TIRNO-17-R-00012_071917_Final_updated.rtf

OMB Control No. 1505-0081

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER

Q-7-QT-01-MP-S01 000

2. CONTRACT NO.

3. AWARD/EFFECTIVE DATE

4. ORDER NUMBER

5. SOLICITATION NUMBER

TIRNO-17-R-00012

6. SOLICITATION ISSUE DATE

2017-06-29 15:00:00.0

7. FOR SOLICITATION INFORMATION CALL:

a. NAME

BIANCA L BETANCOURT

b. TELEPHONE NUMBER (No collect calls) 2406137468

8. OFFER DUE DATE/ LOCAL TIME

2017-07-27 14:00:00.0 X

9. ISSUED BY

CODE

12163

10. THIS ACQUISITION IS

UNRESTRICTED OR

SET ASIDE: % FOR

Internal Revenue Service 6009 Oxon Hill Road, Suite 500

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOSB PROGRAM

Oxon Hill, MD 20745

HUBZONE SMALL BUSINESS

EDWOSB NAICS:

BIANCA L BETANCOURT 2406137468

SERVICE-DISABLED VETERAN

OWNED SMALL BUSINESS

8(A) SIZE STANDARD:

11. DELIVERY FOR FOB DESTINATION

UNLESS BLOCK IS MARKED

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER DPAS

(15 CFR700)

13b. RATING

SEE SCHEDULE

15. DELIVER TO

CODE

16. ADMINISTERED BY

CODE

12163 IRS Procurement 6009 Oxon Hill Road Oxon Hill, MD 20745

BIANCA L BETANCOURT 2406137468

Internal Revenue Service 6009 Oxon Hill Road, Suite 500 Oxon Hill, MD 20745

17a. CONTRACTOR/

FACILITY

18a. PAYMENT WILL BE MADE BY

OFFEROR

CODE

To All Offerors

IRS Procurement 6009 Oxon Hill Road Oxon Hill, MD 20745

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

Treasury-wide Managed Print Services (MPS)

See Continuation Page of SF 1449 for Schedule of Supplies/Services

Supplies/Services

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4, FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED HEREIN.

29. AWARD OF CONTRACT: REF. OFFER

DATED . YOUR OFFER ON SOLICITATION (BLOCK 5).

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

HEREIN, IS ACCEPTED AS TO ITEMS:

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT)

30c. DATE SIGNED

31b NAME OF CONTRACTING OFFICER (TYPE OR PRINT)

31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION STANDARD FORM 1449 (REV. 2/2012) PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212 19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE (US$)

24.

AMOUNT (US$)

(CONTINUE)

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER

34. VOUCHER NUMBER

35.AMOUNT VERIFIED CORRECT FOR

36. PAYMENT

COMPLETE PARTIAL FINAL

37. CHECK NUMBER

PARTIAL

FINAL

38. S/R ACCOUNT NUMBER

39.S/R VOUCHER NUMBER

40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42.a. RECEIVED BY (Print)

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42b. RECEIVED AT (Location)

42.c DATE REC’D (YY/MM/DD)

42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 3/2005) BACK TIRNO-17-R-00012

CONTINUATION OF SF 1449

The purpose of this contract is to acquire performance-based services for the provision of Managed Print Services for the Department of Treasury’s use of printing, copying, scanning, print-related purchasing practices, including all consumables such as ink/toner usage, mainteance kits and staples.

2. TYPE OF CONTRACT

This is a single, Indefinite Delivery, Indefinite Quantity (IDIQ) contract with Firm Fixed Priced (FFP) task orders with a one base year, four one-year options, plus the opportunity to earn two one-year award terms based on performance. The IRS has chosen to pursue an IDIQ contract to reduce lead time to award task orders under the contract.

At the discretion of the government, use of an “Award Term” incentive plan may be utilized to reward a contractor for exceptional performance. The Contracting Officer will utilize the performance assessment information generated as specified in the guidelines of the Award Term Plan found at Attachment 6 to determine whether the Contractor has earned any award term extension(s) to the period of performance of the resulting contract.

3. CONTRACT LINE ITEM NUMBER (CLIN)

Base Year Period of Performance is September 30, 2017 through September 29, 2018

0003 B&W High $______________ 0004 B&W Ex High $______________ 0005 Non MFD $______________ 0006 Color $______________ 0007 On-Site Technician $______________

Total Price $_______________

Option Year 1 Period of Performance is September 30, 2018 through September 29, 2019

1003 B&W High $______________ 1004 B&W Ex High $______________ 1005 Non MFD $______________ 1006 Color $______________ 1007 On-Site Technician $______________

Total Price $_______________

Option Year 2 Period of Performance is September 30, 2019 through September 29, 2020

2003 B&W High $______________ 2004 B&W Ex High $______________ 2005 Non MFD $______________ 2006 Color $______________ 2007 On-Site Technician $______________

Total Price $_______________

Option Year 3 Period of Performance is September 30, 2020 through September 29, 2021

3003 B&W High $______________ 3004 B&W Ex High $______________ 3005 Non MFD $______________ 3006 Color $______________ 3007 On-Site Technician $______________

Total Price $_______________

Option Year 4 Period of Performance is September 30, 2021 through September 29, 2022

4003 B&W High $______________ 4004 B&W Ex High $______________ 4005 Non MFD $______________ 4006 Color $______________ 4007 On-Site Technician $______________

Total Price $_______________

Award Term 1 Period of Performance is September 30, 2022 through September 29, 2023

5003 B&W High $______________ 5004 B&W Ex High $______________ 5005 Non MFD $______________ 5006 Color $______________ 5007 On-Site Technician $______________

Total Price $_______________

Award Term 2 Period of Performance is September 30, 2023 through September 29, 2024

6003 B&W High $______________ 6004 B&W Ex High $______________ 6005 Non MFD $______________ 6006 Color $______________ 6007 On-Site Technician $______________

Total Price $_________________

Grand Total Price $____________

4. RATES FOR PREPARATION OF FIRM FIXED PRICE TASK ORDERS

All task orders issued on a Firm Fixed Price (FFP) basis will be priced in accordance with the rates developed in response to the excel spreadsheet found at Attachment 1 - MPS Price Summary Sheet. The rates are the offeror’s prices to the managed service area (Attachment 1) used in support of the contract. The Contractor may, at its discretion, elect to propose lower rates on a task by task basis.

The prices established in Attachment 1 - MPS Price Summary Sheet rates shall serve as the agreed upon rates that the Government shall pay for any particular CLIN in any of the task orders issued under this contract.

5. MINIMUM OBLIGATED AMOUNT

The IDIQ contract includes an initial obligation of funds in the amount of $2,000,000.00 to cover the minimum order guaranteed during the base year, and includes any profit or fee. This is a one time minimum for the program and will be satisfied through the issuance of the first task order against the contract.

6. MAXIMUM CONTRACT CEILING

This is a single award IDIQ contract with an overall ceiling price of $82,000,000.00. The maximum aggregate dollar value (inclusive of estimated cost, fixed price, profit/fee for all task orders issued) shall not exceed the established contract price ceiling.

7. DISCOUNTS

The offeror is encouraged to offer any and all discounts for supplies and services provided under future task orders for the managed print services. The type or amount of discount may vary based on the circumstances of each particular task order and should be proposed in accordance with the Contractor’s pricing policies.

(End of Section)

DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

Introduction This purpose of this Performance Work Statement (PWS) is to implement a new Managed Print Service (MPS) for the United States Department of the Treasury’s use of printing, copying, scanning, print-related purchasing practices, and paper and ink/toner usage. The MPS is a planned Enterprise Initiative to use enhanced technology and managed services to meet Treasury’s printing needs in a more cost-effective, secure, reliable, and environmentally sustainable manner. It affects the distribution, management, and servicing of printers and multifunctional devices (MFDs), which perform copying, printing, faxing, and scanning functions throughout Treasury. The MPS is expected to improve workforce productivity through reduced printer downtime and expanded print functionality; save Treasury significant printing costs over five years; better protect sensitive and private information; reduce paper waste; and ensure compliance with Government-wide and Treasury-wide “Green” printing and electronic stewardship requirements and guidance. An objective of the MPS is to reduce the number of personal desktop printers in offices and workstations to the greatest extent practicable. MPS will enable the workforce to:

Print, copy, and scan to email using fast, high-volume, networked devices conveniently located for users

Reduce demand on information technology (IT) staff by transitioning maintenance and upkeep to a Managed Service provider Print securely through the implementation of PIV enabled and secure pull printing technology, granting users the same security as a personal printer and helping to reduce burden on employees and IT staff to set up print drivers

Standardize duplex (two-sided) printing for all Treasury printers and MFDs to comply with Government-wide policy and to reduce paper usage Standardize black-and-white printing as the MPS default.

The MPS Supplier will implement the network-based printing Treasury Print Management Policy (Appendix A) and work with the Treasury and its Bureaus to facilitate the following outcomes:

Network-based printing must be implemented in all Treasury participating organizations and/or other Federal agencies, as designated.

Treasury and its Bureaus will work closely with the MPS Supplier to determine the optimum network printer locations. Depending on the number of employees, it may be necessary to stage multiple printers in a single office. The MPS Supplier, reasury and its Bureaus will determine the appropriate location option based on the Treasury MPS policy.

Desktop printers will no longer be allowed except under compelling circumstances as defined in the Waivers Section of the Treasury Print Management Policy, including the adherence to the Rehabilitation Act requirements of Section 501 and Section 508. No desktop printers will be furnished by the MPS supplier. Treasury and its Bureaus will purchase and manage desktop devices and exceptions.

Background and Current State The United States Department of the Treasury is comprised of over 100,000 employees spanning current and future Bureaus, Departmental Offices, and three Inspectors General, with their varied and distinct missions. The Treasury’s Bureaus, with their varied and distinct missions, have historically operated independently, with their own management structures, budgets, and procurement organizations. This structure resulted in overall mission success for the individual Bureaus, but it did not leverage Treasury’s collective buying power for commonly procured products and services, and resulted in significant duplicative work by Contracting Officers (COs) and Contracting Officers’ Representatives (CORs). In today’s budget environment, Bureaus can no longer afford to operate using Treasury’s historical stovepiped environments, where each Bureau develops its own set of unique requirements and procures a variety of different MFDs and printer models. The Treasury copy/print/fax/scan fleet today contains more than 100,000 devices comprised of over 400 different models, which results in a high cost of ownership and inefficient management processes.

Currently, there are a variety of contracts for acquiring and maintaining these devices across the Department, resulting in varying types of potentially outdated equipment and increasing operational costs. Each Bureau separately administers the procurement of MFDs, printers, equipment maintenance, and technical support. The presence of multiple systems increases costs and incompatibilities across the Bureaus. By moving to one enterprise-wide initiative for MPS, Treasury will be able to achieve improved economies of scale to drive significant cost savings.

Executive Order 13589 instructed Bureaus to maximize opportunities for efficient and effective spending. Multiple Office of Management and Budget (OMB) memorandums have provided specific direction encouraging strategic sourcing and implementing formal governance bodies over Government-wide strategic sourcing initiatives. During FY16, the General Services Administration (GSA) and OMB provided high visibility to the Federal IT Acquisition Reform Act (FITARA) and Category Management, which are both motivators for one Treasury-wide MPS contract vehicle. More information about FITARA and Category Management can be found at https://management.cio.gov.

The change to a predominantly network-based printing environment will benefit Treasury through lower energy, equipment, supply, and vendor-related service costs. In addition, the reduction in desktop printers will allow for the propagation of new, more energy-efficient print devices that use fewer toxic chemicals, ultimately reducing Treasury’s overall environmental impact. The costs related to printing and paper use can easily be overlooked, but by implementing the measures outlined in this PWS, the Department has the potential to reduce both its print-related power consumption and paper costs.

Purpose The purpose of this acquisition is to move the Treasury Department and all of its Bureaus to a predominantly network-based printing service that will benefit Treasury through lower energy, equipment, supply, and vendor-related service costs. The intent of the Government to purchase a service with guaranteed outcomes rather than to lease, rent or purchase hardware, software, consumables, or supplies.

Figure 1 depicts the MPS Solution.

file_0.emf file_1.wmf

Figure 1: MPS Solution

The MPS will provide a single Department-wide contract vehicle to maximize efficiencies, manage spend, reduce risk, and maximize productivity. This contract has the capability to address all mission-critical requirements for each Bureau, thereby replacing the many diverse contract vehicles across Treasury and eliminating the multiple types of equipment and service contracts. Treasury requires the MPS Supplier to provide full life-cycle management of Treasury printer, copier, scanner, and fax capabilities across all continental U.S. locations using a minimum number of models. Treasury expects these model’s to include all MPS support efforts following completion of the MPS transitioning and implementation phases described in the Services Section of this contract.

As a direct result of this contract performance, Treasury expects to achieve the following outcomes:

A high-performing partnership between the Treasury and the MPS Contractor Optimize organizational alignment, roles, and responsibilities to best leverage system support services resources, maximize organizational efficiency, and deliver continuous improvement. Build a strong, mutually beneficial partnership with clear, mutual accountability and delivery of services that are firmly aligned with Treasury’s dynamic business requirements throughout the period of performance.

A compelling managed service framework Ensure that desired outcomes are achieved through objective-based service-level metrics, key performance indicators, customer satisfaction measurements, executive performance indicators, and cost reductions.

Sustained industry-leading printing practices and innovations Promote process and quality management methodologies that incorporate industry-leading practices, standards, and innovations; produce repeatable positive outcomes; encourage the incorporation of lessons learned; reduce solution delivery time, costs, and defects; improve program productivity and reliability; and provide the Treasury substantial visibility into the status and health of ongoing systems operations.

One cost driven Help Desk to support Treasury and its Bureaus Provide one Help Desk for all of Treasury and its Bureaus. This will provide a single source solution for management and oversight of TreasuryManaged Print infrastructure(s).

A simple, manageable, and scalable Treasury MPS environment Simplify the MPS allocation, provisioning, capacity planning, support, maintenance, and equipment refresh. Implement the MPS based on prevailing industry standards. Adjust to demands in MPS based on varying printing consumption needs and increases or decreases in capacity.

Single point, end-to-end operational accountability and visibility Provide visibility into the new operations with access to performance and operational data for Treasury to guide management decisions. Implement responsive issue resolution and change management processes that provide acceptable financial, technical, deployment, and operational risk levels. Facilitate the use of consistent, integrated approaches and processes across line of business and geographies through an integrated service delivery model that employs a cohesive relationship and contract governance structure.

A cost effective and affordable program cost structure Hardware and services rates remain competitive with market rates throughout the contract lifecycle, and pricing structure mitigates transition cost spikes.

A successful program transition Complete the transition to the new MPS on schedule and without adverse customer impact. The date when this is to be done will be provided.

Scope of Services The MPS Supplier will provide ongoing operations and maintenance. Services must also include all operational, assessment, provisioning, and sustainment efforts; all required accessories; and all usage as part of the base solution, and must fulfill all service level objectives defined in this contract. Treasury seeks to minimize risks with the base model’s and requires the MPS Supplier to offer solutions that include a combination base usage monthly.

The MPS Supplier will provide the required solutions, approaches, and ongoing services, including the people, processes, technologies, and mix of online and remote support to smaller sites for the scope outlined in this IDIQ contract. The MPS Supplier’s process will utilize the baseline information provided by each organization, and will analyze the top utilized devices of the print infrastructure, devising a recommended future state based on the trending volume information and the intelligence gained by Treasury staff in serving their environment.

The MPS Supplier will work with all Treasury employees to facilitate the removal of all all obsolete and underutilized networked and non-essential desktop printers, copiers, and plotters offline to be collected by the MPS Supplier. Desktop printers will no longer be allowed except under compelling circumstances as defined in the Waivers Section of the Treasury Print Management Policy (Appendix A), including the adherence to the Rehabilitation Act requirements of Section 501 and Section 508.

Treasury will benefit through lower energy, equipment, supply, and vendor-related service costs. In addition, replacing obsolete printers will allow the use of new, more environmentally friendly network printers and MFDs that use fewer toxic chemicals, less energy, and result in a smaller carbon footprint. As part of the MPS program, the MPS Supplier will propose the consolidation of devices based on business need for each floor in each Treasury Organization, and will make recommendations as the business need changes.

Program Management Services The MPS program will be managed and governed through a virtual Program Management Office (PMO) structure comprised of the Department of Treasury executive level and each Treasury Bureau or designated organizaton serving as members of the virtual PMO as well as acting as the MPS representatives for their Bureau’s activities. Figure 2 shows the virtual Treasury and Bureau PMO structure.

BUREAUS

file_2.png file_3.wmf

Figure 2: Virtual MPS Treasury PMO Structure for Current Bureaus

The MPS Treasury PMO is responsible for:

Overseeing, managing, and coordinating the MPS Supplier” work products to ensure overall successful delivery and implementation of the MPS contract and closeout of existing contracts on schedule

Preparing and approving any interagency agreements with any Federal entities outside of Treasury that want to order goods as part of the MPS solution according to the Economy Act Overseeing and coordinating with the MPS Supplier on contract progress and status – conducting periodic MPS Supplier Program Management Reviews Administering the Waiver Policy for all Treasury Bureaus Coordinating and developing all MPS Program-level reporting activities and processes including, program reviews, GAO and OMB reporting, etc.

Reporting program and project status and risks to external and internal stakeholders and oversight Bureaus such as GAO and OMB Aligning all Treasury Bureau MPS PMOs to support transition from the existing environment to the new MPS environment Providing tools to Bureau-level MPS PMOs to communicate with stakeholders on MPS capabilities and services to ensure optimum Treasury planning and use Developing and setting future MPS strategy through coordination with Treasury Organizations, MPS stakeholders, and commercial industry Promoting and implementing environmentally friendly printing practices and paper use per the Treasury Print Management Policy Establishing printing goals and strategies to comply with Government regulations Establishing policies and accepted behaviors regarding print, copy, fax, and scan Monitoring and managing Bureau implementation results over time to keep the printing environment optimal and to ensure that the benefits of these policies are maintained.

The list of Bureaus is subject to change depending upon potential future bureaus and/or other participating Federal Agencies. The MPS Supplier will provide their organizational structure to include levels of authority at corporate and task order level, approval process, roles and responsibilities, communication process, management of risk, and subcontractor management that maps to the Treasury tiered PMO structure.

The MPS Supplier must participate in a Contract Kick-Off Meeting at a place and time approved by Treasury. The meeting will provide an introduction between the MPS Supplier personnel and Treasury personnel who will be involved with administering and managing the Contract. The meeting will provide the opportunity to discuss management of the Contract, roles and responsibilities, terminology and processes, security, administrative issues, and Task Order procedures, including notification and communications processes, travel, reporting, and invoicing procedures. Attendees must include MPS Supplier personnel, including the Program Manager and Contracts Manager, and representatives from Treasury PMO and Contracting Activity.

The MPS Supplier must identify a Program Manager (PM) to serve as Treasury’s single focal point to provide management, direction, administration, quality assurance, and leadership in the execution of this Contract and all resultant Task Orders. The MPS Supplier’s PM will be required to meet frequently with Government personnel, at times on short notice and in person at a to-be-specified Ordering Organization Program Office location or via telephone, on weekdays from 8:00 a.m. to 5:00 p.m. Eastern Time (except for Federal Government holidays).

Subcontracting As a tool for “Risk Awareness,” Treasury must have insight into the use and nature of subcontracting activities under this agreement and requires a small business subcontracting plan. A subcontracting plan showing small business participation is required per FAR 19.7, however, a plan is also being required for both large business subcontractors under this requirement. Treasury requests that Offerors provide an initial Subcontracting Plan as part of the response to this solicitation, detailing roles and responsibilities of sub-suppliers. For ongoing management of the Enterprise Printer Agreement, the MPS Supplier must notify Treasury Printer PMO prior to any changes and update the Subcontracting Plan accordingly.

Task Order Management Each Treasury Bureau will submit a separate Task Order (TO) against this contract for the work required in their Bureau, based upon the size and condition of their current printing environment. The first TO will be for the IRS which consumes almost 80% of all Treasury print services. The combination base usage price on a monthly basis negotiated for TO #1 will be the price used for all subsequent TOs. The deliverables defined for TO #1 will include the initial Deliverables required for the MPS Solution. Each subsequent TO will not require new Deliverables, rather an update to the existing Deliverables to include any other Treasury Bureau specific processes or procedures. The TO process is depicted in Figure 3.

file_4.emf file_5.wmf

Figure 3: MPS Services Task Order Process Flow

The scope of each Task Order will be comprised of three phases:

Phase 1–Assessment of Current State and Plan for New Solution This phase includes the activities immediately after award of each Task Order, including assessing and validating the Ordering Organization’s printing asset inventory, confirming which print assets should be kept, repurposed, or removed, the buy-back of reusable Government-owned printing assets at fair market value (FMV), and the transfer of ownership of the usable printer hardware from the Ordering Organization to the MPS Supplier. This phase also includes the design of the new MPS solution addressing both usable and unusable assets that will be submitted to Treasury for approval, as well as a plan for destroying any print resources required by individual Ordering Organizations. Services generally included in Phase 1:

Program and Operational Management – conducting the Program Management Kick-Off, developing a proposed outline for an Operational Management Framework based on ITIL (see Appendix C.)

Assessment and Inventory Validation – validating of the Treasury provided inventory. Conducting a full assessment of treasury sites and documenting results.

Exchange Sale of Reusable Assets – assessing the currently used assets, their age and residual value. Provide Treasury with a list of “good” assets that will fit future design and providing Treasury with service credits for these assets that will be used to offset billable services MPS Minimum Device Functionality – ensuring that the new MPS solution meets minimum device functionality requirements Security – Assess and describe plan to meet security requirements of the Ordering Organization MPS Design – designing a new Treasury printing environment delivered at the Ordering Organization level that is consistent with the established Treasury Managed Print Policy and meets overall architectural goals and FedRAMP ready security requirements for management reporting and performance monitoring tools in the cloud.

Transition Planning – providing a Service Transition Plan that describes in detail the migration of all legacy services from the Treasury’s and/or Bureau’s current implementation to the MPS Supplier’s solution Change Management – developing a Change Management and Training Plan that describes the approach to provide training on the new devices for all employees and address an outreach proactive training approach to users to ensure their understanding and buy-in of the new solution.

Phase 2 – Implementation of the New Solution This phase includes the implementation of the current printer environment to the new MPS solution for the Ordering Organization. Services generally included in Phase 2:

Phase 3 – Management of the Ongoing Managed Print Solution This phase is the ongoing management of the MPS operations and maintenance services necessary to support Treasury’s goals and objectives, including the identification of future enhancements and new technologies that will continue to improve, enhance the environment, and ultimately reduce the costs of print services for Treasury. Services generally included in Phase 3:

Security and Privacy Requirements The Offeror must demonstrate that the proposed MPS meets current security and privacy requirements defined by Treasury and Federal laws, regulations, and policies, and can accommodate and future security and privacy requirements. Security and Privacy requirements apply to individuals and organizations having contractual arrangements with Treasury, including Suppliers, Sub-suppliers, and outsourcing partners. Security support services consist of security risk management, patch and vulnerability management, plans of action and milestone support, security continuous monitoring and analysis, security change and configuration management, security audits, incident handling, business continuity, security control assessments, secured gateway access, and access and authorization management. Security support also includes Treasury and Bureaus and designated Treasury and Bureaus contractor remote and onsite access, at Contractor facilities, to IT infrastructure and applications for periodic vulnerability scanning, penetration testing and independent validation and verification of security controls, including access to applications not developed by the Contractor and real-time/near real-time security-relative data access to key Treasury and Bureaus security stakeholders as needed for security monitoring. The objectives of the Security and Privacy Requirements are to provide security to protect the confidentiality of information on behalf of Treasury, commensurate with the risk and magnitude of harm resulting from unauthorized access, use, disclosure, disruption, modification, or destruction.

Ensure that the printer policies, processes, and procedures comply with Federal Government-approved standards and guidelines for a Federal Information Processing Standards (FIPS) 199 moderate to high system classification, and are consistently enforced.

Ensure that printer policies perpetually remain in compliance with the provisions of the Federal Information Security Management Act (FISMA), Title III of the e-Government Act of 2002, P. L. 107-347, and subsequent amendments, and other applicable laws, regulations, and policies as they are added, modified, or deleted.

Ensure that all security implementation is tested, documented, and monitored, with periodic reporting to Treasury of the status of compliance with requirements.

The MPS Supplier shall implement federally compliant security measures to prevent remote intrusion, virus infections, and service denial schemes to information systems, infrastructure support systems, and telecommunication services supporting Treasury’s intranet and internet websites. Therefore, the Offeror’s proposed MPS must ensure that:

Devices are smart card (Personal Identity Verification [PIV]) enabled.

The MPS Supplier shall be knowledgeable of National Institute of Standards and Technology (NIST) and Federal Information Processing Standard (FIPS) guidance and complete the Certification and Accreditation process, including risk assessment and Security Testing and Evaluation. The FIPS 200, Minimum Security Requirements for Federal Information and Information Systems impact rating at a minimum is moderate. The FIPS 199, Standards for Security Categorization of Federal Information and Information Systems defines a Moderate-Impact System as an information system in which at least one security objective (i.e., confidentiality, integrity, or availability) is assigned a FIPS 199 potential impact value of moderate and no security objective is assigned a FIPS 199 potential impact value of high.

Personally Identifiable Information Taxpayer data protection is a highly sensitive form of Personally Identifiable Information (PII) (refer to NIST Special Publication [SP] 800-144, Guidelines on Security and Privacy in Public Cloud Computing, and NIST SP 800-122, Guide to Protecting the Confidentiality of Personally Identifiable Information [PII]) and should be protected as required by the Treasury and Bureaus (refer to Treasury and Bureaus Publication 4812, Contractor Security Controls, Internal Revenue Manual [IRM] 10.8.1, IT Security Policy and Guidance, and IRM 10.5.2, Privacy and Information Protection, Privacy Compliance and Assurance [PCA] Program); and OMB Memo (M) 07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information, and NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations. Treasury and Bureau policies prohibit unauthorized inspection or disclosure of taxpayer data.

Badging, Parking, and Building Access The MPS Supplier must comply with each facility’s badging, parking, and building access requirements. These requirements include the MPS Supplier’s responsibility to pursue temporary or permanent badges for on-site employees for performance under this Contract as well as the collection of badges for those no longer requiring access under this Contract, in compliance with the Homeland Security Presidential Directive 12 (HSPD 12), dated August 27, 2004,“Policy for a Common Identification Standard for Federal Employees and Contractors.” These requirements also include (but are not limited to) the following: badge must be worn at all times, above the waist, and easily visible to other personnel in the building. The MPS Supplier is responsible for the safekeeping, wearing, and visibilityof Government-furnished badges. [start Access to Network All devices provided under this Contract must require Treasury and Bureaus’ PIV (or other agency Common Access Card (CAC) for access to the network. Network devices must additionally meet the following PIV/CAC configuration: The capability for user authentication must comply with (HSPD 12) card readers, and support any PIV/CAC stock on the FIPS 201 Approved Products List. The MPS Supplier must ensure that users’ authentication credentials including PIV/CAC are not recorded or captured in print job submissions.

All MPS MFDs must be compatible with users’ network credentials when PIV/CAC is not available. The MPS Supplier must ensure the PIV/CAC solution is Section 508 compliant. The hardware solution for PIV/CAC card access must be Treasury/Bureau compliant/certified.

The MPS Supplier must ensure that MPS devices can only be accessed within Treasury and Bureaus’ networks. The MPS Supplier must centrally manage MFDs from the Treasury Bureaus’ Data Centers. The MPS Supplier solution must be compatible with each Treasury and Bureau’s baseline server configuration.

Security-Related Tasks

The MPS Solution must support the following security-related tasks:

Support to analyze and actively manage security risks based on the severity of impact upon Treasury/Bureau Organizations to minimize risk to Treasury/Bureau systems and data and to maintain information systems authorization.

Support to develop and maintain a Security Risk Management Framework across the MPS environment that supports all areas of NIST SP 800-37 Rev. 1, Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach, with the exception of Authorization, which is a Treasury and Bureau responsibility.

Provide an automated risk management decision approach process supported by continuous monitoring and sharing of agency cybersecurity status and threats that improves security situational awareness, defense and response (refer to Office of OMB M 14-03, Enhancing the Security of Federal Information and Information Systems; OMB M 15-01, Fiscal Year 2014-2015 Guidance on Improving Federal Information Security and Privacy Management Practices, and NIST SP 800-137, Information Security Continuous Monitoring [ISCM] for Federal Information Systems and Organizations).

Develop varied security related artifacts such as an MPS Security Concept of Operations (CONOPS), Vulnerability Assessments, Security Incident Summary Reports, Mitigation Reports, Configuration Compliance Reports, Security Risk Assessments, and Information Security Status Packages (collection of artifacts that communicate the security posture of the Treasury/Bureau environments and the contractor’s statement of validation that services were provided as defined in associated plans and activities.

Patch and Vulnerability Management Support Services Implement and maintain security patch and vulnerability management process and procedures as required by Treasury and Bureau guidance, and consistent with NIST SP 800-40 Rev 3, Guide to Enterprise Patch Management Technologies, government best practices, as applicable, and NIST SP 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations.

Design and implement a centralized Patch Management System which shall address impending threats to the MPS and related critical IT infrastructure via automated patch implementation on an as-needed basis.

Provide Plan of Action and Milestones (POA&M) support, including preparing, documenting, and maintaining a POA&M to correct deficiencies in the security controls and to address remaining vulnerabilities in the information system, as required by Treasury and Bureaus.

Monitoring services to detect, prevent, and address security threats to all MPS environments, exchange security status, and effectively interoperate with internal Treasury and Bureau Computer Security Incident Response Capabilities .

Maintaining a Security Configuration Management Database or equivalent repository for tracking changes to the security configuration baseline.

Implementing a Security Impact Assessment process that is traceable throughout the entire change process and includes post-implementation validation per NIST SP 800-30 Rev. 1, Guide for Conducting Risk Assessments.

Adhering to NIST United States Government Configuration Baseline using the Security Content Automation Protocol validated software, as specified by Treasury and Bureaus Publication 4812, Contractor Security Controls, or other appropriate guidance (refer to OMB M 08-22, Guidance on the Federal Desktop Core Configuration.

Security Audits The MPS Supplier must implement, manage, and maintain audit services for the MPS solution, including maintenance and retention of an audit plan, and audit and event logs. (Refer to Treasury and Bureaus Publication 4812, Contractor Security Controls, NIST SP 800-18 Rev. 1, Guide for Developing Security Plans for Federal Information Systems, IRM 10.8.3, Information Technology (IT) Security, Audit Logging Security Standards, NIST SP 800-12, Introduction to Computer Security, and NIST SP 800-92, Guide to Computer Security Log Management). Audit record retention shall comply with Treasury and Bureau requirements Incident Handling The MPS Supplier must implement and maintain security incident response/reporting services that comply with Treasury and Bureau requirements.

The MPS Supplier shall document security incident response/reporting process and procedures in a Treasury and Bureau-approved MPS Security Incident Handling, Monitoring and Response Plan.

Business Continuity Support:

The MPS Supplier must provide business continuity support services for all MPS components and controls in accordance with Treasury and Bureaus Publication 4812, Contractor Security Controls, IRM 10.8.1, IT Security Policy and Guidance, and NIST SP 800-34 Rev .1, Contingency Planning Guide for Federal Information Systems) including providing an Alternate Site Processing Environment for disaster recovery services referred to in FIPS Pub 199, Standards for Security Categorization of Federal Information and Information Systems at a moderate or high level.

Indirect Transmission Control Protocol Boundary Scope Memo Privacy Impact Assessment Incident Response Plan Configuration Management Plan Continuous Monitoring Plan Incident Response Plan and Incident Response Training Plan Roles and Responsibilities, and Expected Behavior Rules Security Configuration Guidelines The MPS Supplier must also take into consideration that each Treasury Bureau may have differing security policies for the removal of the current printers. The security policies for each Bureau will be available to the MPS Supplier. Some Bureaus may require total destruction of some printers, in which case, the MPS Supplier must be able to provide a solution for the green destruction of those printer as part of its proposed solution. For any equipment removed by the MPS Supplier and scheduled to be destroyed per IRM 10.8.1, Information Technology (IT) Security, Policy and Guidance, the MPS Supplier is required to demonstrate as part of its plan that those actions will be handled by a refurbisher or recycler that is third party certified to one of the known electronics recycling certification programs that is used in the United States─the Responsible Recycling Standard or the EStewards Standard.

Management Reporting and Performance Monitoring, and Quality Assurance Survillence Plan FedRAMP Management Reporting and Performance Monitoring Tool The MPS Supplier must propose a Cloud-based Management Reporting and Performance Monitoring Tool that will be FedRAMP authorized to allow for reporting, monitoring the performance of the MPS Solution across the Treasury and its Bureaus, and to manage and monitor help desk functions. The MPS Supplier must demonstrate that they are FedRAMP Ready meaning that their systems are ready to begin the FedRAMP Security Assessment Framework to obtain FedRAMP authorization for their product. The MPS Supplier must demonstrate that they are in the queue for FedRAMP authorization at time of award. The IRS will sponsor the selected Offeror to get an ATO for their FedRAMP authorized product.

The MPS Supplier tool must include access to a real-time or near real time dashboard showing performance information at the Bureau site and device level. The tool should allow for ad hoc investigation by the MPS Supplier and Treasury/Bureaus of MFDs’ utilization and performance, dashboard reporting and report generation, and MFD management and planning. This tool suite will have access to all MPS sites and networks, but will not access stored data or applications hosted on the Treasury/Buearu infrastructure. Each organization will be able to track only its own activities, except for Treasury PMO, which will have access to all participatiing Organizations.IRM 10.8.1.4.15.8.1.(07-08-20150 SA-9 External Information System Services-Control Enhancements, is the IRS specific policy that mandates FedRAMP for all cloud acquisitions.

Quality Assurance Surveillance Plan The MPS Supplier must propose a Draft Quality Assurance Surveillance Plan (QASP) that Treasury will use to evaluate the MPS Supplier’s performance under the contract. The QASP template is provided as Attachment 4 of the RFP. The Draft QASP must include, at a minimum, the Government-proposed performance metrics, expressed in the form of SLO), which are specific quality-of-service measurable characteristics. Treasury will describe specific Government-proposed performance metrics in the QASP. The final QASP will be agreed to by both the Government and MPS Supplier to ensure mutual understanding of how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable performance rate.

The MPS Supplier must collect and report on data that documents the success or failure to achieve the stated objectives. Post Award, the MPS Supplier may recommend additional or alternate performance metrics, with rationale supporting how those metrics will achieve the objectives for Treasury consideration and approval.

Place of Performance The place of performance will primarily be at the locations of the Treasury Bureaus and components. These locations will include Treasury and Internal Revenue Service (IRS) offices across the Continental United States, Puerto Rico, Alaska, and Hawaii.