A07_Attachment_I__-_13_FY16_PWS_FOR_DIACAP_OFFSITE_BACKUP_(29JUL16).doc

Performance Work Statement (PWS)

RMF OFFSITE BACKUP

7/6/2016 Version 1.0 4Vision Statement

1 Mission

1.1 Background

1.2 Scope

2 General Requirements

2.1 Non-Personal Services

2.2 Business Relations

2.3 Contract Administration and Management

2.3.1 Contract Management

2.3.2 Contract Administration

2.3.3 Personnel Administration

2.4 Subcontract Management

2.5 Contractor Personnel, Disciplines, and Specialties

2.6 Location and Hours of Work

2.7 Travel / Temporary Duty (TDY)

3 Performance Requirements

3.1 The Contractor shall plan for/provide a solution for standard SAN storage. for and project manage.

3.2 The Contractor shall provide physical installation of cabling of all covered hardware components.

3.3 The Contractor shall provide implementation and configuration storage array environment with: for single storage member, two Ethernet switches, and three servers (attached hosts).

3.4 The Contractor shall configuration of virtual (ware) network operating onto attached hosts.

3.5 The Contractor shall install and configure virtual center server .

3.6 The Contractor shall migrate server from physical to virtual for up to five (5) servers.

3.7 The Contractor shall coordinate with customer how to implement and setup windows virtual machine for new virtual environment to include media and license key..

3.8 The Contractor shall provide a supported product orientation session/ training .

3.9 The Contractor shall provide documentation to demonstrate successful implementation.

4 Special Requirements

4.1 Security and Safety

4.2 Transition

4.3 Government Furnished Materials

4.4 Environmental Requirements

4.5 Applicable Directives

5 Deliverables 6 Related Documents

Performance Work Statement (PWS) RMF Offsite Backup Vision Statement 1 Mission

Server maintenance support is crucial to the operation of the Pacific LandWarNet (PLWN) and the ability to backup and restore critical server data and user mission data is vital to providing C4IM baseline services to USARPAC organizations.

This procurement provides for crucial server maintenance and will address specific IA controls related to off-site data backup and restore requirements.

The attached quotes include the cost to procure the tapeless backup appliances and the required server maintenance.

Without this procurement, 30th will not be compliant in accordance with Risk Management Framework; off-site is required and an inspection item. Storage space is stored on RCCP’s backend SAN and is a single point of failure. 30th would not be able to restore data files or OS builds if SAN encountered any type of malfunction.

1.1 Background

Backups are not an Enterprise solution and currently 30th runs Veritas NetBackup to backup Hawaii file shares (to include: USARPAC, 311TH BDE, 516TH BDE, DIV25, 8TSC, etc.), SQL databases and files, IIS web files, Server Operating System (OS), and storage for backups are stored locally on SAN which is managed by RCCP.

1.2 Scope

The problem being addressed with this procurement is that currently 30th does not have an off-site solution to house critical data for both USARPAC user shares and server/database files. In the event RCCP SAN goes down, 30th will not be able to restore critical server and user mission data as required. The desired outcome is to install Veritas NetBackup appliance solutions within both Data Centers Schofield Barracks Building 1500 and Fort Shafter Building 220) for redundancy, and being compliant with existing IA controls.

2 General Requirements

This procurement provides for crucial server maintenance and backup solution. Per National Institute of Standards and Technology (NIST) Special Publication 800-53; Control Number: CP-9(5): A manual review of the Pacific LandWarNet NIPR/SIPR 30th NEC Installation Campus Area Network (PLWN-N-30th ICAN) determined there is no offsite storage of system backups.

The attached quotes include the cost to procure and install the tapeless backup appliances with built-in storage space and the required server maintenance.

2.1 Non-Personal Services

The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Procuring Contracting Officer (PCO) immediately.

2.2 Business Relations

The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

2.3 Contract Administration and Management

The following subsections specify requirements for contract, management, and personnel administration.

2.3.1 Contract Management

The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. The contractor must maintain continuity between the support operations at Schofield Barracks and the contractor's corporate offices.

2.3.2 Contract Administration

The contractor shall establish processes and assign appropriate resources to effectively administer the requirement. The contractor shall respond to Government requests for contractual actions in a timely fashion. The contractor shall have a single point of contact between the Government and Contractor personnel assigned to support contracts or task orders. The contractor shall assign work effort and maintaining proper and accurate time keeping records of personnel assigned to work on the requirement.

2.3.3 Personnel Administration

The contractor shall provide the following management and support as required. The contractor shall provide for employees during designated Government non-work days or other periods where Government offices are closed due to weather or security conditions. The contractor shall maintain the currency of their employees by providing initial and refresher training as required to meet the PWS requirements. The contractor shall make necessary travel arrangements for employees. The contractor shall provide necessary infrastructure to support contract tasks. The contractor shall provide administrative support to employees in a timely fashion (time keeping, leave processing, pay, emergency needs).

2.4 Subcontract Management

The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team after notification to the Procuring Contracting Officer (PCO) or Contracting Officer Representative (COR). Cross teaming may or may not be permitted.

2.5 Contractor Personnel, Disciplines, and Specialties

The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training, and experience. The contractor shall match personnel skills to the work or task with a minimum of under/over employment of resources. The contractor shall ensure the labor categories as defined in the Labor Categories document (see attachment), labor rates, and man-hours utilized in the performance of each Task Order (PWS line item) issued hereunder will be the minimum necessary to accomplish the task.

The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the contract.

2.6 Location and Hours of Work

Accomplishment of the results contained in this PWS requires work at 100 Beaver Road ISF Building 1500, Schofield Barracks, Hawaii 96857 and 248 Yokota St. Bldg. 220, Rm 12A Ft Shafter, HI 96858. Normal workdays are Monday through Friday except US Federal Holidays. Workers typically work eight (8) hours per day, 40 hours per week. Flextime workers start not earlier than 0600 and not later than 0900. Core hours of work are from 0900 to 1500 daily. All employees are expected to be available during core hours.

2.7 Travel / Temporary Duty (TDY)

Travel to other government facilities or other contractor facilities may be required and will be specified in the PWS. All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the government (subject to local policy procedures), and is on a strictly cost reimbursable basis. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99-234 and FAR 31.205-46 Travel Costs (subject to local policy & procedures; may reference FAR).

3 Performance Requirements

The following section specifies the Performance Objectives and Performance Elements for the contract.

3.1 The Contractor shall perform phase 1 – planning description of information services RMF Offsite Backup of Information data services:

A) Review: (1) scope for each set of tasks, (2) resources requirements, (3) roles and responsibilities, (4) customer lifecycle engagements, (5) existing environment and validate prerequisite are complete (use checklists) B) Confirm: (1) primary customer point of contacts, (2) customer lifecycle engagements, (3) discuss desired timelines for each set of tasks, (4) gather existing NBU infrastructure data provided by customer (by reviewing master server resource specifications and original NBU version prior to appliance installation/implementation, (5) gather hostname, fully qualified Domain Name (FQDN) and IP addresses for all appliances to be implemented.

C) Plan: (1) for appliance deployment as a master or media server (NBU 5220/5230 appliances only), (2) for network drops (online and available at configuration), (3) for updating DNS, (4) for storage pools (Pure Disk pool and Media server duplication pool ([MSDP]), (5) for storage units and storage unit groups, (6) for storage lifecycle policies (SLPs), (7) for tape resources (if applicable), (8) for data encryption, (9) for date duplication and (10) email notification and alerts.

Performance Standards

a) STD: Accurate and operationally relevant to customer requirements

AQL: 100%

b) STD: Completed within budgeted cost

AQL: 100%

c) STD: Compliant with federal telecommunication regulations and in accordance with Army regulations AR - 25

AQL: 100%

d) STD: Deliverables are made in accordance with schedule

AQL: 100%

e) STD: Plan can be implemented with minimum impact to system users

f) STD: Operationally relevant.

Deliverables A002 provide a list of the equipment with cabling needed

3.2 The Contractor shall perform – phase 2 transform the information server environment by Veritas physical implementation:

A) deploy one NBU appliance (racking, stacking, connecting the patched cables and power on and base configuration as appropriate, (2) for NBU 5220/%230 Appliance: configure the NBU Appliance as discussed in Phase 1 for disk storage pool within back up domain, configure /test the up to two NBU standard, two NBU enterprise and two NBU database oracle and SQL clients, verify master and media server functionality, (3) Upgrade/patch the NBU Appliance’s operating system software (where applicable)

B) Deploy, configure and test storage pools

C) configure and test: (1) OST plugins (if applicable), (2) new storage units, (3) reconfigure policies to utilize the new storages units, (4) configure and demonstrate Storage Life Cycle Policies (SLP), (5) configure the intelligent platform Management Interface (IPM) on appliance, Enable hardware monitoring feature and implement email address for alert notifications and perform backup and restore testing.

Performance Standards

a) STD: Compliant with federal telecommunication regulations and in accordance with Army regulations (AR 25-1)

AQL: 100%

b) STD: Plan can be implemented with minimum impact to system users

AQL: 100%

A002 provide a list of the equipment with cabling needed

3.3 The Contractor shall perform Phase 3 – implementation closeout and provide stated deliverables:

A) Remove test polices / test storage units / test storage unit groups / SLPs

B) Gather configuration snapshots via the nbsu utility on the appliance

C) Hand – off open technical support cases to customer’s NBU Administrators / Operations (if appropriate)

D) Deliverable: complete installation of the NBU Appliance in 30th’s environment (with any appropriate documentation, manuals, instructions, reports etc.).

Performance Standards

a) STD: Accurate and operationally relevant to customer requirements

AQL: 100%

b) STD: Compliant with federal telecommunication regulations and in accordance with Army regulations (AR 25-1)

c) STD: Operationally relevant

A003 provide plan for the implementation and configuration

3.4 The Contract shall consider any quotation or documents from the Contractor (vendor) discussing implementation, configuration and installation of server environment.

Performance Standards

a) STD: Accurate and operationally relevant to customer requirements

AQL: 100%

b) STD: Compliant with federal telecommunication regulations and in accordance with Army regulations (AR 25-1)

AQL: 100%

c) STD: Deliverables are made in accordance with schedule

A004 demonstrate and show plan for configuration

4 Special Requirements

This section describes the special requirements for this effort. The following sub-sections provide details of various considerations on this effort.

4.1 Security and Safety

DD Forms 254: Overarching security requirements and Contractor access to classified information shall be as specified in the basic DD Form 254, which will be further identified in the DD Form 254 for each TO, as required. All contractor personnel with access to unclassified information systems, including e-mail, shall have at a minimum a favorable National Agency Check (NAC).

Visitor Group Security Agreement. The contractor shall sign a Contractor Visitor Group Security Agreement to protect classified information involved in performance under this contract or Task Order. The Agreement will outline responsibilities in the following areas: Contractor security supervision; Standard Practice Procedures; access, accountability, storage, and transmission of classified material; marking requirements; security education; personnel security clearances; reports; security checks; security guidance; emergency protection; protection of government resources; DD Forms 254; periodic security reviews; and other responsibilities, as required.

4.2 Transition

N/A

4.3 Government Furnished Materials

The Government will make available the materials, office space, communications capability and information on the dates specified and as identified in this contract. There is no government furnished equipment.

4.4 Environmental Requirements

The contractor shall comply with all documents listed below as mandatory and referenced under paragraph 3.0, Performance Requirements. Compliance with documents listed as non mandatory is the contractors' option.

Mandatory compliance (none)

Non Mandatory document (none)

4.5 Applicable Directives

The contractor shall comply with all documents listed below as mandatory and referenced under paragraph 3.0, Performance Requirements. Compliance with documents listed as non-mandatory is the contractors' option.

Mandatory compliance (RMF procedures)

Non-Mandatory document (N/A)

5 Deliverables

The contractor shall provide deliverables as described in subsequent task orders. Deliverables shall be specified by the government. Format and delivery schedule for deliverables shall be outlined in CDRLs and/or other means TBD.

6 Related Documents

The following Documents are related to this project:

9.2.1 AR 25-2, Department of the Army Information Management Information Assurance, 23 Mar 2009

9.2.3 DODI 8500.2, Information Assurance (IA) Implementation, 6 February, 2003

9.2.5 AR 25-1 Information Management-Army Knowledge Management and Information Technology, 4 December 2008

NIST Special Publication 800-53A Revision 4 Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans Performance Requirement Summary (PRS)

AQL: 100%

b) Completed within budgeted cost

AQL: 100%

c) Compliant with federal telecommunication regulations and in accordance with Army regulations (AR 25-1)

AQL: 100%

d) Deliverables are made in accordance with schedule

AQL: 100%

e) Plan can be implemented with minimum impact to system users

f) Operationally relevant

AQL: 100%

b) Plan can be implemented with minimum impact to system users

AQL: 100%

b) Compliant with federal telecommunication regulations and in accordance with Army regulations (AR 25)

c) Operationally relevant

AQL: 100%

b) Compliant with federal telecommunication regulations and in accordance with Army regulations (AR 25-1)

AQL: 100%

c) Deliverables are made in accordance with schedule