CORHQ-26-R-0167-Amendment 1 - AS NG Solicitation 6172026.pdf

SOLICITATION/AWARD

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NO. 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. CONTACT INFORMATION 8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. N/A

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

RFQ RFP

Price only

SEE ADDENDUM

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QTY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. N/A 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

29. AWARD OF CONTRACT: REF.

YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. FEDERAL DEPOSIT INSURANCE CORPORATION (SIGNATURE OF CO)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

FDIC 3700/55 (3-08)

10. SOCIO-ECONOMIC STATUS

NO

NAICS:

ETHNICITY:

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

OFFER

13a. SUB-CONTRACTING

PERMITTED/APPROVED

YES

SDB

MWOB

SERVICE-DISABLED VETERAN-

OWNED SMALL BUSINESS

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

YES NO

YES NO

27a. SOLICITATION INCLUDES ATTACHMENTS 27b. AWARD INCLUDES ATTACHMENTS

RFI RFP

Best Value

CORHQ-26-R-0167

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QTY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

40. PAID BY

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELPHONE NUMBER OF AUTHORZED GOVERNMENT REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

PARTIAL FINAL

37. CHECK NUMBER

38. S/R ACCOUNT NO. 39. S/R VOUCHER NUMBER

36. PAYMENT

COMPLETE PARTIAL FINAL

FDIC 3700/55 (3-08)

Section B - Supplies or Services and Prices/Costs

CLIN # Description Quantity Unit Unit Price Total Price

0001 New Acquisition System - Next Generation

System Professional Services

1 EA

No attachments were added for this section.

Section B - Supplies or Services and Prices/Costs PAGE 3 OF 163

Section C - Description/Specifications/Work Statement

Attachments for this section start after the clauses.

Clauses Incorporated By Reference

Clause # Title Date

7.3.2-34 Duty to Deliver or Perform July 2008

Full Text Clauses

7.3.2-21 - Description/Specifications/Work Statement - October 2008 The name/description of the goods or services being acquired is as follows:

Acquisition System Next Generation (AS-NG SOO).

The specifications for and the description of the work to be performed under this award are fully detailed in either a

Statement of Work (SOW) or a Statement of Objective coupled with a Performance Work Statement (PWS), which is included as an attachment in Section J of this award document.

Section C - Description/Specifications/Work Statement PAGE 4 OF 163

Acquisition System - Next Generation Support Services

Statement of Objectives

Federal Deposit Insurance Corporation Division of Administration (DOA) Acquisition Services Branch (ASB)

Section C - Description/Specifications/Work Statement PAGE 5 OF 163

1 Purpose The Federal Deposit Insurance Corporation (FDIC) is procuring and implementing an enterprise-level acquisition lifecycle solution – Appian’s Government Acquisition Management Suite (GAMS).

Specifically, the FDIC will be implementing three GAMS solutions:

1. Contract Writing

2. Government Clause Automation

3. Requirements Management

These solutions will provide contract writing (CW), contract filing (CF), and early acquisition planning (EAP) capabilities to the FDIC. CW will enable Contracting Officers (COs) to create, update, and track solicitations and awards; Program Offices (POs) to nominate Oversight Managers (OMs) and appoint Technical Monitors (TMs); and COs and OMs to initiate and monitor contractor performance evaluations. CF will allow users to easily store, access, and manage contract files and documents. EAP refers to the collaboration between COs and Program Offices to create, update, and track complete requirements packages.

Within the FDIC and throughout this Statement of Objectives (SOO), the new acquisition solution will be referred to as the Acquisition System-Next Generation (AS-NG). AS-NG is intended to significantly enhance the efficiency and effectiveness of activities across the acquisition lifecycle by automating and integrating acquisition workflows and processes used by key end users across the FDIC. It is also expected to improve compliance with policies and procedures by reducing workarounds to existing systems and manually performed tasks. Furthermore, it will expand transparency and enhance data-driven decisions by enabling robust reporting and data query capabilities.

The purpose of this SOO is to obtain contractor support to develop, deploy, and maintain AS-NG across the FDIC. The Awardee’s technical approach – to include specific tasks, performance standards, and the Quality Control Plan (QCP) – will be incorporated into the final contract as the Performance Work Statement (PWS). The FDIC’s desired PWS will focus on measurable performance standards rather than prescribed methods.

2 Background

2.1 General

The FDIC is a non-Federal Acquisition Regulation (FAR), non-appropriated agency that follows its own acquisition policy and procedures implemented by the Division of Administration (DOA), Acquisition Services Branch (ASB). ASB is responsible for awarding and administrating Contracts, Basic Ordering Agreements (BOAs), Receivership Basic Ordering Agreements (RBOAs), and Task Orders in support of the FDIC’s mission. On average, ASB awards 425 new agreements/contracts and administers approximately 900 agreements/contracts annually. The acquisition process is supported by a network of OMs and TMs whose roles are similar to those of Contracting Officer Representatives (CORs) in the FAR contracting environment.

Section C - Description/Specifications/Work Statement PAGE 6 OF 163

2.2 Current Acquisition Systems and Tools

Contract Writing AS-NG will replace the FDIC’s heavily customized contract writing system, the Automated Procurement System (APS). APS is a Commercial-off-the-Shelf (COTS) product built on an Appian platform running on Version 18.2. APS is supported on-premises and is not aligned with the FDIC’s target cloud architecture. See Appendix B – Contract Writing Business Process Models. Due to limited reporting capabilities within APS, the FDIC uses visualization tools like Power BI and other tools listed in Figure 1, Technology Stack to create dashboards and reports with APS and other related FDIC data.

Contract Filing The FDIC will also replace its official contract document storage repository, the Consolidated Document Information System – Contract Electronic Filing (CDIS-CEFile). CEFile is a component of CDIS, a centralized digital repository which utilizes Documentum. CDIS will not be replaced under the scope of this project; however, the sub-component CEFile will be replaced by the AS- NG’s contract filing module.

Early Acquisition Planning The FDIC does not have an automated solution for early acquisition planning. These tasks are currently accomplished using Microsoft SharePoint and email.

2.3 Technology Stack

Figure 1 depicts a representative Development, Security, and Operations (DevSecOps) toolchain that is part of an ecosystem that supports the FDIC’s product development. It is not a comprehensive list and includes only the major tech stacks and target platforms. The Contractor shall utilize only FDIC-approved DevSecOps tools and pipelines when developing, integrating, testing, and deploying solutions within the Corporation’s technical environment. Any new tools, such as new Appian plugins, would need to pass enterprise architecture and security authorizations to be approved for use within the FDIC environment. Lead time for incorporating such approvals would need to be included in any project planning materials.

Section C - Description/Specifications/Work Statement PAGE 7 OF 163

Figure 1

3 Scope The scope of this contract includes all services required to deliver a secure enterprise-level, end-to-end acquisition lifecycle solution consisting of the three modules and associated functionalities described in this SOO and Appendices across both mobile and desktop devices.

The contractor shall provide all labor, management, tools, and materials to deliver a secure enterprise solution inclusive of program/project management, discovery and fit-gap, Section C - Description/Specifications/Work Statement PAGE 8 OF 163 configuration and development, data and information management, testing and QA, security and compliance, authority to operate, deployment and cutover, training and organizational change management, operations and maintenance, and continuous improvement activities for products released into production. Support also includes creating interfaces to FDIC’s training management system (Blackboard-based), financial systems (PeopleSoft-based), required connectivity to Enterprise Data Warehouse databases, and migrating documents and data from two legacy systems, APS and CDIS/CEFile. The FDIC estimates that approximately 1,100 people will need to be trained in AS-NG based on roles assigned (i.e., CO, OM, TM, System Administrators).

AS-NG modules and expected timelines are listed below in priority order. The FDIC expects AS- NG to be developed iteratively across three functional modules, with capabilities delivered in timeboxed sprints. While development of modules may overlap, legacy systems may not operate in parallel with AS-NG in Production.

Table 1 - Projected Timeline for AS-NG Development

Item Est. User Count Est. Duration

Discovery Period 1 Month

Module 1. Contract Writing (CW) 70 17 Months

Module 2. Contract File (CF) 900 12 Months

Module 3. Early Acquisition Planning (EAP) 100 6 Months

4 General Approach The FDIC’s preferred approach is the use of Agile methodologies focused on iterative delivery, flexibility, collaboration, and rapid development, breaking projects into small, manageable cycles (sprints) to adapt to change and incorporate continuous customer feedback, prioritizing working software, people, and responding to evolving needs. The approach shall also utilize human-centered feedback and design to include software that is easy to learn and navigate, allowing users to accomplish tasks efficiently while creating an enjoyable and engaging experience. The contractor's Agile development team(s) shall work closely with FDIC’s Program Manager, Product Owner, Data Team, and end users to ensure cross-functional collaboration.

The Contractor will be responsible for the delivery of a solution that meets the objectives stated in this SOO and the requirements included in the SOO Appendices (A-G). The Contractor will also be responsible for the maintenance and operation of the solution, which will begin immediately after the first module is released to Production and continue through the final Production release of this development effort.

In support of Agile development, the Contractor shall:

• Develop and enhance Product Vision and Goal, and the Product Roadmap to support consistent delivery of high-quality, mission-aligned functionality.

• Foster effective collaboration with the Product Owner through the ongoing process of refining and prioritizing the product backlog (new features, bug fixes, enhancements, Section C - Description/Specifications/Work Statement PAGE 9 OF 163 technical work) including clear acceptance criteria, estimating size of user stories and sprint timeframes, resulting in well-define, actionable backlog that supports timely delivery of capabilities.

• Assist in the development of Constraints, Limitations, Users, and Exclusions (CLUE) to help focus development team and prevent scope creep during a sprint. See Appendix A:

User Stories.

• Design, code, test, and deliver functional software increments and supporting artifacts based on refined, prioritized product backlog and user stories.

• Support Continuous Integration and Continuous Delivery (CI/CD) to trigger automated builds and tests to catch bugs early, and ensure code is always ready to deploy.

• Identify, document, and track all system components (code, documentation, servers) to ensure system integrity, consistency, and traceability throughout the software lifecycle to include process for reviewing, approving, and implementing changes to those assets to minimize risks.

• Plan, create, and validate scripts for AS-NG deployment, directly support AS-NG deployment and provide release planning and management support.

• Work daily to include daily stand-up meetings to synchronize progress, discuss blockers, and align goals.

Note: This list is not meant to be comprehensive, but to illustrate the FDIC’s desire to have a solution built using Agile methodologies.

5 Objectives

5.1 Discovery Period

Perform the ‘up-front planning work’ (see SOO Section 6 for specific deliverables) necessary to provide overall vision, scope, objectives, initial high-level requirements, architecture, estimates, plans and agreement on roles, responsibilities, working practices, etc., to ensure sufficient consideration is given to these factors early on at the beginning to avoid significant problems later. The Discovery Period shall include a mapping of AS-NG requirements to GAMS out of the box functionality to identify any gaps.

5.2 User Stories

Implement Appian GAMS to meet the User Stories in Appendix A and acts as an integrated, secure, compliant, and searchable repository that streamlines the FDIC contract lifecycle; key features include automated document assembly with templates and clause libraries, process automation and workflows, document management and search, e-signature integration, version control and collaboration, contract portfolio reporting to track and manage KPIs, and customizable reporting/analytics.

5.3 User Centered Design

Provide a user-centric approach where everything starts with understanding the users’ needs, prototyping solutions, testing, and iterating, ensuring the final product is intuitive, accessible, and meets business goals. Provide Usability Testing that evaluates the products developed by testing

Section C - Description/Specifications/Work Statement PAGE 10 OF 163 them with a representative set of users to learn if participants are able to complete specified tasks successfully, identify how long it takes to complete specified tasks, and discover how satisfied participants are with the product.

5.4 Security Plan

Provide and follow a Security Plan, in accordance with Appendix D - System Security Assessment and Authorization Requirements, to include security standards and best practices through all stages of development to include but not limited to:

• Compliance with applicable FDIC security standards for technology and data requirements, NIST

• Remediation of security issues identified by the FDIC’s Information Security and Privacy Programs

• Supporting efforts related to establishing and maintaining the FDIC Authorities to Operate (ATOs)

• Ensuring data protection, integrity, and privacy requirements are designed and adhered to.

• Protecting information used, gathered, or developed under this contract and for the implementation of security controls identified in the FedRAMP package

5.5 FedRAMP Compliance

Provide a solution that complies with Appendix D - System Security Assessment and Authorization Requirements and provides sufficient detailed documentation to enable the FDIC to review all assessment processes, activities, results, and conclusions. Provide core FedRAMP documentation for FDIC’s review to include:

• System Security Plan (SSP)

• Security Assessment Plan (SAP)

• Security Assessment Report (SAR)

• Plan of Action and Milestone (POA&M); POA&M should reflect any findings discovered in the annual controls assessment

• Continuous Monitoring Plan

• Vulnerability Deviation Request form(s), if applicable

• Solution Penetration Testing Results, if applicable

• Third Party Assessment Organization’s (3PAO’s) security assessment and continuous monitoring findings to include how the Contractor addressed findings

• Open Web Solution Security; solution must be free from Open Web Solution Security

Project (OWASP) Top 10 vulnerabilities.

5.6 Disaster Recovery

Provide a solution that complies with FDIC Disaster Recovery plan if/when necessary to the FDIC for review:

• At a minimum, the disaster recovery plan shall include the procedures for testing the plan.

• The contractor shall provide the results of most recent testing of their disaster recovery plan.

• The Maximum Time for Downtime (MTD) shall not be greater than 72 clock hours.

Section C - Description/Specifications/Work Statement PAGE 11 OF 163

5.7 User Authentication

The solution shall support multi-factor authentication and shall be configured to support Single Sign-On (SSO) for user authentication.

5.8 Scalability

Provide a solution that scales to accommodate two percent quarterly growth without any degradation of system performance.

5.9 Digital Accessibility

Provide a solution that complies with Section 508 requirements and provide a voluntary product accessibility template (VPAT) to FDIC for review. The solution shall also conform to FDIC style guidelines.

5.10 Data Management

Provide a solution that delivers best-in-class database design, development, implementation, and management practices and techniques to deliver effective data structure for optimal data management and retrieval – to include easy to maintain and cost-effective data storage in a manner that improves data consistency. The Contractor shall provide a Data Management Plan detailing data collection, organization, storage, security, and sharing of data during and after project is completed.

5.11 Testing

Establish and maintain an automated test suite for the purpose of performing testing to ensure functionality and quality of the digital solutions delivered. This type of testing includes but is not limited to user interface testing, API testing, performance testing, and code quality testing.

Additionally, testing methodologies such as Behavior Driven Development (BDD), Test Driven Development (TDD), and Acceptance Test Driven Development (ATDD) should be considered.

The overarching goal is to ensure a reduction in the number of test cases ran manually and improve testing time and test coverage. In addition, provide a Test Plan detailing objectives, resources, and processes.

5.12 Audit Logging

Provide a solution that ensures audit tracking to automatically and chronologically record activities, events, and changes to data to create a secure audit log with reporting capabilities.

5.13 User Training

Provide an approach that includes a structured, Section 508-compliant training focused on user adoption through tailored FDIC specific, role-specific learning, role-based training, hands-on practice, simulations to complete an action (i.e., issue a solicitation) and a clear explanation of benefits and continuous support. Provide a training plan that includes type and frequency of training, and develop training in different formats, including training videos/tutorials/job aids, including webinars and workshops to provide live, interactive training, one-on-one coaching, user guides and FAQ for quick reference. Provide training and training material updates on time and to

Section C - Description/Specifications/Work Statement PAGE 12 OF 163 standards as required. Provide training materials that include online courses published as a Sharable Content Object Reference Model (SCORM 1.2) package.

5.14 Organizational Change Management

Provide organizational change management support to include stakeholder analysis and management, regular, consistent communications to stakeholders, training and education, and support and feedback in the form of a help desk or support structure for troubleshooting and gathering feedback for continuous improvement.

5.15 Data Migration

The Contractor will migrate data and documents from legacy systems to AS-NG. See Appendix C:

Data Migration Business Requirements. The Contractor shall provide a Data and Document Migration and Validation Plan to guide efforts and ensure successful migration.

5.16 Reporting

Provide a solution with rich reporting capabilities to include visual, interactive dashboards, automated and scheduled reports, ability to apply various reporting criteria (i.e., filtering, sorting, field selections) so reports can be tailored to meet specific needs, drilldown capability down to the lowest level of data, and ability to generate metrics for various activities and actively monitor (i.e., Procurement Administrative Lead Time (PALT), Clause Report, User Access Report). Provide robust reporting capabilities that adheres to FDIC’s Data Analytics Architecture.

5.17 System Documentation

Provide comprehensive system documentation defined as comprehensive blueprint of a system (software, hardware, or process), detailing its design, components, architecture, operation, and maintenance, serving as a vital reference for developers, admins, and users to ensure consistency, facilitate updates, and enable seamless knowledge transfer. This includes requirements, design specs, source code, and user guides, acting as an "owner's manual" to prevent chaos during changes or issues.

Documentation will be provided that supports internal developers and system administrators (architecture, code, setup), external for customers (tutorials, job aids, FAQs), and process-oriented (internal workflows and standards). Key components include:

• Requirements: What the system needs to do (Product Requirements Document - PRD).

• Architecture: High-level design, component relationships, and dependencies.

• Design Decisions: Rationale behind key choices.

• Source Code Documentation: Explanations within the code itself.

• CI/CD Environment Design Diagram: Depicts how ongoing automation and monitoring are implemented to improve and expedite development processes for integration and testing, and deployment and delivery.

• Data Dictionary: Structured repository of metadata that provides a comprehensive description of the data used in the system.

• Configuration Management Plan: Comprehensive description of the roles, responsibilities, policies, and procedures that apply when managing changes to AS-NG.

Section C - Description/Specifications/Work Statement PAGE 13 OF 163

• File Naming Convention: Framework for naming AS-NG files in a way that describes what they contain and how they relate to other files.

• Operational Procedures: How to deploy, configure, and maintain the system.

• User Guides: Tutorials and FAQs for end-users.

• Quality Assurance: Testing documentation.

5.18 Metrics Reporting

Provide real-time, business-facing metrics through configurable dashboards in the FDIC’s designated Agile Management Tool (GitHub); reporting also includes Agile burn down charts, release roadmaps, and schedules.

5.19 Service Level Recommendations

In addition to the required Service Level Agreements included in SOO Appendix E, the Contractor shall recommend Application Support and Agile Software Performance SLAs and associated Key Performance Indictors (KPIs). Proposed metrics will include title, description, methodology for measuring/calculating, and frequency.

5.20 System Implementation Plan

Provide a System Implementation Plan detailing how AS-NG will be installed, configured, and deployed.

5.21 Transition Out

Provide a Transition Plan detailing how services, knowledge, and assets will be transitioned to a follow-on contractor or Government entity at contract completion.

6 Deliverables The Contractor shall provide deliverables to the assigned FDIC OM and TM electronically and in the format specified via email by the close of business day 4:30 PM EST Monday through Friday.

All deliverables submitted (uploaded) in electronic format shall be free of any known computer virus or defects. If a virus or defect is found, the deliverable will not be accepted. The replacement file shall be provided within two (2) business days after notification of the presence of a virus.

The initial format for most deliverables will be a standard Microsoft Office format however the FDIC is continuing to evolve its application development process and practices. When requested, the Contractor shall use these new technologies in the submission of deliverables.

Table 2 – AS-NG Support Services Deliverables

Title Description Frequency Format

1. Definition of Done Shared set of criteria that determines when a product increment is complete and ready for release. This includes defining acceptance

Exit Criteria for Discovery Period

MS Office Product

Section C - Description/Specifications/Work Statement PAGE 14 OF 163

Title Description Frequency Format criteria for the completion of the Performance Events listed in Section 8, Table 3 of this SOO.

2. Establish standing meeting scheduling/ cadence and Team Norms

To include backlog refinement, demonstration, sprint retrospective, etc.

Exit Criteria for Discovery Period

MS Office Product

3. Product Roadmap To include Performance Event Completion Dates for Section 8, Table 3 of this

SOO.

Exit Criteria for Discovery Period

MS Office Product

4. Security Plan See SOO Section 5.4 In accordance with SOO Appendix D

MS Office Product

5. FedRAMP Security Documentation

See SOO Section 5.5 On an annual basis or as significant changes are made.

MS Office Product

6. Configuration Management Plan

See SOO Section 5.17 30 business days after Discovery Period ends

MS Office Product

7. Organizational Change Management Plan

See SOO Section 5.14 30 business days after Discovery Period ends

MS Office Product

8. Data and Document Migration and Validation Plan

See SOO Section 5.15 90 business days after award

MS Office Product

9. Training Plan See SOO Section 5.13 120 business days after award

MS Office Product

10. Data Management Plan See SOO Section 5.10 120 business days after award

MS Office Product

11. System Implementation Plan

See SOO Section 5.20 120 business days after award;

updated as needed

MS Office Product or lifecycle management tool

12. Transition Plan See SOO Section 5.21 120 business days after award

MS Office Product

13. Quality Control Plan (QCP) Outlines specific procedures, standards, and responsibilities for maintaining product and

As part of proposal; updated when there is a change

MS Office Product

Section C - Description/Specifications/Work Statement PAGE 15 OF 163

Title Description Frequency Format service quality

14. Shippable Application Code To include appropriate supporting artifacts

Continuously with each Sprint and Release

Application Source and Compiled Code

15. Test Plan, Test Scripts and Results

See SOO Section 5.11 Continuously with Sprint and Release

MS Office Product and Application Source Code

16. System Documentation See SOO Section 5.17 Continuous throughout project lifecycle

MS Office Product or lifecycle management tool

17. Product, Release, and Sprint Backlogs

As needed to support sprints

Electronic Backlog

18. Disaster Recovery Plan See SOO Section 5.6 As directed by

FDIC

MS Office Product

19. Training Materials See SOO Section 5.13 No less than 30 business days prior to training

Webinars, Videos, MS Office Product

20. Status Briefings, Meeting Reports, Burn Down Charts, etc.

Updates on planned tasks, contract spend, issues, etc.

As directed by

FDIC

MS Office Product

21. Service Level Agreement Report

See SOO Appendix E Monthly MS Office Product

7 Service Delivery Model The work on this contract will be accomplished through firm-fixed-price (FFP) Agile Teams.

Contractor resources supporting the AS-NG solution shall be skilled in FDIC-approved architecture and technologies and provide the expertise to inform development and design planning, execution, and implementation. The Contractor shall also contribute to evolving development standards at the FDIC and share lessons learned with other stakeholders.

7.1 Agile Team Size

The contract will include multiple options to give the FDIC flexibility for varying the size and number of Agile Teams as time passes. The Team size will be stated in terms of Full-Time Equivalents (FTEs). For example, a Team size of five may be satisfied by five full-time employees, or three full time employees and four half-time employees (unless otherwise noted in the Contract Line-Item Number). As work on the project evolves, the Contractor may be required to reorganize the team(s) in order to support changing needs. This could mean scaling the team(s) up or down and shifting roles on the team(s).

Section C - Description/Specifications/Work Statement PAGE 16 OF 163

A key aspect of this contract is that the Contractor will provide fully staffed cross-functional team(s) to accomplish the needed work. The Contractor’s inability to provide fully staffed cross-functional Teams to accomplish the needed work will be a failure on the Contractor’s part, as the velocity and quality of the work is dependent on fully staffed cross-functional teams.

A Contractor employee who is fully dedicated to an Agile Team for any period of time under this contract shall not be used by the Contractor for any other work during that period of time.

7.2 Contract Type

The Contract Line-Item Numbers (CLINs) on this award are Firm Fixed Price (FFP) based on Team size. The anticipated CLINs and Team sizes are listed below, however, the FDIC is open to alternatives proposed by the Offerors as part of the AS-NG solicitation that realize efficiencies:

1. CLIN 1 – Discovery Period: 6 FTEs o The Discovery period is not anticipated to exceed one month. Charges against

CLINs 2-4 may not begin until the Discovery Period has been successfully completed as determined by the FDIC.

2. CLIN 2 – Module 1 CW Team: 6 FTEs o Note the CW Team includes any resources related to supporting the ATO process as well as the Change Manager (Key Personnel) role

3. CLIN 3 – Module 2 CF Team: 4 FTEs

4. CLIN 4 – Module 3 EAP Team: 1 FTE

7.3 Contractor Employee Bench

It is expected that the Contractor will have reach-back to a bench of FDIC-cleared employees who can act as substitutes for team members who may be absent for whatever reason or brought on in the event a Team size needs to be increased. The Contractor bench staff shall have a breadth of skills and experience sufficient for them to effectively pick up the work of absent Team colleagues on a temporary basis. The Contractor shall coordinate with the Oversight Manager and designated DIT Project/Program Managers for each Team to ensure that bench employees are able to step in for absent Team members on a same-day or next-day basis. Bench staff shall: have been cleared by FDIC’s Security and Emergency Preparedness Section (SEPS);

have an unexpired FDIC PIV card; have an FDIC laptop that is current with mandatory security and other patches; have been provisioned for FDIC network access and other common services, including relevant SharePoint repositories, GitHub projects, ServiceNow and other necessary development tools; and have been granted access to the development, QA, and other environments used by the Team(s).

7.4 Contractor Employee Absences

Notification of planned or unplanned absences, along with identification of bench staff to be substituted in, shall be provided to the Oversight Manager, the designated DIT Project/Program Manager, and the AS-NG Product Owner on a timely basis or as requested by the Oversight Manager. Additionally, for each Team, the Contractor shall ensure that over the course of each Agile sprint, FDIC receives in total the number of FTE-hours it is entitled to based on the Team size and the number of workdays in the sprint. The FDIC may excuse non-recurring, Section C - Description/Specifications/Work Statement PAGE 17 OF 163 short-term absences of Contractor personnel; provided, the Team’s performance, velocity, quality, or other expectations are satisfied. Should there be any extended or recurring absences, the vendor shall invoice at a reduced rate commensurate with the Team size performing during the time.

7.5 Team LCAT Composition

As the work progresses or evolves, the Contractor shall adjust its Team composition as appropriate to any new needs and with the approval of the FDIC Oversight Manager. These adjustments occur within the fixed-price and fixed-size of the Team, and do not require contract modifications. For example, a 4-FTE Team of three developers and one tester might evolve to two developers, 1 tester, and 1 database manager.

7.6 Re-Sizing Teams within a Performance Period

FDIC anticipates awarding the base period and subsequent option periods with its best projection regarding Team sizes. However, within a period, the FDIC may re-size a Team for a different size for the remainder of that period using the pricing table in the contract; provided, the FDIC gives reasonable notice to the Contractor. Here, reasonable means at least two (2) months advance notice if done unilaterally by the FDIC, or any time if done bilaterally.

7.7 Temporary Loan of Team Member Between Teams

In the event FDIC chooses to prioritize work of a particular Team during a given sprint and deprioritize work on another Team, the Parties may agree to request the Contractor to temporarily detail a contractor employee from one Team to another Team without a change in contract price and without a change in the price of either Team. For example, the Parties may agree that one Team temporarily increase by one (1) FTE while another Team correspondingly decreases by one (1) FTE. Here, temporarily means less than two months. Such an agreement may be memorialized by email exchange between the FDIC oversight manager and the Contractor lead.

8 Basis for Payment Payments under CLINs 2, 3, and 4 will be made based on successful completion of the performance events listed in Table 3 below. Advance payments made prior to successful completion of the performance events shall be liquidated by deducting the specified percentage in Table 3.

Table 3 – AS-NG Support Services Performance-Based Payments

Applicable CLIN Performance Event Acceptance Criteria Event Completion Date

Payment Deduction Until

Event Completion

CLIN 2 –

Contract Writing

CW Module is released into

As defined and agreed to by

As defined and agreed to by

20%

Section C - Description/Specifications/Work Statement PAGE 18 OF 163

Production Contractor and FDIC during Discovery Period

Contractor and FDIC during Discovery Period

CLIN 3 –

Contract Filing

CF Module is released into Production

As defined and agreed to by Contractor and FDIC during Discovery Period

As defined and agreed to by Contractor and FDIC during Discovery Period

20%

CLIN 4 – Early Acquisition Planning

EAP Module is released into Production

As defined and agreed to by Contractor and FDIC during Discovery Period

As defined and agreed to by Contractor and FDIC during Discovery Period

20%

9 Place of Performance The requirement is to be performed off-site at the contractor’s facility except for as needed onsite training provided at FDIC offices in Arlington, VA or Dallas, TX. However, authorized users may be located in several offices throughout the country. Contractor may be required to travel to FDIC offices from time to time to provide project services.

Travel must be approved by the OM or CO prior to traveling.

10 Key Personnel The following roles are designated as key personnel.

· Project Manager

· Scrum Master

· Solution Architect

· Lead Developer

· Change Manager

· Data Migration Lead

Project Manager

The Contractor shall provide a Project Manager (PM) responsible for serving as the single point of contact for the FDIC OM, TM, and PM. The Contractor PM shall be responsible for the reporting and deliverables that are addressed in this SOO, as well as coordination of all Contractor personnel onboarding and off boarding activities associated with this Contract.

Prior experience leading the implementation of Appian Platform solutions is required for this role, as well as experience in problem-solving, advanced proficiency in analysis, leadership, and communication skills (verbal and written) and a proven record of working well in a

Section C - Description/Specifications/Work Statement PAGE 19 OF 163 team environment. This role requires a Bachelor’s Degree. A graduate degree and specific GAMS experience are highly desired.

Scrum Master

The Contractor shall provide a Scrum Master who is responsible for facilitating continuous improvement at the overall program level for AS-NG. This role helps to educate the team(s) to ensure that the agreed agile processes are followed. Experience leading teams in using Agile methodology and Scrum practices , along with expertise in refinement, story splitting, estimation, velocity, retrospection, and other Scrum techniques is required. Certified Scrum Master certification is desired. One resource may fill both the Project Manager and Scrum Master Key Personnel roles.

Solution Architect

The Contractor shall provide a Solution Architect to design and manage the end-to-end architecture of an Appian solution and ensure that all the components of the solution integrate with FDIC architecture. The Solution Architect must have experience in Appian GAMS projects similar in scope, size and complexity to the requirements for AS-NG.

Lead Developer (LD)

The Contractor shall provide a LD with experience developing code and leading development teams in the Appian technology. The LD must have expert knowledge of the software tools, platforms, and processes required to support the associated technology tower and Microsoft suite of tools, SAP, PS, ETL tools and/or other package software applications. The LD must also have expert knowledge of databases and related tools and utilities (as applicable above).

Change Manager (CM)

The Contractor shall provide a Change Manger with experience in projects similar in scope, size and complexity to the requirements for AS-NG.

Data Migration Lead

The Contractor shall provide a Data Migration Lead to oversee the migration of data from legacy systems to AS-NG. The Data Migration Lead shall have experience managing data migration efforts similar in size and scale to this project. Specific experience with GAMS is highly desired.

11 Appendices

Appendix A – User Stories

Appendix B – Contract Writing Business Process Models

Appendix C – Data Migration Business Requirements

Appendix D – System Security Assessment and Authorization Requirements

Appendix E – Service Level Agreements

Appendix F – Non-Functional Requirements

Section C - Description/Specifications/Work Statement PAGE 20 OF 163

Appendix G – Operations and Maintenance Requirements

Section C - Description/Specifications/Work Statement PAGE 21 OF 163

Section E - Inspection and Acceptance

No reference clauses were found for this section.

7.6.4-01 - Inspection and Acceptance - July 2008

(a) All goods and services shall be subject to inspection and test by the FDIC Oversight Manager, to the extent practicable, at all times and places during the term of the award. All inspections by the FDIC shall be made in such a manner as not to unduly delay the work.

(b) The FDIC shall have 30 business days from the date of Contractor''s delivery to determine if such goods and services are in compliance with the requirements of the contract. If any services performed or goods delivered hereunder are not in conformity with the requirements of this Award, the FDIC shall have the right to require

Contractor to reperform the services or redeliver the goods in conformity with the requirements of the Award, at no additional increase in total contract amount. When the services to be performed are of such a nature that the defect cannot be corrected by reperformance of the services, the FDIC shall have the right to (1) require Contractor immediately to take all necessary steps to ensure future performance of the services in conformity with the requirements of the contract; and (2) reduce the contract price to reflect the reduced value of the services performed. In the event Contractor fails promptly to reperform the services or redeliver the goods, or to take necessary steps to ensure future performance of the services or delivery of the goods in conformity with the requirements of the Award, the FDIC shall have the right to either (1) by contract or otherwise, have the services performed or the goods delivered in conformity with the contract requirements and charge to Contractor any cost occasioned to the FDIC that is directly related to the performance of such services or the delivery of such goods; or

(2) terminate this Award for default as provided in 7.6.6-02, Termination for Default.

(c) Contractor shall provide and maintain an inspection system acceptable to the FDIC covering the goods or services to be delivered or performed hereunder. Records of all inspection work by Contractor shall be kept complete and available to the FDIC during the term of this Award and for such longer period as may be specified elsewhere in this Award.

Section E - Inspection and Acceptance PAGE 22 OF 163

Section F - Deliveries or Performance

7.3.1-10 - Place of Delivery or Performance - November 2025 The place of delivery or performance is off-site at the contractor’s facility except for as needed onsite training provided at FDIC offices in Arlington, VA or Dallas, TX. However, authorized users may be located in several offices throughout the country. Contractor may be required to travel to FDIC offices from time to time to provide project services. Travel must be approved by the OM or CO prior to traveling.

Contractor must ensure the contract number is listed on the shipping material or packing slip.

Tangible items: Shipment-tracking information must be provided to the following email addresses:

DITDDC@FDIC.gov and the Oversight Manager listed in Clause 7.3.2-41 FDIC Personnel within one business day of when a tangible item is shipped to the FDIC.

Non-tangible items: Shall be submitted to the following email addresses: DITSoftwareMgt@FDIC.gov and the

Oversight Manager listed in Clause 7.3.2-41 FDIC Personnel. This includes all documentation such as product keys, activation codes, digital certificates or related materials necessary to install, activate, subscribe, and operate the software in accordance with the terms of the contract and evidence of maintenance or subscription renewals.

This requirement applies to electronic records or documentation associated with deliverables under this contract and does not modify any negotiated software license terms or rights.

7.3.1-11 - Deliverables - July 2008 The Contractor must provide all deliverables described in the statement of work.

7.3.1-12 - Period of Performance - July 2023 The estimated Period of Performance will be a 2 year Base Period, 1 12-Month Option Period, and 2 $0 6-Month

Option Periods for time only.

See clause 7.5.5-01, Option Period.

Section F - Deliveries or Performance PAGE 23 OF 163

Section G - Contract Administration Data

7.3.2-41 - FDIC Personnel - July 2008

(a) FDIC Oversight Manager. The Oversight Manager is the person designated in writing by the Contracting

Officer to represent the FDIC for the purpose of monitoring technical performance and accepting goods or services.

The Oversight Manager is not authorized to issue any instructions or directions which effect any substantive change in this contract, including, but not limited to, an increase or decrease in the price of this contract, or a change in the delivery date(s) or Period of Performance. Specific areas of delegated authority are more particularly defined in the

Oversight Manager Appointment Memorandum. The Oversight Manager is ______________________.

(b) FDIC Contracting Officer. The Contracting Officer is the person with FDIC-delegated authority to enter into, modify, administer, and terminate contracts and orders. The Contracting Officer is ______________________.

7.5.13-01 - Method of Payment - Electronic Fund Transfer (EFT) - March 2014

(a) Payment methods. Payments by the FDIC may be made by check or electronic funds transfer (EFT), or by a third party in lieu of payment directly from the FDIC, at the option of the FDIC. If the FDIC makes payment by EFT, the FDIC may, at its option, also forward the associated payment information by electronic transfer. Any third party payments will be made by the FDIC''s commercial purchase card issuer. In the event Contractor certifies in writing to the payment office that Contractor does not have an account with a financial institution or an authorized payment agent, the FDIC would make payments by other than EFT.

(b) Contractor Payment Requests. If the FDIC elects for third party payments to be made, Contractor shall make payment requests through a charge to the FDIC purchase card with the third party, at the time and for the amount due in accordance with the terms of this contract. Contractor and the third party shall agree that payments due under this contract shall be made upon submittal of payment requests to the third party in accordance with the terms and conditions of an agreement between Contractor, the Contractor''s financial agent (if any), and the third party and its agents (if any). No payment shall be due the Contractor until such agreement is made. Payments made or due by the third party are not subject to the Prompt Payment Act or any implementation thereof in this contract. Documentation of each charge against the FDIC''s purchase card shall be provided to the Contracting

Officer upon request.

Contractor is required, as a condition to any payment, to maintain current information in the System for Award

Management (SAM) database. Any invoice submitted with incorrect EFT information shall be deemed not to be a proper invoice as defined in the Prompt Payment Act clause herein.

Section G - Contract Administration Data PAGE 24 OF 163

7.5.13-06 - Compensation Ceiling - Contract or Task Order - July 2008 Not-to-Exceed

Period of Performance Ceiling Amount

Initial Period: $________________

Option Period 1: $________________

Option Period 2: $________________

Option Period 3: $________________

Total (if all option periods are exercised): $________________

In no event will total FDIC compensation to Contractor, including any reimbursed costs and expenses, exceed the sum of ________________ Dollars ($__________) for the entire Period of Performance, including the initial period and all options, if any. Contractor must notify the Contracting Officer, in writing, when Contractor has incurred charges amounting to seventy-five percent (75%) of the ceiling amount for each performance period.

7.5.13-12 - Schedule for Invoicing - July 2008 For Firm-Fixed-Price, Contractor must submit invoice upon completion of the service or delivery of the goods.

Payments under CLINs 2, 3, and 4 will be made based on successful completion of the performance events listed in

Table 3 of the SOO. Advance payments made prior to successful completion of the performance events shall be liquidated by deducting the specified percentage in Table 3.

Milestone-Based Payment (General Service)

Customer shall pay the Contractor full payment deduction upon completion of the following milestones:

Milestone 1: CLIN 1 - Discovery Phase and CLIN 2 - Contract Writing

Contract Writing Module is released in Production.

Milestone 2: CLIN 3 - Contract Filing

Contract Filing Module is released into Production.

Milestone 3: CLIN 4 - Early Acquisition Planning

Early Acquisition Planning Module is released into Production.

Final Payment: Remaining balance upon final inspection and acceptance."

7.5.13-13 - Contents of Invoice - March 2014 Contractor''s invoices must include the following items in order to be processed for payment:

(a) Contractor name, address and phone number.

(b) Invoice date. (Contractors must date invoices as close as possible to the date of electronic transmission to

FDIC.)

Section G - Contract Administration Data PAGE 25 OF 163

(c) Invoice number.

(d) Contract Number (e.g., Contract Number, Task Order Number, Delivery Order Number, etc.)

(e) Line Item Number(s), as identified in the contract, and the amount invoiced for each Line Item Number.

(f) Allocation of all hours and expenses to Financial Institution Number (FIN) and Asset Name/Number, if applicable.

(g) Description, quantity, unit of measure, unit price, extended price of goods delivered or services performed.

(h) Total invoice amount.

(i) Payment terms (discount for prompt payment terms).

(j) Remittance address.

(k) Billing Point of Contact (e.g., name (where practicable), title, phone number, and mailing address of person to notify if there are questions regarding the invoice).

(l) Shipping information (e.g., shipment number, date of shipment, bill of lading number and weight of shipment.

Shipping charges, if any, must be shown as a separate item on the invoice).

(m) For time and material or labor hour awards, copies of time sheets in support of direct labor charges.

(n) If travel expenses are reimbursable under the award, Contractor must submit travel documentation, receipts and other proof of expenses as required by the FDIC Contractor Travel Reimbursement Guidelines.

(o) If subcontractor expenses are reimbursable under a labor-hour or time-and-material…