EXHIBIT_A_UC_Soft_Client_Contract_Data_Requirements_Summary_List_DDForm1423.docx

DOCX document 24 KB Posted

Attached to
IT AND TELECOM- TELEPROCESSING, TIMESHARE, AND CLOUD COMPUTING
Solicitation number
W52P1J16R0172
Issued by

About this file

Exhibit A Draft UC Soft Client Contract Data Requirements Summary List DD Form 1423

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Unified Capabilities Soft Client Contract Data Requirements List (CDRL) Summary

CDRL #
Title
Schedule for Submission
Description of Document
A001
Real-Time Outage or Service Degradation Reporting
Implement at IOC for Government review and approval. Available to users in real-time.
The contractor shall report real-time outages for particular computing environments, regions, locations and users affected immediately to those users through alternative messaging means, such as e-mail, and through a standard status portal site, for both on NIPRNet and SIPRNet UC Soft Client services.

The contractor shall provide for users with the ability to opt-out of email notifications.

A002
Program Management Plan (PMP)
Draft to be submitted with proposal. Final to be submitted within 30 days of contract award. Document shall be updated during contract performance as required.
The contractor shall document all support requirements in a PMP. The PMP shall describe the proposed management approach, include milestones, tasks, and subtasks required. PMP will provide an organization diagram and a directory of the positions, names, and contact information of all engineering, operations, and program management personnel who are designated as Government points of contact. The PMP is an evolutionary document that shall be updated annually at a minimum. Draft will include plans for achieving IOC and continuing to add users up to the target user numbers specified by the Statement of Objectives (SOO).
A003
Integrated Master Schedule (IMS)
Draft to be submitted with RFP.

Final to be submitted within 30 days of contract award. Document shall be updated every 30 days thereafter.

Develop and maintain an Integrated Master Schedule (IMS) using Microsoft Project that is vertically traceable to the contractor’s WBS and the requirements of the PWS.

A004
Quality Control Plan (QCP)
Draft to be submitted with proposal. Final to be submitted within 30 days of contract award for Government review and approval.

Document shall be updated during contract performance as required.

Describes the overall plan, procedures, and controls that the contractor will use to provide and maintain a satisfactory quality system for the duration of the period of performance. The contractor shall periodically update the QCP as changes in program processes are identified

A005
System Security Plan
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Provide a security plan focused on the integration points of end-user authentication (e.g. LDAP), cloud environment management authentication (PIV card), and physical and logical security and certification (e.g. DISA Cloud SRG Level 5/6) delivering a single comprehensive solution that can be leveraged across the organization reducing end user confusion and security management complexity.
A006
Continuity of Operations Plan
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Complies with guidelines and requirements to avoid or minimize disruption of operations in accordance with current Army Regulation AR 500-3 US Army Continuity of Operations Program Policy and Planning and the DoD Cloud Computing Security Requirements Guide Version 1, Release 2.
A007
Change Management Plan
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Provides complete information on Change Management Processes being utilized that align with Army Enterprise Service Management (AESM) and the DoD Cloud Computing Security Requirements Guide Version 1, Release 2.
A008
Disaster Recovery Plan
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Develop, test, and maintain a Disaster Recovery Plan in accordance with PWS and the DoD Cloud Computing Security Requirements Guide Version 1, Release 2.
A009
After Action Report
Draft to be submitted within 24 hours of event necessitating the report for Government review and approval. Submit updates every 24 hours upon Government request.
Provide an After Action Report in the event of an outage, disaster, or exercise. Provide details of any significant outages affecting more than 5% of users and the necessary mitigation
A010
Asset and Configuration Management
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
For Government Furnished Equipment (GFE), develop and maintain plans to:

• Implement and maintain processes for the management of assets/configuration items.

• Manage all GFE from procurement to disposal

• Manage, maintain, update, and enhance the Configuration Management System and its relationship to other systems and artifacts. Process artifacts, such as incident, problem, and change records.

A011
Service Level Agreements (SLAs)
Final to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Define appropriate SLAs, and implement ongoing performance-based metrics against these objectives iteratively over the life of the contract with a first set of SLAs in place NLT 30 days after contract award. This status will be reported in the Monthly Program Status Report (MPSR). Provide personnel, tools, and processes to monitor, manage, and regulate performance and security and continuously optimize performance.
A012
Monthly Program Status Report (MPSR)
Monthly during contract performance, beginning 30 days after contract award.
Provide MPSRs in the format outlined in Section L of the RFP. Provide reporting and analytics that provide the Government with up-to-date and comprehensive information regarding technical and management performance. The contractor shall develop and provide a Monthly Program Status Report (MPSR), by the tenth of each month via electronic mail to the Government designated POC and the COR. The MPSR shall include the following:

• Activities during reporting period, by task (include: on-going activities, new activities, activities completed; progress to date on all above mentioned activities). Start each section with a brief description of the task

• Problems and corrective actions taken. Also include issues or concerns and proposed resolutions to address them

• Government actions required

• Schedule (show major tasks, milestones, and deliverables; planned and actual start and completion dates for each)

• • Service Level Management statistics

• Availability Management statistics

• Capacity Management statistics and progress

• Demand Management statistics

• Incident, Request, and Trouble Ticket Summary

• Service Desk Summary

• Change Management activities

• Maintenance activities

• Updated risk analysis

• Other contractor activities in support of the service delivery

A013
Post Award/Project Kick-Off Meeting
Meeting to be conducted within 30 days of contract award.
The contractor shall schedule with the Contracting Officer a Post Award Meeting and host a Project Kick-Off Meeting at the location approved by the Government. The meeting will provide an introduction of contractor and Government personnel who will be involved with the project, and will provide an opportunity to discuss technical, management, and security issues, and reporting procedures. At a minimum, the attendees shall include key contractor and Government personnel, and the Contracting Officer’s Representative (COR). The contractor shall provide status on the completion of the draft PMP and completion of the final QCP at the Kick-Off Meeting.
A014
Risk Management Plan
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Establish and execute a risk management program IAW the Risk Management Guide for DoD Acquisition and document the program in the Risk Management Plan:

• Lay out the organizational structure that will support risk management by identifying planning responsibilities, mapping them to contractor staff, identifying dependencies, and presenting the schedule for performing and completing this work

• Using a Responsible, Accountable, Consulted, Informed (RACI) matrix approach, define personnel roles, responsibilities and accountability for executing the risk management plan and monitoring performance, map these responsibilities to contractor staff, and identify interfaces

• Define the lifecycle management risk mitigation process

• Define controls that the contractor will use to minimize risk to operations

• Address the risks associated with changes to the existing infrastructure, introduction of new elements into the infrastructure as well as external factors, such as technology trends and changing business environment

• Conduct a risk analysis (e.g., risk identification and assessment) and brief results to the Government on a regular basis

• Schedule, attend, provide input to, and manage monthly risk management meetings

• Update the status of existing and new contractor risks for inclusion in the MPSR

• Prepare and present new program risks with proposed mitigation plans and strategies and report on the mitigation status of existing risks

• Integrate the risk management processes with the IT service management processes in conformance with ITIL best practices.

A015
Transition-Out Plan
Within 180 calendar days of the contract award for Government review and approval. Any Government requested changes shall be made within 15 days. Document shall be updated as necessary reflecting current operations and service levels and provide these updates at the appropriate MPSR.
The contractor shall provide a Transition-Out Plan that facilitates the accomplishment of a seamless transition from the incumbent to an incoming contractor/Government personnel at the expiration of the contract/task order. The contractor shall identify how it will coordinate with the incoming contractor and/or Government personnel to transfer knowledge to include the following:

• Points of contact

• Location of technical and project management documentation, data, and methods of providing these to the incoming service provider

• Status of ongoing technical initiatives

• Appropriate contractor-to-contractor coordination to ensure a seamless transition

• Actions required of the Government

• Methods of measuring transition risks that includes a complete inventory of transition risks with assigned severity and probability, and response plans to address the risks either through avoidance, mitigation, or other means

• Method of establishing and maintaining effective communication with the incoming service provider for the period of the transition via weekly status meetings.

Detailed knowledge transfer including the following:

• Methods for ensuring that all information assets and related configuration information is up-to-date and available for the Government’s review at least 120 calendar days prior to the end of the contract

• Deliver electronic copies of all Government data and information stored in the contractor’s systems in the format requested by the Government within 15 workdays from request

• Turn over all administrative access information, i.e., user-name and password, to the Government at least 90 calendar days prior to the end of the contract

• Provide process descriptions and detailed procedures for all systems management and support processes and update as necessary during the transition-out

• At end of the system life cycle or upon termination or expiration of the contract, the Contractor-owned and operated information system media will be maintained or turned over to the Government or sanitized and inspected by the Government for NIPR And or Destroyed if classified, in accordance with the DoD Cloud Computing Security Requirements Guide, Version 1, Release 2.

A016
UC System Architecture Diagram
Draft to be submitted with proposal for Government review and approval, final to be submitted 30 days after contract award. Document shall be updated during contract performance as required.
Provide an architecture diagram of the UC system architecture, illustrating the major components of the system and how they are interconnected, and the connections to outside interfaces.
A017
System Test Plan
Draft to be submitted within 45 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
The Contractor shall develop all Test Plans to meet or demonstrate that the system meets the requirements identified in this SOO. The Test Plan must be approved by the USG. Using the approved Test Plan, the Contractor shall verify the functionality of UC Soft Client Service with Gov't oversight.
A018
UC Soft Client Training Materials
Draft to be submitted within 90 days of contract award. Training material shall be updated during contract performance as required.
Develop UC training material/files for users and administrators, and provide this content to NETCOM for posting on the NETCOM Knowledge Hub. Provide modernization training in support of software upgrades as required.
A019
End User Device Requirements
Draft to be submitted within 90 days of contract award. Update during contract performance as required.
Publish hardware and software requirements for end-user device compatibility with the contractor’s UC system. The requirements must be published on the contractor’s public website, accessible to Army end users and presented in either HTML or a Microsoft Word 2013 compatible format.
A020
Daily Status Reporting
Implement at IOC for Government review and approval.

Service Status report shall be updated daily.

The contractor shall make the following performance metrics available on demand by authorized Government personnel, with the status updated daily:

· Availability (core, by region/DECC)

· Text description of major outages resulting in greater than 1-hour of unscheduled downtime (include root cause and fix when identified)

· Call Quality (voice/video, at the edge, by region and end user device type)

· Mean Opinion Score (automated)

· Drops / Unable to Connect

· Latency

· Usage (registered users, number of active users, number of sessions by type, number of internal/external logins, minutes of use, minutes of use by organization, peak usage, peak use times, etc.)

· Number of Help Desk/customer service requests received

· Number of Trouble Tickets opened

· Number of Trouble Tickets closed

· Number of closed tickets re-opened

· Breakdown of tickets opened by region / site

· Average mean time to respond to Trouble Tickets (time between trouble ticket opened and the first contact with customer)

· Average mean time to resolve trouble ticket

· New user service activations Call Detail Records (filterable by organization to support unit spot checks)

A021
Weekly Implementation Progress Report
Implement within 90 calendar days of the contract/task order award for Government review and approval. Any Government requested changes shall be made within 15 days.
The shall report implementation progress on a weekly basis, including:

· Backend infrastructure deployment progress

· Number of users successfully on-boarded

· Number and organizations that failed to on-board

· Issues and lessons learned

· Revised targets for the remainder of the implementation period Implementation and fielding will be completed in accordance with approved Government guidance, plans and/or documentation.

A022
Quarterly Customer Satisfaction and Quality Assurance Survey
Implement within 90 calendar days after IOC for Government review and approval. New surveys shall be conducted quarterly.
The contractor shall report quarterly both objective and subjective findings on the quality of the service and user satisfaction. The contractor shall conduct user satisfaction surveys with randomly selected users; the same user should not be surveyed more than once per year. The survey process should include a statistically useful sample size for each quarter: 25% of the user base should be surveyed with no less than 10% of the surveyed population providing a valid response. The contractor shall determine appropriate methods for surveying to achieve necessary valid responses. At a minimum the survey will gather sufficient data for service provider reports to include the following elements:

· Utility in support of the mission. Includes gathering specific examples or use cases where the service was employed to enhance effectiveness. All cases where the service reduced effectiveness must be captured, retained and reported by the service provider.

· Usability with a focus on how well users can learn and use the service to achieve their goals. Usability should be assessed across several factors:

· Intuitive design: a nearly effortless understanding and ability to navigate to and within the service to access all functionality.

· Ease of learning: how fast a user who has never seen the user interface before can accomplish basic tasks.

· Efficiency of use: how fast an experienced user can accomplish tasks.

· Memorability: after using the service, if a user can remember enough to use it as or more effectively in the future.

· Error frequency and severity: how often users make errors while using the service, how serious the errors are, and how users recover from the errors

· Subjective satisfaction: If the user likes using the service

· Overall quality of the service.

Additional breakdown of each of the above high level survey elements is expected by the contractor. For example, ease of use can include sub-elements that highlight individual functional elements of the service’s capabilities.

A023
OPSEC Standing Operating Procedure (SOP)/Plan
Within 90 calendar days of the contract award for Government review and approval. Update as required.
The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.
A024
End User Device Configuration
Within 90 calendar days of the contract award for Government review and approval. Update as required.
The contractor shall provide additional configuration settings, Registry Settings, or any other changes that are required for the target client system to utilize the UC Soft Client Service.
A025
IA Vulnerability Management (IAVM) Monitoring and Response Program
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance as required.
Provide complete methodology and plan to monitor, respond to & enforce IAVA directives.
A026
IAVA/System POA&Ms
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated weekly contract performance as required.
Provide a complete Plan of Actions & Milestones (POA&M) to include all known open vulnerabilities, mitigation dates and comments for applicable IAVA’s and known system vulnerabilities.
A027
Cybersecurity Test Report
Draft to be submitted within 30 days of contract award for Government review and approval. Document shall be updated during contract performance monthly.
Provide complete testing methodology including procedures & results of compliance scans (raw data) that verify the system is compliant with Security Technical Implementation Guides (STIG) and IAVA directives.

File details come from the government source that posted it. Updated .