Attachment B Sample Task Order PWS Track Changes.docx

SAMPLE TASK ORDER 0001

1.0 Performance Requirements

This is a sample task order is Performance Based, Firm Fixed Price (FFP), On-site in Vicksburg, MS for a 6-month period of performance. No travel is required.

1.1 Host Based Security

Performance is Vicksburg, MS.

The contractor shall perform activities related to host-based security leveraging the Department of Defense (DoD) mandated Host-Based Security System (HBSS). Activities include the management, configuration and implementation of various HBSS modules on 375 Research and Development Environment (RDE) servers, 850 desktops and 1325 laptops assets; suggest modifications and improvements to current HBSS module settings; analyze HBSS status reports and provide courses of action suggestions to RDE management. Expected support levels are Tier II or above.

Deliverables A001 Task Completion A002 Daily Report

1.2 Virtualization Management

Performance is Vicksburg, MS.

The contractor shall manage a virtual environment utilizing VMWare suite that includes up to 500 virtual servers on a shared storage backend. The contractor shall provide a method for implementing and maintaining a virtual desktop infrastructure (VDI) for up to 1000 systems. The VDI solution is implemented using a conventional server/storage platform for persistent and non-persistent desktops. VDI is maintained on premise for internal, DMZ, and public access. The contractor shall provide a method for ensuring that the virtual infrastructure is compliant with DoD Security Technical Implementation Guides (STIG). The contractor shall follow the response/resolution matrix as outlined in section 1.4. Expected support levels are Tier II or above.

Deliverables:

A001 Task Completion A005 Technical Report A009 Repository

1.3 Network Management

Performance is at the four geographic locations of Vicksburg, MS; Champaign, IL; Hanover, NH; and Alexandria VA.

The contractor shall manage a research and development wide area network that spans four geographical locations and includes the management of eight firewalls with failover capability, approximately 50 Cisco core routers, 300 Cisco switches, and 400 Cisco wireless access points. The contractor shall operate and maintain the network-monitoring tool Cisco Prime (or future tool at the Government’s discretion). The contractor shall provide a method for implementing and maintaining secure websites through the use of reverse proxy or other technologies. The contractor should manage hardware proxy appliances which are implemented to provide complete control over all web traffic delivering threat protection, user authentication, data loss prevention, content caching, and bandwidth management. The contractor shall follow the response/resolution matrix as outlined in section 1.4. All enterprise hardware is located in Vicksburg, MS. Edge devices are disbursed as follows: 76% Vicksburg, MS; 8% Champaign, IL; 8% Hanover, NH; and 8% Alexandria VA. Expected support levels are Tier II or above.

Deliverables:

A001 Task Completion A005 Technical Report A015 Network Diagram

1.4 Response/Resolution Time

The contractor shall follow the response/resolution matrix as outlined below. for user support services. The contractor shall meet the below metrics 90% or more of the time.

User Support (Helpdesk) Services – Emergency priority ticket resolution:

Respond to emergency priority requests within 1 hour from receipt of request and resolve within 4 hours from receipt of request during normal business hours, 90% or more of the time. Ticket may be temporarily suspended if replacement parts need to be ordered and/or equipment needs to be sent out for warranty service.

User Support (Helpdesk) Services – High priority ticket resolution:

Respond to high priority requests within 4 hours from receipt of request and resolve within 2 business days from receipt of request during normal business hours, 90% or more of the time. Ticket may be temporarily suspended if replacement parts need to be ordered and/or equipment needs to be sent out for warranty service.

User Support (Helpdesk) Services – Normal priority ticket resolution:

Respond to normal priority requests within 1 business day from receipt of request and resolve within 1 week from receipt of request during normal business hours, 90% or more of the time. Ticket may be temporarily suspended if replacement parts need to be ordered and/or equipment needs to be sent out for warranty service.

User Support (Helpdesk) Services – Low priority ticket resolution:

Respond to low priority requests within 3 business days from receipt of request and resolve within 3 weeks from receipt of request during normal business hours, 90% or more of the time. Ticket may be temporarily suspended if replacement parts need to be ordered and/or equipment needs to be sent out for warranty service.

2.0 Certifications

The tasks above require all personnel to have the following certifications:

· CyberSecurity Fundamental Training

· Information Assurance Awareness Training

· Complete the baseline Cert IAT II+. Details can be found at https://public.cyber.mil/cw/cwmp/dod-approved-8570-baseline-certifications/

3.0 Clearances

A secret clearance is required for these tasks.

4.0 Deliverable Description

The contractor shall provide the following deliverables.

A015

Performance Requirements Summary

1.1 The contractor shall perform activities related to host-based security leveraging the Department of Defense (DoD) mandated Host-Based Security System (HBSS). Activities include the management, configuration and implementation of various HBSS modules on 375 Research and Development Environment (RDE) servers, 850 desktops and 1325 laptops assets; suggest modifications and improvements to current HBSS module settings; analyze HBSS status reports and provide courses of action suggestions to RDE management.

A001 Task Completion A002 Daily Report

Compliant with applicable standards

Complete/Accurate/ Timely

Meets technical specifications

Identifies and corrects deficiencies

Clear, accurate documentation

VERY GOOD – 90-99% of the requirements are properly documented.

SATISFACTORY – 80-89% of the requirements are properly documented.

MARGINAL – 65-79% of the requirements are properly documented.

UNSATISFACTORY – Below 65% or failed to complete any requirements

1.2 The contractor shall manage a virtual environment utilizing VMWare suite that includes up to 500 virtual servers on a shared storage backend. The contractor shall provide a method for implementing and maintaining a virtual desktop infrastructure (VDI) for up to 1000 systems. The VDI solution is implemented using a conventional server/storage platform for persistent and non-persistent desktops. VDI is maintained on premise for internal, DMZ, and public access. The contractor shall provide a method for ensuring that the virtual infrastructure is compliant with DoD Security Technical Implementation Guides (STIG).

A001 Task Completion A005 Technical Report A009 Repository Compliant with applicable standards

Complete/Accurate/ Timely

Meets technical specifications

Identifies and corrects deficiencies

Clear, accurate documentation

VERY GOOD – 90-99% of the requirements are properly documented.

SATISFACTORY – 80-89% of the requirements are properly documented.

MARGINAL – 65-79% of the requirements are properly documented.

UNSATISFACTORY – Below 65% or failed to complete any requirements

A005 Technical Report A015 Network Diagram Compliant with applicable standards

Complete/Accurate/ Timely

Meets technical specifications

Identifies and corrects deficiencies

Clear, accurate documentation

VERY GOOD – 90-99% of the requirements are properly documented.

SATISFACTORY – 80-89% of the requirements are properly documented.

MARGINAL – 65-79% of the requirements are properly documented.

UNSATISFACTORY – Below 65% or failed to complete any requirements

PERFORMANCE RATINGS

Performance Rating Criteria