SP7000-21-R-1001 Attachment 1 - Performance Work Statement (PWS).pdf

I. OVERVIEW

A. The Defense Logistics Agency (DLA) seeks to enter into multiple award Indefinite Delivery Indefinite Quantity (IDIQ) contracts with a total estimated maximum of up to $702.2 Million for the up to 60 month lease of A3, A4 and production level Multifunctional Devices (MFDs), accessories and office document devices (hereafter collectively referred to as “devices”) within the 50 United States, District of Columbia, Guam, and Puerto Rico along with services associated with the leased devices. Specific details are found in sections II and III.

B. The services associated with the leased devices sought are delivery and installation (section IV), end-user training (section V), full-service maintenance, including all consumable supplies (excluding paper) (section VI), relocation (section VII), technical refresh (section VIII), removal (section IX), reports (section X), network functionality (section XII), and network security (section XIII).

II. DEVICES AND CONFIGURATIONS

A. All devices shall meet the following requirements:

1. Simplex/duplex copying, printing, and scanning.

2. Automatic Document Feeder with a 30 page minimum capacity and duplexing.

3. Operate using at least 30% recycled 20 lb. paper.

4. Free-standing with casters/wheels (or cabinets provided as needed). No devices shall be configured for table-top use.

5. Copy resolution of at least 600 x 600 DPI.

6. Print resolution of at least 1,200 x 1,200 DPI.

7. Support current desktop and server operating systems.

8. A minimum of 1 Gigabyte of document management memory.

9. Print drivers shall be capable of Page Description Language (PDL) to support Adobe PS3, PCL5E and PCL6.

10. Delivered with up-to-date software/firmware and drivers, with 32-bit and 64-bit architecture driver support. Provide all subsequent updates along with installation instructions to DLA.

11. As an option, the Contractor shall install updates, in person (not remotely) while ensuring each device maintains all functionality from prior to the upgrade. NOTE: This option is for a one-time, in-person update and may or may not be requested on a device covered elsewhere on this contract.

12. Operate using standard U.S. office 120/240 volt 15 amp 60 hertz (Hz) alternating current (AC) electrical current or U.S. office 120/240 volt 20 amp 60 Hz AC electrical current. In the event the later (20 amp) is offered, the Contractor shall clearly identify these models in proposals and in all price lists. No external transformers shall be used as an exception. The contractor shall also identify the power plug part number required.

13. Equipped with an external surge protector to protect all electronic components. The external surge protector shall be provided in addition to any internal surge protectors. External surge protectors shall have a minimum five (5) year manufacturer’s warranty that covers:

a. Replacement of the surge protector if it fails, at no cost to the Government.

b. Repair or replacement of any device provided through this PWS damaged by a power surge when properly connected to the Contractor-provided surge protector.

14. Include a printed operator’s manual, in English, for each device.

SP7000-21-R-1001

ATTACHMENT 1 PERFORMANCE WORK STATEMENT

15. Default to:

a. Automatically go into sleep mode after 20 minutes of inactivity

b. Automatically go into hibernation after an hour of inactivity.

c. Print duplex (2-sided).

d. Print in gray scale on both monochrome and color MFDs

e. “Draft” quality printing rather than “high” quality printing

f. Display all information in English.

B. In addition to all requirements in section II.A, all A3 devices shall:

1. Include basic inline finishing functions which include stacking, collating, and multi-position stapling.

2. As an option include:

a. 2-3 hole punch and/or

b. Booklet maker (without face trim) with saddle-stitching.

C. In addition to all requirements in section II.A, all A4 devices shall collate documents.

D. In addition to all requirements in section II.A, all production level devices (volume bands 7-9) shall:

1. Include 2-3 hole punch and inline booklet maker (without face trim).

2. As an option include:

a. Booklet maker with face trim and/or

b. Additional high capacity paper tray (minimum 2,000 sheets) and/or

c. Inline folder (Z Fold, trifold) and/or

d. High-capacity stacker (minimum 3,000 sheets).

E. Devices shall meet the following security requirements:

1. Devices with hard drives shall have an encryption or overwrite Security Kit.

2. Only CLASSIFIED designated devices shall be placed on the Secret Internet Protocol Router Network (SIPRNet). All CLASSIFIED designated devices shall include an option for a removable hard drive. A removable hard drive is a hard drive the end-user may easily remove, and reinsert into the device on a recurring basis. All devices with removable hard drives shall have a locking mechanism to secure the hard drive. Contractors shall indicate the devices that have a removable hard drive on the Installation Report (Appendix #1).

3. All Universal Serial Bus (USB) ports/memory card slots on the devices shall be disabled when delivered except: the printer port used to connect the device to a single computer; Common Access Card (CAC) readers; and any USB ports needed for servicing/maintaining equipment. Additionally, unused ports, protocols and services on each device shall be able to be enabled/disabled by the local IT administrator.

4. All devices shall have a secure scanning functionality that complies with Federal Information Processing Standard (FIPS) 140-2 encryption (will be replaced by 140- FY22).

SP7000-21-R-1001

5. All Non-Classified Internet Protocol Router (NIPR) devices, volume bands 1-5, shall have analog fax only. Note: The analog fax function shall be configured to separate/isolate the fax controller from the network controller. SIPR devices shall NOT have fax capability.

6. All devices, except Production devices:

a. Shall have CAC/Personal Identity Verification (PIV) enablement in order to secure the device from unauthorized use and shall have a “Secure Print” feature that allows end-users to use authentication credentials (ex. ID, Login) and password identification (PIN) to release print jobs on the device.

b. Shall be capable of integration with print on-demand solution (e.g., equivalent to “Follow Me,” “Follow You,” “Push” or “Pull” printing) that shall allow end-users to release print output on any device on the network.

c. Shall have secure scanning functionality with routing and full integration to standard network infrastructure destinations, which include: Scan-to-Email, Scan-to-Folder, Scan-to-Network, Scan-to-Server and Scan-to-PC. Scanned documents shall be made available as a TIFF, JPEG and as a PDF file format. The default scan resolution shall be 300 x 300 DPI. The default scan output file type shall be PDF. Devices shall have Optical Character Recognition (OCR) in order to process and produce text-searchable documents to the scan destination. Note: Full integration does not mean scanning to proprietary back-end content, document or records management systems to support customized indexing or metadata requirements.

F. Contractors shall provide original equipment manufacturer (OEM) specification sheets, to include proposed configurations for each device, with proposal to the Contracting Officer.

III. FUNCTIONAL AREAS AND VOLUME BAND SPECIFICATIONS:

A. Functional Area 1 shall consist of NIPR and SIPR A3/A4 devices.

B. Functional Area 2 shall consist of production level NIPR and SIPR devices, capable of 8.5” x 11”, 8.5” x 14”, 11” x 17” and 12” x 18” output.

D. In addition to the features/capabilities/configurations set forth in section II (outlined above), the Contractor shall provide all devices in accordance with the chart below:

Functional Area 1

Volume Band

NIPR

SIPR

Estimated Monthly

Impressions

Mono Color Mono/Color

1 VB-1A3NM NIPR 5,000 N/A 25 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-1A3SM SIPR 5,000 N/A 25 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-1A3NC NIPR 3,000 2,000 25 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-1A3SC SIPR 3,000 2,000 25 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-2A3NM NIPR 10,000 N/A 35 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-2A3SM SIPR 10,000 N/A 35 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-2A3NC NIPR 5,000 5,000 35 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-2A3SC SIPR 5,000 5,000 35 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

SP7000-21-R-1001

1 VB-3A3NM NIPR 20,000 N/A 45

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-3A3SM SIPR 20,000 N/A 45 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-3A3NC NIPR 10,000 10,000 45 One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-3A3SC SIPR 10,000 10,000 45

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17"

1 VB-4A3NM NIPR 35,000 N/A 50

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17" One (1) High Capacity Tray [2,000 Sheet Minimum] - 8.5 x 11"

1 VB-4A3SM SIPR 35,000 N/A 50

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17" One (1) High Capacity Tray [2,000 Sheet Minimum] - 8.5 x 11"

1 VB-4A3NC NIPR 20,000 15,000 50

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17" One (1) High Capacity Tray [2,000 Sheet Minimum] - 8.5 x 11"

1 VB-4A3SC SIPR 20,000 15,000 50

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17" One (1) High Capacity Tray [2,000 Sheet Minimum] - 8.5" x 11"

1 VB-5A3NM NIPR 70,000 N/A 60

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17" One (1) High Capacity Tray [2,000 Sheet Minimum] - 8.5 x 11"

1 VB-5A3SM SIPR 70,000 N/A 60

One (1) Bypass Tray [100 Sheet Minimum] - Up to 11" x 17" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 11" x 17" One (1) High Capacity Tray [2,000 Sheet Minimum] - 8.5 x 11"

Functional Area 1 Optional Accessories/Services for A3 Devices

1 A3-RHD SIPR Removable Hard Drive for A3 SIPR MFD 1 A3-23HP 2/3 Hole Punch for A3 MFD 1 A3-BM Booklet Maker (without Face Trim) for A3 MFD

1 A3-EEMT Enhanced Enterprise Management Tool for A3 MFD 1 A3-FSU Firmware/Software Updated by Contractor for A3 MFD (one-time) 1 A3-HD Replacement Hard Drive for A3 MFD

1 A3-OSKO Onsite Key Operator for A3 MFD 1 A3-OST Onsite Technician for A3 MFD 1 A3-ED Expedited Delivery for A3 MFD (Volume Bands 1, 2 and 3 only)

1 A3-RGOE Removal of Government Owned Equipment 1 A3-DRX A3 Device Relocation in Excess of Allocation 1 A3-DR51 A3 Device Relocation 51-150 Miles

1 A3-DR151 A3 Device Relocation 151-250 Miles 1 A3-DR251 A3 Device Relocation 251-350 Miles 1 A3-DR351 A3 Device Relocation 351 Miles and Greater

1 OP-1A3NM Opt. Pre-config. for A3 Low Volume Monochrome Devices 1 OP-1A3SM Opt. Pre-config. for A3 Low Volume Monochrome Devices: CLASSIFIED 1 OP-1A3NC Opt. Pre-config. for A3 Low Volume Color Devices

1 OP-1A3SC Opt. Pre-config. for A3 Low Volume Color Devices: CLASSIFIED 1 OP-2A3NM Opt. Pre-config. for A3 Mid Volume Monochrome Devices 1 OP-2A3SM Opt. Pre-config. for A3 Mid Volume Monochrome Devices: CLASSIFIED

1 OP-2A3NC Opt. Pre-config. for A3 Mid Volume Color Devices 1 OP-2A3SC Opt. Pre-config. for A3 Mid Volume Color Devices: CLASSIFIED 1 OP-3A3NM Opt. Pre-config. for A3 High Volume Monochrome Devices

1 OP-3A3SM Opt. Pre-config. for A3 High Volume Monochrome Devices: CLASSIFIED 1 OP-3A3NC Opt. Pre-config. for A3 High Volume Color Devices 1 OP-3A3SC Opt. Pre-config. for A3 High Volume Color Devices: CLASSIFIED

1 OP-4A3NM Opt. Pre-config. for A3 High-Volume High-Speed, Monochrome Devices 1 OP-4A3SM Opt. Pre-config. for A3 High-Volume High-Speed, Monochrome Devices: CLASSIFIED 1 OP-4A3NC Opt. Pre-config. for A3 High-Volume High-Speed, Color Devices

1 OP-4A3SC Opt. Pre-config. for A3 High-Volume High-Speed, Color Devices: CLASSIFIED 1 OP-5A3NM Opt. Pre-config. for A3 High-Volume High-Speed, Monochrome Devices 1 OP-5A3SM Opt. Pre-config. for A3 High-Volume High-Speed, Monochrome Devices: CLASSIFIED

Functional Area 1

Volume Band

NIPR

SIPR

Estimated Monthly

Impressions

Mono Color Mono/Color

SP7000-21-R-1001

1 VB-2A4NM NIPR 5,000 N/A 35

One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-2A4SM SIPR 5,000 N/A 35 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-2A4NC NIPR 3,000 2,000 35 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-2A4SC SIPR 3,000 2,000 35

One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-3A4NM NIPR 10,000 N/A 45 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-3A4SM SIPR 10,000 N/A 45 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-3A4NC NIPR 5,000 5,000 45

One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-3A4SC SIPR 5,000 5,000 45 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Two (2) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-4A4NM NIPR 20,000 N/A 50 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-4A4SM SIPR 20,000 N/A 50

One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-4A4NC NIPR 10,000 10,000 50 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

1 VB-4A4SC SIPR 10,000 10,000 50 One (1) Bypass Tray [100 Sheet Minimum] - Up to 8.5" x 14" Four (4) Adjustable Paper Trays [500 Sheet Minimum/Tray] - Up to 8.5" x 14"

Functional Area 1 Optional Accessories/Services for A4 Devices

1 A4-RHD SIPR Removable Hard Drive for A4 SIPR MFD

1 A4-EEMT Enhanced Enterprise Management Tool for A4 MFD 1 A4-FSU Firmware/Software Updated by Contractor for A4 MFD (one-time) 1 A4-HD Replacement Hard Drive for A4 MFD

1 A4-OSKO Onsite Key Operator for A4 MFD 1 A4-OST Onsite Technician for A4 MFD 1 A4-RGOE Removal of Government Owned Equipment

1 A4-DRX A4 Device Relocation in Excess of Allocation 1 A4-DR51 A4 Device Relocation 51-150 Miles 1 A4-DR151 A4 Device Relocation 151-250 Miles

1 A4-DR251 A4 Device Relocation 251-350 Miles 1 A4-DR351 A4 Device Relocation 351 Miles and Greater 1 OP-2A4NM Opt. Pre-config. for A4 Low Volume Monochrome Devices

1 OP-2A4SM Opt. Pre-config. for A4 Low Volume Monochrome Devices: CLASSIFIED 1 OP-2A4NC Opt. Pre-config. for A4 Low Volume Color Devices 1 OP-2A4SC Opt. Pre-config. for A4 Low Volume Color Devices: CLASSIFIED

1 OP-3A4NM Opt. Pre-config. for A4 Mid Volume Monochrome Devices 1 OP-3A4SM Opt. Pre-config. for A4 Mid Volume Monochrome Devices: CLASSIFIED 1 OP-3A4NC Opt. Pre-config. for A4 Mid Volume Color Devices

1 OP-3A4SC Opt. Pre-config. for A4 Mid Volume Color Devices: CLASSIFIED 1 OP-4A4NM Opt. Pre-config. for A4 High Volume Monochrome Devices 1 OP-4A4SM Opt. Pre-config. for A4 High Volume Monochrome Devices: CLASSIFIED

1 OP-4A4NC Opt. Pre-config. for A4 High Volume Color Devices 1 OP-4A4SC Opt. Pre-config. for A4 High Volume Color Devices: CLASSIFIED

Functional Area 2

Volume Band

NIPR

SIPR

Estimated Monthly

Impressions

Mono Color Mono/Color

2 VB-7PRNM NIPR 90,000 N/A 90

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-7PRSM SIPR 90,000 N/A 90

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-7PRNC NIPR 40,000 40,000 80

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-7PRSC SIPR 40,000 40,000 80

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

SP7000-21-R-1001

2 VB-8PRNM NIPR 100,000 N/A 110

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-8PRSM SIPR 100,000 N/A 110

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-8PRNC NIPR 50,000 50,000 95

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-8PRSC SIPR 50,000 50,000 95

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-9PRNM NIPR 120,000 N/A 130

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-9PRSM SIPR 120,000 N/A 130

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-9PRNC NIPR 60,000 60,000 115

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

2 VB-9PRSC SIPR 60,000 60,000 115

Two (2) Adjustable Paper Trays [500 Sheet Minimum] - Up to 12" x 18" One (1) High Capacity Tray [2,000 Sheet Minimum] or Two (2) High Capacity Trays [1,000 Sheet Minimum]

Functional Area 2 Optional Accessories/Services for Production Devices

2 PROD-RHD SIPR Removable Hard Drive for Production SIPR MFD

2 PROD-BMT Booklet Maker w/ Face Trim for Production MFD 2 PROD-HCT Additional High Capacity Paper Tray (min. 2,000 sheets) for Production MFD 2 PROD-FLD Inline Folder (minimum requirement: Z Fold, trifold) for Production MFD

2 PROD-HCS High Capacity Stacker (minimum 3,000 sheets) for Production MFD 2 PROD-FSU Firmware/Software Updated by Contractor for Production MFD (one-time) 2 PROD-HD Replacement Hard Drive for Production MFD

2 PROD-RGOE Removal of Government Owned Equipment 2 PROD-DRX Production Device Relocation in Excess of Allocation 2 PROD-DR51 Production Device Relocation 51-150 Miles

2 PROD-DR151 Production Device Relocation 151-250 Miles 2 PROD-DR251 Production Device Relocation 251-350 Miles 2 PROD-DR351 Production Device Relocation 351 Miles and Greater

2 OP-7PRNM Opt. Pre-config. for Production Low Volume Monochrome Devices 2 OP-7PRSM Opt. Pre-config. for Production Low Volume Monochrome Devices: CLASSIFIED 2 OP-7PRNC Opt. Pre-config. for Production Low Volume Color Devices

2 OP-7PRSC Opt. Pre-config. for Production Low Volume Color Devices: CLASSIFIED 2 OP-8PRNM Opt. Pre-config. for Production Mid Volume Monochrome Devices 2 OP-8PRSM Opt. Pre-config. for Production Mid Volume Monochrome Devices: CLASSIFIED

2 OP-8PRNC Opt. Pre-config. for Production Mid Volume Color Devices 2 OP-8PRSC Opt. Pre-config. for Production Mid Volume Color Devices: CLASSIFIED 2 OP-9PRNM Opt. Pre-config. for Production High Volume Monochrome Devices

2 OP-9PRSM Opt. Pre-config. for Production High Volume Monochrome Devices: CLASSIFIED 2 OP-9PRNC Opt. Pre-config. for Production High Volume Color Devices 2 OP-9PRSC Opt. Pre-config. for Production High Volume Color Devices: CLASSIFIED

IV. DELIVERY AND INSTALLATION

A. Delivery and Installation of Ordered Devices:

1. Delivery and Installation of ordered devices shall be in accordance with (IAW) the timeframes outlined in the chart below:

Up to 100 30 days after receipt of order (ARO)*

SP7000-21-R-1001

101‐200 45 days ARO

201 – 500 60 days ARO

More than 500 90 day ARO

2. Installation shall be defined as device is fully operational as ordered, to include network connectivity and scanning, if required. The Contractor shall provide onsite technical and system analyst support and appropriate digital cards/products to successfully connect devices to DLA customers’ networks.

3. Upon completion of device delivery, the Contractor shall obtain customer signature and date on each bill of lading (BOL) or packing slip, and provide this proof of delivery to the designated DLA point of contact (DLA POC) within ten (10) business days after delivery. The Contractor shall also provide the Installation Report (Appendix #1) or a modified delivery schedule with serial numbers added to the designated DLA POC within ten (10) business days after delivery and installation have been completed.

4. If a device cannot be delivered and installed within the delivery time that is given, the Contractor shall notify the issuing Contracting Officer as soon as the delay is realized, of the expected delivery date for the ordered device(s).

5. Regardless of installation date, all devices, including replacement devices, shall maintain a co-terminus Period of Performance (PoP).

6. Upon installation, the Contractor shall affix on each device a sticker with the following information:

manufacturer’s name, model number, device serial number and toll-free telephone number(s) to place service maintenance calls and order consumable supplies. Additionally, the Contractor shall add the PoP end date to the DLA EMS sticker and affix on device. (DLA shall provide the DLA EMS stickers.)

7. The Contractor shall provide English-speaking personnel at the toll-free number(s) provided.

8. The Contractor is required to offer the option of expedited delivery and installation within fifteen

(15) calendar days ARO for order quantities of one (1) to ten (10) A3 NIPR devices (volume bands 1, 2 and 3 only).

B. Options to Order Additional Quantities of Devices:

1. As options, the Contractor shall, at the same unit price, provide up to twenty percent (20%) more co-terminus leased devices than set forth at each CLIN of a delivery order; provided that DLA exercises and issues its options, if at all, prior to the end of the 24th month following the effective date of that original delivery order.

V. TRAINING

A. The Contractor shall provide either on-site training or online training, in English, as specified in the order, to end-users.

B. The Contractor shall coordinate directly with each command’s POC listed on the order to establish the training schedule.

C. Training shall include the following:

1. How to operate the basic function keys of the device.

SP7000-21-R-1001

2. How to operate special features including duplexing, enlargements, reductions, and multiple job queues.

3. Diagnosis and resolution of basic device malfunctions, including paper jams.

4. Location and procedures for installing consumables such as paper, toner, staples, etc.

D. For on-site training, the Contractor shall submit a Summary of On-Site Training Report (Microsoft Excel format), listing device serial number, personnel trained and date training was completed, to the designated DLA POC within five (5) business days of training completion. Initial invoice payment shall not be released until this report is received.

E. For online training, the Contractor shall provide each POC listed on the delivery schedule with manufacturer-approved training that, at a minimum, covers all items listed in paragraph V.C. The link shall be accessible by DLA and its customers via http or https. The Contractor shall submit a Summary of Online Training Report (Microsoft Excel format), listing device serial number, personnel trained, email addresses training link was sent and date training link was sent, to the designated COR within five (5) business days of email to personnel. Initial invoice payment shall not be released until this report is received.

F. In addition to either on-site or online training, the Contractor shall provide a quick reference desk guide (single sheet, 8.5” x 11” paper size, laminated, full color and able to be easily stowed away with the device). The contractor shall also provide a CD-ROM/DVD and/or web-based training (URL printed on a sticker to be placed on the front of the device) to serve as follow-up training.

VI. MAINTENANCE

A. Service

1. The Contractor shall maintain each device at a minimum 95% monthly available rate. Maintaining the devices includes:

a. Preventive maintenance

b. Service calls

c. Repairs

d. Troubleshooting

e. Connectivity

f. All associated labor and travel

2. If a malfunction cannot be corrected during the initial service call, the Contractor shall resolve all issues no later than ten (10) calendar days from date of initial service call.

3. The Contractor shall provide English speaking service technician support Monday through Friday from 8:00 a.m. – 4:30 p.m. local time, with the exception of Federal holidays.

4. Service for Non‐Remote Areas: Non-Remote Areas are defined as service locations being within a fifty (50) mile radius commute of a metropolitan area, which for the purpose of this PWS is defined as a statistical area with a population of 50,000 persons and above. For service in non-remote areas:

copying, scanning or faxing) is non-operational. A telephone call (unless it results in solving

SP7000-21-R-1001

the problem) shall not be deemed an acceptable service response. The service technician shall call the end-user within an hour to discuss the service problem and time of arrival. It is estimated that 10% of service calls shall be classified as “work stoppage” across the total device population on a yearly basis.

(printing, copying, scanning or faxing) is degraded. A telephone call (unless it results in solving the problem) shall not be deemed an acceptable service response. The service technician shall call the end-user within an hour to discuss the service problem and time of arrival.

5. Service for Remote Areas: Remote Areas are defined as service locations being beyond a fifty

(50) mile radius commute of a metropolitan area. For service in remote areas:

acceptable service response. The service technician shall call the end-user within an hour to discuss the service problem and time of arrival. It is estimated that 10% of service calls shall be classified as “work stoppage” across the total device population on a yearly basis.

deemed an acceptable service response. The service technician shall call the end-user within an hour to discuss the service problem and time of arrival.

6. In the case of devices cleared for CLASSIFIED material, the Contractor’s repair technicians shall have a Department of Defense (DOD) security clearance equal to or higher than the classification of the device and be able to provide verification when requested.

7. The Contractor shall be responsible for all damages due to normal wear and tear and loss or damage caused by the Contractor or its agents.

8. If a device is determined to be non-repairable, to include damaged devices, the Contractor shall inform the designated DLA POC within two (2) business days of making this determination. The Contractor shall deliver and install a comparable replacement device within fifteen (15) calendar days from written notification from the Contracting Officer.

B. Consumable Supplies

1. The Contractor shall provide all consumable supplies (including staples) necessary for the operation of the devices. Paper is excluded as a consumable supply.

2. The Contractor shall deliver all required consumable supplies to the designated locations listed on the delivery schedule identified on the order, within three (3) business days after receipt of a request for supplies.

C. Additional Optional Services

1. The Contractor is required to offer the option for onsite key operators and/or onsite technicians.

a. Coverage shall be Monday through Friday from 8:00 a.m. – 4:30 p.m. local time (unless specified otherwise on the order), with the exception of Federal holidays.

to discuss the service problem and time of arrival.

SP7000-21-R-1001

an hour to discuss the service problem and time of arrival.

2. The Contractor shall provide onsite key operators for A3 and A4 devices to respond to all service calls. At the order level, the Government shall dedicate a workspace equipped with a desk, chair, and phone.

a. Onsite key operators shall be responsible for the following: Clearing jams, adding toner, replacing waste toner containers, delivery and replenishment of consumables, scheduled preventive maintenance, identifying problem areas, initiating corrective actions, facilitating delivery of new and replacement devices, coordinating device relocations, along with placing calls to the technician for additional support, if required.

b. The Contractor is responsible for all labor and travel associated with the onsite key operators’ responsibilities.

3. The Contractor shall provide onsite technicians for A3 and A4 devices to respond to all service calls.

At the order level the Government shall dedicate a workspace equipped with a desk, chair, and phone.

a. Onsite technicians shall be responsible for the following: Maintenance of the devices to include installation of new and replacement devices, device relocations, troubleshooting, preventive maintenance, and service calls. Onsite technicians are not responsible for the delivery of paper.

b. The Contractor is responsible for all labor and travel associated with the onsite technicians’ responsibilities.

VII. DEVICE RELOCATION

A. For device relocations, the Contractor shall:

1. Provide device relocation services, within a 50-mile radius, for 100% of the total number of devices awarded under each order, for each year of the specified period of performance. (For example, if there are 100 devices awarded under any given order, the Contractor shall provide relocations for up to 100 devices per year. This could be relocating the same device 100 times, relocating 100 different devices one time each or any other combination thereof each year.) The device relocations shall not require rigging or special handling. Devices shall not be relocated without written approval from the designated DLA POC and shall be completed within thirty (30) calendar days after receipt of the written request.

2. Provide relocation services for device moves that exceed the total awarded number of devices under each order. These excess device relocations shall be available as a separate option.

3. Provide relocation services for device moves that are outside of the 50-mile radius outlined in the chart below: These device relocations shall be available as a separate option.

4. Include the following: Breakdown and packing of equipment, shipping, uncrating, re-installation and end-user training.

5. Be responsible for any and all repairs that may be required following any relocation performed.

151–250 251–350

More than 350

SP7000-21-R-1001

6. Upon completion, obtain customer signature on the Removal/Relocation Report contained within Appendix #2 and the MFD Hard Drive Removal Record (Appendix #3) if applicable.

VIII. TECHNICAL REFRESH

A. In the event the Contractor is no longer able to provide the products proposed, the Contractor may, only after written approval by the Contracting Officer, remove the products from the contract and provide replacement products which shall meet or exceed the Volume Band requirements as listed in this PWS, at the contract price.

1. Replacement devices shall be newer technology than the models they are replacing. If the Contractor submits new models for testing, the devices shall be “in production” and not near “end of life.”

2. Prior to delivery, if replacement devices have not been previously tested by DLA, they shall be tested as outlined in section XV.

IX. DEVICE REMOVAL

A. For device removal, the Contractor shall:

1. Remove all devices and associated supplies within thirty (30) calendar days of contract expiration or receipt of a modification signed by the Contracting Officer.

2. Notify the issuing Contracting Officer as soon as any delay in device removal is realized.

3. Prior to device removal, remove all hard drives and surrender them to DLA (or its assignee). Upon completion of the hard drive removal, the Contractor shall obtain the required signatures on both the Removal/Relocation Report (Appendix #2) and the MFD Hard Drive Removal Record (Appendix

4. The Government reserves the right to withhold final payment if all devices are not removed from the premises within thirty (30) calendar days of contract expiration or termination.

5. Be subject to payment of all disposal fees incurred by the Government for any devices not removed within thirty (30) calendar days of termination or expiration. After this time period, the devices will be considered abandoned.

B. Removal of Government-Owned Printers and Devices

1. The Contractor is required to offer the option for the removal and disposal of existing Government-owned printers and devices at the time new devices are delivered and installed. The disposal of all Government-owned printers and devices shall occur within thirty (30) calendar days of delivery and installation. All Government-owned printers and devices shall be removed in accordance with DOD Instruction 5000.64 and turned in to a DLA Disposition Services facility.

2. Prior to device removal, the Contractor shall remove all hard drives and surrender them to DLA (or its assignee). Upon completion of the hard drive removal, the Contractor shall obtain the required signatures on both the Removal/Relocation Report (Appendix #2) and the MFD Hard Drive

X. REPORTS

A. The Contractor shall provide the following reports:

1. Installation Report, as referenced in section IV.A.3.

SP7000-21-R-1001

2. Summary of On-Site Training Report, as referenced in section V.D and/or Summary of Online Training Report, as referenced in section V.E.

3. Device Listing Report (Microsoft Excel format) shall be submitted via Wide Area Work Flow (WAWF) to the DLA POC with the monthly invoice. The report shall contain an accurate listing of all devices under contract (model, serial number, location).

4. Removal/Relocation Report, as applicable, as referenced in sections VII.A.6, IX.A.3 and IX.B.2.

B. Upon request, the Contractor shall provide the following reports within five (5) business days, at no cost to the Government:

1. Usage Report (Appendix #4) shall be submitted to the DLA POC, Contracting Officer Representative (COR) and the Contracting Officer.

2. Response Time Report shall be submitted to the DLA POC, COR and the Contracting Officer. This report shall identify the technician’s response time, defined as the time between when the service call is placed and when the technician arrives onsite to repair the equipment. If the issue is able to be resolved on the phone, the response time shall be defined as the time the service call was placed and when the issue was resolved over the phone.

3. Device Downtime Report shall be submitted to the DLA POC, COR and the Contracting Officer. This report shall identify the time the equipment was inoperable/non-functional. Downtime is defined as the time the service call is placed notifying the Contractor’s representative that the equipment is inoperable/non-functional or when the technician begins service on the equipment if the device is operable/functional upon arrival. In addition, the report shall include information relative to the frequency of service calls, production volume between service calls, types of repairs, as well as parts required.

4. Device Uptime Report shall be submitted to the DLA POC, COR and the Contracting Officer. This report shall identify the time the equipment was operable and available and will be used to verify the required minimum 95% monthly available rate, as outlined in section VI.A.1.

XI. INVOICING

A. All invoices shall be submitted with the Device Listing Report via Wide Area Work Flow (WAWF) and shall be submitted in United States Dollars. The following website provides additional information regarding WAWF including information for “vendors getting started” with the system:

https://wawf.eb.mil/xhtml/unauth/help/help.xhtml.

B. For devices that are relocated or removed, invoices shall include the Removal/Relocation Report (Appendix #2) and the Hard Drive Removal Record (Appendix #3) and the BOL. Invoices submitted without the applicable reports shall not be paid.

XII. NETWORK FUNCTIONALITY

B. The Contractor shall provide devices that shall operate on and coexist on a network supporting all of the following:

1. Internet Protocol Version 4 (IPv4), SP7000-21-R-1001

2. Internet Protocol Version 6 (IPv6),

3. A hybrid of IPv4 and IPv6.

C. Support shall be provided for network configurations based on agency hardware/software.

XIII. NETWORK SECURITY

A. The Contractor shall provide devices that can be configured to comply with the current Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) titled Multifunction Device and Network Printer STIG (latest version and release), available at:

https://cyber.mil/.

B. Contractors shall monitor industry standard vulnerability sites (e.g. http://nvd.nist.gov/, https://www.us-cert.gov/ncas/alerts, http://oval.mitre.org/) and take appropriate actions if their equipment is subject to a known vulnerability. When vulnerabilities are identified by the Contractor, DLA or its customers, the Contractor shall provide remediation for distribution to all installed equipment in accordance with USCYBERCOM TASKORD regulations unless a different time period is directed by USCYBERCOM via DLA. The TASKORD is For Official Use Only. The following is authorized to be quoted from the TASKORD for reference:

1. Assured Compliance Assessment Solution (ACAS) assigns severity scores of critical, high, medium and low to plug-in findings.

a. Critical findings reflect discovery of a common vulnerability and exposure (CVE) that poses significant risk to the confidentiality, integrity, and availability of DODIN Networks. Actions to mitigate or remediate critical vulnerabilities shall be initiated upon discover with the goal of mitigation/remediation within seven (7) calendar days.

b. Findings with a severity score of high shall be addressed in the same manner as vulnerabilities addressed via Information Assurance Vulnerability Alert (IAVA) directives and mitigated or remediated within twenty-one (21) calendar days of discovery.

c. Findings with severity scores of medium and low shall be addressed in accordance with local Approving Official (AO), Information System Security Manager (ISSM), or Information System Security Officer (ISSO) guidance until further notice.

d. In all instances, DOD components shall consider exposure to threat, mission impact, sensitivity of data, and current mitigating security controls when prioritizing implementation of fix actions.

C. In the event remediation cannot be achieved within the mandated timeline, the Contractor shall provide a Plan of Action and Milestones and receive approval thereof by the Customer’s agency Authorizing Official or designee for risk acceptance.

D. All devices shall be International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 15408 (Common Criteria) certified IAW CNSSP-11 using the National Information Assurance Partnership (NIAP) approved criteria or equivalent.

1. A device shall be acceptable if it is included on either the NIAP CCEVS Product Compliant List (https://www.niap-ccevs.org/Product/) or Common Criteria Portal Certified Products list (http://www.commoncriteriaportal.org/products/).

2. All devices shall have current ISO/IEC 15408 certification and recertification, if applicable, before the Contractor can schedule lab time. See section XV. Guidance for Common Criteria Maintenance and Reevaluation is available at: https://www.niap-ccevs.org/documents_and_guidance/ccevs/scheme-pub-6.pdf

SP7000-21-R-1001

E. All devices shall be capable of obtaining accreditation through the Risk Management Framework (RMF) for DOD Information Technology (IT). As part of this, the Contractor agrees to provide all requested information and work in good faith with DLA so the DLA customers can expeditiously obtain RMF accreditation prior to device delivery and installation. The Contractor shall also provide devices for vulnerability and STIG testing to DLA or customer’s site. The Contractor further agrees that if the proposed device(s) does not obtain RMF accreditation, the contractor shall remove the device(s).

Information regarding RMF is found in Risk Management Framework (RMF) for DOD Information Technology (IT) Instruction 8510.1 dated 12 March 2014:

http://www.dtic.mil/whs/directives/corres/pdf/851001_2014.pdf. In order to maintain RMF and STIG compliance, devices are required to be delivered with the most up-to-date firmware, as outlined in section II.A.10.

F. For all non-Production unclassified devices: The Contractor shall supply a SMARTCARD Public Key Infrastructure (PKI) Solution which is compliant with DODI 8520.03 and NIST FIPS 201 (PIV) standards. The contractor shall provide card readers that shall read and process all approved CAC and PIV cards. The Contractor shall maintain compliance with DOD-wide SMARTCARD and DOD PKI standards, and support all approved physical cards during the full lease period.

G. For all non-Production classified devices: The contractor shall provide a SMARTCARD PKI Solution with SIPRNet token capability, which is compliant with DOD requirements for PK-enabling and interoperability as set forth in DODI 8520.02. The Contractor shall provide card readers that shall read and process all approved SIPRNet token cards. The Contractor shall provide device support systems that incorporate the use of PKI for encryption of information in transit or at rest. The Contractor shall provide devices that are compatible with 3.3 volt SafeNet SC650 token and that are compatible with the 90Meter Middleware solution for CAC, known as CAC Smart Card Manager-90. The Contractor shall maintain compliance with DOD wide SIPR and DOD PKI standards, and support all approved physical cards and firmware during the full lease period. For current DODI instructions go to:

http://www.dtic.mil/whs/directives/corres/ins1.html.

H. For all non-Production devices, the Contractor shall ensure that CAC/SIPR token authentication is available for scanning, printing and copying and shall be:

1. Capable of digitally signing emails using the senders DOD PKI Certificate(s).

2. Capable of encrypting emails using the receivers DOD PKI Certificate(s).

3. Capable of scan to file on networked devices.

4. In compliance with Homeland Security Presidential Directive-12 (HSOP-12).

I. The Contractor shall produce certificates of compliance, if requested.

XIV. OPTIONS TO ORDER PRECONFIGURED DEVICES

A. As options, prior to delivery, the Contractor shall preconfigure devices to meet CAC functionality and DISA STIG requirements such that they connect to and properly function on networks with no, or minimal, IT support.

B. CAC Functionality: The Contractor shall configure each device with a local IP address and the IP addresses required for DOD CAC authentication and include all required software.

C. STIG Requirements In configuring each device to meet the current DISA STIG requirements, the Contractor shall:

SP7000-21-R-1001

1. Turn off all unused ports and protocols (other than Simple Network Management Protocol version 3 (SNMP V3) and Hypertext Transfer Protocol Secure (HTTPS)), except that:

a. Transmission Control Protocol/Internet Protocol (TCP/IP) is authorized.

b. While authorized, print services are restricted to only port 9100 and/or LPD (port 515).

2. Cover and turn off all USB ports except the one required for a CAC reader.

3. Replace all default passwords and SNMP Community Strings of all management services with complex passwords and provide them to the local administrator.

4. Change the default administrator password to a complex password and provide it to the local administrator.

5. Provide documentation explaining which open ports are needed for device functionality and why.

6. Fully enable auditing of all user access functions. Maintain auditing records for each device for two

(2) years.

7. Set the device’s hard drive to automatically clear between each and every job, and remove all jobs that have not been completed within 72 hours.

8. Enable hard drive encryption.

9. Install the most current firmware. (See section II.A.10, above.)

10. Set the devices to maintain their configuration state after power down or reboot.

11. Restrict print jobs to only those coming from an authorized print spooler.

12. Provide hard drives with a lock mechanism or that are otherwise made inaccessible to prevent unauthorized access.

D. The Contractor shall deliver devices configured for CAC scan to home directory and CAC scan to Simple Mail Transfer Protocol (SMTP).

E. The Contractor shall provide a list of media access control (MAC) addresses prior to delivery to the local IT POC listed on the delivery schedule.

XV. TESTING

A. All devices proposed in response to the contract shall be tested for compliance with Network Security as defined in section XIII after award.

B. The estimated time for testing is twenty (20) business days. Testing and approval shall be performed by the DLA Information Operations EMS Division in conjunction with the Contractor’s assistance. The Contractor shall provide onsite engineering assistance and other support necessary to configure, setup, and test the equipment as needed.

1. DLA tests devices to meet DOD RMF and STIG Compliance. If all devices pass the preliminary testing process, DLA shall submit a compliance memorandum to the Contractor informing them that the devices have passed the preliminary testing process. In some cases, prior to being added to the DLA customer’s network, additional certification procedures and testing shall be required prior to risk acceptance. If required by DLA, the Contractor shall deliver test devices to the DLA customer

SP7000-21-R-1001

prior to proceeding with installation. DLA shall exercise due diligence to assist with technical mitigation and resolve any questions and/or concerns raised by that agency during the testing review process.

2. Upon request, the Contractor shall provide a representative device from each common criteria certified family and engineering support to the NAVWAR test facility in San Diego, CA for all devices that are to be placed on the Navy & Marine Corps Intranet (NMCI).