Exhibit F

The Department of Education's Internet Infrastructure Division of Labor

Introduction:

The Internet infrastructure for the Department of Education, currently located in Capital Place, and managed by OERI, will be moving to ROB3 this fall. In FY 98, the OERI equipment will be integrated into the existing OCIO Internet Infrastructure and the OCIO Contractor staff (currently BTG/CAI) will perform System Administration tasks, previously provided by OERI. A new competitive 8a Contract will also be awarded, starting in FY 98, for maintaining ED-WWW content and a number of other applications running on the Office automation infrastructure contractor administered equipment. The new 8a contract will be managed by OERI, in close consultation with OCIO and in support of the Department's Internet policies as defined by the Internet Working Group (IWG) and the Information Technology Investment Review Board (ITIRB). While the new 8a contract is designed to provide comprehensive Internet application support, it should be recognized that some ED systems and applications (e.g., EDCAPS) will probably continue to use their own separate contractors.

The purpose of this document is to define the division of labor for Internet Support between the office automation infrastructure contractor and the 8a Contractor and provide an arbitration policy in the event of conflict. For most areas, there is a relatively clear dividing line between what would be considered an operational task, falling under the domain of the office automation infrastructure contractor, and what would be considered application support or document content management, falling under the control of the 8a. These tasks are covered in the Division of Labor section below.

Using the utility Sudo, the office automation infrastructure contractor will provide sufficient access to the 8a for the 8a to fulfill its responsibilities. It will be the office automation infrastructure contractor's responsibility to resolve problems reported in the 8a's area of responsibility which the 8a doesn't have sufficient access rights on production equipment to resolve themselves. The office automation infrastructure contractor maintains Internet service monitoring tools and a support staff during hours of coverage to respond within the agreed upon time period1 to service outages or problems. The office automation infrastructure contractor will supply the 8a a pager number that will respond within 10 minutes during hours of coverage. If an emergency arises that requires access that the 8a does not have, the office automation infrastructure contractor will take appropriate action to resolve the problem or provide the 8a with the necessary access.

The activities covered in the Division of Labor presuppose agreement between OERI and OCIO on hardware, operating system and application migration to EDNet standards. The Education's Internet hardware and software standards are published in the Standards for EDNet Internet Servers document and the Standards Migration Plan is incorporated into Appendix A.

The Division of Labor applies to production Internet servers only. It is expected that equipment will be available for the development and testing of new applications. This is separate from the test area for the web site located on production equipment. The development equipment will be maintained to the extent practical by the office automation infrastructure contractor. The office automation infrastructure contractor staff will be responsible to maintain the standard system configuration, services and patches; however, the 8a Contractor will be permitted whatever access is required for the development and testing of new applications and enhancements to existing applications. When an application has passed acceptance testing, it will be the joint responsibility of the office automation infrastructure contractor and the 8a to install the new application on production equipment. Once the application is in production, it will be subject to the Division of Labor below.

As the OCIO is responsible for the overall security and stability of the EDNet Internet infrastructure, it can terminate any application or content that it determines is a threat to its stability or performance. The OCIO also has the right to develop an application security policy which requires the 8a to submit Perl scripts or other potentially threatening content to a certification process, prior to posting on the office automation infrastructure contractor managed servers.

As we move to the future there is the possibility of differences in the proposed direction for Internet applications and services between OCIO and OERI. In those areas where both groups can't come to agreement, the Internet Working Group shall make the decision.

The division of labor will be subject to periodic review and adjustment as warranted.

Division of Labor:

File System Administration
Task	Responsible Organization
1.	Disaster Recovery - Replicate current standard file systems/services in case of an act of God (i.e. Backup/Restore, Mirroring of services).	OCIO -- Office automation infrastructure contractor
2.	Resource Allocation - Minimize downtime and fully utilize file systems to achieve maximum performance by utilization of disk drive space (i.e. swap space, file system moves, Network File System).	OCIO -- Office automation infrastructure contractor
3.	Periodic File system Maintenance - Once per cycle, check the integrity of the file system during a reboot for errors and take any corrective measures.	OCIO -- Office automation infrastructure contractor
System Configuration
Task	Responsible Organization
1.	Host Configuration Files - Modify the system boot files to recognize necessary changes in hardware, software, or network configurations (i.e. rc files, routing changes, DNS client changes, netmask database, server trust relationships).	OCIO -- Office automation infrastructure contractor
2.	Patch Level Installation - Modify the Solaris Operating System with recommended & other patch revisions as necessary which are available from Sun Microsystems, and recover from problems as necessary.	OCIO -- Office automation infrastructure contractor
3.	Load Performance Management - Configure and monitor system load levels at all hours (via load scripts) and install and modifying automatically executing programs as necessary to equalize the load and improve server response time for services.	OCIO -- Office automation infrastructure contractor
4.	Security Monitoring - Configure and install most secure/recent versions of software and bug fixes as well as usage tracking and logging software and perform once per cycle (one week?/one month?) audit.	OCIO -- Office automation infrastructure contractor

(prime)/

OERI -- 8a (consult)
5.	Security Reviews - Periodically attempt to penetrate security and report findings to discover and correct vulnerabilities.	OERI -- 8a
6.	Sendmail/Bind Management - Port and install most recent/secure versions of sendmail and bind libraries and create necessary modifications in configuration files; additions, deletions, and modifications to the mail alias database.	OCIO -- Office automation infrastructure contractor
7.	Hardware - Installation and allocation between OCIO/OERI equipment of hardware resources to optimize performance and maximize availability.	OCIO -- Office automation infrastructure contractor
Services Administration
Task	Responsible Organization
1.	Porting - Modification and compilation of service daemons (i.e. web server, listserver, etc.).	OCIO -- Office automation infrastructure contractor

(prime)/

OERI -- 8a (consult)
2.	Configuration - Modification of service configuration files for optimum customer service, throughput and security.	OCIO -- Office automation infrastructure contractor (prime)/

OERI -- 8a (consult)
3.	Installation - Setup and base configuration of all commercial software to optimize performance without impeding other necessities.	OCIO -- Office automation infrastructure contractor
4.	Application Content - Creation, deletion, and modification of application information content and interface files2.	OERI -- 8a
5.	Mailing List Server - Creation, deletion, and modification of mailing lists.3	OERI -- 8a
6.	BBS Administration - Creation, deletion, and modification of BBS accounts, content, and features4.	OERI -- 8a
7.	Database Administration - Creation, deletion, and modification of database files5.	OCIO -- The office automation infrastructure contractor

(Oracle) /

OERI -- 8a(Basis)
8.	Application Maintenance and Enhancement - Maintenance and enhancement of application software to balance customer needs and efficient resource use (i.e., service daemons, interactive web CGI scripting, web discussion forums, search engines, mail-based interfaces to interactive services, etc.) 6	OERI -- 8a (prime)/

OCIO -- Office automation infrastructure contractor (consult)
9.	Usage Analysis and Reporting - Analysis and reporting of usage log information for services (i.e., web server, FTP, listserver, etc.) 7	OERI -- 8a
User Administration
Task	Responsible Organization
1.	Accounts - Creation & deletion of new/previous authorized accounts. (PPP & Unix accounts may be separated, have partial autonomy, or identical.)	OCIO -- Office automation infrastructure contractor
2.	Troubleshooting - Solving user connectivity and password problems.	OCIO -- Office automation infrastructure contractor

Appendix A

Standards Migration Plan

Section temporarily omitted pending further discussion.