Statement of Requirements for Splunk Renewal FY2026-2027.docx

Requirements Document

Renewal of Splunk Cloud Platform and Enterprise Security Subscription Services for Indian Health Service

1. Purpose This Requirements Document is prepared in support of an acquisition package for the Indian Health Service (IHS) to obtain continued subscription access to the existing Splunk cloud environment used for cybersecurity monitoring, log management, analytics, and related security operations. This document defines the Government's minimum requirements for use in solicitation development, evaluation, and award documentation.

2. Requirement Overview IHS requires renewal of the current Splunk subscription environment to maintain continuity of cybersecurity operations and avoid interruption to enterprise monitoring and analysis capabilities. The requirement consists of cloud platform subscription capacity, security functionality, storage capacity, archive capacity, and associated support entitlements necessary to continue operations in the existing environment.

This is a renewal requirement for an existing operational environment. The acquisition is intended to preserve the current deployed capability and maintain uninterrupted access throughout the performance period.

3. Background IHS uses a Splunk-based cloud environment to support enterprise cybersecurity and security operations activities. The current environment includes hosted platform capabilities, Enterprise Security functionality, cloud data storage, dynamic data archive capacity, and support features associated with the subscribed services.

The current environment is hosted in GovCloud (US East). The platform subscription reflects federal compliance impact level controls and encryption at rest, and the platform environment is provisioned in a FedRAMP Moderate environment.

4. Acquisition Objective The objective of this acquisition is to secure a one-year renewal of the existing Splunk cloud subscription environment and associated support services so that IHS can continue ongoing cybersecurity operations without disruption.

5. Period of Performance The required period of performance is July 22, 2026 through July 21, 2027.

6. Place of Performance Performance shall be primarily remote as an electronically delivered cloud subscription service. The required hosting environment shall be GovCloud (US East).

7. Minimum Requirements The contractor shall provide a renewal solution that satisfies all of the following minimum requirements:

1. Splunk Cloud Platform subscription with federal compliance impact level controls, encryption at rest, and Premium Success Plan.

1. Provisioning in GovCloud (US East).

1. FedRAMP Moderate environment provisioning for the applicable platform subscription.

1. Platform capacity of 404 SVC.

1. Splunk Enterprise Security Essentials with Premium Success Plan.

1. Enterprise Security capacity of 404 SVC.

1. Splunk Cloud data storage capacity in 500 GB increments totaling 11,680 units.

1. Splunk Cloud dynamic data archive capacity in 500 GB increments totaling 5,300 units.

1. Support entitlements associated with the required subscriptions.

1. Continuity of the current operational environment with no lapse in subscription coverage.

For this requirement, SVC refers to a unit of cloud capability that includes compute, memory, and I/O resources.

8. Required Contractor Capabilities The contractor shall:

1. Be authorized to provide the required subscriptions and renewals for U.S. Federal customers.

1. Provide only genuine and fully supported subscriptions.

1. Renew the identified subscriptions for the full period of performance.

1. Maintain the required hosting, compliance, encryption, and support characteristics of the existing environment.

1. Coordinate all administrative actions necessary to activate the renewal and prevent service interruption.

1. Provide all documentation necessary to confirm successful renewal and continued support coverage.

9. Functional Requirements The offered solution shall:

1. Support continuation of enterprise cybersecurity monitoring and log analysis functions.

1. Maintain access to the existing hosted platform environment.

1. Maintain access to Enterprise Security capabilities associated with the subscribed platform.

1. Maintain the required data storage and archive capacities.

1. Maintain applicable support and success plan entitlements included with the subscriptions.

10. Deliverables The successful contractor shall provide the following deliverables:

1. Active subscription renewal for all required components.

1. Confirmation of subscription activation and effective coverage dates.

1. Documentation identifying renewed products, quantities, capacities, and support entitlements.

1. Access to included support and any associated subscription-based service entitlements.

11. Acceptance Criteria The Government will consider the requirement successfully fulfilled when:

1. All required subscription components have been renewed.

1. Coverage is active for the entire period of performance.

1. The renewed environment matches the required hosting environment, capacity levels, and support features.

1. There is no lapse or interruption in operational service.

Any variance from the required environment, capacity, support, or performance period shall be resolved prior to Government acceptance.

12. Security Requirements The contractor shall provide subscriptions that preserve the federal compliance impact level controls and encryption-at-rest capabilities associated with the current environment. The platform subscription shall remain provisioned in the required government cloud environment and support continued IHS cybersecurity operations.

13. Compatibility and Continuity Requirements This acquisition is for renewal of an existing environment. The offered solution shall be fully compatible with the current IHS Splunk deployment and shall preserve continuity of service, existing subscribed capacities, and associated support coverage for the full performance period.

14. Quotation Submission Requirements Offerors responding to the solicitation should provide sufficient detail to demonstrate compliance with this Requirements Document. At a minimum, quotations should:

1. Identify the offered subscriptions and associated product descriptions.

1. Confirm the offered solution is a renewal of the existing environment.

1. Confirm compliance with all hosting, capacity, security, and support requirements.

1. Identify any assumptions or Government information needed to process the renewal.

1. Demonstrate authorization to provide the required subscriptions for Federal use.

15. Evaluation Considerations For solicitation purposes, quotations may be evaluated for technical acceptability based on the extent to which the quotation demonstrates compliance with the requirements in this document, including:

1. Ability to provide the required renewal subscriptions.

1. Ability to meet hosting and security environment requirements.

1. Ability to provide the required capacities and support entitlements.

1. Ability to ensure continuity of service throughout the renewal term.

16. Non-Personal Services This requirement is for non-personal services. Contractor personnel performing under any resulting order shall not be considered Government employees for any purpose.

17. Government Points of Contact The Contracting Officer will be identified in the solicitation. A Contracting Officer's Representative may be designated after award, if required.