Summary of Tasks Requirements 6.18.26.docx

Performance Work Statement (PWS) Summary of Requirements Task Area Overview The Contractor shall provide comprehensive cloud hosting, infrastructure, platform, database, operational, transition, and disaster recovery services to support the Centers for Disease Control and Prevention (CDC) Office of the Chief Information Officer (OCIO). Services shall include the management, operation, maintenance, modernization, security, and continuous improvement of CDC's on-premises, private cloud, public cloud, and hybrid cloud environments. The Contractor shall deliver secure, scalable, resilient, and highly available services that comply with all applicable Federal and CDC requirements, including FISMA, FedRAMP, NIST, and CDC cybersecurity and governance policies.

Task 1 – Program Management and Governance The Contractor shall provide program management, administrative, and operational oversight necessary to support CDC cloud and infrastructure services. Responsibilities include project planning, reporting, risk management, performance management, stakeholder engagement, governance support, documentation management, and continuous service improvement. The Contractor shall maintain effective communication with CDC stakeholders and provide the management framework necessary to ensure successful execution of all contract requirements.

Task 2 – Infrastructure, Hardware, and Software Services The Contractor shall procure, install, operate, maintain, secure, and refresh all infrastructure components required to support CDC workloads and services. This includes servers, storage, virtualization platforms, operating systems, management tools, monitoring platforms, and associated software required to support on-premises, private cloud, and public cloud environments.

The Contractor shall perform lifecycle management, technology refresh, configuration management, patching, vulnerability remediation, inventory management, and asset tracking activities. All infrastructure and software services shall be maintained in accordance with CDC Information Technology Service Management (ITSM) processes and security requirements. The Contractor shall maintain accurate Configuration Management Database (CMDB) records and ensure all environments remain current, secure, and operationally supported.

Task 3 – Cloud Operations and Platform Services The Contractor shall provide end-to-end cloud operations for CDC's private, public, hybrid, and on-premises cloud environments. Services shall include cloud brokerage, provisioning, monitoring, automation, virtualization, container platforms, storage management, backup and recovery, networking, security, identity and access management, middleware administration, and cloud platform operations.

The Contractor shall operate cloud services on a 24x7x365 basis, ensuring compliance with established service levels and operational requirements. Responsibilities include incident management, problem management, change management, configuration management, capacity planning, performance optimization, vulnerability management, and operational reporting. The Contractor shall provide self-service capabilities, automation tools, operational dashboards, technical documentation, and runbooks to support efficient and secure cloud operations.

Task 4 – Software, Middleware, and Platform Administration The Contractor shall administer and support all software platforms, middleware technologies, automation tools, and supporting applications necessary to deliver cloud services. Responsibilities include installation, configuration, monitoring, patching, upgrades, performance tuning, release management, and security administration.

The Contractor shall maintain standard configurations, Golden Images, audit capabilities, logging mechanisms, and operational procedures consistent with CDC policies and approved security controls. Middleware services shall include platform management, load balancing, communication software support, account management, and lifecycle management activities necessary to ensure stable and secure operations.

Task 5 – Database Services The Contractor shall provide comprehensive database administration and management services across on-premises, private cloud, public cloud, and Platform-as-a-Service (PaaS) environments. Services shall include installation, configuration, administration, security, monitoring, performance optimization, backup and recovery, replication, capacity management, and disaster recovery support.

The Contractor shall support relational and non-relational database technologies, including SQL Server, Oracle, MySQL, and other approved platforms. Responsibilities include maintaining database availability, integrity, confidentiality, and performance while ensuring compliance with CDC security requirements. The Contractor shall develop and maintain backup, recovery, business continuity, and disaster recovery procedures that meet established Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).

Task 6 – Customer Engagement and Service Intake The Contractor shall provide customer engagement, intake, advisory, and project lifecycle support services for CDC cloud hosting and modernization initiatives. The Contractor shall serve as a primary point of contact for CDC customers and stakeholders, facilitating intake, requirements gathering, solution design, migration planning, and service onboarding activities.

The Contractor shall evaluate application suitability for cloud deployment, recommend hosting environments and modernization strategies, develop migration plans, provide cost estimates, and support governance processes. The Contractor shall track hosted applications and projects throughout their lifecycle and ensure alignment with CDC operational, security, and governance requirements.

Task 7 – Transition Services The Contractor shall support all Transition-In, Transition-Out, and Workload/System Transition activities necessary to ensure uninterrupted operations and successful migration of services. Responsibilities include transition planning, project management, knowledge transfer, documentation transfer, risk management, workload migration, stakeholder coordination, testing, validation, and operational readiness support.

During Transition-In, the Contractor shall assume operational responsibility for CDC services through structured onboarding and migration activities. During Transition-Out, the Contractor shall support the orderly transfer of services, data, documentation, and operational knowledge to CDC or successor providers. The Contractor shall also support migration of workloads and systems from CDC-managed facilities to Contractor-managed environments and conduct all required integration and testing activities.

Task 8 – Disaster Recovery and Business Continuity The Contractor shall provide Disaster Recovery (DR) planning, implementation, testing, execution, and operational support for all managed workloads and systems. The Contractor shall collaborate with CDC and application owners to develop, maintain, and periodically test DR capabilities across on-premises, private cloud, public cloud, and hybrid environments.

The Contractor shall maintain DR architectures and recovery capabilities that meet CDC-defined Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs). Services shall include DR testing, recovery validation, high-availability database support, backup and restoration capabilities, and execution of recovery procedures following CDC disaster declarations. The Contractor shall ensure continuity of operations, system resilience, and recovery readiness throughout the contract period.

Expected Outcomes The Contractor shall deliver secure, reliable, scalable, and highly available infrastructure and cloud services that support CDC mission requirements. Successful performance will result in improved operational efficiency, enhanced cybersecurity posture, effective workload modernization, optimized cloud utilization, resilient disaster recovery capabilities, and seamless transition of services throughout the contract lifecycle. The Contractor shall maintain compliance with all Federal and CDC requirements while supporting continuous improvement and modernization of CDC's enterprise hosting and cloud environments.