DRAFT_ALD_Statement_Of_Work_12Feb18.docx

Army Leader Dashboard

DRAFT Statement of Work

12 February 2018

ALD Statement of Work

Version 1.0 12 February 2018

This page intentionally left blank

This page intentionally left blank

1. STATEMENT OF WORK – Army Leader Dashboard Problem:

The Army lacks visibility into the vast amount of data, dispersed across the Army enterprise.

The Army requires a big data management solution and a tailorable solution that integrates, analyzes, and visualizes information from multiple disparate data sources, both classified and unclassified. The solution should present information in a way that is immediately understandable and actionable for an everyday end-user. The solution should be capable of integrating both current and historical structured/unstructured datasets, perform predictive analytics and forecasting. The product(s) shall be commercially available now.

Purpose:

This project will take advantage of Commercially Available software solution(s) to configure the prototype(s) as an Army Leader Dashboard (ALD) to allow user assessment of the initial capability for a decision-making, reporting and visualization capability. The dashboard shall enable Army Senior leaders and leaders at designated levels to easily navigate through information from multiple Army Authoritative Data Sources (ADSs) in order to capture information to produce predictive analytics and facilitate real-time or near real-time decision making. This effort shall include an Agile Methodology for data integration and visualization responding to Senior Army Leader input. The solution shall have proven maturity to permit expansion of the user base and long term sustainment.

Scope:

The Solution must provide the ability to visualize the current and future state of the Army based on data generated by the thousands of systems that support the Army’s execution of its primary functions under Title 10, United States Code (USC) to organize, man, train, equip, and sustain forces. The solution must be able to collect, catalogue, manage, integrate, aggregate, analyze and visualize data from these disparate systems and other external data sources.

The solution must have the ability to scale data aggregation to thousands of current/legacy Authoritative Data Sources (ADS) and millions of data points (both structured and unstructured), and be able to secure data at the most granular level and authenticate by system and user. Additionally the solution should account for and include all required integration to ensure end-solution is deliverable, to include, but not limited to data ingestion, management, analytics, cleansing and visualization and geospatial services. Visualization output should provide minimally-trained senior leaders an intuitive, configurable dashboard-style interface to visualize and present information in ways that are immediately understandable, actionable and demonstrate the ability to support real-time/near real-time senior leader decision making.

The solution must be capable of achieving Federal security compliance standards. The product shall be commercially available, demonstrable and take into consideration leveraging existing Army software investments to the greatest extent possible.

For the ALD prototype project, the term “commercially available” is a compilation of three definitions listed in Appendix A- #1:

“Commercial component” means any component that is a commercial item.

“Commercial computer software” means any computer software that is a commercial item.

“Commercial item” means any item, other than real property, that is of a type customarily used by the general public or by non-governmental entities for purposes other than governmental purposes, and—

(1) Has been sold, leased, or licensed to the general public; or

(2) Has been offered for sale, lease, or license to the general public User Base:

During Phase 1, the ALD will be provided first to one (1) Army Senior Leader and up to 20 designated alternates with a scalable solution for the purpose of continuous prototype assessment. During Phase 2, the scalable solution will be subsequently released to designated Army Leaders at the Headquarters, Department of the Army (HQDA) Secretariat and HQDA staff principles, selected corps, and possibly division commanders.

PROTOTYPE PHASES AND ASSESSMENT

This project will use a phased approach as outlined below:

Phase 1: (up to 120 Calendar Days) Day 1 is date of agreement award.

Task 1. The Contractor shall configure, integrate, demonstrate and release / provide access to the ALD within five (5) business days after award to one (1) Senior Leader (user). The Contractor shall be prepared to deliver the prototype on a stand-alone laptop computer. Within thirty (30) days after award, the Solution shall be on the Army Network and available to the Senior Leader and up to twenty (20) designated alternates at Headquarters, Department of the Army (HQDA). During this phase, the Contractor initiates the delivery of Application Program Interfaces (APIs).

Task 2. ALD Studies and Analysis: The Contractor shall conduct a study and analysis and submit a written report of the Army Authoritative Data sets beyond those identified in Phase 1. The report shall provide an assessment of the number, size and frequency of data feed updates with a recommendation of priority (1 – N) for interfaces / connections. Additionally, the Contractor shall assess and report on how data is currently managed and recommend a strategy for enhancing data usability and information quality to include data cleansing and correcting. (Technical Report–Study/Services, DI-MISC-80508B) Completion of this phase is up to 120 (Calendar days). Upward Invitation to Phase 2 will be based on successful completion of Tasks 1 and 2.

Phase 2: (up to 180 Calendar Days from the start of phase 2) The Tasks will be defined by the results of the Phase 1 Task 2 Studies and Analysis, and an updated Statement of work will be released. The Government anticipates Contractor Tasks that include: continuation of configurations, delivery of solution on a mobile/tablet device, hosting of the enduring solution, additional 25 ADS’s, development and integration of additional APIs and designated Interfaces. The contractor shall be prepared to scale the ALD to an additional 150 designated Army Leaders (users) at the division, brigade, battalion and below levels across the entire Army.

Completion of this Phase is up to day 180 (Calendar) from start of phase 2.

OVERALL TECHNICAL REQUIREMENTS

The following are minimum requirements that will be included in the prototype:

Data Integration The Contractor shall deliver a commercial data management solution that acquires data from numerous unclassified and classified authoritative data sources in an automated manner that minimizes or eliminates the requirement for manual intervention during data acquisition and enables information management.

The data must be protected in accordance with applicable laws, regulations and policies governing Personally Identifiable Information (PII), Protected Health Information (PHI) and protection of the solution will be capable of:

Organizing and integrating data on NIPRNet and SIPRNet into a SIPRNet-hosted solution.

Data-agnostic data integration, including structured, unstructured, and semi-structured data integration capabilities at terabyte scale.

Data “pull” jobs through a RESTful web API or direct connections that refresh data and can be run manually or on a schedule.

Analytics and Visualization The Contractor shall deliver a configurable solution that:

Integrates, analyzes, and visualizes information from multiple disparate data sources, both private and public.

Presents a broad and immediate awareness of actual or predicted Army status

Provides a solution that enables access and/or launches access through all modern Army approved (Classified and Unclassified) Army devices (desktop, laptop, tablet and mobile) Presents information that is immediately understandable and actionable to users Intuitive, interactive, top-down, large-scale data exploration application to allow nontechnical users to interactively explore massive-scale data in a drill-down, point-and-click application and filter billions of pieces of data into a digestible set of useful information.

Provides user defined alert(s) and ability to setup and tailor an alert “Ticker Tape” text banner Provides plaintext search capability across all data Provides ability to filter, receive/view alert(s) and share information with other users Processes and displays all current and historic Army data and provide future predictive analytics (5, 10, 20 + years into the future) Security and Infrastructure Role-based access controls that are assignable to individual users or groups of users and are securely stored in lists, which can be updated at any time Multi Factor (Two-Factor) Authentication (e.g., enterprise LDAP, PKI, Active Directory, etc.) as well as Single Sign-On (SSO) capabilities using the Army’s Identity and Access Management (IdAM) capability, Enterprise Access Management Service – Army (EAMS-A).

Protect data at rest and in transit using Federal Information Processing Standards (FIPS) 140-2 approved and validated algorithms for encryption, hashing, and signing (e.g., full disk encryption, Kerberos) Has the ability to achieve an Interim Authority to Test (IATT) on DOD NIPRNet and SIPRNet for the duration of the prototype effort.

The Contractor shall provide a solution that meets or has the ability to meet the DOD Risk Management Framework (RMF) accreditation requirements for an Authorization to Operate (ATO) on DOD NIPRNet and SIPRNet. (DOD Risk Management Framework (RMF) Package Deliverables, DI-MGMT-82001) Company shall collaborate with the Government to provide a solution capable of delivering integrated classified and unclassified content to SIPRNet users, and enable the Government to pass data and insights from an unclassified solution to a classified solution.

REGUGULATIONS AND POLICIES

· Army Regulation 220-1, Army Unit Status Reporting and Force Registration – Consolidated Policies, dated 15 April 2010. This regulation consolidates into one authoritative publication Army policy for readiness status reporting for force registration. Also, it implements Chairman of the Joint Chiefs of Staff Instruction 3401.02 A, Chairman of the Joint Chiefs of Staff Manual 3150.02 A, DODD 6025.19, DODD 7730.65, and DODD 8500.1. Available at:

http://www.apd.army.mil/epubs/DR_pubs/DR_a/pdf/web/r220_1.pdf

· Army Regulation 5-1, Management of Army Business Operations, dated 12 November 2015. This regulation covers the management of Army business operations, the governance of the Army’s Business Mission Area (BMA), and the sustainment of the Army’s Business Systems (ABS) Architecture. Army business operations are those activities that enable the Army to execute effectively and efficiently its 10 USC primary functions to organize, man, train, equip, and sustain forces. Available at:

http://www.apd.army.mil/epubs/DR_pubs/DR_a/pdf/web/r5_1.pdf

· Department of Army Pamphlet 220-1 Defense Readiness Reporting System–Army Procedures, dated: 16 November 2011. This pamphlet consolidates and updates the basic processes and general procedures for preparing, reviewing, and submitting the commander’s unit status report and for accomplishing force registration actions. Available at:

http://www.apd.army.mil/epubs/DR_pubs/DR_a/pdf/web/p220_1.pdf

· Army Regulation 525-30 Army Strategic Readiness, dated: 3 June 2014. This regulation prescribes the purpose, policies, procedures, and responsibilities for planning, preparing, executing, and assessing Army Strategic Readiness. Available at: http://www.apd.army.mil/epubs/DR_pubs/DR_a/pdf/web/r525_30.pdf

· Department of Army Pamphlet 525-30 Army Strategic Readiness Assessment Procedures, dated: 9 June 2015. This pamphlet explains and documents the basic Army strategic readiness assessment processes and general reporting procedures used in determining, analyzing, assessing, and reporting Army Strategic Readiness in accordance with the three Joint Staff Criteria (Joint Capability Assessments, Army Plan Assessment, and Readiness Deficiencies) and six Army Strategic Readiness Tenets (Manning, Equipping, Sustaining, Training, Installations, and Capacity and Capability). Available at: http://www.apd.army.mil/epubs/DR_pubs/DR_a/pdf/web/p525_30.pdf

· Army Information Architecture, Version 4.1, dated: 5 June 2015. The Army Information Architecture (AIA), provides the design and development guidance needed by Army personnel, from Communities of Interest (COIs) to Program Managers (PMs) to developers, to create information systems that meet DoD and Army net-centricity and information sharing objectives. Available at:

http://ciog6.army.mil/

· Army Data Strategy, Version 1.0, dated: February 2016. Information Architecture Division, Army Architecture Integration Center, HQDA CIO/G-6. This document provides the basic Army strategic plan for data management and general governance procedures that impact the ALD Authoritative Data Sources. Available at:

http://ciog6.army.mil/Portals/1/Home/Tabs/Strategy/20160303_Army_Data_Strategy_2016.pdf

· Defense Logistics Agency (DLA) Document Services, Acquisition Streamlining and Standardization Information System (ASSIST). Managed by DLA Document Services, Philadelphia, ASSIST provides free access to Defense Standardization Program (DSP) technical documents that have been cleared for public release to include the Data Item Descriptions (DID) formats for the ALD contract deliverables. Quick Search available at: http://quicksearch.dla.mil/qsSearch.aspx

GENERAL REQUIREMENTS

Security.

The highest level of classification for this effort is SECRET.

The Contractor shall provide a solution which meets the Army classification requirements of Army readiness data according to Army Regulation (AR) 220-1 Systems Engineering Management. The Contractor should employ industry and DoD best practices for analysis, configuration, design, development, deployment and support of the Army Leader’s Dashboard prototype.

The Contractor shall comply with applicable industry standards used in their systems engineering processes. The approach shall align to the requirements of the 2010 National Defense Authorization Act, Section 804 “Implementation of New Acquisition Process for Information Technology Systems”, specifically, the approach shall include:

· early and continual involvement of the user;

· multiple, rapidly executed increments or releases of capability;

· early, successive prototyping to support an evolutionary approach; and

· a modular, open-systems approach The systems engineering processes should include:

· Flexibility: tailoring program strategies and oversight

· Responsiveness: rapid integration of advanced technologies

· Innovation: adapt practices that reduce cost and cycle time

· Discipline: use of program baseline parameters as control objectives

· Effective Management: decentralization to the extent practicable

Program Management. The Contractor shall provide the overall management and administrative effort for the planning, organizing, staffing, directing, and controlling the tasks, activities and approval actions necessary to ensure that the ALD prototype is delivered on-time and meets the expectations of Army senior leaders.

Data. All Contractors that have access to the data provided for this effort shall adhere to all Data Usage Agreements, listed in Appendix A- #2.

System Data Usage: The solution shall not capture, maintain, scan, index, share or use data stored or transmitted by the system for any non-authorized activity or non-government purpose. The solution will include a specific process for handling spillage that ensures compliance with DoD requirements, including Army Spillage Best Business Practices (BBP), National Institute of Standards and Technology (NIST) Special Pub 800-88, DoDM 5200.01 Volumes 1 - 3, and DoD 5220.22-M. (DoDM 5200.01 Vol 3, February 24, 2012, Enclosure 6, Appendix 1 Report of Security Incident Inquiry or Investigation & Appendix 2 DoJ Media Leak Questionnaire) System Records Management: All Government records processed, retrieved or displayed by the dashboard solution shall be maintained in compliance with the requirements of the Federal Records Act, 44 USC Chap. 33, the E Government Act of 2002, 44 U.S.C. 101, and the implementing regulations issued by the National Archives and Records Administration (NARA) at 36 CFR 1200 et seq. In addition to the Federal requirements for records management, Department of Defense Directive Number 5015.2.

Dashboard Technical Publications. As required by the Government, the Contractor shall provide the technical data needed to support the hosting and operation of the ALD solution. (e.g. identification of required Ports, Protocols and Services, firewall rules, power, signal, floor space, etc.)

Dashboard Support Data. The Contractor shall document and store in a data repository the data needed to support the provisioning process (i.e. preparing and equipping the dashboard to allow it to provide (new) services to its users). The Contractor shall document and store in a data repository the data needed to support transition of the prototype to production.

Prototype User Assessment Support: Provide services to support the Army’s Senior Leader and Global Usability Assessment with support via solution experts. During the Usability Assessment, Government business hours/days, and on-call as needed, the Solution Experts shall be stationed in close proximity of the Pentagon Department of Army Headquarters to permit responses with an on-site representative (arrive at designated Army office within :30 minutes) to provide one-on-one support to Senior Leader users.

Hosting. The Hosting of the ALD solution will be managed by the Project Phase Hosting for Phase 1. The Government will provide a NIPRNet and SIPRNet hosting facility to support the development, test and demonstration of the ALD based on Infrastructure as a service. The Government anticipates that each offeror will be provided a virtual machine environment on NIPRNet and SIPRNet The Contractor shall meet one of the following hosting options (a), (b) or (c):

The Contractor shall install, configure and sustain a prototype Army Leader Dashboard software capability onto an Army provided infrastructure solution. The ALD will need to be able to receive data from a Secure File Transfer Protocol (SFTP) server to support initial data transfers from data providers. The hosting will be at a designated Government Facility for the purpose of continuous prototype assessment. The hosting facility will provide access to both the Non-Secure Internet Protocol Router Network (NIPRNet) and the Secure Internet Protocol Router Network (SIPRNet). The Contractor support will include the capability to leverage an Army-provided Cross Domain Solution (CDS). If the offeror’s solution requires custom hardware, the government will provide power, signal and rack space.

The Contractor shall deliver, install and configure a prototype Army Leader Dashboard solution which will be able to meet Army specific accreditation requirements (available upon request) and hosted within a DoD NIPRNet/SIPRNet hosting site. The ALD solution will need to be easily scalable to meet immediate requirement demands.

The Contractor shall provide a hosting facility where the prototype Army Leader Dashboard solution shall be delivered, installed, configured and supported. The Contractor’s hosting facility shall meet or meets or has the ability to meet DoD Security requirements impact level four (4) for the unclassified data and impact level six (6) for the classified data (available upon request). The solution will need to be easily scalable to meet immediate requirement demands.

Hosting for Phase 2. The Government is looking to industry to propose the best hosting environment for phase 2 and for the enduring solution(s) which meets DoD Security requirements.

System Application Program Interfaces (API(s)) and Interface Development. The ALD baseline shall interface with Authoritative Data Source systems using Application Program Interfaces (APIs) and standards-compliant open interfaces. The Contractor shall develop any designated system interfaces needed including to/from authoritative data sources.

The Contractor shall provide the design, development, integration, security lockdowns, testing and checkout of the interface to ensure that the transfer requirements and the technical methodology are satisfied.

The Contractor shall support Technical Interchange Meeting (TIMs) with Government Interface Partners and document in a System Interface Control Document (ICD) the data transfer requirements to include the data format and the technical methodology to be used to perform the transfer between the ALD and each authoritative data sources and/or content repository. (Interface Control Document, DI-SESS-81248B) Phase 1 and 2 Authoritative Data Sources.

A list of phase 1 and phase 2 data sources are available in Appendix A- #3 Reporting Requirements.

Table 2 - Contract Data Requirements List (CDRLs)

PERIOD OF PERFORMANCE.

The Period Of Performance (POP) shall be calculated by calendar days with the start commencing one (1) calendar day after notification of award or notification to proceed as:

· Phase 1 – 120 Calendar days from contract award

· Phase 2 – 245 Calendar days from contract award

PLACE OF PERFORMANCE.

Performance will be at the Contractor’s facility with solution expert support to the Pentagon, Department of the Army Headquarters. During the Prototype Assessment, Government business hours/days, and on-call as needed, the Solution Experts shall be stationed in close proximity of the Pentagon Department of Army Headquarters to permit responses (within :30 minutes) to provide one-on-one support to Senior Leader users.

In addition, the Contractor shall support meetings as needed with the ALD Government Project Team located at two sites:

· Primary: 2530 Crystal Drive, Suite 1700B, Arlington, VA 22202

· Alternate: 9531 Hall Rd, (Building 1456 PEO EIS), Fort Belvoir, VA 22206 GOVERNMENT FURNISHED EQUIPMENT (GFE), PROPERTY (GFP), MATERIALS (GFM) and DATA (GFD):

The Government will provide the following equipment and support during the prototype project:

· Hosting environment and secure file transfer protocol (SFTP) server with data from the Authoritative Data Sources.

Data Access: Due no later than 10 days after award date, the Government will secure access and authorizations for the data sources listed in Appendix A- #3.

Network Access:

The Government will provide access to the network environment, including remote access from contractor's secure locations, and any required SIPRNet tokens during the Initial Project Work. The Government will also approve use of a data collection/ingestion agent installed on the Government’s network to coordinate ingestion from upstream data sources, which may hold data source credentials provided by the Government.

The ALD Prototype Solution system will be initially hosted on a Government Approved Secure Internet Protocol Router Network (SIPRNet). The aggregated data of this capability will reside on a classified, network and be certified and secured in accordance with Army and DoD policies, procedures and regulations. All persons with access to the full range of data visualization capabilities will have appropriate security clearances and authorities to access Army networks in accordance with existing policies and regulations. During this prototype effort, the Army will maintain responsibility for all Army Authoritative Data Sources and associated hardware infrastructure to support the data sets for ALD.

AGREEMENTS OFFICER REPRESENTATIVE (AOR):

Ms. Mary Harvey G-3/5/7 (Acquisition Specialist) PEO Enterprise Information Systems 9350 Hall Rd, Suite 232A Fort Belvoir, VA 22060 Email: mary.b.harvey8.civ@mail.mil Desk: 703-806-0098

APPENDIX A: SUPPORTING DOCUMENTATION

1. Definition of Commercially Available

2. Data Usage Agreements

3. Phase 1 and 2 Authoritative Data Sources

ALD Statement of Work

Version 1.0 12 February 2018 image1.png image3.emf

ALD_Statement_Of_Work_Appendix_A_01_2018_01_23.docx

APPENDIX A: SUPPORTING DOCUMENTATION

1. Definition of “Commercially Available”

The solution must be capable of achieving Federal security compliance standards. The product shall be commercially available, demonstrable and take into consideration leveraging existing Army software investments to the greatest extent possible.

For the ALD prototype project, the term “commercially available” is a compilation of three definitions listed here:

“Commercial component” means any component that is a commercial item.

“Commercial computer software” means any computer software that is a commercial item.

“Commercial item” means –

(1) any item, other than real property, that is of a type customarily used by the general public or by non-governmental entities for purposes other than governmental purposes, and—

(i) Has been sold, leased, or licensed to the general public; or

(ii) Has been offered for sale, lease, or license to the general public

(2) Any item that evolved from an item described in paragraph (1) of this definition through advances in technology or performance and that is not yet available in the commercial marketplace, but will be available in the commercial marketplace in time to satisfy the delivery requirements under a Government solicitation;

(3) Any item that would satisfy a criterion expressed in paragraphs (1) or (2) of this definition, but for—

(i) Modifications of a type customarily available in the commercial marketplace; or

(ii) Minor modifications of a type not customarily available in the commercial marketplace made to meet Federal Government requirements. Minor modifications means modifications that do not significantly alter the nongovernmental function or essential physical characteristics of an item or component, or change the purpose of a process. Factors to be considered in determining whether a modification is minor include the value and size of the modification and the comparative value and size of the final product. Dollar values and percentages may be used as guideposts, but are not conclusive evidence that a modification is minor;

(4) Any combination of items meeting the requirements of paragraphs (1), (2), (3), or (5) of this definition that are of a type customarily combined and sold in combination to the general public;

(5) A nondevelopmental item, if the procuring agency determines the item was developed exclusively at private expense and sold in substantial quantities, on a competitive basis, to multiple State and local governments.

(6) Services are neither considered included or excluded for this definition, any interpretation including Services must be presented by the Offeror with supporting rationale.

ALD Statement of Work

Version 1.0 22 January 2018

ALD Statement of Work

Version 1.0 22 January 2018 image4.emf

ALD_Data_Usage_Agreement_DRAFT_v1_2018_01_22.docx department OF THE ARMY

WASHINGTON

SUBJECT: Army Leaders’ Dashboard Data Usage Agreement

DATA USAGE AGREEMENT

FOR

ARMY LEADERS’ DASHBOARD

(Project #)

SOFTWARE DEMONSTRATIONS

1. References:

a. Department of Defense Manual 5200.1 Volume 3, “DoD Information Security Program: Protection of Classified Information” Change 2, March 19, 2013

b. Department of Defense Manual 5200.1 Volume 4, “DoD Information Security Program: Controlled Unclassified Information (CUI)” February 24, 2012

2. Purpose: Establish data usage agreement for the appropriate receipt, use, access, transmission, and storage of Army provided data to the entities selected for Software Demonstrations (with Army data) for the Army Leaders’ Dashboard (ALD). The Army provided data is Controlled Unclassified Information (CUI) and is designated For Official Use Only (FOUO). Reference 1.a., provides policy, assigns responsibilities and provides procedures for the designation, marking, protection and dissemination of information of all categories and Enclosure 7, paragraph 9 identifies Personally Identifiable Information (PII) as CUI. Reference 1b. provides policy, assigns responsibilities and provides procedures for the designation, marking, protection and dissemination of CUI.

3. Sope: This Agreement applies to each entity selected for the ALD Software Demonstrations and Technical Exchanges (hereinafter referred to as “Offerors”), their teaming partners and all employees and other personnel who receive, use, access, transmit or store Army provided data.

4. All offerors in receipt of Army data shall:

a. Flow down all terms and conditions of this usage agreement to their teaming partners and all employees and other personnel who are provided access to the Army data.

b. Ensure the data is only accessed and/or used for the specific purpose as described in U.S. Army Solicitation #_____, in support of Project #_____ Software Demonstration (with Army data).

c. Not share or disclose this data with any other organizations or individuals, unless they have a direct need-to-know in support of the Offeror’s Software Demonstrations.

d. Establish appropriate administrative, technical, and physical safeguards to protect Army data; and comply with applicable DoD standards, regulations, and policies for receiving, accessing, handling, use, and storage of CUI and FOUO information and data. In addition, Protect data-at-rest (DAR) following DoD approved standards for encryption of files on any laptops or digital media storage/drives. Comply with Defense Acquisition Regulation Supplement (DFARS) 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.

e. Comply with FAR 52.224-1, Privacy Act Notification; and 52.224-2, Privacy Act, which are incorporated by reference into this agreement and shall be incorporated in any agreements with teaming partners or sub-contractors.

f. Performance of the Software Demonstrations may require offerors to access Personally Identifiable Information (PII), as defined in DoD 5400.11-R, Department of Defense Privacy Program. When dealing with PII, the offeror is required to comply with applicable DoD privacy regulations, instructions, and policies including DoD Directive 5400.11, Department of Defense of Privacy Program; and DoD 5400.11-R, Department of Defense Privacy Program.

g. Performance of the Software Demonstrations may require offerors to access Protected Health Information (PHI). PHI is individually identifiable health information created or received by a health care provider, health plan, public health authority, and/or medical professional that relates to the past, present, or future physical or mental health of an individual, and is transmitted or maintained in electronic, paper, or any other form. When dealing with PHI, the offeror is required to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HIPAA Privacy Rule provisions outlined in the DoD Health Information Privacy Regulation, DoD 6025.18-R, January 2003; and DoDI 6025.18, Privacy of Individually Identifiable Health Information in DoD.

h. Ensure if there is a loss, theft, or compromise of any data it is immediately reported to the Agreements Officer at Army Contracting Command – New Jersey (ACC-NJ). For PII data, ensure proper breach reporting and notification procedures are followed as outlined in DoD 5400.11-R (Department of Defense Privacy Program) Chapter 10.6, and that the ACC-NJ Agreements Officer, and the designated official at the Program Executive Officer Enterprise Information Systems are notified immediately upon the discovery of any loss, theft or compromise of any sensitive or PII/PHI data.

i. Ensure that the required Privacy Act and HIPAA training is completed by all individuals with access to the Army data provided for the purpose of executing the Software Demonstrations. All required Privacy Act and HIPAA training will be conducted online through Army Records Management & Declassification Agency (RMDA) https://www.rmda.army.mil/privacy/RMDA-PO-Training.html to meet the above requirements. Records of training completion will be maintained by the offeror and available to the government upon request.

5. All Government provided data (hard drives) shall be returned to the Government at the completion of the Software Demonstrations. Any copies of the Army data will be turned over to the Government or destroyed at the completion of the Software Demonstrations. Additionally all data shall be purged from any offeror hardware and/or networks within 8 hours of completion of the final demonstration in accordance with acceptable industry standards. Certification of data purging will be submitted to the Agreements officer within 24 hours of the completion of the Software Demonstrations.

6. The separate inventory of all the files that was furnished with Software Demonstration instructions shall be returned to the government on the final day of Software Demonstrations.

7. In the event of an actual, suspected or potential breach of this DUA, ACC-NJ, in its sole discretion, may restrict further access to Army provided data and require immediate return all such data, copies of data, and government provided hard drives. In addition, other appropriate action in accordance with applicable law and regulation, may be taken.

8. The PEO/PdM points of contact for this action are COL Michael E. Sloane, 703-806-1027, or michael.e.sloane2.mil@mail.mil and LTC Robert (Rob) Wolfe, 703-545-8817, or robert.j.wolfe.mil@mail.mil.

Agreed to by:

Name

Company

Position/Title

Date image5.emf

Phase 1_and_Phase 2_Data_Sources.xlsx Phase 1 Data Sources proposed

ARCOP Army Readiness Common Operating Picture Synchronizer

DAPMIS Department of the Army Photo Management Information System

DCCIPS Defense Civilian Intelligence Personnel System

DRRS-A Defense Readiness Reporting System – Army

DTSA-NIPR Deployed Theater Accountability System

DTMS Digital Training Management System

EMILPO Electronic Military Personnel Office eProfile Electronic Profile System

FMS Force Management System

GCSS-A Global Combat Support System – Army

IPERMS Interactive Personnel Electronic Management System

IPPS-A Integrated Personnel and Pay System – Army

ISR Installation Status Report iTAPDB Integrated Total Army Personnel Database

KEYSTONE Keystone

LEXIS Logistics Execution Information System

LIW Logistics Information Warehouse

LMI DST Lead Materiel Integrator Decision Support Tool

MEDPROS Medical Protection System

SCCM Microsoft Systems Center Configuration Manager

TABDB Total Army Personnel Data Base

TAPDB-AE Total Army Personnel Database – Active Enlisted

TAPDB-R Total Army Personnel Database – Reserve

TAPDB-AO Total Army Personnel Database – Active Officer

TAPDB-G Total Army Personnel Database – Guard

NIPRNet Infrastructure Data Sources include:

AD Microsoft Active Directory Instances

Secure Internet Protocol Router Network (SIPRNet) Data Sources include:

DRRS-A Defense Readiness Reporting System – Army

DTAS-SIPR Deployed Theater Accountability System

FMS Force Management System (Classified in aggregate)

Net-USR Net-centric Unit Status Reporting

Phase 2 Data Sources

Non-Secure Internet Protocol Router Network (NIPRNet) Data Sources include all sources from Phase 1 and:

RIDB Readiness Integrated Database

TAMIS Total Ammunition Management Allocation System

LMP Logistics Modernization Program

TRMIS Training Resource Model Information System

TSIMS Training Support Information Systems

ASIP Army Stationing and Installation Plan

AE2S NIPR Army Equipping Enterprise System

LOGSACS Logistics Composition System

PERSACS Personnel Composition System

SACS Structure and Composition System

SAMAS Structure and Manpower Allocation System

GFEBS General Fund Enterprise Business System

PROBE Program Optimization and Budget Execution

SLAMIS Standard Study Number-Line Item Number Automated Management and Integrating System

Secure Internet Protocol Router Network (SIPRNet) Data Sources include:

AST SIPR ARFORGEN SYNCHRONIZATION TOOL - SIPR

image2.png