Department of Homeland Security (DHS), Department-Wide Cloud (Cumulus)

Statement of Work (SOW) / Performance Work Statement (PWS)

This Statement of Work (SOW) outlines the requirements for Cloud Service Providers (CSPs) to deliver enterprise cloud services to the U.S. Department of Homeland Security (DHS) under an Indefinite Delivery, Indefinite Quantity (IDIQ) contract. The goal is to transform DHS mission operations by enabling rapid application development, enhancing functionality and security, and expanding its portfolio of commercial and government CSP cloud computing services.

• The SOW supports an IDIQ contract for "Anything as a Service" (XaaS) cloud services, professional services, and training. This includes Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), Functions as a Service (FaaS), Database as a Service (DBaaS), and Container as a Service (CaaS).

• Services will be provided through commercial and government CSPs with established innovation and operational excellence.

• Focus is on modernizing and innovating DHS systems through cloud-based solutions, emphasizing microservices, API-driven frameworks, mobile extensibility, container strategies, and standardized, portable environments.

• Excludes non-CSP, third-party resellers, Managed Service Providers (MSPs), or contractor Lead System Integrators (LSIs) for services like system development or architecture.

• Ownership, Management, Reporting, and Support: CSPs must provide full ownership of root accounts, unrestricted access to billing/usage data, centralized account management, and program management support (PMO).

• Technical Requirements: Includes cloud reporting tool integration, technical support requests, and adherence to NIST SP 800-145.

• CSP Service Requirements: Covers access and availability, systems requirements (scalability, reliability, availability), IaaS, PaaS, SaaS, Serverless, and CSP Specific Marketplace Services.

• Performance Requirements: Specific technical requirements for Relational Database Services (RDS), NoSQL Database Service (NSDS), AI Platforms, Big Data, Data Warehouse Service (DWS), Network, Desktop Virtualization, Identity and Access Management, Encryption, Secrets Management, Secure Environment Configuration, Monitoring and Logging, and Intrusion Detection.

• Support, Training, SLAs & Professional Services: Enterprise support, training (at least 15 seats per year), professional services for cloud adoption, and adherence to Service Level Agreements (SLAs).

• Non-Technical Requirements: Includes contract reporting (monthly usage reports) and Section 508 accessibility compliance for all ICT products and services.

• Contract Type: Single award IDIQ contract with Firm Fixed Price (FFP)/Fixed Unit Price task orders.

• Period of Performance: Five-year ordering period, including one 12-month base period and four 12-month optional periods.

• Place of Performance: Established at the task order level, primarily at CSP facilities with limited Government facility access.

• Deliverables: Includes Post-Award Meeting, Account/Enrollment Transfer Plan, Product List Sets, Notification of Usage Consumption Letter, and Usage Reports.

• Acceptance/Rejection: Government acceptance based on coverage, quality, preparation, and timeliness. Non-conforming products/services will be rejected.

• Not explicitly detailed in this SOW, but compliance with U.S. Citizenship requirements and background investigations for personnel is mandatory.

• This document is a DRAFT Statement of Work (Attachment 2).

• Security requirements, including background investigations and access to sensitive information, are detailed.

• Reference and Policy Documents include DHS directives and NIST standards.

Solicitation / RFP / RFQ

This document is a combined synopsis/solicitation for commercial products and services for the Department of Homeland Security (DHS), Office of the Chief Information Officer (OCIO), Cumulus program. It serves as the only solicitation, and a separate written solicitation will not be issued. The acquisition is for Data Storage and Computing (Cumulus) requirements.

• The solicitation references Attachment 1 for the price schedule, including Cumulus requirement line items and estimated quantities.

• Attachment 2 details the Statement of Work (SOW), outlining the Cumulus requirement scope.

• Anticipated solution delivery under Cumulus includes Department-wide missions and locations, based on order-level requirements.

• The estimated performance period includes a Base Ordering Period of 12 months (Award) and four Optional Ordering Periods of 12 months each (Option Exercise).

• The contract type is anticipated to be a single award Indefinite Delivery, Indefinite Quantity (IDIQ) contract.

• Offers must be submitted by the specified deadline and include all required information as detailed in FAR 52.212-1, Instructions to Offerors.

• Key submission requirements include a signed cover letter, technical proposal (Volume I), and price proposal (Volume II).

• Evaluation will be based on a best-value source selection approach, considering Technical Capability (Factor 1), Relevant Past Performance (Factor 2), and Price (Factor 3). Technical Capability and Past Performance are combined and are more important than price.

• The Government intends to award without discussions but reserves the right to hold discussions if necessary.

• This acquisition is not set-aside for small business concerns.

• The solicitation incorporates provisions and clauses by reference, accessible at www.acquisition.gov.

• Offerors are encouraged to submit multiple offers presenting alternative terms and conditions.

• The solicitation number is TBD.

• The point of contact for this solicitation is Gregory Blaszko, Contracting Officer.

Form / Attachment / Pricing Sheet

This document is Attachment 4, a "Past Performance Questionnaire" for the "Public Safety Telecommunicator and Alarm Monitoring Support Services" opportunity. Its purpose is to gather information from references regarding a contractor's past performance quality. This input will help the Department of Homeland Security (DHS) evaluate contractors for requirements that may include commercial Cloud Service Provider (CSP) services, professional services, marketplace solutions, and training, broadly categorized as Anything as a Service (XaaS).

• The questionnaire requests information about the contractor's past performance on a specific contract, including:
  • Contract number or project title
  • Period of performance
  • Total project value
  • Annual number of hours
  • A brief description of the project scope
• It then asks for detailed comments on the contractor's performance in several areas, including:
  • Staffing and service consistency
  • Record-keeping and documentation accuracy
  • Professionalism of the workforce
  • Problem identification and resolution
  • Responsiveness to issues
  • Quality control and project management
  • Transition capabilities
  • Supervision effectiveness
  • Subcontracting plan adherence (if applicable)
  • Overall hiring recommendation
  • A summary rating of "Highly Acceptable," "Acceptable," or "Unacceptable."
• Contact information for the respondent is also required.

Bidders who are asked to provide references for this questionnaire should ensure their references understand the scope of XaaS services DHS is considering. The detailed questions aim to assess critical performance aspects relevant to the potential contract. The responses will directly impact the evaluation of a bidder's past performance, a key factor in contract awards.

Form / Attachment / Pricing Sheet

This document, "2. OCIO Cumulus - DRAFT_Solicitation A1.xlsx", contains two sheets detailing pricing and service estimates for the Department of Homeland Security's (DHS) Department-Wide Cloud Services (Cumulus) program. It is intended to guide Cloud Service Providers (CSPs) in submitting their proposed catalog discounts.

Sheet: Proposed Discount

• CLINs: Lists five CLINs (X001-X005) representing different cloud service categories: XaaS Cloud Services, Marketplace Services, Enterprise Support, Enterprise Training, and Professional Services.
• Estimated Model Total Quantity: All CLINs have an estimated quantity of 100.0 EA.
• Model Unit Price: Set at $1.0 for all CLINs.
• Proposed Catalog Discount: Vendors are instructed to provide their discount percentage in cell E8. The draft shows 0.0% for all CLINs.
• Discount Application: Discounts are to be applied to any/all CSP catalog services, including in-scope marketplace solutions, across all locations covered by the solicitation.

Sheet: Estimated Service Build-Up

• Details the estimated services and quantities that the proposed catalog discount should consider.
• Lists the same five service categories as the 'Proposed Discount' sheet with estimated quantities of 100.0 EA each.
• References specific SOW sections for each service category (e.g., SOW Section 5.2 and 5.3 for XaaS Cloud Services).
• States that these estimates cover a five-year ordering period (base and options) and are based on historical usage, known conversions, and anticipated future needs.
• Clarifies that the unit price is set at $1.0 for evaluation purposes, and actual usage may vary.

This attachment is crucial for potential bidders as it outlines the specific service categories and estimated quantities for which they need to propose a catalog discount. Bidders must ensure their proposed discount is fully applicable to all listed services and consider the provided service build-up estimates when preparing their pricing. The document specifies that vendors should only provide their response in the highlighted cell E8 of the 'Proposed Discount' sheet.

Form / Attachment / Pricing Sheet

This document is Attachment 3, a "Past Performance Form," intended for contractors to provide details about previous projects. It is designed to help the government assess a bidder's past performance relevant to the current solicitation.

• Contractor Information: Name, Solicitation Number being responded to.
• Government Agency/Firm: Name and address of the entity for which the effort was performed.
• Contract Details: Contract number, award date, total project price, period of performance, hours per year, number of employees.
• Security Clearance: Required level, if applicable.
• Points of Contact: Technical and Contracting/Purchasing POCs.
• Location of Work: Geographic details.
• CPARS Status: Indication of whether a "finalized" Contractor Performance Assessment Report is available in SAM.gov.
• Description of Contract Work: Detailed comparison of the past project's scope, magnitude, and complexity to the current solicitation, including any unique requirements, problems encountered, and resolutions.
• Subcontracting Plan: Information on whether a subcontracting plan was required and details of subcontractor efforts.

Contractors must complete this form accurately to provide evidence of their past performance. The detailed description of previous work (Item 14) is crucial for demonstrating how their experience aligns with the requirements of the current solicitation and for addressing any potential performance issues or customer concerns.