crew versus executive office of the president et al (lawsuit): 6/23/2009 – eop 113 - 224

8/9/2019 CREW versus EXECUTIVE OFFICE OF THE PRESIDENT ET AL (Lawsuit): 6/23/2009 EOP 113 - 224

1/112

J o s e p h ~, TucdChairman, presidenl and CEO

March 6, 2009

(via F.edercd Express and Electronic Ma~7)Brook Colangelo, Chief infom~_io~ OfficerExecutive Office of the PresidegtOf flee of Admlnlstmtion1800 G StreetWashington, DC 20503Dear Mr, Colangelo:

Thank you for your email of March 4, 2009, and for the continued opportunitythat you and your staff hage afforded EM C to address your questions and resolve yourconcerns, I join ~;ith Mark Lew is ia extending my assurance that EM C is com mitted toyour success.The EM C technical team conducted an on.~ite re,dew and audit of th~ etrrrent EOP~deployment during the week of February 9th, 2009, and certified thatthe solution, desig~ document ~m d configurations deli~,ered to date. were prepared anddelivered using EMC Be~t Practices. Specificarly, the ~ system that wasdesired, installed, and im plemented by E MC at the.EOP, is funcfi0ning, and accurately.

archivlng the EOPs unclassified electronic mail from ~ that isdelivered to the~system, as expec~d and specified in thffcontract statemdnt of work.EMCs support for ~. was added to our ~1~11111~

deployed at ~P) ~e ~ ~ppo~ed build humb~s. I s~d be~nd ~ ~ificatio~ mad~by M~k ~s to you on M~ch 4, 2009. EOP c~ proceed wi~ ~e ~~ integraGon wi~ ~ usNg Ne s~e ~buil& As p~ers to th~EOP, EMC will work closely ~ ~e EOP ~a to r~pond to ~d implement ~echallenge posed by the acce!~ated ~rollout.

I trust that this letter is .responsive to y our concerns and that the~ co nfigurationsdeployed satis7 the Oo-cernm ents requlrement, If there is anything farther that my teamcan do to assist, please do n~.t hesit.ate to contact us.

E ~ C C o ~ o r a t i o n

SLncerely,

Joseph,M. Tucci "a76 South Street, Hopkinton, 1~ m74B ~ w w w , E M G c o m

EOP0000113


2/112

F ro m ~ L ew i sr M a r k~e n t : We d n e sd a y, M a ~c h 0 t 2009 :: [:25 PMTo: Brook_M._CDlangelo~Cc: Fox, Kim; Mainland, Kirk~ Eisel, Mark __Subject; EMC / EOP March 4th - Letter regarding|andM a r c h 4 , 2009

Brook C olan l~e loCIO, Exec ut ive Of fi ce o~the Pres identDear Mr . Co lange lo :T h a n k y o u f o r t h e o p p o r t u n i t y t o a d d r e s s a n y qu e s t i o n s y o u a n d y o u r s t a f f m a y h a ve ,a n d ~ i ve y o u m y p e r s o n a l c o m m i tm e n t a n d a s s u r a n c e t ha t E M C i s c o m m i tt e d t o y o u rs u c c e s s ,

T h e f o l lo w i n ~ i n fo r m a t io n c o n f i rm s t h e c e r t if ie d a n d s u p p o r t e d v e r s i o n s o f o u rI~~product. EMCs support for iIIII!~11~!1~ was added to our~ releas~ in August 2007. The supported build numbers of~ andS(the build deployed at EOP).~ is a supported p.latform in our prgductwhich is also posted and maintained on our~site, EMC stands behind this

ce r t i fi ca t io n a n d s u p p o r t s t h is co n f ig u r a t i o n .As you know, an onsite review and audit of the EOP ~ deployment wasco n d u c t e d by M a t t No r r is (F e d e r a l D~ l i ve r ), Ro be r t A n d r i ck (S e n i o r A r ch i t e c t ,Consul t ing De l ivery) , Jonathan Cook (~ , rch i tec t , Co~sui t in~ De l ivery) , and Jonathan Caten~ Engineering) during the week of February 9th, 2009. Durin8 the re.~iew,the team c er t if ied tha t. .t , .h ,e so lut ion d es i l~n do cu me nt and conf igura t ions fo r EO P fo l lowEMC B est Pract ices.I w i ll b e trav e l ing to the D C a rea la te r th i s m o nth , and l oo k fo rward to the oppo r tun i tyt o m e e t i n p e r s o n . P l e a s e d o n o t h e s i ta t e t o co n t a c t m e i f y o u h a ve a n y qu e s t io n s o rc o n c e r n s a b o u t a n y o f t h e i r ~ f o r ma t io n c o n t a i n e d i n ~ h i s l e tt e i "Best Regards,

Mark S. LewisP r e s ide n t , C o n t e n t M a n a ge m e n t & Ar c h i v i n g D i vi s io n , E M C

EOP0000114


3/112

M ar k S. Lewispresldent~ C o n t e n t M a n a g e m e n t a n d A rch iv ln g D iv i s io n

E m a l l ;B log:

EOP0000115


4/112

Summary of~customer contact callsAl l 4 EM C s e lec t ed c us t omer s r epor t t ha t wo rk i n g ve ry we l l fo r th e mAll 4 mgrated from~ to ~o ~ problemsOnly 2 of the 4 have all users on I~ t y d i f fi c u l t fo r A M T R A C K e n dDO E has a V O I P is sue) ~ _Only 2 of the 4 are fully migrated to ~ One of the 4 (DOE) went with managed services for their~ environmentincluding archiving, .The other three manage~ in-houseOnly open action is to confirmthat~ equals ~,

Co n c lu s }o nBased on the c~nversations I had, we now know that~ and ~ are in productionelsewhere an d that there we re no major issues implem er~t ing the com binat ion for these 4 users ,However, since all 4 were already on I~ ] could not get a sense of any risks or impact to| functionality when migrating from ~US Department of Education: ~March 4 -Spoke with ~, Director of Information Technology Services.DOEs userb a s e i s a b o u t t h e s a m e a s o u r s , 3, D D 0 . S o m e u s e r s h a v e b e e n m i gr a te d t o ~ w h i l eothers remain on ~ Delays in migrating eve~ne are due to their VOIP and phonesystem (Unity) not being compatible with ~ J was not certain if the users who arestill on ~ hayel~ available to them or not: They eulsourced the implementation to amanaged services provider to run their .~ and ~ platform. Their managed servicespr ov ider i s Peta l Sys tems , I nc . and ~ t i s t he p r ov ider . w ho o w ns a l l o f the har dw ar e and s o f t w ar el ice n s i n g. I h a ve co n ta c t i n fe o n th i s ve n d o r . , Th e y m a i n ta i n a n d m a n a ge th e sys te m fo r D OE. Wof f e re l mor e d e t a i led in f o ( con t r ac t s , des ig n docu men t s , e tc . ) if w e w ant / need t hem, W e m ig htwa n t to t ]n d o u t mo re a b o u t D OEs co s t fo r ma n a ge d se rv i ce s a n d e ve ry th i n g th a t it i n c lu d e s . .

Daktronics :March 3 - Spoke with ~, Daktronics employee who is an Email Administrator. W said "that they were on ~ when they mgrated to~the third week ofJ a n u a r y 2 0 09 . W h i le t h e y h a v e n o ~ b e e n o n ~ l o n g (a b o L ~ t a m o n t h ) t h e y h a v e n o t h a dany issues with its compatibility with ~ M did note that prior to the migration to ~~ they made sure they were on the very latest version of~ which he confirmed as being~ He was not certain if this is the version available via . T h e w o r k w a sd o n e i n h o u se b y W. EMC wa s n o . t o n s i te d u r i n g th e m i gra t io n although M dids ay t ha t he ope ned a r ~ "Ca lUN " w i th EM C in cas e he nee ded t he i r as s is tance v ia t he phone , Hedid not and per ~ Daktronics is happy, with t.he combination of I~ and ~,I th ink i t Is impat ient to note that a comr~erc ia l cus tomer s Records Managerner~t requirementsa re n o t th e sa me a s o u rs . ~ , a s ~n E ma i l A d m i n is t ra to r , co u l d n o t sp e a k to th e l e ve l o fconf idence Dak t r en ics has bas ed on t he i r R M r equ i r ement s .

AMTRAK:March 3 - Spoke with ~. AMTRACK began migrating off Enterprise Vault to I~ tnA u g u s t 2 0 0 8 , E MO b u i l t th e A MT R A C K ~ s y s te m . A MT R A C K h a d a l re a d y u p g ra d e d f ro m~to 1 ]~ ! ~r, At th)s point only half of their users are on as the migrationThey bought |does not meet a l l of their legal searchr e q u i re m e n t s s o t h e y a r e i m p l e m e n t in g a n o t h e r p r o d u c t ~ ) s o t h a t re d a c t i o n a n d

EOP0000116


5/112

tag g ing c an be per fo rm ed . Another no te , per AMT R ACK, W had no ~ c apabi l i ty a .~nd a f te r,~,,Lng with ~ they could, hal get one, They had to work with EMC to get~ in place for~. It is now in place and the solution EMC built for AMTRACK is now b~s~ed for otherEMC customers. We should have ~ or | talk to this guy about the~ solution thati s in p lace. I t does a bo ot f rom the SAN wh i ch p ro v i d e re a l t ime re p l ica t i o n to -bot h loca l and r em ot e nodes o f (standard MS clu~ter conf igurat ion for~ . H e s t a t e d t h a t w i t h R e c o v e r P o i n t i n p l a .c . # A M T R A C K h a s b r o u g h t e r rL . a i t_ b a c k u p i n15. minutes ............ 4 ....City of Be l levue:March 4 - Spoke with ~, City of Bellevue System Ad~ reportedthat the city has about 1600 users,~They upgraded from . -in March of2008, They have been using thel~product line for several year~upgr~inMarch 2008. Overall he is very pleased with the performance of ~jtwlth ~. He hasa s im i la r r ecor ds r e t en tion is s ue w e hav e in t ha t one g r oup o f h is us er s a r e r equ i r ed t operm .an er~t ly retain a l l of the their emai l , -whi le the ma jor i ty of c i ty emp loyees d o not . The o nlynegat ive on the product f rom h is perspect ive is that when they restore a user s mai lbox f rom the~ a r c h i v e E V E R Y T H I N G is r e s t o r e d , in c l u d e d e m a i l t h ~ u s e r h a d p r e v i o u s l y d e l e te d o rmo ved to external s torage. Hes had to gcf in as a system ~c ] [minis t rator and d ole to ernai l from theus er s ma i lbox j us t to g e t i t s s ize low enou g h f o r t he us er t o be ab le t o open iL

EOP0000117


6/112

Explanation of EmailXtender and Dashboard ReportsAs a res[tlt of a meeting Mth the EOP OC]O COT~ ~) and Director of FederalRecord~ Managen~at ~) on Febm~ 27, 2009, EMC ~spro~ding the folio~ngdoc~ent. The p~ose oFthis document is to explain the repo~ that ar~ offered oukoftl~e box~n~..a.~p.thp. i.nfo~io)~ .~!0 ~epo~ ~y ~i!~ble thro.~gb the . ..(a~ add-on franaework for monito~ng ~ae ~ envLronment, proddedto the E( th a ~ial license valid until May 15, 2009).The docum ent is organized imo two sections. The fi~t section covers the five st~dard Auditreports that are available in t~e ~.vailable through

The sccond scctiori.covcrs the reports and information that

EOP0000118


7/112

Section 1 - Audit ReportsThe A udit Reports that are available in ~_ contain information on whO ao cess is happeningin the~through the~ The~ is the one and only gatewayinto discovering and manipulating information wRhin the ~ All activity that happenswithin the search tool by all uaers with ~ administrator permissions is recorded in the A uditdatabase. The data stored, h~ the Attdit database is used to pr.od~e.e tl}e ~ep~rts. ~ -On ly those users that have been ~anted ~ adm inistrator permissions will be able to use thesearch tool, and al! actions taken with the searoh tool (searches, exports, deletions, moves,printing) are logged inlo the audit database along with file users named account.The Audil Reports are native~ generated by ~. Th~ detailed process for running thereports can be found in the N N Admin G aide.pdf, section 9.The reports must be generated via an ~administrator.The following is a list of reports that are available:

1) Deleted Messages Report (Deleted Messages Report.pdf)2) Deleted Volumes Report (Deleted Volumes Report.pdf) -3) U sers Accessing A Message Report ( E x A c c e s s T o M e s s a g e . p d f )4) Messages Accessed by a User Report (ExMa i l A cce sse d ByU se r ,p d f )5) U ser Accessed by Other Users Report ( ExView0 fMessag es.pd t )

1) Deleted Mes.sages ReportRun a D eleted Messages audit report to view a li~t of.messages that have been deleted from the~ archive by a supervisor or ad:ministrator,The report includes the following in gormation:

~ The date floe message was deleted, The adlninistra~:or or supervisor who deleted the m essageo Limited message l)eader information (From, Received, and Subject) The name orthe volume to which the message belonged

EOP0000119


8/112

Sem cl~ Criteria for Deleted Messages ReportTo search for Do this

Deleted messages that were sent by a specific Click Mail Sent By, The Outlook Addressu s e ~ - Book opens. Choose a nam e fiom th~ Iist and

c l i c k O K . " "Messages deleted by a Specific administrator Click Administrator. The Outlbok or NotesAddress Book opens. Choose a name from thelist and click OK.Messages deleted within a specific time span. 8elect N one, After, Before, or Between froriathe Audited Date field, and then select dates~om the eorrespondin~ date fields as needed.Leave all boxes empty.ll messages deleted by.all administrators~uring any tiine period2) Deleted Volumes Roper{Run a Deleted V olumes audit report to view a list of volumes that have been deleted from~ by an administrator,The report includes the followirtg information:~ The date each volum e was deleted- The adm inistrator wh6 deleted the volume "~ T h e volume sta~ and end rimes

- The recordset number (thi~ is a number used ~n~emN ly by ~ to track Ihe volume)~ The number of m essages included in thevolume* The volumos folder path .

~ captures messages and organizes them by month in volumes. olumes close afterthey reach the allotted ~apacity (90MB.for the EOP ~ impl.ementation) or m-e idle for erie day.~ then copies them to the storage drive on thel~~server as .emx files,V olumes are by ~ lo efficiently store messages on ~isk once they have been ingested into the~ archive. The Delete~l V olumes Repo~ show# any volumes that bare been removed from fl~eenvirorm~ent. Normally volumes are removed once the retention period for a particular monthsworth ofemails has cxpirecl. ]n EOP s implementation ofl~ the retention rule is "all messagesfor the duration of the adm inistration me to be archived and retained", therefore, there s.houldnever be any ~ntries on the deleted volumes reporL

EOP0000120


9/112

Search Criteria for Deleted V olumes ReportTo search for Do this

V olumes deleted by a specific administrator Zlick Administra(or. The Outlook AddressBook opens. Choose a nam e from th~ list andztick OK: ......V olumes deleted within a specific time span ~elect None, After, Before, or Betweeh lomLhe Audited D ate field, and then se.le~t datesfrom the corresponding date fields as needed.Enter the nmne of the volume in the Volum eN ame field.Leave all fields empty.A spec i f ic volume.All volumes deleted by all adfi~inistratorsduring anytime period

3) U sers Accessing a Message ReportRtm a U sers Accessing a M essage at~d.i.t report to v~ew a list of supervisorsor administrators whohave searched for o r viewed a specific message. T o run the report, you must use the~ n to detem~ine the ID num ber ]or the message..The ID number of the message J s fl~e internal unique m~nber that t~assigns to each message as~t is ingested into the archive.The instance where EOP may wan to use this report is if there is a data ~ill, and EOP wouldlike to see if" anyone has accessed the message after it was ingested. In that ease,.the n~essagewould be determined < how> and this report can be run against that speci fic ID;.The report includes fl~e following information:, The name of the perso.n who origlnaily sent the message,, The date the message was received at the mail server- The st~bject line of the message

,, The supervisors or adm inistrators who have searclaed for or viewed the m essage~ The query used.to search fDr the.messageif the supervisor or administrator opened the message to view it (as opposed tO simply receivingthe message in a list of search results), a xdew icon ap pears next to the listing in the report.

EOP0000121


10/112

4) NI~ssages Accessed by a User ReportR~n n Messages A ccessed by a U ser report to view a list of messages lhat were either viewed byor returned as search hits far a specific supervisor or adm inistrator. This type of report cm a beespecially help ful in monitoring lhe actions of speei fie adm inistrators, to ensure that ~1]_ searehin gand viewing is job-related. ..EO? can use this report to track the activities of individual adm irfistrators to reyiew wh~.tsearches they are doing, and what result~ were returned got those searches mad any actions fl~atwere taken with those results.The report includes the followinginformation: The name of the p erson who originally sent the message~ The ID number ~or the message, The date the message was received at the mail server, The administrators who have searched for or viewed the message

- The date on which they seethed for or vie~efl the message, " ~e que~ used to search rot the messageif the supen, isor or administrator opened the message to view it (as opposed to simply receivingthe message ia a list ofseamh results), a view icon appears next to the listi~g in the report.

Search Criteria for Message A ccessed by a U ser ReportTo search for Do this

Message accessed by a specifi~ ad.minislrator 2lick Administrator. The Outlook Address3ook opens. Choose a n~ame fi~om the list andzlick O K .Message f~r a specific recipient thai were 2lick Recipient. The Outlook .Address Bookaccessed : ~pens. Choose a nam e from the list and clickOK.Message accessed within a sp.eeiaho time spm a. 3elect N one, After, Before, or Between fromlho Audited Date field, and then select datesfrom the corresponding date fields as needed.Enter the audit type in the Audit T__ype fi~ld.Lore, e, all fields empty.~ A s p e G i f ic acc.es.s typeAlt messages accessed by all administratorsfor all recipientsdurin.g.mlylime period

EOP0000122


11/112

5) U ser Accessed by Other U sers ReportRun a U ser Accessed by Other U sers report t~ view a list o[" administrators oi" supervisors whoperformed searches to retrieve messages for a certain user.EOP can u se this report to determine which administrators had semched a particular-recipients(users) messagesin the archive;The report includes a separate section for each message the supervisor or admilfistrator accessed.For each message, the following information appears:,, "Fi~clD number for the message

~ The date the message was received at the mat.1 server, The subject line [or the messag~o The names or the supep~,isors or administralors who have searched for d~-viewed themessage~ The date on which they serechad [or or viewed the.message,~ The query used to search for the message

If the supervisor or administrator opened the message to view it (as opposed, to simply receiving.the message in a list of gearch results), a view icon appears nex t to the listing in the report.Search Criteria for User Accessed. by Ofl~erUser Report

To search ~or Do thisMessage accessed by a specific administrator Click Adm inistrator. The Oullook AddressBook ~pens. Choose a name from the list andclick OK .Message gor a specifi~ recipient that w~re Click Recipient..TI. ~e Outiook Address Bookaccessed opens. Choose a name from the list and cli~kOK ,Message accessed within a specific time span S elect None, A fter, B~fore, or Between from~the Audited Date fi.etd, and thdn sel~t dates[ram the corresponding date fields as needed.

Enter the audit t~ype in the Audit T,5pe field,Leave all fields empty.A_~_~eeific access typeAll messages accessed by all administratorsfor all recipients dur~ing m~ytime period

EOP0000123


12/112

Section H - Dashboard ReportsThe following reports arc generated by the ~ They are intended toin F o w n system adminlstrators o f system eonfi~ration m~d health.The ~reports are broken down into two iypes, The first type are reporls that-are runand g~enefath information off the curre{~t sta{~m 6fthe ~ seti~p dud envi~nm ~r~t, The Second.type is a web page that constitutes the "~ the! shows the current status o f eightimportant N nctions elthe ~ environment, m~d is accessed as needed by the systemadministrators.

Status ReportsThese reports have a date and time stamp in the report title. For clarity this document indicatesthe date and time stamp as "Date_Tim~_! in the explanations belowDate_ Time-~~-Comtectorz.htmThis is a list of each of the journaling mailboxes that~is using to pull emails; it issorted by ~ server. ,Date_ ~im e- ~-R egi~tO,-Inf ormatio n-SE R VERNAkfE. htmA copy ofthis is generated for each ofth~ servers. It croutons alist of~ll th~confi~ration regist~ settings for e~h ~ sen, or.Date_ T ime__ Scheduled-T~tsks-ln format ion-SERVERNA ME.htmA copy of this is generated for each of the ~ servers, ii contains a list of all the tasksin ~ that are set up on caeh.~ server, ill~~~iswhere we have set up a regulm~ registry export and the rutming of th6 dashboardscripts,Date_ T hne_~Search-Su.m m at3,. h tmThis r e p o r t N ves an overview of how many searches have happened on each of the~ server. It gives simple totals and int:ormation on what lhe search criteria was.Date_ T ime_Server-h t form atiot i -SER VE RNA ME, h tmA copy o~this is generated for each ofthe~ servers. This report lists informationabo~t the configttrat-ion of each indJvid~tal ~ server, included i.n ~hJs report aregeneral server hardware information, server network information, installed software informatio6,and local group ;membership information,Date_ Tim~tl~tServer-Storage. h tmThis report gives disk size and utilization information for each office ~servers.

EOP0000124


13/112

Date Time ~~-Conjqgmation-SER VERNAME.htmA c@y of this report is generaled Br each o[" the ~ sewers, This report givescon fi guration information on each of the ~ servers, This report contains suchin formation m ~ ~version, disk layout, 1~ server conneciion, and co!leotion rules.

.~Sereens and Web PagesThe following infomaation is accessed through the ~interface on ~ (the nameof the server where the ~ is instalJed).BadDir INFO.htmWhen ~has a problem that prevents it from processing a message that message ismoved into one of the "baddir" directories ~n ~. When this happens a notification issent to the event log and to the system adminislrators.This report shows you h ow many ruessages are in the baddir and the details of which badd ir theyare in. A process has been developed with i~ for handling these messages and ensuring thatthey have been properly ingested into the m-chive.DLC_INFO.h tmThis screen shows details on !~llll~Distribution List Cache (DLC), such as age, sizeand refresh rate. The DLC is the c ~ c h o that ~uses to d.etemfine the member ofdistribution list~. The default refresh rate is 24 ~ours, far.EOP, we are going to change that to 3l~o~rs,~lournals.htmThis s~rem~ shows details about each of the joumaling mailboxes that ~ is attachingto. [t reports information on the number ofmessage s in thejournaling mailboxes, the size ofthose messages and m ost importantly any messages ha folders other then the Inbox.This report also shows any messages t h a t are in the S ent Items folder for the journalingmailboxes. Ifl~ cannot pull a messa ge from the inbox efthejoum aling mailbox it will placethe message into the seat items, this most likely indicates that the message is com,)t. ~ had aprocess to handle these types of messages in the ~ system, and we have transferredknowledge such that ~ Can put aprocess in place, for use with 1~.h ~ d e ~ e s . _ IA I F O . h . O nThis screen gives information on the nmnber of full text indexes Far each of theservers. It will al~o report if there are any problems with an), ollhe indexes.MSMQ~Ih~FO, htm.This screen gives information on the number of messages tha~ are in the.W indows Mess~igoQueues, which is the W~ndows componenl used by--to process messages, it reportso n the number of messages in e a c h of the queues. -

EOP0000125


14/112

,_qervice,~ INFO. htmThis screen gives st-a~us infonn,~tion on each of the ~ and ~ services one~h O f the ~ servers.Slorage._lNFO.htmThis screen shows information on disk free space for each of the drive~ used by ~,Velum e~_.[NFO, himThis screen gives information o n the container~ (volumes) within ~; It reports o nlhe number of vohm~ es and also reports ~n any issues w ith any of the volunaes.

EOP0000126


15/112

ISSUED TO:ALL CONTRACTORS UN DER GSA Schedule

S I N ] 32-5] Information Teclmo]ogy Serviee~S I N " 1 3 ~ . -8 P~rc~a~e of Equ{~rnentSIN 132-33 Software Li~ensing

The Co ntractors Basic GS A S chedule contract is applicable to the Task O rder thatis awarded under this R_FQ

ISSUED BY:G eneral Services A dministrationFederal System s Integration and Mianagement Center (FEI)S IIV 0Metro Park6354 Walker Lane, Suite 200Alexandria, VA 22310

26, 2007

REQUEST FOR QUOTE (I~Q)GSC-TFMG-07-3] 931

Records Ma.nagemeat ImplementationIN SU PPORT OF:

Executive Office of the P resident (EOP )Office of the Chief I~1form a~on Officer

FEDSIM. Project Number 27120EOM

T~k-Order GST0007AJ0032GS A Schedule GS-35F-07g0M

EOP0000127


16/112

BUPPLIES OR SERV ICES AND PPdCFaCOSTS

1.I GENERAL DESCRIPTION

The contractor shall, performthe effort required by tl~is task order on a Labor.Hou r (LH ) basis forCLINs 0001, Firm FixeA Price (FFP.) for CL~I.10002, and Time & Materials for CL1Ns 0003.Tlle work shall be performed in accordance with all sections ofth~s task order and the offerorsGS A Schedule, under which the resulting task order will be placed. The contractor, o~ throughthooontractors teaming agreement.or st~bcontraetorsi ~a-ll support all Special. Item N m:nbers onthis ta~k order. Additionally, all so~vare, maintenance, and licensing shall be on theoontract0rs GS A Schedule and/or contractors teaming agreement at time of purchase.] .2 SERV ICES AN D PRICES/COSTSThe fol16wing abbreviations are used i n this price schedule:CLAN: Contract Line Item NumberODC: O ther Dkeot CostNT E: Not to ExceedLH: Labor HourTAM : Labor & MaterialsFFP: Firm Fi~ed Price1,2.1 MANDATORY LABOR HOUR TASK:CLiN DESCRIPTION TOTAL TOTAL NTE CEILINGHOURS

Labor 904 $225,23 O , 00Labo~ Category I~0nrs Hourly RateD e p l o y m e n t M a n a g e r ~4 $251 .25Solutions Archi tect I 240 $265.00DCT M S olutions Architee{ i 240" $230,00DCTM Systems Consultant 160 $230,00D C TM S o l u ti ons A r ch i te c t 20 4 $265,00TOTAL ,HOURS 904 $225,230.00

Task Order GS T0007AJ0032GS A Schedule OS-35F-0780M PAGE !-1

EOP0000128


17/112

SUPPLIES OK SERVICES AND PRICE/COSTS

-1.2.2 MANDATORY FFP SOFTWARE, NL&INTENANCECLIN DESCKIPTION CONTRACT. TOTA.LT YP E0002 S ee Bill of Materials Below FF PAmendment 1: All hardware removed

T o t a l

$50,471.88$8,283.34

$10,617.60$1,419.39$5,256.84$734.30~373.52$ 0 , 0 0~ 1 . 6 8

Sofhvare

Clien! ProductsWebl@ (Include~ Desktop} Per Seat)

EMC~ [Per UserMailbox)E~C-g M C - F ~ ~ y s l~ mManager ge~erEM C F~ eManage/ClusterEMC -~ File System

Se~,er Products

]r o d U e l N u m b e r P a r tdeepro~t1019 1 8 3 1decprod 1 ] 9 4 6 0 1456-003-545 1831456-10~028 1831456-004-573 l456-004-587456-004-589 1457-000-256 2

$76.57$255853.41

$23,193.73$3,239,81

2 0 . 0 0

TOTALPRICE

$280,399.34$46,018.57$46,839.91$6,248.10

1,648.04$0.0o

docprod 1152 1 0 $28%13\

$330871.22$54 301.91$57,457.51$7,667.50

450.56

$2,021.57$ 0 . 0 0

$331L81Enterprise Sen, er [P~.r Seal) docprod 1026 1831 $57.43 $105,146.27 ~1g,926.33 24,072160Retention PoIicy Sen, ices (Per C P U ) doeprod 1159 $45.17630.Content Services for EMC Cenlera (Per 405 1 ~ 9 , 5 7 1 . 2 5 $9,571.25 $1,722.83 $11,294.08C e n t e r a R a c k ) ,:,CI Services .0?er C P Lr) doeprod,,ll,,l~ 4 $ 1 9 , 1 4 2 . 5 , 0 $76,570.00 $13,782~60 $90~352,60Tm~t~d Contenl Sin, ices, (Per CPU) docprod 1028 4 $9,571.25 $38,285.00 $6,891.30 $ 4 5 , 1 7 6 . 3 0Admlnistralion Preducls

Administrator (Per Seal) dovprod 1193 2 $1,914.25 $3,828.50 $689.13 $4,517.63Developer Studio V"P~r Seal) docpmd 1196 2 $ I ; 9 1 4 . 2 5 S3,828.50 $689.13 $ 4 , 5 1 7 . 6 3Records Manager Administrator (Per Seit) docprod 1195 2 $1,9!~.25 $3,828.50 ~689.13 $4,517.63 -ECl Services SDK (Per Seal) docprod 1122 2, $1,914.25 $3 82&50 , $689.13 $4,517.63ECI S e n . i c e s A D K (,,pe~t Seat) docprod 1123 2 $1 ,91425 $3,82g.50 $689.13 $4,517.63l~flsc Products and Senices~-,;ra ~r I CD- $45,ooo.oo $45,ooo.oo. _ $o .0o ~ 4 5 , o 0 0 , o 0 l~g ~:~i!~) ~ ~c~{~CWorl~ferencePasse~ ETS-CONF , ~1,595.00 ] I3,190.00 $0.00 $3,190.00

t

Task Order GS T0007M0032GS A S chedule GS-35F-0780M PAGE 1-2 -

EOP0000129


18/112

SUPPLIES OR SERVICES AND PRiCE/COSTS

.2.2 OPTIONAL ODC CLINs

CLINi Description Total Not-to-Exceed PriceODCs Depending n GSA Schedule used include " "0003 Indirect Handling R.ato__0 % NTIi , . $3,000,00G1}ANDT6TA~L ~LINS: ....... $ ...... .$1,051;973,22 "

1.3 SUP.PLI~S OR SERV][,C~ES AND PRICES/COSTS TABLES1.3.1 LIMITAT]ON ON OTHER DIRECT COSTSODC costs incurred on GSA Schedule task orders are limited to amaximum of g3,000 over thelife ofth~ task order.1.3.2 INDI-R_ECT/MATERI.&L HANDLING RATEODC costs incurred may be b~rdcncd with the contractors indirecffmatcrial handling rate if oneis ~nter~d in the contractors basic schedu le contract (contractor to enter am ount, but not to~xceed theceiling rat~ of the basic contract) an__~d s uch indirect/material handling rate is not "inolude~l in the f u l l y burdened labor rate, If no indirect/mat.erial handliag rate is specified inthe basic contract, no indirect/material handling rate shah be applied to or reimbursed onsuch cost~. If no rate is specified in th~ basic contract, none shall b~ applied in this taskorder,1,3,3 LABOR HOUR ~ILX AND RATESThe labor hour nil m ~ d rat~s specified in the contractors quote and inc orporated into this orderare for ~stimafion purposes, The ~ontragtor may increase or decrease, with prior written.approval of th~ IFEDS IM C OR ~ the number of hours by labor category, within ~ach]abor .CLINas needed to eff~ctiwly manage the project, provided the total fundedlabor co~t and total hoursare not exceeded. Any additional labor categories or in~reases to total ]]ours or ] .ncreases to~eilings required during performance m ust be added to the task order by modification.

1.4 INCREMENTAL FUNDING1.4.1. INCREM]gNTAL FUNDING LIMITATION OF GOVERNYvIENTS OBLIGATIONLncrmnentat funding for CLINs 000l through 0003 is currently allotted and avMlabla forpaymant by the G overnment. Additional incrcvflenta] f~nding for these CLIN s will be allottedand available for payment by the G overnment as the funds become available. The estimatedperiod of performance covered by th~ allotments for the mandat.ory CLIN s is from awardthrough nine weeks, The task o.rd~, will be modified to add fnnds h~crementaIly up to themaximum of $I,051,973,22 over the petfom~ance period of this TO . Th~se allotrffents constituteTask Order GST0007AJ0032GSA Schedule GS-35F-0780M P A G E 1-3

EOP0000130


19/112

SUPPLIES OR SERVICES AND PRiCE/COSTS

the estimated cost for lhe purposc of.FAR Clause 52232-22, Limitation of Funds, which applie.~to this task order on a CLIN -by-CLkN basis,1.4.2 INCREMENTAL FUNDING TABLE

~ .... C E I L I N G .......... FUNDED-J0001 ~$ 225,23 0. 00 $ 225,230.00 ~ $ ---"~"~~-} ~ 823 ,743 .22 $ ~.~- | $--~ a , e o o , o o ~ ~ . o ~ ! ~~m~ 1,051,973.22 $ 1,049,308.30I $ 2 ,664.921

rask Order GST0007AJ 003 2GS A S chedule GS G5F-0780M PAGE 1-4

2

EOP0000131


20/112

S T A T E M E N T O17 W OR K

2.1 pLrRPOSEThe purpose of this work effort is to 6btain highly technical and experienced resources who canassist the Office of the Chief Infon,aation Office~ (OClO) with tile installation, configuration,and testing othe selected electronic records management system, EMCs ~, Theoutcome of flfis_w.ork.wil!.be.the availability.elan enterpfis.e,wide electrortie.records .........management system which will enable the Executive Office of the President (EOP ) to bettermeet the retention policies of the varions components as approved in their Records Schedules.2.2 BACKGROUNDAgency EOP does not have a compressive enterprise wide certified electton~e recordsmanagement system. G iven the si~ifieant increase in electronic data and a desire to meet paperreduction goals, the OCIO is seeking s u p p o r t to install, configure, and test a n e w electror~orecords management systerm2,3 SCOPEThe scope of this effort involves providing consultation during the installation, implementation,and testing phases of this p roject as well as technical training for OCIO resources.The EOP is standardizing the enterprise records management strategy with EMC ~Software products. The G overnment will be purchasing EMC hardware components andproviding tb the ~ontractor as Government :Furnished Equipm en.t.Tlie organizations Within the EOP have sophisticated records management needs while theFederal organization, s have more standard retention and disposition requirements. There are anumber of different formats for documents that will ~ventuaDy be managed in the ~software solution. Thib Pildt will focus o n email and electronic docum ent formats. It will notaddress paper, scanning, or remote access solutions.There are t w o product areas that will be im plemented during this Pilot, email storage u sing~ / ~ and electro Tic document, retention using ~OCIO will require expertise in both of these core areas along with Records Managem entexpertise that spans these and other products within the overall sblufion. OCIO specificallyheeds assistance in:

Review of EOP records policies and Records Schedules (RS), procedures, and systemrequirements .-Development era pilot design documentInstallation and c~nfiguration of server co.mponentsSuccessful dem onstration of the systems .email~fonctionalil~ for electronic documents

T a s k Order GS T0007AJ0032GS A S chedule GS-35F-07801v~ PAGE 2-1

EOP0000132


21/112

STATEMENT OF WORK

PresenI rollout reconm~endations for ema{1 storage and electronic records across thefederal organizations Of theThe two products, ~/~ and i111111!i!~~, will be installed~nd configured on h]divid.ual server components.

....T.be OCIO% gee! is.an.aggressive.six:week project to .achiex, e the.abm:e objectives..Because thisinitial implementation will use non-production data and may not be !n a production S erverenvirorm~ent it will be considered a Pilot. The aggressive time frame limits the-Pilot to providingout-of-box functionality and configuration With no customizations.

users) within several weeks of the Pilots conclusion. The Pilot ~411 demonstrate the use of~ with 400 user email boxes and t~n user ioles. During the Pilot, the contractorshall outline the steps required to roll ou| this solution to 1800 em ail boxes. Actual roll out of"this solution for 1800 mail boxes is not included wilhin the scope of this engagement and isexpected to be awarded separaMy.2.4 TASKS

Provide Project M~nagemcntPropose Rcquircments and Integation S trategyRMS Migration Assessmen~ PhaseProduction Infrastructure Analgsis Ph aseTechnical Training2.4.1 TASK l -PROVIDE PROJECT MANAGENIENTThe coutractor shall provide project man~gernm~t support under this Task Order. This includesthe management and oyersigh! of all activities performed by contractor personnel, includingsubcontractors, to satis[y the requirements identified in tMs Request for Quote (RFQ), Thecon[rector shall identify a Proem Manager (PM) by name, w ho shall provide manag~nnent,direction, adn~nistratian, quality assurance, and leadersNp of the execution ofl~is task order.2,4.1.1 SU BTASK 1 .1 - COORDINATE A PROJECT KICKOFF MEETIN~The contractor shall sghedule and. coord{nae a Project K Jck-OffMeeting at the Igoation ~approved by the G overnment. Tbo m eeting will provide an introduction between the contractorpersonr]el and Government person:reel who will be involwd with the task ordBr, T he meeting \MIIprovide the opportunity to discuss tecN~ ical,, mm~agement, and security issues, and travelauthorizat~o~ and reporting procedure~. At a miNmura, the otter)does shall include keycontractor personnel key EOP persormel, and the F EDS IM C ontracting ON c~rs Representative(COR).2,d .1 .2 SU BTASK 1 .Z - CONV ENE TECHNICAL STATU S MEETINGSTask Order GST0007A J00~2G S A Schedule GS-35F-0780M PAGE2-2

EOP0000133


22/112

STATEMENT OF WORK

The contractor Progam Mar~ager shall convene a monthly Contract Activity and Status Meetingwith the TPOC, COR, and other key government slakeholders, The purpose of this me~ting is toensure all stakeholders are infom~ed of the monthly activity and status report, provideopportunities t9 [dent5 fy other activities and establish priorities, and coordinate resolution ofidentified problems or opportunities. The contractor Program Manager shall provide~rdinutes ofthese meetings, in.cludingaRendane~, issues discussed,..decisions.made, and.action items ...........assigned, to the COR within ten calendar days following th~ m eeting.2".4.1.3 SUBTASK 1.3 - SECTION 5011 COMPLIANCg REQUIREMENTSAll Erl" products and services proposed shall fuily comply ~A th S ee[ion 508 of the RehabilitationAct of 197 3, per the 1998 A mendments, and the A.mh itectnral and Transportation BarriersCompliance Boards Electronic and In_formation Technology Accessibility Standards at 36 CFR1194 . The ~ntractor shal] identify all Err pr& lucts and ser,,% es proposed, identify the technicalstandards applicable to all products and services proposed and state the degree of compLiancewith the applicable standards. Additionally, the contractor must clearly i~dicate where theinformation pertaining to S ection 508 compliance can b~ found (e.g., V endors or otlmr exactweb page location), The contractor must ensure that the list is easily accessible by typical usersbe~nning at time of award.

2A.2 TASK 2 - REQUIREMENTS AND INTEGRATION STRATEGYThe contractor shall propose an effort ~dth a brief review of the goals, objectives and any w orkcmnp!eted to date in order to support the development of a project plan. Given the timeframe forperforming an analysis and developing a Pilot, the temn w~ll need to gain significanttraders[and[rig of file problem and how host to utilize available resources. The outcome of thisphase will be th~ requirements for the Pilot an~l an intonation strategy for the analyzed recordsources."2,4,2.1 TASK 2.1- DESIGNIn this phase, the contractor shall develop the solution based on the Pilot.requirements developedduring the analysis phase. The resnlts will be documented in a Pilot Design Dooument (PD D),.The PD D MI[ document all major Ematl Archi~ing and Records ManageraenI dec~siom onobject mode[ definitions, including c~stom types, u~ers, groups, AccessControl. Lists, workflowtemplates, retention policies, holds, and.hfecy~!es. It will also document the serverconfigurations for both the N lot and pilot hnplementations. U sing the PDD as its specificreference, the implementation team wLll build" the Pilot during this phase. Once installationand configuration is complete, the Pilot will be tested to ensure the configuration is correct andan ~sessment plan will b~ drafted.2.4.2.2 TASK 2.2- ASSES SIVIENT

Task Order GST0007A J0032GS A S chedule GS-35F-0~80M PAGE 2-3

EOP0000134


23/112

STATEMENT OF WORKRedew assessment plan ~ n d scenarios. Ager ~nsuring the Pilot is configured successfully, thecontractor and OCIO teams will execute the assessm ent ptaru The p]an wi]I be scenario basedand will require .application tarniHarity to execute.2,4.3 TASK 2,3- PROPOSED ERM IMPLEMENTATION PLAN

..... germ,:ate a bro-p6sed p-l~r~ ~6r implementing an E~ system at EOP. ~e plan ~411 outline a setofreco~endafio~ ~d steps to d~loy ~ E~M solution at EOP. ~e ins~l]ation and-confi~ration team will docum ent installation notes and will make N emselvesv ai1~le forto fl~ee h o u r s for ~ infom~ al w~-t~ough of the application installation ~d admi~fis~ationpr6cess. Th ey will also f~iliafiz~ tim OCIO teen with technical resources like the develop~suppo~ site and t~MJ cal doe~mntaion. This phase will include any tecMical kaiNng in u,s~geof so.are,2.4.4 TASK 2- DELIVERABLEStn Order to establish Oear-cut completion points, OCIO has developed a l{st of ddiverables. Thefollowing table contains a proposed ]ist of d diverables:

DeliverablePi]ot Design D o c u m e n t

(PDD)

P i lo t R P . V A p p i i ~ ;t io n .

Pilot Emai] ArchivalApplication

Pilot A~se~s~ent ResultsDocument]mplemenlafion Plan.Proposal Document

Work Breakdown Structure

Description.~ document co.nt~ining the application zmd inf~strnclur~ designs for theThis MII include:

Re~rds mt,ufion, classification and taxonomy valuesApplication component design

. ~object, security, and Nerard~y designA P,~PS installation and implementalion based upon the out-of-the boxcontSgurationg detefmlned in the PDD. This will include core~installations ) and RPS specific one.~. "l-be teamwill document installation notes ~nd Will provid~ demo nsIrati6ns of systemfeatures.An em ail archiw :mst,~llatlon and implemcntatlon based up on the out-el-thebox configuratiom d~t=rmined in the design pha se. This will include ~ins!a]lations ~) led ~instsll;~fiom The team ~xdll docum~-ntinsta]lation notes and M ll:provi& demonstrations of system fealures.A documengr~ort containing the rgsults of the assessment.A documen t containing a proposed plan [or how t h e BOP m ight proceed withimpl~menting an EtLM solution for eapraring, securing, managing, searching,retrieving and disposing their d~ctTonic [~cords.A documenicontain}ng a baseline schedule of implemenlafion of the PilotThis doeum~t w ill be delivered within 15 working days from the start ofcontract II shall include railastone,% start and end date% resom-ces required(both the contractor and Q~IO), ~d deliverableg; The ~cbedule will beupdated weekly by either the OCIO Project Manager (PM) or the contractor

Task Order GS T0007AJ0032GS A Schedule GS-35F-0780M PAGE 2-4

EOP0000135


24/112

STATEMENT OF WORK

Weekly S tatus Report / A staln.ls rcpon vdH be delivered each Monday by 12:00 pm to th~ OCIOContracting O[ficers Teclmica] Representative (COTR ),

2.5 TASK 3 - MIGRATION ASSESSMENT AND PRODUCTION INFRASTRUCTURE ANALYSISZask.3 has been dN. .ided int~ two sub t,5~sks.j.n or.d. ~r..t.o. qlari.fy lh.e purpose..g.n_d deliserable.s of_.these related activities.2.5.1.1 SU BTASK 3.1 - RMS "MIGRATION ASS ESSMEN T PHASEThe contractor shall include one ~Architect resource for the duration oF this task.The additional resource will sen,b a dual function. Roughly 50% of this resou.rces activities willbe dedicated to assessing the level of effort required to migrate the existing ~RMS environment to versiontl~l~and providing the EOP with a M igration RecommendationsDocument which includes a Functionality Matrix belaveen the existing system and the proposedend state system. Th e remaining 50% of this resourees efforts will be to properly assess EOPHigh Availability (HA) and Disaster Recovery (DR) requJremdnts and provide EOP with a HA ~and DR Recommendations Document. Further details regarding the specific deliverables for thisadded resource may be found below,The RMS Migration task will consist of a single three week phase where the contractor shaI1analyze the existing ~i~lllllll~system. The contractor shall create a matrix which Ii~oesup the existing ti~l~customJzed N nctionality with ~hat of the ou t-of-the-box N nctionality inIII1~~11 ~. Once the functionality mapping is eomplele, the contractor shall d~cum~ ntrecommendations to EOP on which ~ustomized functions should be duplicated in thenew system~md which are either "n o longer required or are cost prohibitive to d.uplicale.2,5.1,2 SUBTASK 3,t,1 - ILMS MIGI~ATION ASSESSMENT DELIVERABLES

Delivernble .DescriptionRMS FunCtionality Mntrix .RMS Migration Do~ument Nat des~ibe~ the recommended approach to migrating the P&ISRecommendations ~tem fro~ Jt will contain best practices for bo(h rimerenal ~dD ocum ent. docum ent m igration. It will also eo~taiz tim e and resource eaS -nn~es.

2,5,2,1 .SUBTASK 3,2 - PRODUCTION INFRASTRUCTURE ANALYSIS PHASEThe H A ~ad D R Analy~i~ task will consist of a single three week phase where t~e contractorshall maalyze EOPs HA aM DR requirements and produce a reeomme.nda(ions document on abest practices approach to e.nable HA and DR [br the new ~

2.5.2 .2 SU BTASK3.2 ,1 PRODUCTION INFRASTRU CTURE A NALY SISDELIVERABLES

Task Order GST0007AJ0032G SA Schedule G S -35F-0780M PAGE 2-5

EOP0000136


25/112

STA TEMENT OF WORK

Deliv.era hie DescriptionEnvironment Architecture Physiaa] and logical grapNcs that show Teoormrnendcd server configurationsDiagrams ~JDR) for the test, staging, mad produotion ~ n v g - o n m ~ n ~ .Produmian In frastmclure Documen t that desaribes tho recommended design for building out ~~a]l ofReeammendation~ the enkonm~nts withhn EOP (d~vclaprne.nt, ~taging, ~ad production); It MIIcontain bes! practices for configuration te~ng, and rnMntenance. It MI also~ntain time and resource estimates,

TASK 4 - PROVIDE BILL OF MATERIAJ~SProvide all soRware and maintenance identified in S ection !.2,

Task Order GS T0007AJ0032GS A S checlul~ G S-35F-0780M PAGE 2-6

EOP0000137


26/112

PACKAGING AND MARKING

3,] DELIVERAB LESThe contraclor shall provide deliverables to addresses identified in Contrac! Administration Datain machine readable format using and ~ via email, or CD-ROM forthose deliveries that cannot be e-mailed. - -The contractor Sh all use best comm ercial praefic.es for formatting deliverables under thi~ TaskOrder.3.2 M.A!CA4]NGS FOR ELECTRONIC DELIVERYElectroMc copies shall be d elivered via e-mail attact~nent. The contractor shall label eachelectronic clelivery with the Task O rder Nu mber and Project Tille in the suSject line of the e-mailtransrrfi ttal.

~ask Order GST0007AJ0032GSA Schedule GS-35F-0780M PAGE 3-1

EOP0000138


27/112

INSPECTION AND ACCEPTANCE

4.1 PLACE OF INSPECTION AN D ACCEPTANCEInspection and acceptance of a!l w ork performance, reports and other deliverables under th~ s - Task Order shall be perfomaed by the EOPs 2" ectmical Point of Contmzt (TPO C).4.2 SCOPE OF.1NSP.ECTION ......4.2.1 All deliverables will be inspected for coptent, completeness, accuracy-and conformanceto Task Order requiremen~ts by the COTR. The scope and nature of this inspection {viii. besufficiently comprehensive to ensnre the completeness, quality and adequacy of all deliverables,4.2,2 Th e G overrnnent requires a period not to exceed ten (10) work days after receipt of finaldeli-~erable items for inspection and acce ptance or rej~ti~n.4.2.3 BASIS OF ACCEPTANCEThe basis for acceptance shall be compliance with the requirements set forl~h in the Task O rder,the contractors quote and other terms and conditions of the contract. Deliverable items rejectedsha]l be corrected in a.ecordaace with the applicable.clauses.4.2.4 Reports, documents and narrative .type deliver~les will be accepted when alldiscrepancies, errors or other deficiencies identified in wriling by the Government have been.corrected.4.2.4.1 If the draft deliverable is adeq~aate, the Government may accept the draft and proridecomments for incorporation into the final vmsion. ~"4.2.4 ,2 All of the G overnments comments to deliverables must either be incorporated in thesucceeding version of the deliverable or the contractor must demonstrate t~ the Governmentssatisfaction w]~y such comments should not be incorporated.4.2.4.3 Ifth~ Government finds that a ohaft or final deliverable contains spelling errors,grammatical errors, improper format, or otherwise does not .~on forrn to the requirements statedwithin this Task Order, the docttment maybe immediately rejected without furtherreview andreturned to the contractor for eorrectlon and resub~rfission. If the contractor requires ad ditional -.G overnment gnidance to produce an acceptable dred~ the co ntractor shall arrange a meeting withthe COTR.4.3 DRAlrF DELIVERABLES4.3.1 T he G dvernment will provide ~ it~en aeceptmaee, comments and/or change requests, i fany, within ten (10) work days (unless specified otherwise in DelA,eries or Performan.ce) fromGov ernment receipt of the draft deli~,erable.

@ask Order GST0007AJ0632GS A Schedule GS -35F-0780M PAGE

EOP0000139


28/112

rNSPECTION AND ACCEPTANCE

4.3.2 U pon receipt of the Govemmenl comm ents, the contractor shall have ten (10) work daysto in.corporate the Gov.ernments comments and/or change requests and to resubmit thedeliverable in its final form,4 ,4 W R IT TE N AC CE PT A NC E/R EJ EC TIO N BY T H E G O V ER N M EN TThe .Oovenmaent shafl.pro.v.ide wfitlen notificatlo~ of.acc~ta~ce ordeliverables within ten (10) work days (unless specifiedPzrformal~ce). All notifications of rejection MI1 be accompanied with an explanation ofthespecitb~ deficiencies causing the4.5 NON-CONFOKMING PRODUCTS OR SERVICESN on-confomaing products or services will be rejeetet Deficiencies will be correled, by theeontrator, within ten (10) work days ~fthe rejection notice. Ifih~ defi~ieneies cannot becorrected within t~ (10) work clays, the contrac, tor will immediately notify the COTR of thereason for the de~ay m~d provide a proposed correcti.v~ action plan v, dlhin ten (l 0) wo~k days.

Task Order GST0007AJ0032GSA Schedule GS-35F-0780M PAGE 4-2

EOP0000140


29/112

DELIVERIES OR PERFORMANCE

5.1 PLACE OF PER~OI~h[ANCE

Place of performance Js tim EOPs Office in the metropolitan Washinglon DC area and the datacenter facility............ 1.800 G. Street, NW .............. . -: ............Washington, DC. 20006

5 , 2 P E P , ! O D O l z P E R F O R M A N C EThe period of performance [or this Task Order is Date of Award plus 9 weeks. The annualMaintenance period is not incbded in the period of performance. ScK twaro and all media sha]lbe delivered in 15 work days,5 . 3 TASK ORDER SCHEDULE AND MILESTONE DATESThe following schedule ofm[lestones will be used by th~ FED $[M CO P, to monitor timelyprogress under this Task Order.The following abbreviations are used in this schedule:NLT : No Later ThanTeA: Task Order AwardAll references t o Days: Workdays

; : , ~ : ~ : 4:.~~ &;." "-...y,: : , : . . ~ i : . .~ . ~ - ~ . ~ ~ ~ ? ~ ~ : ; , : , , r : :~ : ~ l : " < ~ _ 4 , ~ . ~ , ; ~ . t .~ g . - ~ ; ~ 7 :-?~E~ .T,.ON a ~ E . ~ i ~ ~ E ~ t [ L ~ ! ~ : t { ? 4f L . - " O . : X . ~ ? : . ~ i : ~. ~O~LET, ION;~-...T.-.B:,~: ~p r o ] , " e . ~ [ . s t a r t ( P S ) At TOAKickoff Meeting 5 days after T O AP}!ot Design Document (PDD) Per SOW Paragraph 2.5.1 and

Conicactors QuoteP r o p o s e d E R M I m p l e m e n ~ a i i o r i P l ~ n l " " Per SOW Paragraph 2.5.3 and,Contractors Q uotePilot Assessment Results Document P e r S O W P a r a g r a p h 2,5,4 andCoht~aotors QuoteWdrk Breakdo~a S tructure Per SOW Paragraph 2.5,4 m~dContractors Q uoteRMS Migration Assessment Per SOW Para~aph 2.6.2 andContractors Q uoteRiMS Functionalily Matrix Per SOW Paragraph 2,6.2 andContractors QuoteEnvironment ArchkectureDiagrams (H A/DR ) P e r SOW Paragraph 2.6,4 andContractors Q uoteBill of M aterials P~r SOW P~ragrap a 1.7 ~ndContractors QuoteTask Order G S T0007AJ0032GS A Schedule GS-35F-0780M PAGE 5-1

EOP0000141


30/112

DELIVERIES OP~ PERFORMANCE

Originals of MI dcliverables ~d ~o~espondence shall be dljver~ to th~ GSA Cohering...... OfficffvKepres~ntatiw an~ Con~a~g-Officar .identifiad~in. Comracl.Admini~lra#on Data.. ....... ~ ..........Copies of all d~~verabte~ shill also be delivere~ lo the Cli~t ~OC ]].sted ~ CamraclAd m in i st ra ti o n Da ta ,

5 . 6 NOTICE REGARD. ING LATE DELI~rERY/PROBLEM NOTLVfCATION REPORTThe contractor shall notify the FEDS IM COR and CO via a Problem Notification R.eport (PNR )as soon as it becomes apparent to flae contractor, that a scheduled delivery w ill be late. Thecontractor shall include in the P N I ~ the rationale for late delivery, fl~e expected date for thedelivwy and the project impact of the late delivery. The FED SIM COR will review the newschedule and provide guidance to the contractor. Such n otification in no way limits anyG overamm~ t ~ontractua] r~ghts or remedies-including but not limited to termination.

Task Order GST00~)7AJ D032GSA Schedule GS-35F-0780M P A G E 5-2

EOP0000142


31/112

INVOICING

INVOICE SUBMISSIONThe contractor shall submit Requests for Paym ents in accordanoo with the format contained inOSA M 552,232-70, INV OICE REQU IREMEN TS (S EPT 1999), to be considered proper forpayment, h~ addition, the data elements ~ndieated below shall be included on each indice,

Task Order number: GST0007AJ OD32Paying N umber: 2147951 0FEDSIM Project No. 27120"Project Title: AG EN CY EOP Records ManagementThe contractor shall submit invoices as follows:The contractor shall utilize FED S~M s electronic Tracldng and Ordering S yslem (TOS ) N ext tosubmit invoices, The contractor skall submit invoices electronically by logging onto:

Select V e n d o r & q ) p o r , log in using your assigned LD. and password, then click on C r e a t eInvoice. The TO S N ext Help Desk should be contacted for support at (~1~~I Byutilizing ~is method, no paper copy of the invoice shall be submitted to G SA FEDS IM or theG SA Finance Center in Ft, Worth, TX. H owever, the ~ontractor may be required to submit awritten "hard~opy" invoice to the Government if requested by the FED S~ 46.2 INVOICE CONTENT6.2,1 LABORThe coatzactor may invoice montl~y on a monthly basis. The invoice shall include ~be period ofperformance cover.ed bythe invoice and the CLIN lmmber and title and IA number. A ll hoursand costs shall be reported by CLIN ele.ment (as shown in ~pplies or Ser~q:ce~ and Prices/Costs)and contractor employee, and shall be provided for the current billing month and in total fromproject inception to date. If teaming or subcontracting is proposed, o n e consolidated invoicefrom the prime contractor shall be submitted in accordance with othdr terms and oonditious ofthe KFQ. The contractor shall provide the invoice data inspr.eadshbet form with file f~llowingdetailed information. The listing shall include separate columns and totals for the current invoiceperiod ~d the project to date.

Employee name (du rrent and past employees)Employee company labor categoryEmployee labor eat~golyMonthly and total cumulative hom:s workedBurdened h o ~ l y labor rateCost izeurred not billed

Task Order GST 0007AJ0032G S A Schedule G S-35F-0780M PArlE 6-1

7

EOP0000143


32/112

6.2.20DCSThe contraclor may invoice on the basis of cost ]ncmred for the ODC CLIN ~p to the NTEamoumt. The invoice shall include the period ofperfon~anoe covered by the invoice and theCLIN number and title and IA number. In addition, the contractor shall provide the followingdetailed information for each invoice submitted, as applicable: Spreadshe et submiss~dng, in ~t~ermat; are required. . .........................................................................

eDGe purchasedDate delivery accepted by the GovernmentAssociated CL1NProject to date totals by CLINR_emairxing balance.of each CLIN .Indirect Handling Rate in accordance with the basic contract

6. 3 CONTtL.4.CTENG OFFICER (C O) -To be provided at award)GSA FEDSIMATTN: ~, Contracting Officer6354 W alker Lane, Suit6 200Alexandria, VA 22310Telephone:Fax:Email:

6.4

6.5

TECHN ICAL POINT OF CONTA CT {T POC) (To be provided at award)ATTN: ~Street: 1800 G S treet NWCity/State: Washington, D.C. 20006Cell:Email:CONTtL&CTING OFFICERS 1LEPRESENTATIVE (COR) .GSA FEDSIMATTN: ~, COR6354 W alker Lane, Suite 200Alexandria, VA 22310Fax:

Task Order GS T0007AJ0032GS A Schedule GS -35F-0780M PAGE 6-2

EOP0000144


33/112

6.6 CONTRACTING OFFICERS REPR_~SENTATIVE (COTR)RF~$PONSfBILITIES ".m The Contraufing O f f i c e r will appoint a COTR in writing for each task order (TO). The CO TR_will receive, for the Government, all work called for by the TO and will represent the CO in theteclmical phases of the work. The CO TR will provide no su pervisory or instraetiona~ ?~ssistanoeto"eontraetor personnel. ............ - ........... . ..........................................................b. The CO TR is not authorized to change any of the terms and conditions of~h~ TO. C hangesthe scope of work will be made only by the CO by properly executed m odifications to flxe TO,Additional r.esponsibilities of t-h~ COTR h.~clude:

( 1 )( 2 )

Monitoring the contractors performance to ensare compliance ,Mth technicalrequirements of the TO.K~vie\v and approval ofpro~ess reports, technica! reports, ctc.,which requkeGovermnent approval.

Task Order GST0007AJ0032GSA Schedule GS-.35F-0780M PAGE 6-3

EOP0000145


34/112

SPECIAL CONTRACT RE~UrREMENTS

7.1 GOV ERNMENT FURN ISHED PROPERTY (GFP)The Government shall provide office space, personal computers, telephones, foxes, copiers, a n doperating/office supplies as required Io fulfil] performance requirementsunder lhis ~ogtract. Thelist shall be periodically updated by and C ontractor ~d validated by the COT R. C ontractor staffshall also receive appropriate passes to enter Govenunent facilities-.- Use.o-a:I1-Government- ................famished items for other thm~ Oovem rnenl work is strictly proh~ited, _The Contractor shall maintain a list of Govem ment-f~arnished items throughout the iif~ of ~h~contract, and th~ list shall be made available for Government upon demand. Contractor staff shallfollow EOPs checkout procedures to assure that all Government-furnished items are returned ingood operating condition to the G ovenm~eni. The Contractor shall be responsible for the cost ofreplacing lost or damaged items, including losl building access fobs (approximately $50 each)and V iotim R escue Units (approximately $3~0The G FP listed below is the equipment tha! will be purchased by Agency EO P for use oftask order and furnished to the contractor as GFP for implem entation of the records managementsystems. Thebelow equipment is exp~ted to be delivered to th~ contractor no later than 25 daysafter award of this task order.

121338-11414I114i 1

Task Order GS T0007AJ0032GSA S~iaedule GS-35F-0780M PAGE 7- 1

EOP0000146


35/112

SPECIAL CONTRACT RE__QU IREMENT.S__

Task Order GST0007AJ0032GSA Schedule GS-35F-0780M

2.1

PAGE 7- 2

EOP0000147


36/112

SPECIAL CONTRACT R0U IILEMENTS

ThE G overnment will provide infommlion about the Agency environment, organization chart,a n d h~dividuals as determined by ti~e TPOC.

7.3 SECURITY RigQUIREIVIENTSAll data and information required in the pertolTnance of this task is unelassitfed, and a seou rltyclearance is not required in performance ef this effort. Howev er, access to the EOP and all otheragency faoilities require approval by the agencys Officeof Security and EmergencyPreparedness (OSEP). Approval is granted after suitability is determined by considering theresults from a name check p~cformed by the Federal Bureau of have~ igation ~B1-). Contractorsmust allow ten worldng days prior to the pmjeoted start date for a name check to be processedand. approved by OSEP. A Ll Contractor pers?~mel must be 18 years of age and U.8. citizens,Contractors.are responsible for providing personnel w h o meet the EOPs personnel securityrequirements. 1n this regard, oon*raEtors are expected to perfoma initial background cheeks ofpo*ential employees. Failare to do so } esult~ in an mm ~eessary delay ofbe#nning ofconlractperfo .rmanEe; results N a waste of Germ-am our resources to do baokground checks on contractorswho should have been p ro-screamed; may result in unfavorable pitst perfon-nanee evaluations forthe contractor, because of a failure to meet contract requirements; and may be a faotor forevaluation of any award fees, if app licable.Contractor personnel who requ[r~ access to the complex for !opger than 90 days-wil! also berequired to u~dergo a full-fielO FBI inv~stigatiort, and other background investigations asdE~med appropriate. Contractors must provide information to com plete the N il field backgroundinvestigation within lwo weeks after th.dr start dale at the BOP Com plex or wifl~in two weeks ofbeing notified that thdr work will extend for longer than a 90 day per~od. Permanent access(beyond 90 days) is ganted only after OS EP.review and approval of the results of theinvestigations.

T~k Order GST0007AJ0032GSA Sd~edule G.S-35F-0780M PAGE 7- 3

7

EOP0000148


37/112

SPECLAL CONTRACT REOUIREMENTS"

Contractor is responsible for ensuring that all c~ntractor personnel follow the EOPs chEck-outprocedures when access is no longer reqairEd. Departing persormel must return building passesto OSEP where they w-ill obtain instructions for checking out of the complex.Access to the EOP complex-All Contractor personnel who r~cE.iVE a ~-,S :-SEcrEt S Ervice..(USSS),issued-badge, granth~ g --access to a facility ofthe EOP complex or receive access to EO P systems for 90 days or more,regardless oflocalion, will be su~ojeE t to pre-acE ess drag testing. _ContraEtor personnel with no EOP complex accessCo, tractor persormel who do not receive a U SS S-issued badge, but who receive access to EOPinformation te.clmology systems for 90 .days or morE, regardless of access location, will besubject to pro-access drug testing. The Contractor personnel should also be included in theContractor s Dru g-Free Workplace pro gram.ThE a ppropriate EOP Chief OfficEr may also require prE-aooEss testing of Contractor personnelwith access to EOP hfformation technology systeNs for less than 90 days. Consideration fordrug tenting thEs~ Contractor personnel should inel.nde~ but is not limited, to, the systems towhich the Contractor personnel have access and the nature of the access. ThE Contractorpersonnel should also be included in the Contractors Drag-Free Workplace program.Computer SecurityAll Contractors accessing EOPs systems shall be rEqu irEd to comply with all compu .ter securitypollc~es and practices of the E OP, In addition, Contrb.ctor personnel who are granted specialaccess privileges to perform system administrator functions will bE required lo sign a SpecialAccess Privileges ,4g~eem.en!. This agreement ensmes that privileges .will only be used forrequired Nnctional purposes. (EOP Will provide form to ContraEtor.)Security of Un class i f ied Information a n d I n f o r m a t i o n SystemsThis section implements the EO Ps acquisition requirements pertaining t o federal policies f~r thesecurity of unclassified information anii information systems to fl~e extent that fl~ogerequirement~ apply to the EOP. Federal policies include but are not limited to:

FedEral Information.System Mmaagement Act (FISM A) of 2002 Homeland S ecurity Presidential Directive (PISPD) 12Clinger-Cohen Act of 1996 (40 U.S.C. !401 et- seq.)Public Law 106-398, section 1061.OMB Circular A-130, Management of Federal Information ResourcEsO M B M e m o ra n d u m M-06-16, Protection of Sensitive AgEncy IaffomaationNational Institute ot Standards and Technology (N IST) Special Publications(o include the minimum securit3(, controls identiEd in SP 8 00-53)Federal Information Processing Standards (-FIPS) to include but limited to FIPS140-2, 199, 200~ etc. -

Task OrdEr GST0007AJ0032GS A SchEdule G S-35~F-07.80M PAGE 7- 4

EOP0000149


38/112

SPECIAL CONTRACT REQUIREMENTSThese requirements safeguard IT sen;ices provided to the EOP such as the rmmagemenl,operation, mainlenan~e, development, and administration of h~dware, software, firmware,computer systems, networks, and telecommurfications systems. Along with these federalguidelines, i~ is expected that any solution comply with the standards 6etailed withinIn format.ion Assurance (IA) D irectorale Poticy which will be made available with the approvalofOCIOs IA D irectorgte as needed. In addition to existing federal standards and gun,lines, it

......... . .... is the C 0nt~acto~s respons[bility.to adhere to new requirements.that-pertain to the.security of.unclassified infon~afion and information systems as these requirements are iss_u~d by federal.entiti es. -Information systems used or operated by the EOP or by a contractor of the EOP or otherorganization on behalf of ~e EO P must be authorized to o]~erate by the EOP DesigaatedApproval A uthority (D /u~) through the certification and accreditation process as o~tlined iaN !ST SP 800-37, G uide for the Security Certification and Accreditation ofFederal InformationSyste.ms. T he ce~ficafion process verifies that an infomaation system has employed secmTi.tycontrols in accordance with N !ST SP 800-53, Recommended S ecurity Controls for FederalInformation Systems, and consistent with thesecurity categorization of the information type(s)ma[ntained by the system as defined by N IST S P 800-60, G uide for Mapping Types ofInformation and Information Systems to S ~udty and FLPS 199, S tindards for SecurityCategorization of Federal Information and Informafion Sy stems, and acceptably meets federalstmadards such as the list of regulations identified above.Within a time agreed upon by all parties involved.after the contract award, the ContJ-actor shallsubmit an [I" Sedurity Plan that includes descriptions oft-he management, operational, andtechnical security controls (as defined in N IST 8P800-53) employed in the system to theContracting Officer for EOP approval This security plan shall be prepared consistent in formand content with N IST SP 800-[8, G uide for Developing Security Plans for Federal InformationSystems, and include any additions/angmentations described in OCIOs IA Program and Policy.The security plan shall includ~ an assessment that shall identify all information types as well asthe "high water mark," as deKned in FEPS 199 and N IST SP 800-60, offl~ pro~essed, stored, ortransmitted information necessary to fulfill the contractual .requirements. TI~g sec.udty p lan shallalso identify and document the proposed implementation of appropriat~ IT security controls inaccordance with bUST SP 800-53, mandated by FIPS 200, Minimum Sezurity Refluiramm~ts forFederal Information and 5ffonnafion Systems, and consistent with the security categorization ofthe information types and the requirements of the FIPS 19~. The plan Shall be reviewed andupdated in accordance withN1ST SP 800-53 and E[P8 200 on a ~,early basis.7.4 DRUG TESTIN~ 7.4,1 Pre-employment TestingConsistent with the EOP drug-free wor~lace program, all Contractor personnel required toundergo.a pro-aCcess drug test m~st be tested no more than 30 days prior to being granted accessto an EOP complex facility or EOP systems. EOP Human. Resources Management Division(I-IRMD) will arrange for the testing at goveram.ent expense, either at a govenm~ent facility oi- agovemmenl-contracted location.Task Order GST0007AJ0032 .GS A S chedule GS-35F-0780M P A G E 7- 5

EOP0000150


39/112

SPECIAL CONTRACT REQUIREMENTS

Subj~t to the language described below, all contractor employees who work on this contract willbe sabjecl Io the stone drug testing requirM of G overnment employees before they m ay r~ceiveaccess to the EOP complex or EOP ~stems to be~n work on ~ EOP contract. ~is requirementis in addition to FAR Clause 52.223-6, D rag Free Workplace, Drag testing coaffa~torsthe G ~ve~ents h~teresl in protecting sensilive information an0. floe natur~ of the c~r~torswork p~ffomaed..in m) pp~.of.E.~ Fs mission is s~h that ~g ~e.w.ould cause a direct ~dimm~iate h~a to orgaMzafions EOP suppo~.For p~arposes of this contract, the term "Contractor" includes, but is not limited lo, ~e company(including an individual) performing on an E OP-awarded contract; employees of contractors;subcontractors; and employees of any subcontractors, The term "Contractor personnel" includesindividual employees of a contractor and em ployees of any subcontractor. Additionally, an"EOP contract" includes, but is not lim~t~ to, contracts awarded by the EOP ProcurementBranch, and contracts awarded on EOPs behalf by such organizations as G ovWorks, or theGeneral Services Achninistrafion (GS,i.) for the acquisition of goods or sere, ices funded by EOP,EOP strives to maintain the Nghest level of security for the information and systems used by itscustomers, by ensuring a drug-free work environment, Subject to th~ guidelines below,contractors m~t submit to and su~essNlly pass a drug test as a condition o fre~eiving access tothe EOP complex or EOP systems under an EOP-awarded contract. Contractor personnel willalso be subject to reasonable cause drug testing,Contractor employees may be required to pass a drug test prior to be~nning work on thecontra~t. If required, th~ Contractor may either p.rovide proof that employ ees passed a pro-emplo}~ment drag test, or participate in a Government-sponsored testing program. If theContractor dccides to participate in the G oyernment program, EO P, H N M Division will arrangefor the drug test at ~ao cost to the Contractor, and provide the results of such tests to theContractor.

7.4.2 RandomTestingConsistent with FA R 52 .223-6, Drug-Free Workplace, the Contractor shall randomly drug testpersonnel working on this contract in a manner equivalent to that covered in tile EOP Drug-FreeWork-pl.aee Plan. If the Contractor does not have an existing random drug testing program,Contractor must either establish a program or participate ia the EOP D rug-Fre~ _Workplace Plan,The E OP p lan may be reviewed by arrangement with the Contracting Officer. "At a minimum, the Contractors plan for random drug testing shall follow the proceduresdeswibed in-the Department of Heallh and Human Ser~dces (H I-IS) Manda tory G~fidelknes forFederal Workplace Drag Testing, effective Scptember 1, 1994, as described in the SubstanceAbuse and M ental Health S ervices Administration Mandatory Guidelines for Federal WorkplaceDrug Testing Programs, These programs are available on the Interact at http:/ /w~.w~r~c~ace.sarn~a.g~v~DrugTdsting~NaflLE~PertPgm1MG~idelines.~tm..

Task Order GST0007AJ0032GSA Schedule GS-35F-0780M PAGE 7- 6

EOP0000151


40/112

SPECIAL CONTRACT R_EQUIP,.EMENTSl.f the Contractor already bus an existing random drug-testing program, the C oI~tractor mustsubmit a report of the number of emp loyees tested on a random basis m~d the results of randomtesting. The report should also include those instances where employees were removed from theperfom~ance of this contract for testing positive for drag use. This report m ns~ be submitted tothe EOP H.RM via the EOP COTR semi-annually.In the event flm.t a C ontractor:s emplo.ye.e tbsts.positive for. any substmace refen-cd to above,.artd ................the test is verified by the Contractor as un-atM butahle to an excusable sou rce, for example, aproperly prescribed medicodon, the Contractor must immediately notify the COTR. _% 5 PROltlBITION OF ADVERTISING OF AWARDThe contractor shall not refer to fl~i.s award in comm ercial advertising, or similar promotions insuch a manner as to state or to imply thatthe product or services provided is endorsed, preferred,or Js considered superior to other products or services by the EOP. This includes advertising, orsimilar promotions, in all forms or electronic, broadcast, and print media.In addition, the contractor is restricted from reproducing the image(s) of the EOP in any form ofcommercial advertising, or similar promotion. T his includes images ofofficial seals andbuildings. The reproduction of official seals and the images of buildings are a matter controlledby regulation and Executive Order. Am y proposed usage of such sym bols must be brought to theattention of the Contracting Of~cer,7,6 ILESTRICTION AGAJNST D1SCLOSUR~The Contractor agrees, i.n the performance of this task order, to keep floe information contained inthe source documents famished by the E.OP in the strictest confidence, said information beingthe sole property of the EOP. T he Contractor also agrees not to pu.blish, reproduce or otherwisedivulge such information, in whole or in.prot, in any mariner or foma; nor authorize or permitothers to do so, taking reasonable measures as are necessary to restrict access to the information,while in ]fis or her possession, to those employees who must have the information to perform timwork provided herein_on a . " n e e d - t o - k n o w " basis, and agrees to imr~.aediately notify theContracting Officer in writing, in the event the C ontractor detemaines, or has reason to suspect, abreach of this requirement, The Contractor is responsible for ensuring all employees involved inthe per.fomaance of this task orkler to sign a "Restriction Against Disclosure" statement that is inthe following format. The Contractor shall provid~ an odgb~al c o p y of each. signed statem.ent tothe Contracting Officer prior t o each employee b~ginning work..

Company "Name:Employee Name:Date:Task Order GS T0007AJ0032GSA Schedule GS-35F-0781?M

tLESTK]CTION AG AINST DISCLOSq3tLE STATEMENT

PAGE 7- 7

EOP0000152


41/112

SPECIAL CONTRACT R_EQU[REMENTS

info~ation which m~y be of~ teclmic~l ~or s~nsitive n~e, ~nd which may b~ ~a sale pmpe~ of th~ U.8.Government I h~by agree ~hat [ w~l keep any and ~11 ~om~ation f~nished byth~ Gove~enl, or ~at I ~ghtothe~se ob~ or become aw~e of during the peffo~an~e ofth~ con~ac~ in the s~ctest confide~e. [a~ee ~at I ~m. speeifea~ly prohibit~ ~om p~)ishipg, reproducing ar ~s~ ~}~pg.~y ~u~h i~a~afiqp i~ .....wh~e ~r in p~ ~ any mn~er~r fo~, ] am prohibited fro~ ab~oi~[ng or permilt~g others to do so, andsuch re, enable measures ~ ~e neoegsa~ to reg~l access t~ the info~afion while in ~ possession.U ~ing information made ~vnilab]e m~der this contract for a purpose or to an extent unauthorized herein, may subjectme to criminal sanctions imposed by 18 U.~.C. 641. This section provide.% in pertinenl par!, "Whoever .,.lmowirtgly converts to hi~ use or to th~ use o f another, or wilhont ~therity. sells, conveys, or disposes of any record... of flee U niled Slate~ ,.. or whoev er reeeives ... lhe same with intent to convert il to his u se or gai~, "knowing it tohave been . . . converted, shall be fined [no* mor~ than $10.000] or imprisoned & n o t more than 10 years, or both

Signature!Date

7.7 TRANSFER OF SOFTWAI%E MAINTENANCE AGREEMENTS TO FOLLOW-ON CONTRACTORSThe contractor shall ensure that all sdflware agreements entered into und er this task order aretransferable to the G overnment and/or to ether contractors at the discretion of the G ocerm-nent.

7,8 D O C U I V I -EN T SThis section implements the EO P acquisition requirements pertaining t o federal policies for thesecoxity of unclassified information and information systems to the extent that thoserequirements apply to the EOP. Federal policies-include but are not limited to:

Federal Information System Management A ct ~ISMA ) of 2002Homeland S ecurity Presidential Directive (H SPD ) 12Clinger-Cohen Act of 1996 (40 U .S.C. 14 01 et seq.)P~blJe Law 106-398, section 1061OMB Circular A-130, Management of Federal Information ResourcesOMB M emorandum M-06-! 6, Protection of Sensitive Agency InSom~.ationNational Institute of Standards and T~.chnology (NIST) Special Publications (SP)(to include the rain~mum security controls identified in S P 8 00-53)Federal Information Processing S tandards (FIPS) to include but limited to FWS140-2, 199, 200, etc.

These requirements safeguard IT services provided to the EOP such as the management,operation, maintenance, development, and administration of hardware, software, fro:r/ware,computer.systems, networks, and telecommunications systems. Along with these federalTask Order GS T0007AJ0032GS A Schedule GS-35F-0780M PAGE 7- 8

EOP0000153


42/112

S P ECIA L CONTRACT REOLrlREMENTS

guidelines, it i.~ expedted that any solution comply with the standards detailed within OCIOsInformation Assurance {IA) Directorate Policy which will be made available with the approvalofOCIOs IA Directorate as needed. In addition to existing federal standards and guidelines, itis the Contractors responsibility to adhere to new requirements Nat pertain to tlm security ofunclassified infom~ation and infom~ation systems as these requirements are issued by federalentilies. - -Information systems used or operated by the EOP or by a contractor of the EOP or otherorganizaion on behalf of fl~e BOP must be au thorized to op~rat~ by the EOP DesignatedApproval Authority (DAA) through the certification and accreditation process as outlined i nNIST SP 800-37, Oukle for the Security Certification and Acc.reditation of Federal InformationSystems. The certification process verifies that an information system has employed secttritycontrols in accordance wiih N IST SP 800-53, Recommended Security Controls for FederalInformation Systems, and consistent with the seeuritycategorization oithe information.type(s)maintah~ed by the system as defined by N IST S P 800-60, G uide for Mapping Types ofInformat~on m~d Infommlinu Systems to Security and FIPS 199, Standards for SecurityCategorization of Federal Information and Information Sy stems, a~d acceptably meets federalstandards such as th e list of regulations identified above.Within a time ageed upon by all part{es involved after the contract award, the Contractor shallsubmit an IT S eem-try plan that includes descriptions of the management, operational, andtechnical security controls (as defined in NIST SP 800-53) employed in tke system, to theContracting Officer for EOP approva!. This security plan shall b~ prepared consistent in formand content with NeST SP 800-18, Guide forDeveloping Security Plans for Federal In~brmati.onSystems, and i~lude any additions/augmentations described in OC IOs IA Program and Policy.The security plan shall include an a~sessment that shall identify all information types as well asthe "high water mark," as defined in FIPS 199 and N IST S P 800-60, of the processed, stored, ortransmitted inlormation necessary to f~. lfill the conlract~al requirements. The security plan shallalso identify and document the proposed implementation of appropriate IT security controls inaccordance with NIS T S P 800-53, mandated byFIPS 200 , Minimum S ecurity Requirements forFederal Information and Information Systems, and consistent with the security categorization ofthe information types and the requhem~nts oft_he FIPS 199. The plan shall be reviewed andupdated ~n accordance with NIST SP 8 00-53 and FIPS 200 on a yearly basis.

Task Order G S Y 0 0 0 7 A J 0 0 3 2G SA Schedule G S-35F-0780M PAG E 7- 9

EOP0000154


43/112

CONTRACT CLAUSES

FEDERAI, ACQUISITION REGULATION (48 CFR CHAPTERSOLICITATION CLAUSES O~ttp:]/www.amet.gov/far/)

CLAUSE NO CLAUSE TITLE52.204-2 S ~ c u r i t y Requirement~52.217-g Option T o Extend Servioes[Fill-In Date: ] 5 Work Days]52 .244-6 Subconlraot~ For Con~neroial [toms

DATE- -(Aug 1996) -(NdV 199_9)(Dec 2001)

T a s k Order GST0007AJ0032G S A Schedule GS-35F-0780M Page 8-!

EOP0000155


44/112

LFMITED SOURCE JUSTIFICATION

..... (1) Identify. of the organization .and .the contracting,activity ...........................Executive Office of the President (EOP), O ffice of A dministration (CA ), Offfc~ 0fthe ChiefProcurement and Contaact Management Office (OCPCMO).(2) Natu re and/or description of the action being approved.EOP p roposes t~ conduct a soIe-sourceprocurement to EMC for a sole source contract to acquireEMC ~ad ~oflware, and the ~ervices to configure, krnplement m~dinstall an enterprise wide Records M anagement (RM) system. T his will be a Time and MaterialBlanket Purchase Agreement 03PA) under an e~isting Gener.al Services Administrations (GSA)Federal Saapply S chedule contract. This will be a one (l) year contract with three (3) one (1) -year option periods.(3) A description (3f.the snpplies or services required to meet the organizations needs(including the estimated value).This RM software mad services will allow EOP to be compliant in accordance with the NationalArchives and Records Administration (tARA ), 44 U .S.C, Chapter 22, 31 and 3g usingautomated soflwarc processes for RM. This project shall include the configuration anddeployment of software that will manage electronic records, email, files, and correspondence, asapproved by the OA G eneral Counsel, White H ouse Counsel, and in compliance with NA_R Apolicy, as well as theconfiguration and implementation of the software across all necessary EOPcomponents.The approximate cost. of this acquisigon including all options is egtirnated:The estimate is brok~ ddwn as f o l l o w ~ :$ 824,078.30 License fees (.Federal & Presidential) and first, year mainienance$ 259,015.00 CA Pilot and Assessment$1,083,093.30A.fter this pilot is completed, add itional task orders will be awarded under this BP A contract tocover tasks such as moving pilot to production, data ingestion, component deployment, traiMng,and support costs,

EOP0000156


45/112

(4) Identification of the justification rationale,Pursuant to the requirements of Title ]TLI of the Federal Property and Adm inistrative Services Ac tof 1949 (41 U.S,C. 25 I, et seq,) and Title 40 U.S.C. 50 i, Services for Executive Ageq~cies, asimplemented by-FA R, 8,4 05-6(b) (]),. this Limited Sou~ce.Jusfi fication, is.supported by fl~e ........... ,,- ......following facts and rationale as described in FA R g,405-6(g).The firsijustification is that after careful evaluation mad reseamh, the EMC ~.software was chosen as EOPs Enterprise Content Management (ECM) software, ThisEMCSoftware is the only Federal Information Processing S tandards ( P I P S ) a~d Department ofDefense (DoD) certified software that is also NARA approved. A I s % as per Gariner research forthe past three years to present, it is the top ranked ECM sofavare bn the market.The second ary justification is that EOP already has an existing instance of the software in use forthe Presidential scmmei5 records. The software being used is ~ which is goingout of support in ~ and requires EOP to upgade the software to ,~l~. While this willbe a separate task order ~nder this BPA, the new ~purchase tinder this project wouldprgvide the ne~ed licenses for the up~ade.The third reason for using the limited sdurce j usti ficalJon is 1]~e schedule o f implementation.This software must be operational before the next presidential term o n January 20, 2009. Inorder to meet this deadline, it is imperative that this acquisition be expedited and the pilot isoperational by August 31,2007.

(5) A determination by the contracting officer that the order represents the bestconsistent with 8,404( d),TheContracting Officer will ensure that the prices ultimately negotiated for this procurementwill be fair a n d reasonable based on established GSA Federa! Supply Schedule discountedprices.

(6) A description of the market research conducted among schedule holders, and the resultsor a statement of the reason market research was not conducted.Market research discovered that th~ EMC ~ and ~ software is the o~lyD o D and FIPS comptiant software th.at is approved by NA RA . In addition, Gartners marketresearch as well as the EOP capabilities matrix showing thai EMC ~ and~ is the only available so~vare float meets EOPs security and cerfffication needsand it is the proven leader ~n the industD,.

EOP0000157


46/112

FIPS 140-2 Compl iantDOD 5015.2 chapter 2 and 4 compl intNARA Certif iedStable Organizat ion an~l prod uc tHigh performer in Gartner Studie~Provides Records Managem ent -tonProvides Emai l Management ToolF . . O P C r ~ p r t b i l l t i ~ r

(7) Anyother facts supporting.the u~e of the justification.The BMC G SA Sch~du]~ was awmded undgr a GS A Federal SnppIy Schedule compefifioa.

crew versus executive office of the president et al (lawsuit): 6/23/2009 – eop 113 - 224

Documents