USACE HQ FY25 Quality Management Software

This SOW covers a 10.5-month base year and four 12-month option years for subscriptions
and licenses to effectively manage quality in USACE, promotes business growth and development by
centralizing all key functions, and embedding quality into the day-to-day. In addition, the QMIS will assist in
gaining full visibility of activities, reduce time and resources spent on administration and turn potential risks
into opportunities.
Annual Subscriptions Shall Include:
. 151 Dedicated Users, 80 Concurrent, 8000 floating usernames; View-only document access for
whole enterprise (About 40,000)
. Automated, customizable workflow capability
. QMIS Program and Project Management Support
. Technical support
. Consulting support (training, implementation)
. Includes ISO Standards: ISO 9001:2015, ISO 45001:2018, ISO 30401:2018, ISO 14001:2015, ISO
21505:2017, ISO 38500:2015
. Vendor manager needed
The Government requests as a deliverable a report showing the Government users and notifications for
any upgrades or any revision to the current support in place. The reports will be sent directly to the
Contracting Officer’s Representative (COR) as requested by the Government and if there are any upgrades
or patches sent through so the COR can continue to monitor the subscriptions and licensees.
All contract personnel performing IA/IT services must comply with DoD training and
certification requirements specified in DoD 8570.01-M, Information Assurance
Workforce Improvement Program, and maintain required background investigations
specified in RA policy. Contract personnel shall provide the Government representative
with documentation of certification(s) prior to performing on the contract. In accordance
with applicable DoD, Army, and USACE regulations, the Contractor shall ensure that all
information systems (IS) and platform information technology (PIT) systems developed
and/or supported under this contract comply with cybersecurity and architectural
requirements, including, but not limited to: security technical implementation guides
(STIG)(e.g., the current version of the Application Security and Development STIG, and
the internet access point (IAP) demilitarized zone (DMZ) STIG), and the use of security
controls developed under the risk management framework documentation for the
system or platform. The Contractor shall address questions regarding these provisions
to the Government representative, who will coordinate between the Contractor and the
USACE Chief Information Officer (CIO).