and 4 of the DoD 8570.1-M. Contractor personnel performing IA functions on this contract shall be certified at the appropriate IAT Level as demonstrated by obtaining and maintaining one (1) of the DoD approved certifications posted on the Defense Information Systems Agency (DISA) Information Assurance Support Environment (IASE) website (http://iase.disa.mil/eta/iawip/). The website provides a list of approved certifications for personnel performing IA functions that meet baseline IA certification requirements. Contractors may obtain any of the approved certifications to meet the applicable certification requirements for each associated level.

COMPUTING ENVIRONMENT (CE) TRAINING:

In addition to DoD IA baseline certification requirements, Contractor personnel shall obtain appropriate Computing Environment (CE) certifications for the operating system(s) and/or security related tools/devices being supported under this contract. Contractor personnel should obtain CE certifications for all tools, systems and devices being supported; however, at a minimum, Contractor personnel shall obtain a certification in the functional area(s) they spend the most time supporting (i.e. Windows7 certification for Desktops/End User Support, Cisco/ Enterasys certification for Networking, Windows 2008 for System Administration). See the DLA approved list of CE certifications in Table 2.4.1, IAT and CE Requirements. The approved CE list will be periodically updated to ensure relevant or expired industry standard certifications are added or removed as applicable to the CE or as directed by DoD policy. At the time of proposal submission, the Contractor shall identify personnel performing IA functions identified in the PWS prior to that employee commencing any work under this PWS and provide documentation to the KO or COR showing the employee’s certification(s) and certification status. The Contractor shall demonstrate that they have a process to track certification status of employees to ensure certifications are kept current. The contractor shall replace departing employees with employees possessing current certifications in a manner that will not cause program interruption. Contractor personnel shall be required to sign the User Access Agreement, Privileged Rules of Behavior, and General Rules of Behavior and non-Disclosure agreement prior to working on any government system(s).

SECURITY TRAINING. To ensure that all Contractor employees know and understand regulations and policy pertaining to physical, information, operations and personnel security, the Contractor shall provide security and antiterrorism training to all employees in accordance with applicable DOD regulatory requirements. At a minimum, security training requirements as required by the DLA Issuances and other applicable DOD guidance will be completed annually for: Antiterrorism/Force Protection (AT/FP), Operations Security (OPSEC), Counterintelligence Awareness Training, Information Security (INFOSEC), DoD Information Assurance Awareness and Combating Trafficking in Persons (CTIP). The security training is web-based and access will be provided by the Government. The Contractor shall ensure Contractor personnel have taken the required security training to meet DoD guidance and that the personnel continue to maintain their certifications.

5.2 Contractor Furnished Equipment

i. Contractor personnel privately-owned vehicles (POVs) shall not be used for the transportation of Government-owned IT equipment. Contractor-furnished vehicles and operators shall meet all applicable licensing, insurance, registration and safety requirements.

SECTION 6 SPECIFIC TASKS

6.1 SharePoint Application Support Tasks:

**The Government estimates the growth at an additional six (6) sites per year with a potential variance of 20%.

6.1.1. Plan, configure, stand-up, and validate new development, test and production environments for hosting SharePoint 2010 and 2013. Install all required SharePoint 2010 and 2013 Portal Server software within the development, test and production environments for the new platform migration.

6.1.2. Coordinate, plan and migrate the existing SharePoint 2010 environment to SharePoint 2013. The existing SharePoint 2010 portal consists of approximately 40 site collections (could grow to 70 site collections, 250 SharePoint team sites and 315 GB of data. Ensure a stable, secure upgrade which meets all identified security, policy, and requirements, and is available for use by all DLA users.

6.1.3. Work with the Contracting Officer’s Representative (COR) in the upgrade and migration of websites, content, applications, and other designated content to the DLA Distribution SharePoint Portal. The Government will perform the migration for checks and balances; the Contractor shall consult the procedures.

6.1.4. Provide transfer of knowledge to DLA Information Operations at New Cumberland administrators on functionality, administration, security, operations, backup/restore, permissions, etc.

6.1.5. Create firewall change requests to correct SharePoint server connectivity problems between enclaves.

6.1.6. Coordinate the update of client machines with the portal software. Coordination may be required with the COR and Systems Center Configuration Manager (SCCM) Team for group policy management changes, etc.

6.1.7. Manage patch requirements of SharePoint portal servers utilizing tools utilizing SCCM .

6.1.8. Keep Backups of SharePoint portal (Avepoint) operations and maintain successful operations through the designated backup software. At any time, a designated file should be able to be restored, if needed, by any end user through a Remedy ticket request.

6.1.9. Implement and ensure access to the DLA Distribution portal from all DLA Distribution sites are secure, using the Virtual Private Network (VPN), and accessible within reasonable response rates.

6.1.10. Coordinate with the DLA Information Operations Network team to setup and test Riverbed network optimization in conjunction with the SharePoint environment.

6.1.11. Test and Evaluate the SharePoint Portal System, testing portal, searches and indexes, customizations and integrations.

6.1.12. Ensure contingency planning and disaster recovery is documented, successfully tested, and up-to-date as directed by the COR or TPOC. At any time the entire SharePoint portal shall be able to be restored to a compatible infrastructure and location.

6.1.13. Utilize Web Trends to administer the Statistical Analysis Server and other designated servers for the optimal use of SharePoint; i.e. Reporting, Usage, etc.

6.1.14. Research and remain up to date on Microsoft technologies and related third-party software. Research new technologies for use in growth, troubleshooting, or expansion of Microsoft SharePoint platform on an as needed basis.

6.1.15. Administer the clustered DLA Distribution’s Front End Portal Servers, Index Servers, Excel servers, and servers maintaining related database store for the Development, Test and Production environments.

6.1.17. Configure alert notification through SharePoint, SQL and windows events, Foglight, What’s Up Gold & Solarwinds.

6.1.18.Ensure proper configuration for seamless integration with Active Directory, Office Communicator and Exchange.

6.1.19. Coordinate with Active Directory, Office Communicator and Exchange consolidation teams to ensure continued functionality in the event of domain migration.

6.1.20. Coordinate with Enterprise Active Directory, Office Communicator and Exchange administrators to provide Office 2010 integration.

6.1.21. Immediately notifies TPOC via email of any server viral activity, detected by Antivirus Software.

6.1.22. Develop custom out of the box workflows based on customer requirements.

6.1.24. Assist DLA Information Operations with the conversion of Web based Intranet sites to the SharePoint 2010 environment.

6.1.25. Analyze and coordinate cleanup of existing SharePoint site collections prior to migration.

6.1.26. Create a User Guide highlighting features and functionality of the new SharePoint environment.

6.1.27. Create a site collection administrator guide and provide hands on training for DLA Information Operations and DLA Distribution site collection administrators.

6.1.28. Create a governance document based on requirements from DLA Information Operations and DLA Distribution.

6.1.29. At the completion of the migration, coordinate the updating of all SharePoint sites and sub-sites to maximize the use of productivity features available in SharePoint 2013.

6.1.30. Develop and implement a shared DLA taxonomy for all documents stored on the SharePoint Portal. This taxonomy should increase the “findability” of documents on the portal.

6.2 SharePoint Operating System Support Tasks:

6.2.1. Provide System Administration of Windows 2008 R2 or later services.

6.2.2. Monitor designated servers for optimal processing, configuration, security and stability.

6.2.3. Provide analysis and documented plan for migrating any lower level operating systems in support of a designated DLA Information Operations implementation strategy.

6.2.4. Provide research, analysis and support to keep on the cutting edge, up-to-date, or integrate with new products, as well as resolve issues with Microsoft SQL Server, as well as all servers involved with SharePoint assigned to administer.

6.2.5. Provide windows administration services, including software installation, configuration, maintenance, upgrades (software and hardware), and application support, as it pertains to SharePoint.

6.2.6. Troubleshoot server and connectivity problems associated with the implementation of the Microsoft SharePoint environment.

6.2.7. Provide assistance in the installation, upgrade, and configuration of server/workstations and administrative access to the development and test environments, if requested by the COR.

6.2.8. Provide test plan for all documentation to ensure accuracy of documentation for all areas of support.

6.2.9. Keep up-to-date on Security Technical Implementation Guidelines (STIGs) and ensure that implementation of all STIGs is to be performed on test/development platforms and approved by application owner and Information Assurance (IA) offices prior to being moved onto production systems.

6.2.110. Patch management of servers utilizing a tool such as SCCM..

6.2.11. Ensure contingency planning and disaster recovery is documented, tested, and up-to-date as directed by the COR..

6.2.12. Provide knowledge transfer to DLA Information Operations at New Cumberland personnel in the deployment, configuration, troubleshooting, and administration of the designated SharePoint Windows servers.

6.2.13. Utilize Eagle time and project tracking system to input consolidated time spent per day on each assigned projects using predetermined project codes that are provided within the project tracking system.

6.2.14. Ensure security is within DoD/DLA/DLA Information Operations’ Directives and server/application is tuned for optimal response rates.

6.2.15. Develop conceptual design, if required, and submit for approval prior to implementation. All developed conceptual designs must be documented in writing.

6.2.16. Ensure server security by applying Public Key Infrastructure (PKI), Secure Socket Layer (SSL), and requiring Common Access Card (CAC) authentication via Kerberos.

6.3 SharePoint Project Support Tasks:

6.3.1. Develop a project timeline which includes high level tasks and milestones used to ensure project success.

6.3.2. Track project progression and notify DLA Information Operations of any tasks that will not be completed on time.

6.3.3. Create a PowerPoint slide as needed detailing current status of the project.

6.3.4. Assist DLA Information Operations with marketing of the new SharePoint 2013 portal.

6.3.5. Review and provide SharePoint technical quality assurance for all deliverables and work products generated under this contract.

6.3.6. Brief J6N Management as needed on project status.

6.4 SharePoint Content Management Support Tasks:

6.4.1 SharePoint Content Management - Maintenance

6.4.1.1 Responsible for maintaining the 35+ existing DLA Distribution…