ASSIST_PWS_(4-24-2015).pdf

Acquisition Streamlining and Standardization Information System (ASSIST)

PERFORMANCE WORK STATEMENT (PWS)

Table of Contents

I. SECTION 1.0 - INTRODUCTION

• 1.2 PERFORMANCE REQUIREMENTS (DELIVERABLES)

II. SECTION 2.0 - CONTRACTOR QUALIFICATIONS

III. SECTION 3.0 - REFERENCES

I. Section 1.0 - INTRODUCTION

The purpose of this Request for Proposal (RFP) is to solicit technical services to support DSP automation initiatives and Information Technology (IT) planning. Efforts may include, but are not limited to, standardization technical data gathering and analysis; modifications to standardization automation systems and applications including, but not limited to, the ASSIST, ASSIST Quick Search, Qualified Products Database (QPD), QPL-Docs and other systems to enhance existing systems capabilities or to meet emergent requirements; development and production of standardization metric reports, ad-hoc management listings and summaries and responding to DSPO customer inquiries.

Technical CLIN

The basic objective of this task is to obtain technical services, related changes and maintenance to support the ASSIST Program related to the scope of DSP automation initiatives and Information Technology (IT) planning.

Functional CLIN

The scope of this task is to provide general functional support services for the ASSIST Program and DSPO activities (briefings, training sessions, reports, etc.).

Defense Logistics Agency (DLA) Document Services - DLA Document Services, through J- 62BH, Enterprise Capabilities is tasked with the responsibility of providing automation support for the Defense Standardization Program (DSP). This responsibility includes implementing DSP policy and procedures through automation, designing, testing and deploying the implementation of new and improved technologies in support of the DSP. DLA Document Services requires information technology support services for the continued maintenance of the suite of ASSIST Web-based applications and in the configuration management of supporting infrastructure systems. ASSIST is a comprehensive management information system used by Standardization Management Activities (SMAs) within the Department of Defense, Federal Agencies, and industry, to create, coordinate, catalogue, and publish specifications, standards, and other technical documents prepared in accordance with DoD 4120.24-M, Defense Standardization Program Policy and Procedures. ASSIST is the official source of these DSP documents which are used in the design, engineering acquisition, and sustainment of the systems and equipment used by the military.

The ASSIST serves multiple purposes. For one, it is the primary distribution tool for defense and federal specifications and standards, military handbooks, commercial item descriptions (CIDs), data item descriptions (DIDs), Qualified Product Lists (QPLs), Qualified Manufacturers Lists (QMLs), International Standardization Agreements (such as North Atlantic Treaty Organization (NATO) standards), and test operations procedures (TOPs), and international test operations procedures (ITOPs).

Besides this distribution function, ASSIST supports SMAs and DLA Document Services with administrative modules that may only be accessed by designated SMA personnel responsible for developing and maintaining DSP documents. These modules are based on the responsibilities and procedures delineated in DoD 4120.24-M and cover such things as requesting and approving projects to create or revise a DSP document, coordinating drafts and resolving comments, requesting numbers for new documents, confirming the technical accuracy of legacy documents and publishing validation notices, updating information for key points of contact at an SMA, or even making changes in certain responsibilities for a document.

The maintenance application in ASSIST, accessed by designated DLA Document Services and Defense Standardization Program Office (DSPO) employees, provides tools for managing user accounts and user permissions, editing document metadata, and publishing new and revised documents. Admin applications in ASSIST, accessed by designated DLA Document Services and DSPO employees, provide tools for managing user accounts and user permissions, editing document metadata, and publishing new and revised documents. Designated DSPO and DLA Document Services employees have access to the maintenance program. ASSIST also enables all users to access a variety of predefined reports and, in many other cases, to select filtering criteria to generate numerous custom reports.

DSPO is responsible for developing and staffing DoD 4120.24-M, which spells out the responsibilities of the three Military Departments and the participating Defense Agencies. DSPO is established, and DOD 4120.24-M is authorized, by DOD Instruction 4120.24, Defense Standardization Program (DSP), which implements that portion of Title 10 of the U.S. Code that establishes the Defense Standardization Program. A copy of DOD 4120.24M, as well as numbered DSPO policy memos that have modified the procedures therein, may be accessed from the DSPO website at http://dsp.dla.mil.

As the Executive Agent for the DSP, the Director, DSPO has the primary "ownership" responsibility for the ASSIST database, while DLA Document Services—serving as DSPO’s agent— is responsible for supporting DSP automation. As such, DLA Document Services is responsible for operating and maintaining the ASSIST database, and indexing and publishing new and revised DSP documents submitted by the SMAs, while ensuring that SMAs have complied with applicable policy and procedures in DoD 4120.24-M.

Currently, the system has evolved to a mostly paperless system where most users download document files from one of several Web-based ASSIST applications. Some document files are pushed to users based either on their assigned SMA responsibilities described in DoD 4120.24-M or based on customized alert criteria set by each user in his or her customer profile in the ASSIST Alert Portal.

ASSIST is essential to the Defense Standardization Program. DSPO relies on J-62BH Enterprise Capabilities and DLA Document Services to ensure that government and industry employees have access to defense and federal specifications and standards so that they may comply with contractual requirements. DSPO notifies the DODSSP when there are changes that impact the mission of the DODSSP and or that may require new functionally for ASSIST, or enhancements to existing ASSIST components. A list of current ASSIST modules are listed in Appendix A on page 27 at the end of this document.

OBJECTIVES

• Maintenance of COTS

• Maintenance of GOTS

• Expansion of System capabilities

• Maintenance of QPD Module

• Rom Support for unknown future Tasks

1. 1 SCOPE OF WORK

J-62BH Enterprise Capabilities requires Contractor support services to aid the organization in managing and supporting the ASSIST program. The Contractor shall provide and maintain the ASSIST application to the Defense Standardization user community, ensuring that the systems are stable and available at prescribed times of operation, with predictable performance and application response time.

The Contractor shall provide support for version control modifications to the Computer Off- The-Shelf (COTS) application components, and support for requested changes and expanded capabilities of the system. The Contractor will provide support and will assist J-62BH Enterprise Capabilities in developing a workflow support team capable of performing routine maintenance updates to the existing workflows. In addition, the Contractor shall help in developing system problem resolution, system upgrades, system change requests (SCRs), system security management, system enhancements, and system administration support.

The Contractor shall provide coding support for baseline system modifications to the Government Off-The-Shelf (GOTS) application components, and support for requested changes and expanded capabilities of the system. The Contractor will provide support and will assist J- 62BH Enterprise Capabilities in developing a workflow support team capable of performing routine maintenance updates to the existing workflows. In addition, the Contractor shall work in developing system problem resolution, system upgrades, and system change requests (SCRs) and operating system patches, system security management, system enhancements, system administration support.

The Contractor shall provide support for the Qualified Products Database (QPD). The Contractor shall work in developing problem resolution, system upgrades, system change requests, operating system patches, system security management, system enhancements, system administration support, and configuration management efforts.

Though much of the Performance Work Statement (PWS) pertains to the ASSIST application and QPD, enhancement and tasks to additional systems may be required.

1.2 PERFORMANCE REQUIREMENTS (DELIVERABLES)

1.2.1 Task 1: Maintenance of the Commercial off the shelf Application (COTS)

See 2.2 Knowledge of Software, Hardware and Environments page 24

1.2.1.1 – Subtask 1 Software Support Provide support for the products installed on the ASSIST system application by updating/upgrading and maintaining the supportability of the required products ensuring process execution, providing technical support, and performing database management activities. Maintain 98.5% scheduled system uptime (24/7 Monday through Friday; Saturday and Sunday must have access for alerts and expected to respond and address by Monday at 6:00 AM, Federal holidays excluded), measured monthly. Refer to Table 1 which describes the technical approach, organizational resources and management controls to be employed to meet the performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to the TO.

1.2.1.2 – Subtask 2 Security Updates and Patches Provide support for compliance with all Department of Defense (DOD) application security requirements which include Department of Defense Instruction (DODI) 8500.2, DLA Computer Emergency Response Team (CERT) tasking’s and advisories, Federal Information Security Management Act (FISMA) compliance, and application security upgrades. Make changes to the system to comply with the DOD Information Assurance Certification and Accreditation Process (DIACAP) controls for MAC level III systems with For Official Use Only (FOUO) controls for DOD information systems processing Sensitive information. Determine from the Security Test and Evaluation Checklist which controls the system must meet, run the tests needed to verify the control, provide required documentation, and make any changes required to meet the control. The Contractor will be responsible for all Operating System upgrades and patches, to include all products licensed by the Government; upgrades or patches that may impact the application will be sent to the Contractor for review. Install all Information Assurance Vulnerability Assessment (IAVA) application software product patches or workarounds as required by the Department of Defense within the required timeframes. Refer to Table 1which describes the technical approach, organizational resources and management controls to be employed to meet the performance and schedule requirements throughout TO execution.

Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to the TO. Changes will be bundled into releases, which will be subject to review and approval by the J-62BH Enterprise Capabilities Configuration Control Work Group (CCWG) prior to implementation. Fixes and changes must be installed with no more than five minor problems identified by users, and with no unscheduled downtime for installation or problem resolution. The contractor must notify the PM when the tasking is complete and document it in the monthly report.

1.2.1.3– Subtask 3 Documentation (COTS)

1.2.1.3.1. Monthly report: Monthly report on previous month’s activities. The monthly report shall consist of work activities and accomplishments. Provide the centralized administrative, clerical, documentation and related functions to support this task.

1.2.1.3.2. Taskings: Refer to Table 1which describes the technical approach, organizational resources and management controls to be employed to meet the cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to the TO.

1.2.2 Task 2 - Maintenance of the Government off the shelf (GOTS) Application

See 2.2 Knowledge of Software, Hardware and Environments on page 24

1.2.2.1 - Subtask 1 Baseline System Maintenance Provide analysis and programming support for modifications to the GOTS application which was developed to assemble the software products into a web browser-based system containing document management, records management, and workflow capabilities. As issues are identified, work with the J-62BH Enterprise Capabilities ASSIST Program Manager to schedule installation of appropriate fixes, changes, or workarounds. Changes will be bundled into releases, which will be subject to review and approval by the J-62BH Enterprise Capabilities Configuration Control Work Group (CCWG) prior to implementation. Fixes and changes must be installed with no more than five minor problems identified by users, and with no unscheduled downtime for installation or problem resolution. If downtime is needed, the contractor will work with the application PM to schedule with all appropriate parties. The contractor must notify the PM when the tasking is complete and document it in the monthly report.

1.2.2.2 - Subtask 2 Application Response Time Maintain the performance of the GOTS application and associated software products to ensure that application response time is adequate for the productive use of the system. Consistent response time from the Enterprise Telecommunications Network (ETN) site should be no more than eight seconds when a single document is pulled from the Production database. From the time that a response time issue is reported by the J-62BH Enterprise Capabilities ASSIST Program Manager, the problem must be tracked as a Level 3 Help Desk incident, and resolved within 10 business days.

1.2.2.3 - Subtask 3 Data Backup and Disaster Recovery The centralized system components infrastructure for requisite backup and recovery facilities will be provided by the government, but procedures to maintain data and file integrity are the responsibility of the contractor. An incremental backup of the day’s database changes will be scheduled each night. A full database backup will be scheduled each weekend. The Contractor will provide operational documentation for performing the back-ups, provide procedures that maintain data and file integrity through restoration at a Disaster Recovery (DR) warm site in Oklahoma City and participate in COOP and DR-related setup, configuration, and testing at DOD-specified intervals (currently annual). Refer to Table 1which describes the technical approach, organizational resources and management controls to be employed to meet the cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to the TO.

1.2.2.4 - Subtask 4 Program Support The contractor will develop the ISCP (Information System Contingency Plan), or COOP ( Continuity of Operations Plan) reports which include Disaster Recovery, Live Exercise Plan, and After Action Report.

The contractor will implement testing procedures on an annual basis.

1.2.2.5 - Subtask 5 Program Support the contractor will provide all documentation for the DLA Gold Documentation accreditation standard that is required. This includes implementing and testing procedures to meet DLA requirements.

1.2.2.6 - Subtask 6 Documentation (GOTS)

1.2.2.6.1. Monthly report: Provide monthly report on previous month’s activities. The monthly report shall consist of, but not be limited to, work activities and accomplishments; labor categories worked and associated costs.

1.2.2.6.2 Tasking: Refer to Table 1which describes the technical approach, cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to the

TO.

1.2.3 Task 3 – Maintenance/Modification of current System Capabilities, Hardware, Software and Desktop Support

1.2.3.1 - Subtask 1 Expansion of System Capabilities. Provide business analysis, programming, testing, and implementation support, including user training, for requested changes and expanded capabilities of the system. Changes come from ASSIST users and DSPO. The changes are enhancements and application failures and modifications. On average about 20 occurrences per month. Work with the J-62BH Enterprise Capabilities ASSIST Program Manager, provide the services requested, and meet all agreed-upon customer deadlines for the installation of changes and expanded capabilities. Changes must be installed with no more than 12 minor problems identified by users, and with no unscheduled downtime for installation or problem resolution.

1.2.3.2 – Subtask 2 Level 3 Expert Support. Provide Level 3 response to questions, problems, and issues advanced from Level 2 (J-62BH Enterprise Capabilities ASSIST Program Manager). Within 36 hours (weekends and Federal holidays excluded) of a problem escalated to Level 3 by Level 2, respond to all questions, problems, and issues with an email reply describing the progress on diagnosis, any workaround, or any proposed code-based resolution. After the initial response, provide updates at weekly intervals until a resolution (fix, code change, or final workaround) is scheduled. Refer to Table 1which describes the technical approach, organizational resources and management controls to be employed to meet the cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews.

1.2.3.3 – Subtask 3 Level 2 Intermediate Support Provide Level 2 response to questions, problems, and issues advanced from Level 1 (the DLA Document Services ASSIST Program and project Managers). Within 36 hours (weekends and Federal holidays excluded) of a problem escalated to Level 2 by Level 1, respond to all questions, problems, and issues with an email reply describing the progress on diagnosis, any workaround, or any proposed code-based resolution. After the initial response, provide updates at weekly intervals until a resolution (fix, code change, or final workaround) is scheduled. Refer to Table 1which describes the technical approach, organizational resources and management controls to be employed to meet the cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews.

1.2.3.4 – Document Services Help Desk Support Document Services will provide responses to questions, problems, and issues within 24 hours (weekends and Federal holidays excluded) of a problem. Respond to all questions, problems, and issues with an email reply describing the progress on diagnosis, any workaround,. .

• Level 1 – Document Services Help Desk. The person is trained to diagnose and resolve common problems typically going through the exact same knowledge-base that an end user might go through if they are available.

• Level 2 – This is the person who gets the incident from level 1 for those problems that level 1 cannot resolve. Their technician skills often approach entry level server administration skills. Their training, skills, and experience in hardware and software issues are essential.

• Level 3 – The level 3 technician skills approach server administration skills, and they may even have root level access to the servers. They must have full knowledge of all software from GOTS code to databases and handle all hardware issues that Level 2 cannot resolve. They are the final level that all issues, enhancements, and requirements must be resolved.

1.2.3.5 - Subtask 5 Program Support. The Contractor will develop briefing materials for in-progress reviews (IPRs), quarterly… Other meetings and/or conferences bi-weekly or weekly if requested.

1.2.3.6 - Subtask 6 Briefing materials as requested.

1.2.3.7 - Hardware Maintenance and Refresh:

DLA Document Services will provide annual hardware support renewals as required to maintain the ASSIST and QPD system applications and COTS/GOTS products at current, Vendor-supported levels for integration of all tasks specified within this PWS.

1.2.3.8 - Software Licensing and Support:

Software Renewals: J-62BH Enterprise Capabilities will provide the annual software licenses and updates to maintain the ASSIST and QPD system application and COTS/GOTS products at current, Contractor supported levels for integration of all tasks specified within the PWS. DLA Document Services shall provide annual software renewals for the software.

1.2.3.9 - Software Licensing: J-62BH Enterprise Capabilities will provide the licenses and software updates required to maintain the ASSIST and QPD system application and COTS/GOTS products at current, Contractor supported levels for integration of all tasks specified within this PWS.

1.2.4 Task 4 – Qualified Products Database (QPD) Maintenance and Support

1.2.4.1 - Subtask 1 Program Support: Provide maintenance and development support for QPD utilizing inputs from user training, feedback from users and periodic program reviews. Provide support for DLA Land and Maritime (Columbus, OH) to ensure the QPL Data from DLA L&M are successfully imported and accurately applied to the QPD.

Import nightly data feeds of CAGE Code data from the System for Award Management (www.sam.gov) in order to update manufacturer and supplier addresses in QPD. Assist Qualifying Activities (QA) in converting data into corresponding data elements in QPD.

Develop and/or conduct QA end user training for the maintenance and administration of authorized QPD data as required. Develop and/or conduct data import and export capabilities as required. Provide support to the J-62BH Enterprise Capabilities /DSPO as required in the resolution of qualification matters including the development and http://www.sam.gov/ maintenance of memorandums of agreement. Provide help desk support, and perform routine maintenance updates to existing workflows and Prepare briefings, reports, presentations, and training, for meetings or events as required by DLA Document Services/DSPO. The Contractor shall provide project management, project oversight and labor services for system problem resolution, system upgrades, system change requests (SCRs) and operating system patches, system security management, system enhancements, system administration support, and configuration management efforts.

Monitor the performance of the QPD database server, QPL-DOCS webserver, and the ASSIST webserver following the deployment of new QPD software releases. Modify QPD data structures, applications, processes and procedures to be compatible with QPL- DOCS and with emerging ASSIST data structures evolving under separate modernization efforts. Maintain QPD development environment at the Vendor’s site for the purpose of testing and staging QPD production patches and application changes. Ensure compliance with Section 508 Accessibility Standards regarding the following: software applications and operating systems, web based intranet and internet information and applications, functional performance, and information, documentation, and support. Changes will be bundled into releases, which will be subject to review and approval by the DLA Document Services Configuration Control Work Group (CCWG) prior to implementation. Fixes and changes must be installed with no more than five minor problems identified by users, and with no unscheduled downtime for installation or problem resolution. The contractor must notify the PM when the tasking is complete and document it in the monthly report.

1.2.4.2 - Subtask 2 Software Support: The Contractor will provide support for the products installed on the QPD system application by updating/upgrading and maintaining the supportability of the required products ensuring process execution, providing technical support, and performing database management activities. Maintain 98.5% scheduled system uptime (24/7 Monday through Friday, Saturday and Sunday receive alerts and address issue by 6:00 AM Monday, Federal holidays excluded), measured monthly. Refer to Table 1which describes the technical approach, organizational resources and management controls to be employed to meet the cost, performance, and schedule requirements throughout task execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews.

1.2.4.3 - Subtask 3 Security Updates and Patches: The Contractor will provide support for compliance with all Department of Defense (DoD) application security requirements which includes, but not limited to, DoDI 8500.2, DLA Computer Emergency Response Team (CERT) tasking’s and advisories, Federal Information Security Management Act (FISMA) compliance, and application security upgrades. Make changes to the system to comply with the DoD Information Assurance Certification and Accreditation Process

(DIACAP) controls for MAC Level III systems with FOUO controls for DoD information systems processing Sensitive information. Determine from the Security Test and Evaluation Check List which controls the system must meet, run the tests needed to verify the controls, provide required documentation, and make any changes required to meet the controls. The Contractor will be responsible for all operating system upgrades and patches, to include all products licensed by the government; upgrades or patches that may impact the application will be sent to the Contractor for review. Install all Information Assurance Vulnerability Assessment (IAVA) application software products patches or workarounds as required by the Department of Defense within the required timeframes. Prepare a Management Plan describing the technical approach, organizational resources, and management controls to be employed to meet the cost, performance, schedule requirements throughout the task execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report monitoring the quality assurance, progress/status reporting and program reviews applied to the task

1.2.4.4 - Subtask 4 Documentation (QPD)

1.2.4.4.1-Monthly report: Monthly report on previous month’s activities. The monthly report shall consist of, but not be limited to, work activities and accomplishments; labor categories worked and associated costs. Provide the centralized administrative, clerical, documentation and related functions to

1.2.4.4.2-Tasking: Refer to Table 1which describes the technical approach, cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report

1.2.4.4.3-Incident Report: Provide a monthly incident report as an attachment to the monthly status report, listing all incidents reported during the month, in addition to incidents remaining unresolved from prior months

1.2.4.4.4-Briefing Materials/Reports: Provide Briefing materials/reports as requested

1.2.5 Task 5 DLA Document Services/DSPO Rough Order of Magnitude (ROM) Support:

1.2.5.1 - Subtask 1 Program Support: The Contractor shall support J-62BH Enterprise Capabilities and DSPO in the management, execution, and implementation of new DSP initiatives. Generally, this support shall lie within the scope of automation initiatives and Information Technology (IT) planning as related to the DSP. Efforts may include standardization technical data gathering and analysis, modifications to standardization automation systems and application including but not limited to ASSIST, ASSIST Quick Search, QPD, QPD-Docs, and other systems mentioned within this PWS that will enhance existing capabilities or to meet emergent requirements. The Contractor shall also be responsible to develop and produce standardization metric reports, respond to DSP customer inquiries, provide assistance to DLA Document Services and DSPO in developing strategies and methodologies to interface DSP standardization information systems with external systems to meet new DSP requirements. Contractor may also perform automation, system hardware, software and network modernization and capacity planning, develop and conduct standardization automation training, and develop and produce briefings and presentations.

1.2.5.2 - Subtask 2 Functional Support: The Contractor shall support, as required, DSP mission, goals, objectives, policies, and procedures by providing input to enhance DSP Automation functionality. The Contractor shall provide, as required support of DSP current and future functional automation initiatives and will maintain and modify database schema, appropriate application code, processes, and procedures to incorporate one or more new document sources. The Contractor shall develop and implement new user interfaces, and coordinate with J-62BH Enterprise Capabilities to implement new system access authentication methodologies and role based application privileges as required. The Contractor shall review and recommend solutions to better enhance the processes and positioning of DSPO’s suite of automated systems and perform system maintenance to include but not limited to:

i. Periodic database and source code synchronization between development, production, and demonstration platforms.

ii. Maintain and update all user guides, help files, and manuals, resulting from system design changes and enhancements and suggestions provided by the user community.

iii. Monitor and resolve issues with the data synchronization process to external systems, including data and document image updates.

iv. Configure, test and install operating systems, web server and application server software patches.

v. Continue to maintain a development environment at the Vendor’s site for the purpose of testing and staging production patches and application specific changes on new and existing DSP automated systems.

vi. Provide helpdesk support

vii. Implement emerging systems changes required by J-62BH

Enterprise Capabilities /DSPO (to include all CERT related advisories and tasking’s).

viii. Support the resolution of document review issues (missing/corrupted images, data anomalies, etc.).

ix. Prepare and participate in briefings, symposiums or other meetings or events.

x. Conduct Services/User Training.

xi. Produce a user’s manual detailing all modules and functions of the

ASSIST and QPD.

1.2.5.3 - Subtask 3 Documentation (ROM)

1.2.5.3.1 Monthly report: Monthly report on previous month’s activities. The monthly report shall consist of, but not be limited to, work activities and accomplishments; labor categories worked and associated costs. Provide the centralized administrative, clerical, documentation and related functions to

1.2.5.3.2 Tasking: Refer to Table 1which describes the technical approach, cost, performance and schedule requirements throughout TO execution. Include productivity and management methods such as quality assurance, progress/status reporting and program reviews. Provide a monthly status report

1.2.5.3.3 Incident Report: Provide a monthly incident report as an attachment to the monthly status report, listing all incidents reported during the month, in addition to incidents remaining unresolved from prior months

1.2.5.3.4 Briefing Materials/Reports: Provide Briefing materials/reports as requested

1.2.5.3.5 User’s Manual: Create user’s manual for both ASSIST & QPD applications

1.2.5.3.6- Change Request Tracking Report: Create a tracking report for both ASSIST and QPD on system change requests. Items on this report include enhancement, fixes, and system baseline changes.

All reports and documentation should be provided to designate Contracting Officer Representative (COR).

The table below (Table 1) identifies the Documentation Deliverables resulting from the above defined tasks:

TABLE 1

Deliverable Task

Reference

Quantity of Deliverable

Format Deliverable Due Date

Provide monthly status report

1.2.1.3.1, 1.2.2.6.1, 1.2.4.5.1, 1.2.5.3.1, Approximately 1per month

Vendor - Determined Format

On or before 15th of each month

Management Plan 1.2.1.3.2, 1.2.2.6.2, 1.2.4.5.2, 1.2.5.3.2, As necessary Vendor – Determined Format

5th workday following beginning of renewal period

Incident Report 1.2.4.5.4, 1.2.5.3.4, As necessary contract period or as necessary.

Vendor- Determined Format

Monthly, on the 5th workday.

Briefing Materials 1.2.3.9.10, 1.2.4.5.5, 1.2.5.3.5, as necessary PowerPoint, MS Word, Excel, etc, as needed

2 workdays prior to the schedule meeting, IPR, etc.

User’s Manual 1.2.5.3.6 1 Per contract period

MS word Updates as required.

Change Request Tracking Report

1.2.5.3.7 As necessary Vendor-

Determined Format

Weekly

Task 1: Maintenance of the Commercial off the shelf Application (COTS)

1.2.1 Provide 98.5%

scheduled system availability

(24/7 Monday- Sunday, excluding Federal

N/A As required

Holidays).

Subtask 1 Software Support

1.2.1.1 See Page 4 N/A As required

Subtask 2 Security Updates and Patches

1.2.1.2 See Page 5 N/A As required

Subtask 3 Documentation

(COTS)

1.2.1.3 See Page 5 PowerPoint, MS Word, Excel, etc, as needed

As required

2.4.2 Task 2 -

Maintenance of the Government off the shelf (GOTS) Application

1.2.2 Provide 98.5%

scheduled system availability

(24/7 Monday- Sunday, excluding Federal

Subtask 1 Baseline System Maintenance

1.2.2.1 See Page 6 N/A As required

Subtask 2 Application Response Time

1.2.2.2 See Page 6 N/A As required

Subtask 3 Data Backup and Disaster Recovery

1.2.2.3 See Page 6 N/A As required

Subtask 4 Program

1.2.2.4 See Page 7 N/A As required

Subtask 5 Program

1.2.2.5 See Page 7 N/A As required

Subtask 6 Documentation

(GOTS)

1.2.2.6 See Page 7 PowerPoint, MS Word, Excel, etc, as

Task 3 – Maintenance/Modification of current System Capabilities, Hardware, Software. and Desktop Support

1.2.3 Provide 98.5%

scheduled system availability

(24/7 Monday- Sunday, excluding N/A Federal

Holidays).

Subtask 1 Expansion of System Capabilities

1.2.3.1 See Page 7 N/A As required

Subtask 2 Level 3 Expert Support.

1.2.3.2 See Page 8 N/A As required

Subtask 3 Level 2 Intermediate Support

1.2.3.3 See Page 8 N/A As required

Document Services Help Desk Support

1.2.3.4 See Page 8 N/A As required

Subtask 5 Program

1.2.3.5 See Page 9 N/A As required

Subtask 6 Briefing materials as requested.

1.2.3.6 See Page 9 PowerPoint, MS Word, Excel, etc, as

Hardware Maintenance and Refresh:

1.2.3.7 See Page 9 N/A As required

- Software Licensing and Support:

1.2.3.8 See Page 9 N/A As required

Software Licensing: 1.2.3.9 See Page 9 N/A As required

Task 4 – Qualified Products Database (QPD) Maintenance and Support

1.2.4 Provide 98.5%

scheduled system availability

(24/7 Monday- Sunday, excluding Federal

Subtask 1 Program

1.2.4.1 See Page 9 N/A As required

Subtask 2 Software

1.2.4.2 See Page 10 N/A As required

Subtask 3 Security Updates and Patches:

1.2.4.3 See Page 10 N/A As required

Subtask 4 Documentation

(QPD)

1.2.4.4 See Page 11 PowerPoint, MS Word, Excel, etc, as

Task 5 DLA Document Services/DSPO Rough Order of Magnitude (ROM) Support:

1.2.5 Provide 98.5%

scheduled system availability

(24/7 Monday- Sunday, excluding Federal

Subtask 1 Program

1.2.5.1 See Page 12 N/A As required

Subtask 2 Functional

1.2.5.2 See Page 12 N/A As required

Subtask 3 Documentation

(ROM)

1.2.5.3 See Page 13 PowerPoint, MS Word, Excel, etc, as

1.3 PERFORMANCE PLAN

Contractor performance will be verified as follows: after a given month has ended, Contractor will provide a monthly status report pertaining to the previous tasks that describes activities for the month, and includes an Incident Report for the prior month. The Incident Report should list all open or new Level 3 Help Desk incidents for the month, including report date, resolution date, or status. The report will be verified by the DLA Document Services ASSIST Program Manager, who will monitor the contract for acceptable performance against the standards and provide an assessment to the contractor.

1.4 TRAVEL

The Contractor may be required by the government to perform travel in performance of this tasking. If travel is required for meetings, system changes, or customer contact or training, the requirement will be coordinated in advance through the DLA Document Services ASSIST Program Manager. Some travel is anticipated, particularly in support of Expansion of System Capabilities. Visits each to DLA Document Services Philadelphia and DLA Document Services HQ, Mechanicsburg PA, Oklahoma City , Oklahoma (COOP Site), and DSPO HQ in Ft Belvoir is required when requested.

Travel in support of this tasking will be performed on a cost-reimbursable basis. Travel reimbursement will be in accordance with the Federal Acquisition Regulation or Joint Travel Regulation (JTR), Volume 2, Paragraph C6002, as applicable. Therefore the only reimbursable allowable to the Contractor shall be, as approved, food, lodging and necessary transportation (i.e.

auto, rail and air. etc.) as allowed for under the JTR. Vendors cannot use GSA city pair contracts.

The airfare shall be the prevailing rates for commercial airlines at tourist class. When required, the most reasonable means of ground transportation (i.e., taxi, bus, car rental) shall also be used.

The Contractor shall submit copies of expense reports and receipts with monthly invoices for payment.

Upon completion of the travel, Contractor will provide a written trip report and expense report in word format to the COR, prior to submission of the invoice, as supporting documentation to validate the reimbursable costs.

1.5 PRIVACY ACT REQUIREMENTS

Performance of this PWS may require the Contractor to access data and information proprietary to the Government agency or of such a nature that its dissemination or use, other than in performance of this PWS would be adverse to the interest of the Government or others. The Contractor shall not divulge or release data or information developed or obtained in performance of this PWS except to authorize Government personnel or upon written approval of the Contracting Officer. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as required in the performance of this PWS. The limitations above do not apply to data or information, which has been made public by the Government.

Further, this provision does not preclude the use of any data independently acquired by the Contractor without such limitations or prohibit an agreement at no cost to the Government between the Contractor and the data owner that provides for greater rights to the Vendor.

Contractor personnel visiting any Government facility in conjunction with this delivery order shall be subject to the Standards of Conduct applicable to Government employees. Site-specific regulations regarding access to sensitive materials, computer facility access, issue of security badges, etc. will be provided as required.

All products produced and their associated work papers are to be considered the property of the

DLA.

1.6 DATA USE, DISCLOSURE OF INFORMATION AND HANDLING OF SENSITIVE

INFORMATION

All Code, Software, and Hardware associated with ASSIST are the property of the DLA Document Services and will be returned to DLA Document Services upon completion or termination of the Contract.

The Contractor shall maintain, transmit, retain in strictest confidence, and prevent the unauthorized duplication, use, and disclosure of information. The Contractor shall provide information only to employees, Vendors, and sub-vendors having a need to know such information in the performance of their duties for this project.

Information made available to the Contractor by the Government for the performance or administration of this effort shall be used only for those purposes and shall not be used in any other way without the written agreement of the Contracting Officer. Contractor personnel will be required to sign a non-disclosure statement.

If proprietary information is provided to the Contractor for use in performance or administration of this effort, the Contractor except with the written permission of the Contracting Officer may not use such information for any other purpose. If the Contractor is uncertain about the availability or proposed use of information provided for the performance or administration of this effort, the Contractor shall consult with the COR/COTR regarding use of that information for other purposes.

The Contractor agrees to assume responsibility for protecting the confidentiality of Government records which are not public information. Each offer or employee of the Contractor to whom information may be made available or disclosed shall be notified in writing by the Contractor that such information may be disclosed only for a purpose and to the extent authorized herein.

Performance of this effort may require the Contractor to access and use data and information proprietary to a Government agency or Government Contractor which is of such a nature that its dissemination or use, other than in performance of this effort, would be adverse to the interests of the Government and/or others.

Contractor and/or Contractor personnel shall not divulge or release data or information developed or obtained in performance of this effort, until made public by the Government, except to authorize Government personnel or upon written approval of the CO. The Contractor shall not use, disclose, or reproduce proprietary data that bears a restrictive legend, other than as required in the performance of this effort. Nothing herein shall preclude the use of any data independently acquired by the Contractor without such limitations or prohibit an agreement at no cost to the Government between the Contractor and the data owner that provides for greater rights to the Vendor.

All data received, processed, evaluated, loaded, and/or created as a result of this delivery order shall remain the sole property of the Government unless specific exception is granted by the Contracting Officer.

Contractor and/or Contractor personnel shall sign a Non-Disclosure statement prior to commencing work on this contract.

1.7 GOVERNMENT FURNISHED EQUIPMENT (GFE)/GOVERNMENT

FURNISHED INFORMATION (GFI)

The Government shall provide the Contractor the appropriate access to the following resources in performance of this TO:

• Access to all required databases, servers, and other hardware as appropriate to enable performance of installation and configuration tasks;

• Personnel with appropriate subject matter expertise required to successfully provide hardware management, operating system, and network administration services.

II. Section 2.0 - Contractor Qualifications

2.1 SECURITY

All work and resulting products will be unclassified. Although there are no known security concerns on either the documentation or targeted systems, there are privacy and For Official Use Only (FOUO) considerations relating to DLA financial accounting data. In accordance with DoD Instruction (DoDI) 8500.01, Information Assurance Implementation, http://www.dtic.mil/whs/directives/corres/pdf/850001_2014.pdf, all Vendors must have a favorably adjudicated National Agency Check, Local Checks, and Credit Checks (NACLC) prior to performing work under this contract. The Contractor shall meet all training and certification requirements in accordance with Department of Defense Directive (DoDD) 8570.1, Information Assurance Training, Certification, and Workforce Management, http://www.dtic.mil/whs/directives/corres/pdf/857001p.pdf Current staff personnel who are in the process of awaiting the NACLC adjudication may continue to support this contract. All future employees will have an adjudicated NACLC prior to performing services under this effort.

2.2 KNOWLEDGE OF SOFTWARE, HARDWARE AND ENVIRONMENT

1. Knowledge and experience in the setup and configuration of VMWare and virtual environments.

2. Knowledge and experience with Windows Server 2008R2 to include installation, configuration, and application of DoD security controls.

3. Knowledge and experience with Oracle v 11.2 or greater to include installation, configuration, and application of DoD security controls.

http://www.dtic.mil/whs/directives/corres/pdf/850001_2014.pdf http://www.dtic.mil/whs/directives/corres/pdf/857001p.pdf

4. Knowledge and experience with Oracle databases and PL/SQL development.

5. Knowledge and experience with Coldfusion v., 10 and 11 and JavaScript.

6. Knowledge and experience with .NET/.NET CF, C#, and Visual Basic .NET.

7. Knowledge and experience with Microsoft Visual Studio Professional Edition.

8. Knowledge and experience with PDFNET Core SDK for Windows.

Knowledge and experience in interfacing with external systems to import and export data.

9. Knowledge and experience with the distribution of Documents.

10. Knowledge of Dell Hardware, blade servers, Chassis, network fabrics, and Equallogic storage.

11. Knowledge and experience with NetApps Hardware.

12. Knowledge and experience with networking, VLANS, DNS, NIPRNet, web proxy, routing, and tracing traffic.

13. Knowledge and experience with load balancing reverse web proxy, and proxy servers.

14. Knowledge and experience with remediation of ACAS scans, HP WebInspect scans, and

Microsoft SCAP scans.

15. Knowledge and experience with McAfee HBSS, DLP, On-Demand Scans, HIDS, and

Antivirus.

16. Knowledge and experience with Tectia SFTP server and client.

17. Knowledge and experience with Tumbleweed, SSL Certificates, and CA card authentication.

18. Experience with implementing configuration and change management of supporting infrastructure systems.

19. Experience with providing support for compliance with all Department of Defense (DOD) application security requirements which include Department of Defense Instruction (DODI) 8500.2, DLA Computer Emergency Response Team (CERT) tasking’s and advisories, Federal Information Security Management Act (FISMA) compliance, and application security upgrades.

20. Experience with implementing changes to the system to comply with the DOD Information Assurance Certification and Accreditation Process (DIACAP) controls for MAC level III systems. Install all Information Assurance Vulnerability Assessment (IAVA) application software product patches or workarounds as required by the Department of Defense within the required timeframes.

21. Knowledge and experience with providing business analysis, programming, testing, and implementation support, including user training, for requested changes and expanded capabilities of the system.

22. Experience with providing a development environment at the Vendor’s site for the purpose of testing and staging production patches and application changes.

23. Experience with maintaining system infrastructure and system separation in accordance with United States Cyber Command (USCYBERCOM) CTO 12-037.

24. Experience with document management systems to include business process management and document workflow systems.

25. Knowledge and experience with Agile software development methodologies.

2.3 KEY PERSONNEL REQUIREMENTS

Certain skilled, experienced, professional and/or technical personnel are essential for successful accomplishment of the work to be performed under the resultant delivery orders.

These are defined as “Key Personnel”. The Contractor should propose its key personnel in regards to the distribution of the tasks and subtasks described in PWS.

Requests for key personnel substitutions during contract performance shall be submitted in writing to the Contracting Officer. It should provide a detailed explanation of the circumstances necessitating the proposed substitution(s). Requests must contain a complete resume, including security clearance certification, for the proposed substitute, and any other information as requested by the Contracting Officer. Proposed substitutions must have qualifications that are equal to or higher than the key personnel being augmented. The Contracting Officer or his authorized representative shall evaluate such requests and promptly notify the Contractor in writing whether the proposed substitution is acceptable.

2.4 CONTRACTOR MANPOWER REPORTING.

IAW DLAD 37.103-90(e)(1), the following requirement applies;

Contractor manpower reporting language for performance work statements:

The contractor shall report all contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Defense Logistics Agency via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address: http://www.ecmra.mil/.

Reporting input will be for the labor executed during the period of performance…