W81XWH20R0015.pdf

SEE ADDENDUM

(No Collect Calls)

W81XWH20R0015 24-Nov-2020

b. TELEPHONE NUMBER

301-619-2190

8. OFFER DUE DATE/LOCAL TIME

10:00 AM 28 Dec 2020

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA X ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W81XWH9. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

JENNIFER E. TAIT

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

1 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

USA MED RESEARCH ACQ ACTIVITY

820 CHANDLER ST

FORT DETRICK MD 21702-5014

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE W91ZSQ 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

FORT DETRICK - CDMRP

FORT DETRICK - CDMRP

1120 FORT DETRICK

FREDERICK MD 21702

TEL: FAX:

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$16,500,000

NAICS:

541690

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

W81XWH20R0015

Section SF 1449 - CONTINUATION SHEET

PERFORMANCE WORK STATEMENT

SECTION 1.0: GENERAL INFORMATION

1.1 Purpose

To award a contract for management of the Electronic Grants System (EGS) sponsored by the Congressionally Directed Medical Research Program’s (CDMRP).

To support the tasks identified below requires an experienced and cohesive team of junior and senior level Information Technology (IT) and Information Management Personnel to include project managers, requirement analysts, application developers and IT engineers who can demonstrate a comprehensive understanding of the business requirements industry, Government and DoD standards to perform tasks and produce acceptable deliverables within required timelines while meeting cost, schedule, and performance requirements.

The Government reserves the right to include support for other Federal agencies (Clients) in the utilization of EGS under the direction of CDMRP as its proponent/sponsor. The Contractor shall provide all necessary qualified personnel with the ability to perform all tasks stated in the Performance Objectives, as well as be able to support each individual clients’ requirements.

1.2 Background

The US Army Medical Research and Development Command (USAMRDC) is a Subcommand to the US Army Futures Command (AFC). The Commanding General (CG), USAMRDC, directs the management of a number of medical research, development and acquisition programs. Research includes diseases, conditions and topics such as breast, prostate, ovarian and lung cancer, defense health, neurofibromatosis, tuberous sclerosis complex, autism, psychological health/traumatic brain injury, spinal cord injury research, bone marrow failure, multiple sclerosis, medical imaging, medical informatics, behavioral health, medical simulators, mobile health applications, medical robotics, deployed health, and other medical research programs. The USAMRDC is responsible for planning, coordinating, integrating, programming, budgeting and executing these programs.

EGS is a Government-owned, contractor-operated business system custom designed to support research administration on behalf of multiple organizations. Hosted on the DoD network, it serves as a repository for research proposals, award data and files, primarily biomedical, related to acquisitions, regulatory review, administrative, and other related information. EGS has many application modules and components designed to automate administrative processes, streamline workflows and enhance collaboration in the areas of proposal management, awards management, regulatory reviews, program management, and program evaluation. A number of system-to-system interfaces facilitate interactions and data transfers with external systems owned and operated by contractors and other agencies. It supports a number of web-based workflows, including progress report processing and review, award negotiation, regulatory review of human and animal protocols, product and outcome management, and data management. EGS currently supports approximately 485 users and contains 138,000 proposal records and 18,925 award records. On an annual basis, an average of 10,000 new proposal records are created, 5,000 active awards are managed and 1000 new awards are initiated. EGS is a web-based application using Grails framework with several primary technologies being currently utilized: VMWare ESX LinuxOS, Java-JDK + Oracle RDBMS, JavaScript, and Apache Tomcat-outputting HTML, XML, JSON, XLS, and static files. Newer technologies are incorporated as needed per evolving requirements to meet government and industry standards.

1.3 Period of Performance

The anticipated period of performance of this contract is 12 months from the date of contract award. There will also be two (2) one-year options to be exercised at the discretion of the Government (total potential of a three [3] year contract). The Contract Specialist will notify the Contractor of the intent to exercise an option year 30 calendar days before the option is to be exercised.

1.4. Key Personnel

(a) The Government has identified the following positions to be filled by Key Personnel. The offeror may propose alternate and/or additional positions as Key personnel.

Position Titles:

- Onsite Program Manager (1 FTE)

- Technical Lead (1 FTE)

- Senior Developer (2 FTE)

(b) For all Key Personnel positions, provide an attachment naming the individuals proposed to fill Key Personnel positions along with a description of the portion of the solicitation’s Performance Work Statement that each individual is being proposed to perform.

(c) A resume is required for all individuals proposed to fill Key Personnel positions. Do not submit resumes for all labor proposed, only for those Key Personnel identified above. A signed a letter of intent is required for those individuals proposed as Key Personnel who are not current employees of the prime contractor responding to this requirement. This includes letters of intent for key personnel proposed by subcontractors, teaming partners and consultants. A letter of intent is not required for individuals proposed as key personnel who are current employees of the prime contractor.

(d) The resumes must provide thorough and detailed documentation of the experience, abilities, and background for proposed Key Personnel or equivalent statements of qualifications. Such documentation shall include but not be limited to: name, curriculum vitae, type and description of experience.

(e) Substitutions of proposed Key Personnel shall not be allowed for a period of six months after award, except under extreme circumstances. Any substitution or replacement of Key Personnel shall have qualifications equal to or greater than the individuals proposed. Any proposed substitute or replacement key personnel shall have qualifications comparable to the individual being replaced, taking into account the requirements of the PWS. For temporary and/or permanent replacement of Key Personnel, the Contractor shall provide a resume for each individual to the Contracting Officer Representative (COR). Resumes shall be provided at least one week (or as mutually agreed upon) prior to making any personnel changes. The Government reserves the right to pre-approve any replacement or substitutions of Key Personnel. Contractor personnel must submit necessary information to start the clearance review process prior to reporting for performance.

1.5. CDMRP Hours of Operation

The CDMRP operates on a Monday through Friday work schedule with normal hours of operation being 7:30 AM to 5:30 PM. Working outside normal hours on site for purposes of system maintenance and deployments are allowed with prior approval from the COR, Program Manager (PM) or Business Systems Manager (BSM).

1.6 Contract Kick-Off Meeting

The Contractor shall contact the COR to set up a post-award conference with the COR and other designated staff, within 7 business days after the start date of the contract.

1.7 Contract Description

The Government intends to award a single contract for these services. The contract will have two (2) separate Contract Line Item Numbers (CLINS). CLIN 0001 well be set up as Firm-Fixed Price and support the operations and maintenance portion of EGS. CLIN 0002 will be set up as Time and Materials for support of the development and enhancement portion of EGS.

1.8 Travel

Travel may be required to perform tasks in Section 4.0 below. The COR is the travel order approval authority as designated in writing by the Contracting Officer. All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the COR and is on a strictly cost reimbursable basis. The Contractor shall be authorized travel expenses consistent with the substantive provisions of the JTR and the limitation of funds specified in the contract. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99- 234 and FAR 31.205-46 Travel Costs, subject to local policy and procedures.

1.9 Non-Personal Services

This award identifies services that are strictly non-personal in nature.

1.10 Severable / Non-Severable Services

This award identifies services that are severable in nature.

1.11 Inherently Governmental Functions

This requirement has been reviewed and contains no services that are inherently governmental functions.

1.12 Organizational Conflict of Interest (OCI) Category

OCI is categorized into three broad categories, for purposes of identifying, avoiding or mitigating against OCIs in accordance with FAR Subpart 9.5. If the Offeror/Contractor believes that a real or apparent OCI may exist as a result of an award, the Contractor shall also submit an OCI Mitigation Plan.

Contractor participation in more than one of these areas may give rise to an unfair competitive advantage resulting from access to advance acquisition planning, source selection sensitive or proprietary information. Furthermore, Contractor participation in more than one area may give rise to a real or apparent loss of Contractor impartiality and objectivity where its advisory or planning assistance in one area potentially affects its present or future participation in another area.

The purpose of this categorization is to accomplish the following three objectives: (1) to inform prospective Offerors that CDMRP presumes that award of a contract or order in the subject category will give rise to real or apparent OCI’s with respect to requirements in the other two categories and or may give rise to an OCI in the same category;

(2) to assist current Contractors and prospective Offerors in developing their own business strategies regarding participation in CDMRP requirements and in identifying and, where possible, avoiding or mitigating against OCIs;

and (3) to ensure that all current Contractors and prospective Offerors are afforded the maximum practicable opportunity to compete for all CDMRP requirements consistent with the restrictions required under FAR Subpart

9.5 and sound business practices.

For purposes of identifying and/or mitigating against OCIs, CDMRP will examine all its service requirements and acquisitions regardless of the cognizant contracting activity (e.g., USAMRAA, GSA, other agency Multiple Award Schedules, etc.) or the type of contract vehicle used (e.g., FSS order, Fair Opportunity competitive order under Multiple Award ID/IQ Contracts, competitively negotiated awards under FAR Part 15, etc.).

The work called for under this contract has been determined by CDMRP to fall within the following OCI category:

Category 2: Program and/or Administrative Support

SECTION 2.0: GOVERNMENT-FURNISHED PROPERTY AND SERVICES

2.1 General Information

The Government will provide the facilities, equipment and materials listed here.

2.2 Government-Furnished Property

The Government will provide office space for a core team to be located at the Government site designated in the contract. The Government will also make available a personal computer, telephone, fax machine, copying and scanning machine, printer, and supplies necessary for on-site personnel to perform the work on-site. For all other support provided under this contract, the Contractor shall provide their own facility as noted in Section 3.0 below.

The Government will provide a personal computer but other peripheral IT equipment such as external monitors that may be deemed necessary to perform the work at the Contractor Site and/or Off-site, will only be supplied on a case by case basis and not as “standard issue”, as well as what is in the best interest of the Government. Contractor shall identify computer specifications ideal for application development and testing (processing speed, memory etc.).

Certain core tasks shall be conducted on Government owned servers, which are hosted at the Fort Detrick Network Enterprise Center (NEC). Alternate strategies for application development and maintenance from off-site may be proposed within the limits allowable based on need to access Government network resources and equipment, Contractor may propose a mix of on-site and off-site capabilities and staff that provides for efficiency and reduces risk to the government.

2.3 Government-Furnished Services

The Government will provide custodial, utility, pest control, telephone, refuse collection, and postage (Government related materials only) services for Government provided space.

2.4 Government-Mandated Training

All Government mandated training (partially noted in Section 3.0 below) is required for all individuals who are physically located at Fort Detrick or require network access, including Contractors. All Government mandated training will be Government furnished and shall be completed online or on-site during duty hours and in accordance with established timelines.

2.5. Government-Furnished Hosting/Servers

The Government will provide server equipment and hosting on the DoD network for the EGS application including the following environments: Production, User Acceptance, Test, and Development. Services related to server maintenance and database administration are provided through a Service Level Agreement with a DoD provided hosting facilities. Additionally, servers (utility, code repository, dev ops) are co-managed by EGS personnel and hosting provider.

2.6 Government-Furnished Software

The Government will provide application development tools to include: Atlassian set of tools for bug tracking and agile development. In addition, SVN for code repository and Jenkins for Continuous Integration. Developer will utilize Java JDK, IntelliJ, Ultra Edit, Mozilla Firefox, Oracle SQL Developer, and Microsoft Visio. Other DoD approved software may be provided based on need. Government will not provide software to be installed on non GFE or required for contract performance monitoring.

The Government will provide software/licenses for the EGS application located in government hosting facilities including RedHat, Oracle, and VMWare.

SECTION 3.0: CONTRACTOR REQUIREMENTS

3.1 Contractor Personnel Minimum Requirements

3.1.1 The Contractor shall have a signed letter of intent from the proposed Key Personnel employees in response to this solicitation and must be available to begin work at the CDMRP provided facility (as outlined in section 2.2 above).

3.1.2 The Contractor shall accomplish the assigned work by employing and utilizing qualified personnel with skills, and when required; training, and experience. The Contractor shall match personnel skills to the work or task. The Contractor shall ensure the labor categories are defined in the “Labor Categories and Descriptions” labor rates. The Contractor shall ensure “Man-hours” utilized in the performance of the contract issued hereunder will be the minimum necessary to accomplish the task. The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the contract as well as performance monitoring of contract activities. The

Contractor must be able to provide ad-hoc expertise as needed in various areas of IM/IT knowledge to support EGS to include but not limited to requirements, design, application development, security, testing, data protections, database administration, systems administration and cloud services.

3.1.3 All Contractor personnel requiring access to a Government information system who are proposed on this contract shall be designated as ADP III at a minimum as defined by Department of Defense Regulation 5200.2R (for reference, review http://www.dtic.mil/whs/directives/corres/pdf/52002r_0187/p52002r.pdf . Each employee must also be a United States citizen. This is necessary so the contract employee may be granted access to the Fort Detrick domain. The CDMRP shall initiate the process with the appropriate personnel at Fort Detrick for the successful Offeror’s employees to obtain a National Agency Clearance and Inquiries (NACI). If Contractor personnel are unable to receive a favorable NACI and/or be a United States citizen, that individual may not be employed under this contract.

3.1.4 All Contractor employees, including sub-Contractor employees, requiring access to Army Installations, facilities or controlled access areas shall complete AT Level I training within (30) calendar days after contract start date. The Contractor shall submit certificates of completion for each affected Contractor employee and sub-Contractor employee to the COR and CDMRP Training Officer within five (5) calendar days after completion of training by all employees and sub-contracting personnel. AT Level I awareness training is available at https://jko.jten.mil.

3.1.5 The Contractor and all associated sub-Contractor employees shall comply with applicable installation, facility, and area commander installation and facility access and local security policies and procedures. The Contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the installation Security Office. The Contractor workforce must comply with all personnel identity verification requirements as directed by DoD, HQDA, and local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor security matters or processes.

3.1.6 All Contractor employees with access to a Government information system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services and must successfully complete the DoD Cyber Awareness Challenge training prior to access to the information system and then annually thereafter.

The CDMRP Training Officer will register Contractor employees and will be responsible for tracking and uploading all training certificates into ATCTS.

3.1.7 All Contractor employees and associated sub-Contractor employees with access to a Government information system must complete Level I Operations Security (OPSEC) training within 30 calendar days of their reporting for duty. All Contractor employees must complete annual OPSEC awareness training thereafter.

3.1.8 All Contractor employees must comply with DoD and Army training requirements in DoD 8570.02, DoD 8570.01-M and AR 25- 2 within six months of employment.

3.1.9 All Contractor employees and associated sub-Contractor employees with access to a Government information system must complete the initial Health Insurance Portability and Accountability Act (HIPAA) and Privacy Act security training before being granted access to the network. The Contractor and sub-Contractor employees shall then complete this training annually thereafter.

3.1.10 Per DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2, the Contractor employees supporting these functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award. All full-time personnel supporting Task 4.3 on this contract are required to perform these functions at the Government provided facility. Personnel who are required to have privileged level access to perform their duties must have the IAT Level 1 commercial certifications listed below at time of hire. In order to meet IAT Level 1 requirements, the proposed personnel must have one of the following CompTIA CE certifications to meet the Baseline Certification requirements: A+, Network+, or Security+ certification. Personnel proposed must also enroll in the continuing education program for those commercial certifications required in the IA Baseline Certification. Proposed personnel are also required to have a Computing http://www.dtic.mil/whs/directives/corres/pdf/52002r_0187/p52002r.pdf

Environment (CE) commercial certification (list of certifications that fulfill this requirement is extensive but most commercial certifications suffice). Note that the same IA Baseline Certification cannot fulfill the CE certification requirement. Costs for these certifications shall be the responsibility of the Contractor. However, if Government regulations change during the period of performance of this contract, the Government will be financially responsible for the costs for the Contractors’ personnel to comply with the new regulations.

SECTION 4.0: PERFORMANCE OBJECTIVES

The CDMRP requests the Contractor to provide junior and senior level application system developers, administrators, IT engineers and project management personnel to complete the following tasks.

4.1 (Objective 1) Project Management – Firm-Fixed Price (FFP) The Contractor shall provide project management and application administration services for EGS, overseeing major aspects of its development, enhancements, operations and technical support activities including the following:

Develop requirements, project plans and timelines, allocating their resources to perform needed activities. Supervise and track the Contractor’s team to ensure cost, schedule and performance requirements. Oversee day-to-day operations and research program support activities including coordinating and communicating as necessary with mission partners for server maintenance schedules, operating system changes and upgrades. Document system level issues and provide a quarterly report outlining the steps taken and time to resolution. In addition, provide real time tracking of errors/issues and status of resolution. Coordinate all activities including development processes, quality control, testing, and deployments. Ensure software development quality controls based on industry and Government standards, and expectations of the client. Work with Federal Civilian Program Manager (PM)/ Business Systems Manager (BSM) to discuss priorities, requirements, configuration control and risk management plans. Develop system design, process flows and necessary technical architectural documents. Attend regularly-scheduled meetings with the COR, PM and or BSM, other Contractors and Government organizations as requested by the COR, PM or BSM. Document meeting discussions and provide to the COR, PM/BSM within 10 business days following the meeting conclusion (deadline extensions must be pre-approved by the COR, PM/BSM).

Key Task 4.1.1 Project Management for EGS Development and Operations (FFP)

4.1.1.1 The Contractor shall provide project management and application administration services for EGS, overseeing development, enhancements, operations and technical support activities including the following: Project planning, timeline development, allocating Contractor resources to perform needed activities.

4.1.1.2 Administer and track the Contractor’s team to ensure cost, schedule and performance requirements.

4.1.1.3 Oversee day-to-day operations and support activities including notifying users and coordinating as necessary with external entities for server maintenance schedules, operating system changes and upgrades

4.1.1.4 Document system level issues and provide a quarterly report outlining the steps taken and time to resolution. In addition, provide real time tracking of errors/issues and status of resolution.

4.1.1.5 Coordinate activities including development, quality control, testing, and deployments. Ensure software development quality controls based on industry and Government standards and expectations of the client.

4.1.1.6 Work with and coordinate with other contractors supporting various EGS related activities to include, Help Desk, Data Management and Information Assurance as needed.

4.1.1.7 Work primarily with the Federal Program Manager (PM) and Business Systems Manager (BSM) and designated Federal project personnel designated to discuss priorities, requirements, configuration control and risk management plans.

Key Task 4.1.2: Requirements Gathering and Documentation (FFP)

4.1.2.1 Communicate between application development teams and local customers.

4.1.2.2 Define specifications for complex software programming applications.

4.1.2.3 Resolve complex issues relating to business requirements and objectives.

4.1.2.4 Analyze, develop and implement testing procedures, programming and documentation.

4.1.2.5 Design and maintain process and software workflows and documentation.

4.1.2.6 Develop system design, process flows and necessary technical architectural documents. Attend regularly-scheduled meetings with the PM and BSM, other Contractors and Government organizations as requested by EGS Civilian leads.

4.1.2.7 Document meeting discussions and provide to the PM and BSM within 10 business days following the meeting conclusion (deadline extensions must be pre-approved by the PM and BSM).

4.2 (Objective 2) Research Program Support - Time and Materials (T&M)

The Contractor shall provide program support services to each research program or portfolio currently managed in EGS, any new programs/portfolios and user communities as needed to facilitate system use to include setup, re-configuration as needed, data and file manipulation such as transfers, exports and imports to meet program milestones and deliverables from other Contractors and organizations.

Key Task 4.2.1 Program Support (T&M)

4.2.2.1 Provide day-to-day support for use of EGS in execution DoD research programs and portfolios.

4.2.2.2 Establish and modify existing program setup as needed to meet evolving requirements.

4.2.2.3 Develop custom and standardized reports as requested to support individual programs, user communities and groups or ad-hoc projects.

4.2.2.4 Support data requests from internal stakeholders as well as to support rapid requests from higher levels (i.e.

Congress, USAMRDC, Defense Health Agency, DoD, Army, MEDCOM).

4.1.2.5 Coordinate with CDMRP Data Managers for requests, quality control and consolidation as needed.

4.1.2.6 Provide support for exports of EGS data for import into other systems and in response to data requests from external sources.

4.1.2.7 Support activities related to migration of external user groups from other systems into EGS to include analysis of requirements, planning, and migration of data

4.3 (Objective 3) Operations and Maintenance– (FFP) The Contractor shall provide all day-to-day system operations and maintenance support services to ensure system is operational. Monitor system performance to identify inefficiencies and make recommendations for improvements.

Make the necessary changes to the EGS application and/or database to fix system errors, defects and issues. Ensure proper DoD IM/IT security procedures and protocols are followed and report any security concerns to the COR/PM/BSM. Communicate and coordinate with System Administrators at DoD hosting facilities as well as with CDMRP IT and IA staff to meet new user operating environment requirements. Monitor and ensure functionality of existing and new system to system interfaces and views, resolve issues and coordinate with stakeholders as needed.

Update, install and test as needed DoD approved third party plugins and software.

Key Task 4.3.1. Provide Operations and Maintenance Services (FFP)

4.3.1.1 Provide day-to-day system operations and maintenance support services.

4.3.1.2 Monitor system performance to identify inefficiencies and make recommendations for improvements.

4.3.1.3 Make the necessary changes to the EGS application and/or database to fix errors, defects and issues.

4.3.1.4 Ensure proper DoD IM/IT security procedures and protocols/Security Technical Implementation Guidelines (STIGs) are followed and report any security concerns to the COR,PM,/BSM. Ensure system is in compliance with Information Assurance Vulnerability Alert (IAVA).

4.3.1.5 Communicate and coordinate with System Administrators at DoD hosting facilities as well as with CDMRP IT and IA staff to meet new and or changing regulations and guidelines.

4.3.1.6 Monitor and ensure functionality of existing and new system-to-system interfaces and views, resolve issues and coordinate with stakeholders as needed. Update, install and test as needed DoD approved third party plugins and software.

4.3.1.7 Support transition of EGS to alternative hosting sites to meet Government standards to include RMF certification support as needed.

Key Task 4.3.2 Provide Technical Support (FFP)

4.3.2.1 Provide technical support services to include troubleshooting user reported errors and issues. Track and maintain records of user-reported errors/issues and status of resolution, keeping user informed as needed.

4.3.2.2 Create and maintain end-user accounts. Collaborate with Helpdesk/User support to ensure capabilities to create and maintain end-user accounts.

4.3.2.3 Assist Government and other staff (other contractors) who are responsible for EGS activities including maintenance of operating system, servers, software updates and security requirements as well as data management, user support personnel.

4.4 (Objective 4) System Development and Enhancements- (T&M) The Contractor shall provide system development and enhancement support services. EGS utilizes an agile development to facilitate rapid changes to requirements to meet expanding needs, changes in processes, increasing user base, technological changes, and government mandated standards. To support flexibility, the Contractor must analyze the Government’s requirements for any new/enhanced system functions and features in order to plan, design, develop and implement such functions. Provide timelines and milestones that describe implementation of requirements. Write application code and make the necessary database changes to accommodate new/modified system functions and features. Test, integrate and evaluate system functions and features in development and user acceptance environments and deploy to production upon approval by the COR. Monitor the performance of new/modified features; make any necessary changes to adjust for defects, errors and performance issues. Document changes and additional functions and features in a system design document.

Key Task 4.4.1 Provide system development support services. (T&M)

4.4.1.1 Analyze the Government’s requirements for new or enhanced system functions and features in order to plan, design, develop and implement such functions.

4.4.1.2 Provide project management plans including timelines and milestones that describe how new or enhanced system functions and features shall be developed.

4.4.1.3 Write application code and make the necessary database changes, test, integrate and evaluate new or enhanced system functions and features. Utilize industry best practices for application development methodologies.

4.4.1.4 Monitor the performance of new or enhanced features; make any necessary changes to adjust for defects, errors and performance issues. Document new or enhanced system functions and features in a system design document.

Key Task 4.4.2. Application Testing and Quality Control (T&M)

4.4.2.1. Providing automated and manual testing of system functionality.

4.4.2.2 Design and develop test procedures (manual and scripted) based on software requirements, standards and usability.

4.4.2.3 Prepare test case and test plan documentation; execute tests (manually and automated), analyze testing results and manage test script library and re-use; communicate/coordinate with application development team as needed.

Key Task 4.4.3. Integration services (T&M)

4.4.3.1 Provide for integration of commercial or custom developed modules, plugins and other application components by 3rd party vendors, other government agencies and other contractors.

4.4.3.2 Communicate between application development teams and local customers.

4.4.3.3 Define system specifications, input/output processes and hardware/software compatibility.

4.4.3.4 Create technical documentations and present for internal and external use.

4.4.3.5 Provide support for code integration activities and perform branch integration.

4.4.3.6 Provide overall execution and upgrades of integrated interfaces and assist clients in testing of integrated interfaces.

4.4.3.7 Provide support for analysis, strategy and migration to alternate government approved hosting services/provider as needed.

SECTION 5.0: SECURITY REQUIREMENTS

5.1 Information Security

Establish appropriate administrative, technical, and physical safeguards to protect any and all Government data.

Ensure the confidentiality, integrity, and availability of Government data in compliance with all applicable laws and regulations, including data breach reporting and response requirements, in accordance with DFAR Subpart 224.1 (Protection of Individual Privacy), which will incorporate by reference DoD contract number, TO BE DETERMINED, “DoD Privacy Program,” May 8, 2007, and DoD 5400.11-R, “DoD Privacy Program,” May 14, 2007. The Contractor shall also comply with Federal laws relating to freedom of information and records management.

SECTION 6.0: QUALITY ASSURANCE SURVEILLANCE PLAN (QASP):

6.1 The Acquisition Team will seek out/obtain quarterly feedback from COR/PMs who shall inspect Contractor performance/services provided. The quality of said Contracting performance/service provided may be determined by reviewing work products via random sampling, and/or by the before mentioned quarterly feedback requests.

6.2 The Contractor shall contact the COR to set up quarterly evaluation meetings to discuss the status of the contract, deliverables, contract performance and results of the QASP evaluation. Prior to meeting, the CDMRP Acquisition Team will coordinate schedules for Government staff (Contracting Officer, Contract Specialist, COR and CDMRP personnel) to receive input for the evaluation of the performance of the Contractor.

6.3 QASP surveillance items shall be attached to the contract. A QASP is provided (Attachment 6) with the minimum requirements.

SECTION 7.0: DELIVERABLES

7.1 Delivery Address

All deliverables shall be submitted to the COR designated in the COR appointment letter.

7.2 Method of Delivery:

Electronic copies shall be delivered using Microsoft Office suite of tools (for example, MS Word, MS Excel, MS PowerPoint) or in Adobe PDF format, unless otherwise specified by the COR or PM. Electronic submission shall be made via email, unless otherwise agreed to by the COR or PM.

7.3 Deliverables

7.3.1 Confidentiality Agreement (Deliverable 1)

When contract is awarded, the Contractor shall sign the CDMRP Confidentiality and Conflict of Interest/Impartiality Agreement and Non-Disclosure Agreements and ensure that all staff including all employees, sub- Contractors, and consultants assigned to or performing under the contract shall execute, sign, and adhere to the terms of the Non- Disclosure Statement. Assignment of key personnel who have not executed this statement or failure to adhere to this statement may constitute default on the part of the Contractor.

7.3.2 Quarterly Status Reports (Deliverable 2)

The Contractor shall submit a Monthly Report for the base level of effort issued under this contract. The format and details to be included shall be determined upon discussions with the COR but should include cost schedule and performance metrics as related to specific developments, enhancements and other operational activities. The report shall include progress, status, and any problems/issues encountered as applicable to the contract. This report does not replace reporting on Fixed Fee as required by FAR 52.216-8. The Contractor shall require and incorporate input from sub-Contractors where there are critical or significant tasks related to the prime contract. Critical or significant tasks shall be defined by mutual agreement between the Government and the Contractor. The format for the report shall be agreed upon by the Government and Contractor. Additional reporting requirements will be identified in the contract.

7.3.3 Incoming Transition Plan

The successful Offeror shall provide an incoming transition plan (ITP) for 60 calendar day’s incoming transition from contract to contract. Transition plan is required upon submission of the contract proposal. The plan shall initially be submitted with the Offeror’ s proposal and updated after award. The Offeror shall coordinate with the Government in planning and implementing a complete transition to the Offeror’ s support model. The Government will designate a transition period for the successful Offeror to coordinate and work with the existing Contractor.

The transition plan may include the following tasks:

• Obtaining Ft. Detrick ID and Common Access Card (CAC) for appropriate personnel

• Scheduling and completing Government required training and certification in accordance with the AT/ OPSEC requirements in accordance with Section 3 of the performance work statement

• Orientation phase and program to introduce Government personnel, programs, and users to the Contractor's team, tools, methodologies, and business processes

• Coordination with Government representatives, review, evaluation, and transition of incumbent support services.

• Transfer of Government Furnished Equipment (GFE) and Government Furnished Information (GFI), and

GFE inventory management assistance.

7.3.4 Outgoing Transition Plan

7.3.4.1 The Contractor shall provide an Outgoing Transition Plan for the 60 calendar days prior to contract end when work is being transitioned from this active contract to a follow-on contract/order or Government entity. This transition may be to a Government entity, another Contractor, or to the existing Contractor under a new contract/order.

7.3.4.2 In accordance with the Government-approved plan, the Contractor shall assist the Government in planning and implementing a complete transition from this Contract and/or orders issued under this Contract to a successful provider. This shall include formal coordination with Government staff and successor staff and management.

The transition plan may include the following tasks:

• Ensuring continuity of services

• Coordination with Government representatives

• Transition of historic data to new Contractor system including a list of current incumbent

• Contractor personnel

• Transfer of any Contractor purchased Government owned assets (if applicable)

• Transfer of GFE and GFI and GFE inventory management assistance

• Coordination with the Government to account for Government keys, ID/access cards, and any security codes (if applicable).

• Developing SOPs if not already available for EGS administration activities.

7.3.5 CONTRACTOR PERFORMANCE ASSESSMENT REPORTING SYSTEM (CPARS)

A CPARS assesses a contractor's performance and provides a record, both positive and negative, on a given contractor during a specific period of time. Each assessment is based on objective facts and supported by program and contract management data, such as cost performance reports, customer comments, quality reviews, technical interchange meetings, financial solvency assessments, construction/production management reviews, contractor operations reviews, functional performance evaluations, and earned contract incentives. Performance evaluations are transmitted into the Past Performance Information Retrieval System (PPIRS) which is used by government agencies to assess contractor past performance for future acquisitions. The contractor shall appoint a Contractor Representative (CR) and provide this information to the KO (KO) within 10 calendar days of award. The contractor POC shall have the authority to comment on the CPAR assessment on behalf of their company and within the timeframes established.

A CPARS assessment must be completed within 120 calendar days after the evaluation. Evaluations are sent to PPIRS within 14 calendar days after the government Assessing Official (AO) has submitted the rating. If the CR has not concurred/non- concurred with the rating; PPIRS will show the government evaluation as “Contractor Comment Pending Review”. The CR has a total of 60 calendar days to concur/non- concur with the assessment.

After 60 days, the CR can either concur/non-cur. The CR has the authority to: access the Government evaluation;

review/comment/concur or non-concur with the assessment within 60 calendar days after notification of the government’s assessment. The CR has the right to request a meeting (in writing) with the government within 7 calendar days of notification of an assessment. Once the government and the CR complete the evaluation; an automatic update will be sent to PPIRS and visible for Source Selection. If the CR fails to respond within 60 days, the assessment will be finalized. Training for CPARS can be found on the CPARS website:

https://www.cpars.gov/index.htm.

To access CPARS, the contractor must have a Public Key Infrastructure (PKI). It is suggested an ECA certificate of Medium Assurance should be purchased. This should be a Department of Defense identity certificate, not an e-mail certificate.

7.3.6 Health Insurance Portability and Accountability Act (HIPAA)

Comply with all requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) (Pub. L. 104-191), as implemented by the HIPAA Privacy and Security Rules codified at 45 C.F.R. Parts 160 and 164, and as further implemented within the Military Health System (MHS) by DoD 6025.18-R, "DoD Health Information Privacy Regulation," January 24, 2003, and DoD 8580.02-R, “DoD Health Information Security Regulation, July 12, 2007. Comply with all applicable HIPAA-related rules and regulations as they are published and as further defined by later-occurring Government requirements and DoD guidance, including current and forthcoming DoD guidance implementing applicable HIPAA amendments under the American Recovery and Reinvestment Act of 2009 (ARRA). Any rules and regulations that are published, and/or requirements that are defined after the award date of this contract, and that require expenditure of additional Contractor resources for compliance, may be considered “changes” and will be subject to the “changes” clause under the contract. 7.1.2 Breach Response DoD 5400.11-R, “DoD Privacy Program,” May 14, 2007, defines a breach as the “actual or possible loss of control, unauthorized disclosure, or unauthorized access of personal information where persons other than authorized users gain access or potential access to such information for other than authorized purposes where one or more individuals will be adversely affected.” Within one hour of discovery, the breach must be reported to the US Computer Emergency Readiness Team (US CERT) at https://forms.uscert.gov/report/ and to the TMA Privacy Office at PrivacyOfficerMail@tma.osd.mil as well as the USAMRDC IA and CDMRP IA.

Adhere to the reporting and response requirements set forth in the Office of the Secretary of Defense (OSD) Memorandum 1504-07, “Safeguarding Against and Responding to the Breach of Personally Identifiable Information,” June 5, 2009; DoD 5400.11-R, and applicable TMA Privacy Office guidance, including current and forthcoming DoD guidance on ARRA breach notification requirements, available at:

http://www.tricare.mil/tmaprivacy/breach.cfm.

7.3.7 Privacy Impact Assessment (PIA)

Provide support for the completion of a Privacy Impact Assessment (PIA) for any applicable systems that collect, maintain, use or disseminate personally identifiable information (PII) or protected health information (PHI) about members of the public, Federal personnel, Contractors, or in some cases foreign nationals. The Government will specifically request when PIA support is needed and will coordinate with the TMA Privacy Office to complete submission of required assessments. To begin the PIA process, Contractors may be responsible for the completion of the PIA Determination Checklist. This Checklist provides basic system information to the TMA Privacy Office and ensures that the appropriate decision concerning PIA requirements is made. The Checklist can be downloaded from http://www.tricare.mil/tmaprivacy/downloads/PIADC.121008.pdf. Contractors are responsible for the employment of practices that satisfy the requirements and regulations of: Section 208 of E-Government (E-Gov) Act of 2002, (Pub. L. 107-347); DoDI 5400.16, “DoD Privacy Impact Assessment (PIA) Guidance,” February 12, 2009; and, Office of Management and Budget (OMB) Memorandum 03-22, “OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002,” September 26, 2003.

7.3.8 Privacy Act and HIPAA Training

Ensure that all staff including sub-Contractors and consultants comply with the training requirements of the Privacy Act of 1974 (5 U.S.C. 552a) and Health Insurance Portability and Accountability Act of 1996 (HIPAA) (Pub. L.

104-191). The training requirements are mandated by OSD Memorandum 15041-07, “Safeguarding Against and Responding to the Breach of Personally Identifiable Information;” DoD 6025.18-R, “DoD Health Information Privacy Regulation,” January 24, 2003; and the TMA Workforce Training Policy Memorandum, dated May 28, 2008, on the subject, “Workforce Training Policy Pursuant to the Department of Defense Privacy Act Regulations https://www.cpars.gov/index.htm https://forms.uscert/ http://www.tricare.mil/tmaprivacy/downloads/PIADC.121008.pdf and the Department of Defense Health Insurance Portability and Accountability Act Privacy and Security Regulations.” Ensure that the annual Privacy Act and HIPAA training is completed by all staff assigned to or performing on this contract, including sub-Contractors and consultants. All required Privacy Act and HIPAA training will be conducted online through Military Health System Learn (MHS Learn) at https://mhslearn.csd.disa.mil to meet the above requirements. Ensure all employees and sub-Contractors supply a certificate of Privacy Act and HIPAA training completion to the Contracting Officer Representative (COR) within 30 days of being assigned to contract and on an annual basis based on the trainee’s birth month thereafter.

7.3.9 Records Management

When creating and maintaining official Government records, comply with all Federal requirements established by 44 United States Code (USC), 41 USC, 36 Code of Federal Regulations (CFR), Department of Defense (DOD) Administrative Instruction No. 15 (DOD AI-15), “Records Management, Administrative Procedures and Records Disposition Schedules,” and Chapter 2 of the TRICARE Operations Manual.

7.3.10 Freedom of Information Act (FOIA) Office

TRICARE…