Statement_of_Work_GeoNetwork_Enterprise_Support.pdf

US Department of Agriculture (USDA)

Statement of Work

Contents Project Title General Information

1.0 Background and Purpose

2.0 Definitions/Period of Performance

Contractor Requirements

3.0 Technical Requirements / Tasks

4.0 Deliverable / Schedule

5.0 Government Furnished

6.0 Travel

7.0 Contractor’s Key Personnel

8.0 Security Requirements

9.0 Data Rights

10.0 Section 508 - Electronic and Information Technology Standards

11.0 Performance Requirement Measures

Attachment ............................................................................................................................................. Error! Bookmark not defined.

Project Title Geonetwork Enterprise Support

General Information

1.0 Background and Purpose

The United States Department of Agriculture (USDA) Agriculture Research Service (ARS) National Agricultural Library (NAL) requires contractor assistance to provide Enterprise Product Support for the NAL Geodata applications which utilizes the GeoNetwork platform

2.0 Definitions/Period of Performance

Base Year plus Two One-Year Option Periods.

Contractor Requirements

3.0 Technical Requirements / Tasks

Base Tasks The contractor will provide enterprise product support for the NAL GeoNetwork installation. The contractor will provide NAL the following support for enterprise GeoNetwork software. Components of maintenance are: bug fixes, technical support for production systems, technical support for implementation, open source best practice advice, open source assurance.

The contractor shall support phone and online/email helpdesk support for bug fixes, technical support for production systems, technical support for implementations, open-source best practice advice, and open-source assurance.

Bug fixes shall be defined as remedial or corrective maintenance that applies to reproducible errors.

Vulnerabilities shall be mitigated within USDA cyber requirements.

The contractor shall provide the following support for the NAL production system: assist NAL with back porting of limited bug fixes to earlier versions of the software, if needed; upgrade to new versions of the supported software including assistance with resolving issue via web-based or video conferencing; advise on hardware, software and configuration best practices.

The contractor shall provide support in configuring the NAL authentication system at system upgrade; provide support for installations with multiple servers, fail-over, and replication, and docker container installations; support for performance tuning.

The contractor shall keep NAL informed on the product roadmap and quarterly on evaluating services provided, additionally to providing a written report of reported and resolved service calls.

The contractor shall have demonstrated experience in supporting government GeoNetwork installations, and dedicated developer support and contributers for the GeoNetwork open-source product.

The contractor shall provide a bridge for at least 30 users to be used with ArcGIS Pro, ArcMap or QGIS.

Optional Tasks The contractor shall provide 50 hours of additional technical support for support tasks that are not covered by the basic enterprise support.

4.0 Deliverable / Schedule

Key Deliverables

Item No. Deliverable Submitted To Due By

1 Setup helpdesk access for authorized government personnel

Associate Director, Information Systems Division

Four weeks after award of contract

2 Patches to mitigate vulnerabilities within 14 days of detection (critical) or 30 days of detection by Cyber (high, moderate, low risk)

Associate Director, Information Systems Division

Ongoing

3 Support for performance tuning and bug fixes Associate Director, Information Systems division

Ongoing

4 Written report and subsequent online meetings on incidents and support requests

Associate Director, Information Systems Division

Quarterly

5.0 Government Furnished

N/A

6.0 Travel

n/a

7.0 Contractor’s Key Personnel

The contractor shall perform all work described in this Performance Work Statement in accordance with all applicable Federal, State, and local laws, regulations, codes, technical specifications, manufacturers guidelines, USDA, REE, and the ARS mission.

8.0 Security Requirements

n/a

9.0 Data Rights

The contractor shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations. The Contractor Program Manager shall ensure that all contract personnel take the required USDA Privacy training.

10.0 Section 508 - Electronic and Information Technology Standards If information technology is to be acquired, include language describing Section 508 requirements.

This contract vehicle is subject to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 749d) as amended by the Workforce Investment Act of 1998 (P.L. 105-220). The Revised Section 508 Standards, which consist of 508 Chapters 1 and 2 (Appendix A), along with Chapters 3 through 7 (Appendix C), contain scoping and technical requirements for information and communication technology (ICT) to ensure accessibility and usability by individuals with disabilities.

Compliance with these standards is mandatory for Federal agencies subject to Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. 794d).

Each ICT product or service furnished under this contract shall comply with the Revised Section 508 ICT Accessibility Standards at a minimum, as specified in the contract. If any furnished product or service is determined to be noncompliant, the Contracting Officer will notify the Contractor in writing. The Contractor shall, without charge to the Government, remediate or replace the noncompliant products or services within a specified timeframe as determined by the Government in writing. If such remediation or replacement is not completed within the time specified, the Government shall have the following recourses:

1) Cancellation of the contract, delivery, task order, purchase, or line item without termination liabilities; or

2) In the case of custom ICT being developed by a contractor for the Government, the Government shall have the right to have any necessary changes made or repairs performed by itself or by another firm for the noncompliant ICT, with the contractor liable for reimbursement to the Government for any expenses incurred thereby.

The contractor must ensure all noncompliant ICT products and services are provided pursuant to extensive market research and exhibit the highest level of compliance while satisfying the contract requirements.

For every ICT product or service accepted under this contract by the Government that does not comply with the Revised Section 508 Accessibility Standards, the contractor shall, at the discretion of the Government, remediate or upgrade the item with a compliant equivalent product or service, if commercially available and cost neutral, on either a contract specified refresh cycle for the product or service, or on a contract effective option/renewal date, whichever shall occur first.

Section 508 Compliance Vendors, contractors, and their respective ICT products and services shall comply with the following standards, policies, and procedures. In the event of conflicts between the referenced documents and this contract vehicle, the contract vehicle shall take precedence.

1) Revised Section 508 ICT Accessibility Standards

2) Section 508 of the Rehabilitation Act as amended (29 U.S.C. 794d)

3) Federal Acquisition Regulation (FAR) Subpart 39.2

4) USDA Section 508 Departmental Regulation

Additionally, all contract deliverables are subject to these standards.

All ICT products and services, regardless of format, must conform to the applicable Section 508 standards to allow Federal employees and members of the public with disabilities equivalent access to and use of information and data provided to those without disabilities.

All contractors, sub-contractors, and consultants are responsible for preparing or posting content must comply with the applicable Section 508 accessibility standards and, where applicable, those set forth in the referenced policy or standards document. Remediation of any noncompliant ICT or materials as set forth in this contract vehicle shall be the responsibility of the contractor, sub-contractor, or consultant.

According to the Access Board’s Section 508 Scoping Requirements The following Section 508 provisions apply to the products and/or services identified in this contract vehicle:

• C202 Functional Performance Criteria: Where the requirements in Chapters 4 and 5 do not address one or more functions of telecommunications or customer premises equipment, the functions not addressed shall conform to the Functional Performance Criteria specified in Chapter 3.

• C203 Electronic Content: Electronic content that is integral to the use of telecommunications or customer premises equipment shall conform to Level A and Level AA Success Criteria and Conformance Requirements in

WCAG 2.0.

In addition, vendors and contractors shall comply with the standards, policies, and procedures below for all ICT pursuant to this contract:

• Service Personnel are ensured by the vendor or contractor to possess the knowledge, skills, and ability necessary to address the applicable Revised Section 508 standards and shall provide supporting documentation upon request.

• When providing Hosting Services, the vendor or contractor shall not reduce the existing level of conformance of the electronic content with the applicable Revised Section 508 standards.

• The vendor or contractor shall document and maintain information regarding the measures taken to ensure compliance with the applicable requirements. This documentation includes but is not limited to testing records, product demonstrations, and reported defects by end users and testers.

• Prior to acceptance, the vendor or contractor shall provide an Accessibility Conformance Report (ACR) for each ICT item that is developed, updated, and/or configured for the agency, and when product substitutions are offered. The ACR should be based on the latest version of the Voluntary Product Accessibility Template (VPAT) provided by the Information Technology Industry Council (ITI). To be considered for award, an ACR must be submitted for each ICT item, and must be completed according to the instructions provided by the ITI.

Note: A supplemental ACR may be required if the agency has additional or stricter accessibility requirements than what is outlined in the VPAT.

https://www.access-board.gov/ict/#about-the-ict-accessibility-standards https://www.access-board.gov/law/ra.html#text-of-section-508-of-the-rehabilitation-act-of-1973-as-amended-29-usc-794d https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%2039_2.html http://www.ocio.usda.gov/document/departmental-regulation-4030-001 https://www.access-board.gov/ict/#508-chapter-2-scoping-requirements https://www.access-board.gov/ict/#C202-functional-performance-criteria https://www.access-board.gov/ict/#C203-electronic-content https://www.section508.gov/sell/vpat http://www.itic.org/policy/accessibility

• Prior to acceptance, the agency reserves the right to require a full working demonstration of the completed ICT item to demonstrate conformance to the agency’s accessibility requirements in addition to independent testing to validate.

• In the case of non-compliance where the vendor or contractor claims its products and/or services satisfy the applicable Revised Section 508 standards specified in the contract vehicle, the contracting officer will promptly inform the vendor or contractor in writing of the non-compliance. The vendor or contractor shall, at no cost to the agency, repair or replace the non-compliant products or services within the period specified by the contracting officer.

All Information and Communications Technology (ICT) subject to the Revised Section 508 standards will be evaluated for Section 508 conformance and usability. The test must be administered by a Federal Section 508 Testing Center. All maintenance for ICT that requires upgrades, modifications, installations, repairs, and purchases shall adhere to the Revised Section 508 standards.

11.0 Performance Requirement Measures

Compliance with Internet Protocol Version (IPv6)

This contract involves the acquisition of Information Technology (IT) that uses Internet Protocol (IP) Technology. In order to comply with OMB Memorandum M-05-22, Transition Planning for Internet Protocol Version 6 (IPv6) issued on August 2, 2005, the contractor agrees that: (1) all deliverables that involve IT that uses IP (products, services, software, etc.) will comply with IPv6 standards set forth in the USGv6 Profile (NIST Special Publication 500-267) and interoperate with both IPv4 and IPv6 systems and products; and (2) it has IPv6 technical support for such deliverables. If the contractor plans to offer a deliverable that involves IT that is not compliant with these requirements, the contractor agrees to obtain the Contracting Officer’s approval before starting work on the deliverable.

Protection of Information

Information about USDA networks and/or the security posture of any USDA information assets gathered or created under this PWS is sensitive but unclassified information. It is anticipated that this information will be gathered, created, stored within the primary Government work location.