This is a Questions and Answers document for an RFI regarding an Enterprise Linux Operating System and Virtual Application Management Platform for the Department of State. The document contains 19 questions from potential vendors and State's responses covering technical requirements, certifications, and procurement details.
Key requirements include FIPS 140-2/3 certification for all cryptographic modules, DOD IL6 and FedRAMP High certification for all solution components, and compatibility with hybrid, cloud, and on-premises deployments. The State Department is seeking solutions that can support 50,000+ personnel worldwide and has proven experience with U.S. government agencies of similar size and complexity. The State Department emphasizes this is only for market research purposes, with no commitment to issue an RFP or award a contract. The document clarifies that responding vendors will not receive preferential consideration for future opportunities. A response date of 2/5/2025 is indicated.
The file's text, extracted by GovTribe without its formatting.
Enterprise Linux Operating System and Virtual Application Management Platform Questions and Responses
#
Question
Response
1
Could you elaborate on the specific automation capabilities required, particularly for managing virtual applications and memory storage services?
Please refer to Section 2.4 for detailed requirements and capabilities that State is seeking.
2
Are there preferred container orchestration platforms (e.g., Kubernetes, OpenShift) or any restrictions on their use?
State is conducting market research and does not have a preferred platform at this time; however, the solution must meet State and Federal cybersecurity requirements.
3
Does the Department of State have existing integrations that the proposed solution must support (e.g., specific databases, third-party platforms)?
There are numerous systems and platforms at State. State is conducting market research to better understand industry’s capabilities and offerings. Please describe how your solution can integrate with existing systems and platforms.
4
For FIPS 140-2/3 certification, are there specific cryptographic modules the solution must include, or will vendor recommendations be considered?
All cryptographic modules offered must be FIPS 140-2/3 certified.
5
Can you provide additional details on the Cybersecurity Supply Chain Risk Management (C-SCRM) policy requirements that the solution must address?
Please see the posted C-SCRM policy documents that State requires. For further details on Federal C-SCRM requirements that State abides please refer to the following resource, https://csrc.nist.gov/Projects/cyber-supply-chain-risk-management.
6
Is compliance with DOD IL6 and FedRAMP High certification required for all components of the solution, or only specific modules?
Yes, both certifications are required for all components of the solution. Please include a detailed explanation as to why any modules do not include certification.
7
Could you provide an estimate of the deployment scale (e.g., number of users, systems, or applications)?
State is conducting market research to better understand alternative solutions, capabilities, when deployed in agencies of similar size and global mission as State which supports 50K+ personnel worldwide.
8
Is the solution expected to support hybrid or multi-cloud environments in addition to on-premises deployment? If so, are there preferred cloud providers or environments?
State has various environments that include hybrid, cloud, and on-prem deployments. State is conducting market research to better understand industry’s capabilities and offerings. Please describe how your solution can support various deployments.
9
Are there requirements for high availability or disaster recovery, and if so, what are the defined recovery time objectives (RTOs) and recovery point objectives (RPOs)?
State is conducting market research to better understand industry’s capabilities and offerings as it relates to disaster recovery and data integrity in the event of system failures or disasters. Please describe your solution’s ability to meet the requirements described in section 2.5.
10
Are there existing tools or platforms currently in use that the proposed solution must integrate with?
There are numerous, diverse tools and platforms currently deployed across State. State is conducting market research to better understand industry’s capabilities and offerings. Please describe how your solution can integrate with existing tools and platforms.
11
What are the key expectations regarding vendor neutrality, particularly in terms of interoperability with non-Linux operating systems?
State has various environments that include hybrid, cloud, and on-prem deployments. Please describe your solution’s capability in supporting interoperability with Linux and non-Linux operating systems.
12
Will there be an opportunity to provide live demonstrations or Proof of Concept (PoC) sessions to showcase system capabilities?
State is conducting market research to better understand industry’s capabilities and offerings. Live demonstrations may be requested at the Department’s discretion based on a review of alternative solutions identified during State’s market research activities.
13
Are there specific scenarios or use cases the Department would like vendors to focus on during demonstrations?
State is conducting market research to better understand alternative solutions. State is seeking a solution that has a proven track record in the USG with demonstrated experience supporting U.S. agencies of similar size, global scope, and mission complexity as State. Please refer to section 3 of the RFI for further details.
14
Are there specific federal agencies or projects the Department would consider as preferred references for demonstrating experience?
Please refer to section 3 of the RFI for details regarding acceptable past performance.
15
For prior deployments, is there a preference for showcasing work with a similar scale or mission-critical applications?
State is seeking a solution that has a proven track record in the USG with demonstrated experience supporting U.S. agencies of similar size, global scope, and mission complexity as State. Please refer to section 3 of the RFI for further details.
16
Can you provide any insights into the anticipated timeline for issuing an RFP following this RFI?
State released this RFI for information gathering purposes only to identify interested and capable sources that can provide a solution that fully meets all requirements outlined in the RFI. State has not made a commitment to release an RFP or procure any of the items/services discussed. The U.S. Government (USG) does not commit to award a contract on the basis of this RFI.
17
Will vendors who respond to this RFI receive priority consideration or prequalification for future procurement opportunities?
There will be no preferential consideration or prequalification as a result of responding to this RFI. State has not made a commitment to release an RFP or procure any of the items/services discussed.
18
Are there any specific templates or formats required for the response submission?
State does not have specified templates for vendor RFI response. Please refer to Section 1.4 and Section 2a-b of the RFI regarding vendor submission requirements.
19
Can you clarify the scope and depth of technical and managerial capabilities that should be included in the response?
Technical and managerial capabilities are not the focus of this RFI. State is conducting market research to better understand industry solutions and offerings to provide an integrated suite of COTS software solutions.
2/5/2025
File details come from the government source that posted it.
Updated .
