FALCON New Requirements

FALCON New Requirements for Outline BACKGROUND Initially, DARTTS data will reside within the FALCON system. However, during Option Year 1, DARTTS data will be migrated (under a separate procurement) to the Authoritative ICE Data Warehouse (AIDW); at which time the contractor shall ensure that the DARTTS data can be remotely accessed and searched by users of the FALCON system, and that end users will not experience any significant degradation of performance while searching/manipulating data accessed remotely versus searching/manipulating data ingested directly into the FALCON system. Option Year 1 will entail the integration of an additional large data set, the Enforcement Integrated Database (EID). EID is an ICE-owned shared common database repository for several DHS law enforcement and homeland security applications. EID captures and maintains information related to the investigation, arrest, booking, detention, and removal of persons encountered during immigration and criminal law enforcement investigations and operations conducted by ICE and U.S. Customs and Border Protection (CBP). This data set currently resides within the AIDW. The contractor shall ensure that the EID data can be remotely accessed and searched by users of the FALCON system and that end users will not experience any significant degradation of performance while searching/manipulating data accessed remotely versus searching/manipulating data ingested directly into the FALCON system. Option Years 2-4 will entail the integration of up to 20 other, smaller data sets, each of which must be approved by the FALCON Integrated Program Team (IPT) for inclusion in the FALCON system before those data sets may be made accessible to FALCON users. These smaller data sets may reside within the AIDW, within the ICE Big Data Environment (BDE), or may be ingested within the FALCON system itself. The contractor shall ensure that these data sets, if not directly ingested within the FALCON system, can be remotely accessed and searched by users of the FALCON system and that end users will not experience any significant degradation of performance while searching/manipulating data accessed remotely versus searching/manipulating data ingested directly into the FALCON system. SCOPE FALCON is a customized version of a Commercially Available, Off the Shelf (COTS) product sold by Palantir Technologies, Inc., called Palantir Gotham. DARTTS data will initially be stored within the FALCON system. During the Option Years, the contractor will extend the functionality of FALCON-DARTTS beyond the capabilities inherent in the existing DARTTS, working with managers of the Trade Transparency Unit (TTU) to identify needed enhancements. FALCON users shall be able to search/manipulate this data, utilize this data for the creation of charts or graphs, or manipulate the data utilizing the features of FALCON-SA (Search and Analysis). DARTTS data will also be accessible to users of FALCON Mobile. During Option Years 1-4, contingent upon the approval by the FALCON IPT, access to the following data sets by the FALCON system will be enabled. The contractor shall integrate any or all of the following data sets into FALCON such that FALCON users shall be able to search/manipulate this data, utilize this data for the creation of charts or graphs, or manipulate the

data utilizing the features of FALCON-SA (Search and Analysis). This data will also be accessible to users of FALCON Mobile. The following data sets may, contingent upon the nature of the data and the decisions of the FALCON IPT and other ICE oversight committees reside within the AIDW, the BDE, or directly ingested within the FALCON system. The contractor shall ensure that these data sets, if not directly ingested within the FALCON system, can be remotely accessed and searched by users of the FALCON system, and that end users will not experience any significant degradation of performance while searching/manipulating data accessed remotely versus searching/manipulating data ingested directly into the FALCON system. These data sets include, but (at the discretion of the FALCON IPT) may not be limited to, the following: 1.   2.   3.   4.   5.   6.   7.   8.   9.   10.   11.   12.   13.   14.   15.   16.   17.   Enforcement Integrated Database (EID) Human Smuggling and Trafficking Center (HSTC) data Student Exchange Visitor Information System (SEVIS) Law Enforcement Support Center (LESC) data National Security Entry and Exit Regulation System (NSEERs) Arrival and Departure Information System (ADIS) Automated Targeting System (ATS-P/L/C) National Crime Information Center (NCIC) Border Crossings from Treasury Enforcement Computer System (TECS) Consular Consolidated Database (CCDI) Computer Linked Application Information Management Systems (CLAIMS) TECS Images ICE Gangs Database Exodus Accountability Referral System United States Visitor and Immigrant Status Indicator Technology (US-VISIT) I-94 data IDocX data from Intelligence Fusion System (IFS) disposition TASKS The contractor shall provide, as needed, desk-side support and operational support to FALCON users located in any of ICE’s Special Agent in Charge (SAC) Offices or subsidiary offices located in the continental United States, Hawaii, Alaska, Guam, Puerto Rico, and the Virgin Islands, contingent upon prior approval by the FALCON PMO. Support of FALCON Mobile Technology The contractor shall ensure the continuation of two forms of a slimmed-down FALCON system accessible to users in the field: FALCON Mobile and FALCON Web Access. Versions of FALCON Mobile shall be available to run on both the Android operating system and the Apple iOS operating system utilized for the iPhone platform. FALCON Web Access shall be available on any device which has Internet access (including desktop computers, laptop computers, tablets, and “smart” mobile phones). The contractor shall enhance the feature sets of FALCON Mobile and FALCON Web Access at the direction and upon the approval of the FALCON PMO, under the guidance for Tier 3 Software Maintenance and Support.

Initially, DARTTS data will be stored within the FALCON system. Ultimately, this data will reside within the Authoritative ICE Data Warehouse (AIDW). Once DARTTS data has been migrated to AIDW, it shall be indexed, but not stored, on FALCON servers. Optional Inclusion of EID Data Set in FALCON during Option Year 1 The contractor shall analyze and gain a full understanding of the existing Enforcement Integrated Database (EID), its functionalities, its data sets, and the interrelations between these various data sets. Regarding the schedule of completion of tasks, the contractor shall perform data modeling and feature development iteratively in a staging environment from the conclusion of work on the initial Production version of FALCON-DARTTS through April, 2014. The contractor shall make the FALCON-DARTTS module available for testing in a Production environment no later than May 31, 2014. The contractor shall ensure that the EID data set is made available live to end users before June 30, 2014, on the condition that all ICE and DHS approvals have been granted by that date. Optional Inclusions of Other Data Sets in FALCON during Option Years 2-4 Upon approval by the FALCON IPT and at the direction of the FALCON PMO, the contractor shall analyze and gain a full understanding of any or all of the following existing law enforcement-related data sets, their functionalities and data elements, and the interrelations between these various data elements: 1.   2.   3.   4.   5.   6.   7.   8.   9.   10.   11.   12.   13.   14.   15.   16.   Human Smuggling and Trafficking Center (HSTC) data Student Exchange Visitor Information System (SEVIS) Law Enforcement Support Center (LESC) data National Security Entry and Exit Regulation System (NSEERs) Arrival and Departure Information System (ADIS) Automated Targeting System (ATS-P/L/C) National Crime Information Center (NCIC) Border Crossings from Treasury Enforcement Computer System (TECS) Consular Consolidated Database (CCDI) Computer Linked Application Information Management Systems (CLAIMS) TECS Images ICE Gangs Database Exodus Accountability Referral System United States Visitor and Immigrant Status Indicator Technology (US-VISIT) I-94 data IDocX data from Intelligence Fusion System (IFS) disposition The FALCON IPT and FALCON PMO shall aim to equally disperse the inclusion of these data sets between each of Option Years 2-4, seeking to have 5-6 data sets included in the FALCON system per option year from Option Year 2 to Option Year 4. However, the contractor shall be cognizant that operational needs may require that the order of the inclusion of these various data sets may change, that a larger or smaller number than 5-6 data sets may be included per option year, and that modifications to the front-end user interface of the FALCON system may be

required to accommodate the inclusion of some of these data sets on the condition that all ICE and DHS approvals have been granted by that date. Contingent upon the decisions of the FALCON IPT and other ICE oversight bodies, these data sets may reside within the AIDW, the BDE, or be directly ingested within the FALCON system. The contractor shall ensure that these data sets, if not directly ingested within the FALCON system, can be remotely accessed and searched by users of the FALCON system, and that end users will not experience any significant degradation of performance while searching/manipulating data accessed remotely versus searching/manipulating data ingested directly into the FALCON system. All data sets approved by the FALCON IPT and FALCON PMO for inclusion within the FALCON system must be made accessible to end users in a Production environment by the end of the same contract Option Year in which that data set was first approved. CONSTRAINTS General Constraints The following project constraints are applicable to the FALCON System Maintenance and Services: •   Existing FALCON system is a customized version of a Commercial, Off the Shelf (COTS) product sold by Palantir Technologies, Inc., called Palantir Gotham; Maintenance of Existing FALCON System Functionality The contractor shall ensure that all new work performed will adhere to the following stipulations: Continuation of Existing FALCON System Functionality New work performed shall not adversely affect the ease of operation of the following existing FALCON Search and Analysis system features, which shall retain their existing “look and feel:” •   Simple, quick searches of both ingested and remotely accessible data •   Filtered and advanced searches of both ingested and remotely accessible data •   Ability for users to monitor and be alerted to the addition, modification, or removal of objects of interest •   Performing link and network analysis to find connections to subjects, locations, events, etc. •   Performing statistical and geospatial analysis providing actionable intelligence and uncovering patterns of activities and trends •   Geosearch types to include Radius, Polygon, Route, and Multi-part, plus determination of the distance between any two points •   Ability to publish uploaded ad hoc data for sharing with entire user base or subsets of the user base, subject to user controls •   Ability to overlay maps with ICE HSI SAC Office Areas of Responsibility (AORs) •   Ability for users to share charts, graphs, and other created documents and to collaborate on the creation of such documents within restricted access groups •   Ability to identify links between external and internal data sources

•   Ability to create new charts and visualizations with manually created objects, timeline diagrams, custom icons, and other presentation focused features •   Ability to create target work-up sheets and charts on subjects, targets, and locations •   Ability to plot target locations to show clusters of activity •   Ability to show activity clusters with geo-density analysis •   Ability to follow target telephone activity and GPS movement on a map in real time •   Deconfliction of data elements (persons, places, objects, events) •   Ability to utilize CLEAR and Pen-link importers to import reports •   Ability to track team movements on map for operational and officer safety •   Ability to provide Be On the Lookout (BOLO) alerts to field agents in real time •   Ability to coordinate movements of entire teams by communicating across mobile devices •   Perform geospatial analysis to locate all records proximate to an officer’s location •   Ability to create charts, structured dossiers with mugshots, and other complex intelligence products and relay them directly to mobile devices in the field New work performed shall not adversely affect the ease of operation of the following existing FALCON Mobile features, which shall retain their existing “look and feel:” •   Simple, quick searches of both ingested and remotely accessible data; searches can be performed from remote locations •   Ability to access user-published ad hoc data •   Ability to plot target locations to show clusters of activity •   Deconfliction of data elements (persons, places, objects, events) •   Ability to track team movements on map for operational and officer safety •   Ability to provide Be On the Lookout (BOLO) alerts to field agents in real time •   Ability to coordinate movements of entire teams by communicating across mobile devices •   Ability to send text messages and photos to command center New work performed shall not adversely affect the ease of operation of the following existing FALCON Web Access features, which shall retain their existing “look and feel:” •   Simple, quick searches of both ingested and remotely accessible data •   Filtered and advanced searches of both ingested and remotely accessible data •   Ability for users to monitor and be alerted to the addition, modification, or removal of objects of interest •   Ability to access user-published ad hoc data Compatibility of New Work with Existing FALCON Features and Data Sets All data sets made newly accessible to the FALCON system shall be seamlessly searchable along with previously existing FALCON data sets, both those data sets ingested within the FALCON system and those data sets remotely accessed. The contractor shall ensure that end users will continue to utilize a single, comprehensive front-end interface to search and manipulate all data

accessible by FALCON, both data sets predating this contract and data sets made accessible within the scope of this contract. The contractor is required and shall ensure that previously existing FALCON system workflow applications (those for the HSI Tip Line Unit, the Confidential Informants Unit, and the Undercover Operations Unit) shall maintain all existing functionality and shall retain their existing “look and feel” for end users, such that no retraining of end users (or extremely minimal retraining, in the form of brief, on-line guides to changes which can be reviewed in less than an hour). The contractor is required and shall ensure that all new work performed under this contract shall be compatible with the following application helpers previously developed to assist end users with common, repetitive system tasks; these application helpers shall retain their existing “look and feel” for end users, such that no retraining of end users (or extremely minimal retraining, in the form of brief, on-line guides to changes which can be reviewed in less than an hour): •   •   •   •   •   •   •   •   •   •   •   •   •   Accounting Helper Document Keyword Linker Helper CLEAR XML Importer Helper Bank Secrecy Act (BSA) Third Agency Data Labeling Helper Text Cloud Helper Pen-link Importer Helper HTML Exporter Helper Subject Export Helper ICE Search Helper Tables Helper Resolution Helper Properties Helper Geo Lookup Helper Level of Service The contractor shall ensure that the FALCON system shall be able to accommodate the following minimum levels of service, with no diminishment of performance levels from performance levels met by the system prior to the initiation of this contract: Start of Initial Period of Performance Individual Data Records Accessible by FALCON: FALCON-SA User Base: FALCON-SA Concurrent Users: FALCON Web Access User Base: FALCON Web Access Concurrent Users: FALCON Mobile User Base: FALCON Mobile Concurrent Users: Upon Deployment of FALCON-DARTTS 300 million 2,000 700 5,000 1,000 500 50

Individual Data Records Accessible by FALCON: FALCON-SA User Base: FALCON-SA Concurrent Users: FALCON Web Access User Base: FALCON Web Access Concurrent Users: FALCON Mobile User Base: FALCON Mobile Concurrent Users: 3.5 billion 2,500 1,200 5,000 2,000 1,000 200 Upon Deployment of EID Data Set in Option Year 1 Individual Data Records Accessible by FALCON: FALCON-SA User Base: FALCON-SA Concurrent Users: FALCON Web Access User Base: FALCON Web Access Concurrent Users: FALCON Mobile User Base: FALCON Mobile Concurrent Users: 3.6 billion 3,000 1,500 5,000 2,500 1,500 300 By Close of Option Year 2 Individual Data Records Accessible by FALCON: FALCON-SA User Base: FALCON-SA Concurrent Users: FALCON Web Access User Base: FALCON Web Access Concurrent Users: FALCON Mobile User Base: FALCON Mobile Concurrent Users: 3.8 billion 3,500 1,750 5,000 3,000 2,000 500 By Close of Option Year 3 Individual Data Records Accessible by FALCON: FALCON-SA User Base: FALCON-SA Concurrent Users: FALCON Web Access User Base: FALCON Web Access Concurrent Users: FALCON Mobile User Base: FALCON Mobile Concurrent Users: 4.0 billion 4,000 2,000 5,000 3,000 2,500 750 By Close of Option Year 4 Individual Data Records Accessible by FALCON: FALCON-SA User Base: FALCON-SA Concurrent Users: FALCON Web Access User Base: FALCON Web Access Concurrent Users: FALCON Mobile User Base: FALCON Mobile Concurrent Users: 4.2 billion 4,500 2,250 5,000 3,000 3,000 1,000