Atch_003_Task_Order_PWS.pdf

SharePoint 2013 Farms

PERFORMANCE WORK STATEMENT

Joint Interagency Task Force South (JIATFS)

PART 1

GENERAL INFORMATION

All general information from the Indefinite-Delivery Indefinite-Quantity (IDIQ) Performance Work Statement (PWS) is applicable unless notated hereafter.

1.1 Background: The current SharePoint Collaboration environments were delivered as part of a 2010 Web Services Project, a multidimensional endeavor to enhance information sharing within JIATF South and our interagency and international partners.

JIATF South currently manages three SharePoint environments, one (1) on SIPRNet and two (2) on NIPRNet (1-Intranet and 1-Test farm). The NIPR Test farm is being retired.

1.2 Scope: Contractor shall provide non-personal services such as delivery, setup, and content migration of two SharePoint 2013 medium server farm environments (1- NIPRNET and 1-SIPRNET). The environments shall have load-balanced front-ends and mirrored database backends utilizing the latest Department of Defense approved software. Contractor shall provide non-personal services to implement a SharePoint automated task management system. The contractor shall conduct user training to each directorate as well as power-user training to designated JIATF personnel. There are approximately 550 people that work at JIATFS during 24x7 operations.

1.3 Hardware to support this requirement will be provided for by the Joint Inter-Agency Task Force South (JIATFS) J6 Enterprise Operations team. Hardware provided will include Windows Server 2012 R2 Operating System Virtual Machines.

1.4 JIATFS will provide software licenses for SharePoint 2013 as well as SQL 2012.

PART 2

DEFINITIONS & ACRONYMS

All Definitions and Acronyms from the Basic Performance Work Statement are applicable unless notated hereafter.

2. DEFINITIONS AND ACRONYMS:

2.2 ACRONYMS:

AD Active Directory AO Authorizing Official BLOB Binary Large Object CIO Chief Information Officer DIA Defense Intelligence Agency DISA Defense Information Systems Agency DRA Department of Army Risk Acceptance DNS Domain Name Service DHCP Dynamic Host Control Protocol IAVM Information Assurance Vulnerability Management MS Microsoft NIST National Institute of Standards and Technology NIPRNET Nonsecure Internet Protocol Router Network USSOUTHCOM US Southern Command SAN Storage Area Networks SCCM System Center Configuration Manager SIPRNET Secret Internet Protocol Router Network SOP Standard Operating Procedure STIGs Security Technical Implementation Guides

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

All Government furnished property, equipment and services from the IDIQ Performance Work Statement are applicable unless notated hereafter.

The government will provide the equipment needed for two (NIPRNET and SIPRNET) SharePoint 2013 medium server farms, which includes virtual servers, SAN storage, network support devices, as well as SharePoint 2013 and SQL 2012 licenses.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

All Contractor furnished items and services from the IDIQ Performance Work Statement are applicable unless notated hereafter.

Migration Software BLOB or Media Server Software Backup Software

PART 5

SPECIFIC TASKS

5. Design and setup (2) SharePoint 2013 medium server farms

5.1. System Development Plan (SDP). The contractor shall develop a System Development Plan to establish performance milestones of this project and outline the significant events. The SDP will be approved by the government and added to the contract by modification. The SDP shall include a master schedule which covers all aspects of this project to include: Environmental Research, Architecture Research, submission of Network and System Architecture diagrams, Build and STIG Implementation, Branding & User Interface alternatives, IA Accreditation Documentation, Testing, Migration, and Training. Instructions for submission of the SDP are identified in Technical Exhibit 2, Deliverables Table of the PWS.

Deliverable: System Development Plan

5.1.1 The contractor shall be responsible for planning, configuring, and building out each SharePoint 2013 environment. Each environment shall be configured to utilize the JIATFS Information Assurance and Records Management policies for:

Life Cycle Management:

o Archival: 1, 3, and 5 year o Deletion: 1, 3, and 5 year o Review: 1, 3, and 5 year

Information Management/Task Management: configure custom workflows based on defined business processes by directorate.

Content types:

o Classification markings (mandatory): IC Core Metadata Standards (i.e.

Classification(s) to include LEA SENSITIVE and PII Statements

Policies:

o Labeling Classification Markings o Expirations

5.1.2 The contractor shall be responsible for ensuring the SharePoint 2013 environments are Section 508 compliant.

5.1.3 The contractor shall be responsible for setting up and implementing a granular item-level backup and recovery solution to a predefined backup location.

5.1.4 The contractor shall be responsible for planning, configuring, and building out a Binary Large Object (BLOB) or Media server solution for each environment to store images, audio, or other multimedia objects.

5.1.4.1 Hardware to support the BLOB or Media server solution will be provided for by the JIATFS J6 Enterprise Operations team. Hardware provided will include a virtual Windows Server 2012 R2 Operating System.

5.1.5 The contractor shall research and deliver three (3) alternatives for a task management solution that integrates Outlook and SharePoint and utilizes the current directorate specific business processes within three months of POP start date.

Deliverable: Task Management Alternatives

5.1.6 Upon government review of the task management alternatives, the government may require installation, configuration, and implementation of the selected solution. The Task Management Solution will be considered an enhancement under PWS Paragraph 5.5 and negotiated separately.

5.1.7 The contractor shall design and deliver three (3) SharePoint 2013 branded user interface designs (wireframe and mockups) that do not have the out of the box SharePoint look and feel.

Deliverable: Interface Designs

The JIATFS homepage as well as a landing page with contact information for each directorate shall be open for anonymous access. Anonymous access beyond the landing pages are by directorate request only.

5.1.8 The contractor shall be responsible for launching the approved branding and user interface design and supporting master pages, layouts, full styling and images.

5.1.9 The contractor shall be responsible for ensuring that each medium server farm is functioning in a load balanced, high availability environment. Each farm environment will follow Microsoft RECOMMENDED practices for “High Availability.” The system shall patched for the latest IAVM’s and hardened post SharePoint installation based on the latest DISA STIGs for the, OS, IIS, SharePoint 2013, IE, Web Server, SQL, and any other additional software installed by the contractor.

Any third party or non-approved DOD software must receive approval through JIATFS prior to installation.

5.1.10 The contractor shall ensure all patches are deployed and updated biweekly on each required piece of hardware within the JIATF-S Patching Standard Operating Procedure (SOP) through delivery and sign off of final product. The contractor shall patch Government approved third party non-IAVM software IAW software manufacturer guidelines.

5.1.11 The contractor shall provide a weekly activity report every Friday indicating progress and status of all activities related to this requirement and milestones identified in the System Development Plan.

Deliverable: Weekly Activity Report

5.1.12 The contractor shall provide SharePoint design documentation in Visio format and draft a SharePoint SOP in Microsoft Word for review and approval by the Government.

Deliverable: SharePoint SOP and Design Documentation

5.1.13 The contractor shall submit the DISA system accreditation documentation for both NIPRNET and SIPRNET. Accreditation documentation for SharePoint shall include all STIG documentation including DISA STIGS for the OS, IIS, SharePoint 2013, IE, Web Server, and SQL. DOD CAT I vulnerabilities will not be accepted. CAT II and CAT III shall have a technical solution and a POAM or DRA in place with documented explanations. All STIG results shall be provided to the government as .ckl file checklists.

Documentation shall be written and submitted in conformance for inclusion in a Department of Defense Information Assurance Risk Management Framework (DIARMF) package.

Deliverable: Accreditation Documentation

5.2 Content Migration:

5.2.1 The contractor shall be responsible for documenting and planning a phased migration plan by directorate.

Deliverable: Migration Plan

5.2.2 The contractor shall ensure that the migration software selected will retain all metadata and workflow history.

5.2.3 The contractor shall be responsible for testing content migration to mitigate any issues prior to execution.

5.2.4 The contractor shall provide end-user support prior to and following the migration to mitigate any issues.

5.3 Training:

5.3.1 The contractor shall be responsible for documenting and planning a phased training plan by directorate.

Deliverable: Training Plan

5.3.2 The contractor shall be responsible for providing end-user training for all JIATF South end-users and power-user training for site content owners prior to migration as well as post migration support. Training will be phased based on migration schedule of content to the new SharePoint environment to include the integrated task management solution. There are approximately 550 personnel that work at JIATFS during 24x7 operation schedule. Of the 550 personnel requiring SharePoint 2013 training, approximately 75 will require power (owner) permissions. JIATF South training room can only accommodate twelve students per session. Contractor shall ensure that sufficient training sessions for end-user and power user for each directorate. Contractor shall be responsible for scheduling all training sessions.

5.3.3 Training and certification shall be provided for the government SharePoint Admin/Developer (Administration, Development) as well as SQL training and certification for the government Database Administrator.

5.3.4 The contractor will provide help and how to visual aids to be uploaded to SharePoint to assist end-users with creating, adding, editing, deleting content within SharePoint.

5.4 Special Qualifications:

Contractor personnel requiring elevated permissions on the JIATFS network (System Owners, Administrators, etc.) shall have as a minimum have DoD 8570.01-M, Information Assurance Workforce Improvement Program, Information Assurance Technician (IAT) Level II certification, five or more years of experience, and current industry certifications in the task related discipline. The Contractors shall have Microsoft SharePoint 2013 certification, Windows Server 2012 R2, SQL Server 2012, or SharePoint 2013 Server / Administrator as appropriate for the position held.

5.5 Enhancement Solutions Additional solutions or enhancements may be required to be integrated into SharePoint which are outside of the outlined requirements and deadlines in this PWS. These additional solutions will be negotiated and added as separate line items on this task order.

5.6 Software Licenses: The contractor shall submit all licenses to the government for any software that was purchased to support this endeavor when the Accreditation Documentation is submitted.

5.7 Quality Control (QC) Plan: The Contractor shall develop, implement and maintain a Quality Control Plan (QCP) and program to ensure all work described in this PWS is performed at or above the standard defined in the Performance Requirements Summary (PRS) and that identifies and corrects potential and actual problem areas throughout the entire scope of the contract. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which the contractor assures all work complies with the requirement of the contract. The Contractor shall submit the QCP within 30 days within 30 days of the POP start date. The Government will provide comments to the draft/outline QCP within 10 days of receipt. A final QCP plan shall be submitted within thirty (40) days of the POP start date. After acceptance of the QCP, the contractor shall receive the contracting officer’s (PCO) acceptance in writing or any proposed changes to the QC procedures. The contractor shall submit QCP changes within five (5) days to the PCO and COR for review and approval prior to implementation.

5.8 Security Requirements: Contractor personnel performing work under this task order shall have at least a Secret security clearance or a Top Secret security clearance for contractor personnel working in Top Secret security environment and must maintain the level of security required for the life of the task order.

5.9 Special Qualifications: The Contractor shall provide a copy of certifications to the COR/PCO within 10 days prior to tasks execution. Contractor personnel performing work under this task order shall attend the JIATFS Security Indoctrination and complete all required paperwork to obtain user accounts from JIATFS prior to gaining access to any of JIATFS networks.

Deliverable: Certifications

PART 6

APPLICABLE PUBLICATIONS

All applicable publications from the Basic Performance Work Statement are applicable unless notated hereafter.

6.1 DISA STIG requirements

PART 7

ATTACHMENT/TECHNICAL EXHIBIT LISTING

7. Attachment/Technical Exhibit List:

7.1. Attachment 1/Technical Exhibit 1 – Performance Requirements Summary

7.2. Attachment 2/Technical Exhibit 2 – Deliverables Schedule

TECHNICAL EXHIBIT 1

Performance Requirements Summary

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success. Performance standards define desired services. The Government performs surveillance to determine if the contractor exceeds, meets or does not meet these standards. The following matrix includes performance standards. The Government will use these standards to determine contractor performance and will compare contractor performance to the Acceptable Quality Level (AQL).

Performance Objective

Standard Performance Threshold

Method of Surveillance

% Deduction From Monthly Invoice for Not

Meeting Performance

Standards Contracting Manpower Reporting (PWS para. 5.10)

The Contractor shall completely fill in all the information in the format using the following web address https://cmra.army.mil. The contractor shall provide the estimated total cost (if any) incurred to comply with this reporting requirement.

Reporting period shall be the period of performance not to exceed 12 months ending September 30 of each government fiscal year and must be reported by 31 October of each calendar year. If contract period of performance ends prior to September 30, the contractor has 30 day from end date of the contract to complete the CMR requirement.

100% Compliance 100% Inspection

COR

Validation

A rating of unsatisfactory in this standard will result in a 50% withholding in the monthly invoiced until compliance with the standard is established.

System Development Plan (PWS para. 5.1)

The contractor shall develop a System Development Plan to establish performance milestones of this project and outline the significant events.

100% compliance 100% Inspection

A rating of unsatisfactory in this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

Method of Surveillance

% Deduction From Monthly Invoice for Not

Meeting Performance

Standards Task Management Alternatives (PWS para. 5.1.5)

The contractor shall deliver three (3) alternatives for a task management solution that integrates Outlook and SharePoint and utilizes the current directorate specific business processes within three months of POP start date.

95% Compliance 100% Inspection

COR

Validation

A rating of unsatisfactory in this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

SharePoint Design documentation (PWS para. 5.1.7)

The contractor shall be responsible for designing (3) branded user interface designs (wireframe and mockups) that do not have the out of the box SharePoint look and feel.

this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

SharePoint Design implemented

(PWS 5.1.8)

The contractor shall be responsible for launching the approved branding and user interface design and supporting master pages, layouts, full styling and images.

95% Compliance Periodic Inspection

COR

Validation

A rating of unsatisfactory in this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

Migration Plan (PWS para. 5.2.1)

The contractor shall be responsible for documenting and planning a phased migration plan by directorate.

95% Compliance 100% Inspection this standard will result in a 10% withholding in the monthly invoiced until compliance

Method of Surveillance

% Deduction From Monthly Invoice for Not

Meeting Performance

Standards Training Plan (PWS para.5.3.1)

The contractor shall be responsible for documenting and planning a phased training plan by directorate.

this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

Content Migration Software (PWS para.5.2.2)

The contractor will ensure that the migration software selected will retain all metadata and workflow history.

95% Compliance Random this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

Biweekly Patches (PWS para. 5.1.10)

The contractor shall ensure all patches are deployed and updated biweekly on each required piece of hardware within the JIATF-S Patching Standard Operating Procedure (SOP)

95% Compliance

Periodic Inspection

A rating of unsatisfactory in this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

Weekly Activity Report (PWS para.5.1.11)

The contractor shall provide a weekly activity report every Friday

95% Compliance 100% Inspection this standard will result in a 10% withholding in the monthly invoiced until compliance with the standard is established.

Software Licenses

(PWS 5.6)

The contractor shall submit all licenses to the government for any software that was purchased to support this endeavor when the Accreditation Documentation is submitted.

95% Compliance 100% Inspection this standard will result in a 10% withholding in the monthly invoiced until compliance

Method of Surveillance

% Deduction From Monthly Invoice for Not

Meeting Performance

Standards Accreditation Documents (PWS para.5.1.13)

The contractor shall submit DISA system accreditation documentation

95% Compliance 100% Inspection this standard will result in a 10% withholding in the monthly invoiced until compliance

TECHNICAL EXHIBIT 2

DELIVERABLES SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To

System Development Plan

(SDP) (PWS 5.1)

Draft: 30 days after start of the POP.

Gov’t has 7 days to provide comments.

Interim: 45 days after start of POP

Gov’t has 7 days to provide comments.

Final plan for Gov’t approval: 60 days after POP.

Original Microsoft Word COR, PCO

QCP

(PWS para. 5.7)

Draft, within 30 days of POP start date.

Gov’t has 10 days to provide comments

Comprehensive Final Plan, 40 days after start of POP.

Original Electronic medium in Microsoft Word or Portable Document Format

(PDF)

COR, PCO

CTIP Training Certificate FAR 52.222-50 c within 10 days prior to task execution

Original Portable Document Format (PDF)

PCO

Task Order COR

Contracting Manpower Reporting

(IDIQ PWS 5.13)

Must be reported by 31 October of the calendar year.

Original Electronic format PCO, COR

Microsoft SharePoint 2013, Windows Server

2012 R2, SQL

Server 2012, and SharePoint 2013 Server / Administrator certification as appropriate for the position held and IAT Level II Certification (PWS 5.4 and 5.9) within 10 days prior to task execution

Original Portable Document Format (PDF)

PCO

Task Order COR

Deliver three (3) alternatives for a Task management solutions

(PWS 5.1.5)

Within three months of POP start date

Original Microsoft Word or PowerPoint as appropriate

COR, PCO, J6

Representatives

(3) SharePoint Designs/ Documentation

(PWS 5.1.7)

Within three months of POP start date

Original

Electronic medium in Microsoft Visio, Microsoft Word, Wireframe, .jpg as appropriate for the document submitted.

Task Order COR

SharePoint Design Implementation

(PWS 5.1.8)

Upon government selection and approval of Interface Design

Original Electronic medium in Microsoft Visio, Microsoft Word, Wireframe, .jpg as appropriate for the document submitted.

Task Order COR

Weekly Activity Report (PWS 5.1.11)

Every Friday Original Microsoft Word or PowerPoint as appropriate

COR, PCO

SharePoint 2013 Design and SOP (PWS para. 5.1.12)

In accordance with milestones established in the approved SDP

Original Electronic medium in Microsoft Visio, Microsoft Word, Wireframe, .jpg as appropriate for the document submitted.

COR, GTM

Software Licenses

(PWS 5.6)

The contractor shall submit all licenses to the government for any software that was purchased to support this endeavor when the Accreditation Documentation is submitted.

Original Electronic or paper dependent upon the software distributor.

Accreditation Documentation

(PWS 5.1.13)

Draft: 60 days prior to end of POP

Gov’t has 7 days to provide comments

Interim: 45 days prior to end of POP

Gov’t has 7 days to provide comments

Final: 30 days prior to end of POP.

Original Microsoft Word and .CKL File Checklists

COR

Migration Plan (5.2.1)

In accordance with milestones established in the approved SDP

Original Microsoft Word COR

Training Plan (with schedule and visual aids)

(PWS 5.3.1; 5.3.2;

and 5.3.4)

In accordance with milestones established in the approved SDP

Original Microsoft Word COR