Inactive Service-Disabled Veteran-Owned Small Business (SDVOSB) Set-Aside (FAR 19.14)

STATEMENT OF WORK I. Background NIST currently has licenses for the Foglight Transaction Recorder and Player, which NIST uses to mimic a set of users of Web applications for Web application performanc... STATEMENT OF WORK I. Background NIST currently has licenses for the Foglight Transaction Recorder and Player, which NIST uses to mimic a set of users of Web applications for Web application performance monitoring. The Foglight Transaction Recorder allows NIST to record a series of actions against a Web application (also known as synthetic transactions) and save the recorded actions as a script. The scripts (synthetic transactions) are then played by the Foglight Transaction Player at scheduled intervals which is configured, controlled and initiated at Foglight Management Server (FMS). The performance data from each step in a script is collected and stored locally. The historical performance data is saved on the Foglight server and used for data analysis and generation of detailed and summary reports. Support for the Foglight Transaction Recorder and Player will end in January 2020. NIST seeks to purchase a new software product to replace the capabilities of the Foglight Transaction Recorder and Player. II. Scope The requirements are for perpetual software licenses for the new software product; one year of software support and maintenance for the new product, including security patches, upgrades to new versions of the product, help desk support for the product for bugs NIST finds and for questions NIST will have about using the software; and 40 hours of on-site consulting time for assistance with installing and configuring the new product. III. Minimum Technical Requirements NIST requires the new software product to be installed and configured by January 31, 2020. The purchase shall include both the new software product itself and perpetual licenses for the software. The new software product shall: 1. Model an end-user's actions against a Web application via the creation of scripts (also known as synthetic transactions). 2. Enable synthetic transaction recording and playback for 100 Web application instances. 3. Provide a graphical user environment for recording scripts. 4. Record each end-user's actions in the script against a live Web application. 5. Allow a subset of the actions in a script to be grouped and saved as a separate script that can be modified and regrouped and be able to insert to a different script. 6. Maintain the library of saved scripts. 7. Allow the application administrator to schedule each saved script to be replayed later automatically on a fixed interval schedule. Each script shall be able to play on its own schedule. 8. The performance data from each step in a script shall be collected and stored either on the transaction player machine, or on a server running on NIST's premises. No data shall be sent to any server outside of NIST's network. 9. The historical performance data saved from the playback of scripts shall be accessible for data analysis and reporting via a secure Web application interface, and for export in comma-separated variable (CSV) format. 10. The application shall interface with NIST's Foglight Management Server and copy the historical performance data saved from the playback of scripts to the Foglight server for analysis with other performance data collected by the Foglight. 11. The transaction recorder and player parts of the product shall be installed and supported on client computers running the Windows 10 operating system. Support and maintenance shall include software updates and security patches at no additional cost for one year, telephone/online support from 9:00 AM to 5:00 PM, and an unlimited number of contacts during the support period. Software updates shall be available to NIST within one working day after being posted to the vendor's support Web site. Telephone support shall include response to questions regarding operating practices, application use, and support issues that can be diagnosed and resolved over the telephone. 40 hours of on-site consulting shall include installation and configuration of the software. NIST shall be able to schedule the on-site consulting anytime during the first year's period of performance. IV. Period of Performance The period of performance will be January 1, 2020 through December 31, 2020. V. Place of Performance Maintenance and support shall be provided from the Contractor's location and shall be accessible from all NIST locations. VI. Security All services supported and maintained by award of this contract shall meet all the security and privacy control objectives defined in the latest version of NIST Special Publication (SP) 800-53, Security and Privacy Controls for Federal Information Systems and Organizations, for a system having an overall impact rating of Moderate (as defined in Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems). The security features of the BusinessObjects services supported and maintained by award of this contract shall enable NIST to map those features to individual SP 800-53 controls; and to select, implement, assess, and monitor those security features in Oracle MySQL Enterprise as operated at NIST in the context of the Risk Management Framework (SP 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach. VII. Government Furnished Equipment/Government Furnished Information The Government will provide the Windows 10 client computers for the transaction recorder and transaction player components of the application, and a Windows Server 2016 or Windows Server 2019 VM server to host any server component of the applications. The Government Furnished Equipment or Government Furnished Information. VIII. Reporting Requirements and Deliverable The Contractor shall electronically provide maintenance and support. The Contractor shall provide all required maintenance and support information to the NIST Technical Point of Contact (TPOC) identified at award within three (3) business days of the award. IX. Inspection and Acceptance Criteria The contractor shall warrant the product's maintenance and support in accordance with the standard commercial time frame after final acceptance by NIST. The NIST TPOC identified in the award will inspect the product maintenance and support to determine whether the minimum technical requirements are met. All required software maintenance and support will be inspected by the NIST TPOC identified at award within three (3) days of the provision of maintenance and support by the Contractor. Before acceptance will occur, any defects found during inspection shall be corrected by the Contractor within 30 days of notification from the NIST TPOC. All required maintenance and support must be accepted by NIST to constitute final acceptance. Any defects encountered after final acceptance will be subject to the Manufacturer's Warranty. I. Place of Delivery The requirements include maintenance and support that involve electronic delivery. Nonetheless, any tangible items related to the maintenance and support (e.g., forms, booklets, guides) shall be delivered by the Contractor to the NIST Gaithersburg, MD site to the address as follows: National Institute of Standards and Technology (NIST) 100 Bureau Drive Building 301 Shipping & Receiving Gaithersburg, MD 20899-0001 NIST is a controlled-access facility. Any delivery personnel must be a U.S. citizen or a U.S. permanent resident. Where applicable: Electronic deliverables, such as software, licenses, license authorization codes, and other related information, shall be delivered electronically and shall be delivered via download or E-mail. FAR 52.212-1, INSTRUCTIONS TO OFFERORS - COMMERCIAL ITEMS INSTRUCTIONS: System for Award Management (SAM) Registration In accordance with FAR 52.204-7, the awardee must be registered in the System for Award Management (www.sam.gov) prior to award. Refusal to register shall forfeit award. DUE DATE FOR QUOTATIONS Offerors shall submit their electronic quotations, via email, so that NIST receives them not later than 10:00am Eastern Time on November 18, 2019. E-mail quotations shall be submitted directly to the Contract Officer at stephanie.kelly@nist.gov. (A) Format and Content. Volume I shall include the following: i. The solicitation number (NB183-19-3084); ii. The name, address, e-mail addresses and telephone numbers of the Quoter; iii. Names, titles, and telephone numbers of persons authorized to negotiate on the Quoter's behalf with the Government in connection with this solicitation; iv. Name, title, and signature of person authorized to sign the quotation. Quotations signed by an agent shall be accompanied by evidence of that agent's authority, unless that evidence has been previously furnished to the issuing office; v. Any other business or administrative information that the Quoter wishes to include in its quotation. vi. The DUNS Number for the quoters active registration at the System for Award Management, (www.SAM.Gov) website. Quoters must have an active registration at www.SAM.gov to be considered for award. If the quoters representations and certifications do not reflect the NAICS code governing this solicitation, quoters must submit documentation of their business size under the NAICS code governing this solicitation. vii. Acceptance Period - The acceptance period by the Quoter shall not be less than 90 days Evaluation Factors: Award will be made to the offeror whose quotation offers technically acceptable, lowest priced quotation.