Defense Information Systems Agency, DITCO-NCR, 701 South Court House Road, Arlington, VA 22204-2199

D -- EMPLOYEE BENEFITS WEB SITE SOL DCA100-99-Q-4005 DUE 010499 POC Chrissie Fields, Contract Specialist, (703)607-6911 or Randy Grey, Contracting Officer, (703)607-6905 This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested and a written solicitation will not be issued. The solicitation is issued as a request for proposals (RFP). The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 90-46. The following is the Statement of Work for the Employee Benefits Information System (EBIS):General Information: In effort to better serve our employees during Human Resources Regionalization, the Defense Information Systems Agency (DISA) intends to establish a DISA Benefits Self-Service Center that is accessible to DISA employees through the Internet. Background: Web-Site Concept -- The center will be a turn-key service developed, hosted, and maintained by a vendor on a Web site hosted by DISA. The Center will provide employees with (1) the current status of personal benefits and payroll data, (2) generic information about a variety of benefits, (3) links to other relevant Web sites, and (4) some "what if" calculations based both on personal data in the Web-server database and on data entered online by the employee. DISA will provide updates of data for the Web site on a periodic basis (approximately once every two weeks). The primary sources of data will be the Defense Civilian Personnel Data System (DCPDS) and the future "Modern System" (based on Oracle HR) for personal benefits data, and the Defense Civilian Pay System (DCPS) for payroll data. Other benefits data will be based on and conform to Federal Government Personnel Rules and Regulations. Initially, the concept for the Center provides for a one-way information flow from DISA to the employee, with no updates of data to DISA personnel or pay databases. In the future, the Web site may be modified to provide employees the ability to change personal data (e.g., health benefits plans), to provide other additional functionality, and/or to move hosting of the Web site within the DISA technical infrastructure. DISA Organization: DISA is a combat support agency responsible for planning, developing, fielding, and supporting command, control, communications, and information systems that serve the needs of the President, the Secretary of Defense, the Joint Chiefs of Staff and the Joint Staff, the Combatant Commanders in Chief (CINCs), and the Department of Defense (DOD) Components under all conditions of peace and war. DISA Headquarters is located in Arlington, VA and is supported by Defense Megacenters and Regional Support Activities worldwide. DISA currently has approximately 6500 employees and the number is expected to decrease. Security: The contractor shall provide adequate security controls and mechanisms for protecting DISA information from tampering, loss, misuse, and unauthorized access, while the contractor is administering the information. Adequate security includes the following personnel, physical, administrative, and technical controls, as a minimum: Contractor personnel who process or have access to DISA information will be limited in number to those with a valid need and will be screened for trustworthiness prior to being allowed access; DISA information will be maintained in database tables separate from other organizations' information and will only be able to be queried by the DISA Web server; The contractor will create and follow written procedures that stipulate how DISA information will be processed, handled, and stored while under the contractor's administration, including the destruction of outdated information and purging of database tables; Authorized contractor personnel must use operating system and database system authentication mechanisms (e.g., user ID and password) to access DISA information, or applications that access DISA information; Contractor personnel authorized access to DISA information will be designated in writing and will be educated about its sensitive nature and the need to protect it; Users will only have access to their own personal information; Users will be authenticated by a combination of user ID, personal identification number, SSN, and/or password, as approved by DISA; Users will only be able to obtain data from the Web site and will not be able to modify information contained in the DISA-supplied database; Personal information will be transmitted to the user in encrypted form (e.g., via HTTPS protocol and Secure Sockets Layer); Unauthorized personnel will not be able to retrieve or modify DISA information via the Internet; The contractor will implement standard operating system, Web-server, and utility software patches/updates that correct identified security vulnerabilities. Period of Performance -- The site shall be available for employee use in time for Human Resources Regionalization in April 1999. Due to difficulties with access to employee data, the DISA population will be phased into use of the site duringthe time period April-September 1999. The phasing schedule is as follows: April 1999:2400 employees, June 1999:900 additional employees, July 1999:1350 additional employees, August 1999:740 additional employees, September 1999: 620 additional employees. The service will continue five years from the date of award. Interested parties should contact Chrissie Fields, Contract Specialist at (703) 607-6911 for a copy of the functional requirements. The following provisions and clauses apply to this acquisition; 52.212-1, Instructions to Offerors; 52.212-2, Evaluation-Commercial Items, (a) Price; 52.212-3, Offeror Representations and Certifications-Commercial Items, to be completed and submitted with bid; 52.212-4, Contract Terms and Conditions-Commercial Items, 52.212-5; Facsimile Proposals, 52.215-18; Contract Terms and Conditions Required to Implement Statutes or Executive Orders-Commercial Items; 52.222-3, Convict Labor; 52.233-3, Protest After Award; 252.219-7006, Notice of Evaluation Preference for Small Disadvantaged Business Concerns; 252.225-7001, Buy American Act and Balance of Payments; 252.225-7012 Preference for Certain Domestic Commodities; 252.225-7014, Preference for Domestic Specialty Metals; 252.225-7015, Technical Data-Commercial Items; 252.227-7037, Validation of Restrictive Markings on Technical Data. The Defense Priorities and Allocations (DPAS) rating DO-A7. Interested vendors submitting offers shall send not later than 1500 hours, 15 days after this CBD announcement to: DISA, DITCO-NCR, DTN3, Attn: Chrissie Fields, 701 S. Courthouse Road, Arlington, VA 22204-2199 or fax a response to (703)607-4340/1. Posted 12/17/98 (W-SN281473). (0351)

Loren Data Corp. http://www.ld.com (SYN# 0018 19981221\D-0001.SOL)