USACE HQ FY25 Quality Management Software

This SOW covers a 10.5-month base year and four 12-month option years for subscriptions

and licenses to effectively manage quality in USACE, promotes business growth and development by

centralizing all key functions, and embedding quality into the day-to-day. In addition, the QMIS will assist in

gaining full visibility of activities, reduce time and resources spent on administration and turn potential risks

into opportunities.

Annual Subscriptions Shall Include:

. 151 Dedicated Users, 80 Concurrent, 8000 floating usernames; View-only document access for

whole enterprise (About 40,000)

. Automated, customizable workflow capability

. QMIS Program and Project Management Support

. Technical support

. Consulting support (training, implementation)

. Includes ISO Standards: ISO 9001:2015, ISO 45001:2018, ISO 30401:2018, ISO 14001:2015, ISO

21505:2017, ISO 38500:2015

. Vendor manager needed

The Government requests as a deliverable a report showing the Government users and notifications for

any upgrades or any revision to the current support in place. The reports will be sent directly to the

Contracting Officer’s Representative (COR) as requested by the Government and if there are any upgrades

or patches sent through so the COR can continue to monitor the subscriptions and licensees.

All contract personnel performing IA/IT services must comply with DoD training and

certification requirements specified in DoD 8570.01-M, Information Assurance

Workforce Improvement Program, and maintain required background investigations

specified in RA policy. Contract personnel shall provide the Government representative

with documentation of certification(s) prior to performing on the contract. In accordance

with applicable DoD, Army, and USACE regulations, the Contractor shall ensure that all

information systems (IS) and platform information technology (PIT) systems developed

and/or supported under this contract comply with cybersecurity and architectural

requirements, including, but not limited to: security technical implementation guides

(STIG)(e.g., the current version of the Application Security and Development STIG, and

the internet access point (IAP) demilitarized zone (DMZ) STIG), and the use of security

controls developed under the risk management framework documentation for the

system or platform. The Contractor shall address questions regarding these provisions

to the Government representative, who will coordinate between the Contractor and the

USACE Chief Information Officer (CIO).