A0007_RFP Attachment 4 - Sample Task 1 Existing Product Development.docx

DOCX document 122 KB Posted

Attached to
Appian Platform and Product Support
Solicitation number
2031JW25R00004
Issued by

About this file

This document is a Sample Task 1 Performance Work Statement (PWS) for the Office of the Comptroller of the Currency (OCC) related to Appian Platform and Product Support. The PWS covers comprehensive support for 16 existing software products, including Assignment Management System, Central Application Tracking System, Cybersecurity Supervision System, and others, with tasks spanning project management, software development, configuration management, technology research, product testing, training, and Tier-2/Tier-3 help desk support.

The performance period is from June 1, 2026, to May 31, 2027, with key personnel including an Appian Technical Lead and Quality Assurance Lead. The work involves agile development approaches, with detailed requirements for weekly status reporting, release planning, testing, knowledge transfer, and maintaining development standards. The estimated total effort is 23,235 hours across various labor categories, with the majority of time (59%) allocated to software development tasks, 18% to help desk support, and 16% to product testing, training, and implementation.

View the file

Other files

File Type Posted
SF30_A0008_2031JW25R00004.pdf PDF
A0007_RFP Attachment 1 - Base PWS.docx DOCX document
Enclosure32_Appian Products Future Backlog.pdf PDF
Enclosure14_Sept2020_ExtProd_Appian_Shared_Platform_Deployment_Instructions_Redacted Update.pdf PDF
Enclosure12_CATS _Sept_2020.4_Release_Test_Analysis_Results.pdf PDF
APPS Q and A Tracker.pdf PDF
Enclosure34_Help Desk Call Volume (formerly App C).pdf PDF
Enclosure36_Contract Dev Status (Heat Map)_Redacted Update.pdf PDF
Enclosure33_FY26 APPS Schedule.pdf PDF
A0007_2031JW25R00004_APPS.pdf PDF
Enclosure13_Appian_Shared_Platform_Deployment_Instructions_IntSep2020_Redacted Update.pdf PDF
A0007_Appian Platform Support RFP.docx DOCX document
Enclosure16_EMS_Story 224878_SprintPlanningSlides_OnePointExample Update.pdf PDF
Enclosure28_215151ScopingDocument_EightPointExample.pdf PDF
Enclosure11_NRISK_2021.1_Test_Analysis_Report_Redacted Update.pdf PDF
Enclosure27_EMS PEP Sprint 27 215151_EightPointExampleUpdate.pdf PDF
Enclosure30_143038ScopingDocument_ThirteenPointExample.pdf PDF
Enclosure29_SPRT_CR143038_Slides_ThirteenPointExample.pdf PDF
Enclosure15_CATS_Sept_2020_Release_Notes_2020_4_Redacted Update.pdf PDF
Enclosure31_Appian Products Backlog FY19 and FY20.pdf PDF
Enclosure17_Appian Scoping Spreadsheet_Story224878_OnePointExample.pdf PDF
SF30_2031JW25R00004-0006 Extension.pdf PDF
SF30_Amend_2031JW25R00004_0005.pdf PDF
SF30_RFP_Amend_2031JW25R00004_0004.pdf PDF
SF30_RFP_Amend_2031JW25R00004_0001.pdf PDF
2031JW25R00004-0003 Extension 3.pdf PDF
Amend 0002_2031JW25R00004.pdf PDF
2031JW25R00004-0001 Extension.pdf PDF
RFP Attachment 6 - Lessons Learned Template.docx DOCX document
RFP Attachment 5 - Sample Task 2 Appian SOO ExPo Strategy Module Order.pdf PDF
RFP Attachment 4 - Sample Task 1 Existing Product Development.pdf PDF
RFP Attachment 3 - Non-Disclosure Agreement (Contractor Employees).doc DOC document
PWS Annex B - Agile Development.pdf PDF
PWS Annex A - Crafting-508-compliant-word-pdf-documents-guide.pdf PDF
RFP Attachment 1 - Base PWS.pdf PDF
RFP 2031JW25R00004 Appian Platform and Product Support.pdf PDF
RFP Attachment 7 - Resource Information Template.xlsx XLSX spreadsheet
RFP Attachment 8 - Treasury SF 1019A - Subcontracting Plan (3-22).docx DOCX document
RFP Attachment 2 - Appian Platform and Product Support IDIQ Pricing Spreadsheet.xlsx XLSX spreadsheet
Show all 39

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

RFP 2031JW25R00003 Attachment 4 Appian Platform and Product Support ITS SPS Sample Task 1: Existing Product Operations and Maintenance Transition and Support

1.0 BACKGROUND

In support of this mission the Office of the Comptroller of the Currency (OCC), Information and Technology Services Division (ITS) seeks to ensure a robust, secure, and seamless operational environment for the Appian Platform which remains paramount to the delivery of critical business processes and services.

2.0 PURPOSE

The purpose of this Task Order is devoted to comprehensively addressing the needs and challenges pertaining to Appian System Administration Transition and Support. Emphasizing various facets, such as software development, configuration management, technology refresh and architecture support, patch and upgrades, system maintenance, help desk support, application monitoring, product recovery, and capacity management, a multi-faceted approach is integral. This task order describes the work and approximate amount of time resources needed to spend on these activities.

3.0 SCOPE AND DESCRIPTION OF TASKS

The scope of work includes support for the following existing products:

· Assignment Management System (AMS)

· Central Application Tracking System (CATS)

· Community Reinvestment Act–Qualifying Activities (CRA)

· Common Case Management (CCM)

· Cybersecurity Supervision System (CSS)

· Examiner Portal (ExPo)

· Ethics Management System (EMS)

· Invitational Travel Reimbursements (ITR)

· National Risk Issue System (NRISK)

· Personnel Administration and Security (PASS)

· Product Search Portal (PSP)

· Quick Wins

· Security Assessment and Accountability System (SAAS)

· Strategy Tracker (Tracker)

· Supervisory Product Review Tool (SPRT)

· Web Tracking and Tracking Application (WTTA)

Tasks and Deliverables This section defines the type of tasks that may be performed and the work products and deliverables that may be created/maintained by the Contractor. Given the agile development approach described later in this document, the specific tasks and deliverables are defined in this task order and elaborated on at the start of each sprint or release. The ‘Estimated Hours & Work Allocation’ table later in this document provides an estimated percentage of time expected to be allocated to the tasks identified in this section. All deliverables are due to the COR unless explicitly stated otherwise.

3.1 Project Management Tasks

3.1.1 Project and Contract Management

The Contractor must perform all of the types of work described in Table , as necessary.

Table 3–1 Project and Contract Management Tasks

Task ID
Task Description
3.1.1.1
Weekly Status: Create and circulate a weekly status report that includes:

· Activities by technical/functional area

· Updates to the Integrated Master Schedule (IMS)

· Status of deliverables (submitted, late, or planned)

· Key risks and mitigation plans

· Key issues and action items

· Staff changes

· Performance metrics.

The Contractor must:

· Deliver a weekly status report, in a format agreed upon by the COR and Contractor, by the end of the first business day following the week for which status is being reported;

· Work with the OCC’s project managers and assist with inputting data into the status report or systems used to collect status report data; and

· Confirm with the COR prior to dissemination of the first report, the recipients of the weekly status (any additions to or deletions from the recipient list must be approved by the COR).

After award, the COR will provide the Contractor the mandated template for producing this report. The COR may change this template with reasonable notice given to the Contractor.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Weekly Status Report
One (1) per week
Document (format as agreed)
Weekly (see above for when due)
3.1.1.2
Project Management Planning: Upon receipt of an assignment for software development services, the Contractor must proceed with detailed project planning, to include the following:

· Reiterate and confirm by providing a narrative demonstrating understanding of the project goals, needs, and objectives;

· Propose high-level technical approaches and alternatives for currently undefined, labor-hours tasks;

· Propose high-level milestones for currently undefined tasks whose level of effort is not reflected in the project schedule;

· Coordinate and collaborate with other contractors and OCC staff on planning activities; and

· Conduct project management activities across all projects included in the PWS (e.g., resource planning/constraints and coordinating, training compliance, onboarding/offboarding including timeframes, space planning support, long term integrated planning, communications channels, office location).

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Monthly Contractor Resource Detail to include a list of resource names and hour allocation across all supported Appian products
One (1) per month inclusive of all products being supported
Document (format as agreed)
Within 10 business days after the end of each month
Project Management Plan
One (1) for all products being supported
Document (format as agreed)

Quarterly

3.1.1.3
Release Plans: Create release plans in close coordination with ITS and the business unit to prioritize outstanding product backlog items and allocate those items to specific releases (and to sprints within a release).

· Maintain release plans within the OCC-approved application lifecycle management (ALM) software (currently Jazz, but referred to as ALM through the remainder of this document)

· Determine release plans in quarterly meetings with the OCC ITS project team and the relevant OCC business unit stakeholders

· Schedule quarter release planning meetings, no less than three weeks prior to the planned release date.

· Calculate the estimated cost of the release, iteration, and sprint using the initial release budget, release backlog, estimated velocity. Continuously review actual release/sprint cost against the estimates and adjust future cost predictions.

The planning meeting will include activities such as backlog grooming, allocating/reallocating items to a release/sprint, discussion of story points, velocity, and resource capacity. Attendance at release/sprint planning meetings by the development team members should be included in the development tasks for each system in scope.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Release Plan - The plan should include the sprint timelines, UAT timeline, and production release date for each Appian product supported.
One (1) plan for each product per release
Document (e.g., meeting minutes or ALM system updates)
Within 1 business day of release planning meeting

Implementation Plan that consists of the final implementation readiness checklist and detailed deployment checklist

One (1) plan for each product per release
Document (format as agreed)
Delivered two (2) business days after the end of user acceptance testing (UAT)
3.1.1.4
Project Schedules: Create (and deliver to OCC) project schedules using MS Project, following the policies and procedures established by the OCC. Tasks must be decomposed to the work-package level, dependencies between tasks must be identified, and milestones must be included.

These updates must include percentage of total work completed, actual effort expended on an activity in labor hours, dependency changes, resource changes, milestone changes, etc. Detailed tasks will be stored in ALM, so the project schedules will contain activities not in the ALM (e.g., document updates & reviews) and sprint/release timelines.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Project Schedule
One per new product development effort
Document (format as agreed)
By noon (Eastern Time) on Monday every week
3.1.1.5
Monthly COR Review Slide Deck: Create monthly COR review slide deck, using a COR approved template, with details on completed, incomplete, and future work for products on the platform as well as similar details for the platform. The deck must also include financials for each of the products and the platform.

The Contractor is required to submit a COR Review Package by noon on the third Wednesday of each month. The version submitted by this time must be signed by the Contractor’s program manager. The COR will complete the review within a reasonable amount of time to complete their review and acceptance of the COR Review Package..

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
COR Review Package
One package for each product
Document (format as agreed)
By noon (Eastern Time) on the third Wednesday of each month
3.1.1.6
Monthly KPI Tracking Dashboard: Must capture Agile key performance indicators (KPI) to measure software quality, development efficiency, and development progress.

The contractor must do the following:

· Configure and update ALM dashboards as software development is performed.

· Present these required reports in monthly KPI meetings that occur on the third Wednesday of every month. If the Contractor demonstrates full adoption of SPS’s Agile methodology as reflected on the SPS Agile Heat Map, for a specific product, then it will have the opportunity to reduce the frequency of presentations to a quarterly basis for that product. The Contractor must request approval of the change of frequency to quarterly from the COR.

For Appian products with active development work, monthly ALM Reports for the KPIs (see Appendix D) must be configured no later than the third Wednesday of every month. This applies to all product development teams, regardless of the frequency of presentation meetings. For product development teams authorized to present quarterly, during the months they are not presenting, they are required to send a deliverable completion email no later than the third Wednesday of every month. The purpose of this email is to provide notification to the ITS PM, Call COR, Program COR, and the Agile SLPM Group that the team has completed its monthly report configuration updates for all development projects it supports. This email should include a link to the team’s completed ALM dashboard.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Monthly KPI Tracking Dashboard
Variable; Must update all ALM Reports for Appian products with active development
Electronic Report (dashboard); and e-mail (delivery completion)
No later than the third Wednesday of every month
3.1.1.7
Vendor Invoices: Submit invoices broken down by CLIN and product-level OCC IT project codes (e.g., Operations, Compliance, and Business Enablement). Product-level OCC IT project codes will be supplied to the Contractor as they are/become applicable.
Deliverable Name
Quantity
Deliverable Type
Delivery Cycle

Monthly Contractor Invoice (By CLIN and product-level OCC IT project codes)

One
Electronic submission (via IPP.gov)
Defined through contract terms, see invoicing instructions.
3.1.1.8
Quarterly Status Report/Deck: Submit quarterly status report/decks using OCC provided templates.
Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Quarterly Status Report/Deck
One (1) aggregated report/deck, which addresses all products supported
Document
Quarterly

3.1.2 Quality Control (QC) Management

The Contractor must participate in ITS-sponsored quality performance improvement initiatives related to software development activities. These initiatives may include, but are not limited to, collaborative activities designed to develop software standards and conventions, protocols for naming software objects and classes, specific design approaches for error handling and system interfaces, and integration with third-party tools for automated testing as a part of continuous development and deployment (e.g., piloting of tools like Jenkins, Jira, Git). Support for OCC quality initiatives may also include the implementation of structured code reviews. The Contractor must perform some or all the types of work, as necessary, described in Table 3–2.

Table 3–2 Quality Control Tasks

Task ID
Task Description
3.1.3.1
Quality Management Support (address OCC comments): Respond to and address OCC comments on Contractor-produced document deliverables. Provide written responses to annual quality management reviews. The Contractor must respond to and address OCC comments on produced deliverable documents for the Appian platform within, at a minimum, two days of receiving the comments.
3.1.3.2
Quality Control Plan: Create and maintain an OCC-approved Quality Control Plan that details the Contractor’s quality assurance (QA) and quality control processes and procedures. The plan must describe how the Contractor will comply with OCC quality processes (in the event those processes impose additional QA and/or QA requirements on the Contractor over and above the Contractor’s own QA/QC processes and policies).
Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Quality Control Plan
One
Document (format as agreed)
The initial plan is due 10 days before the start of the contract. Following this, update the plan within 30 days of identification of it needing an update.

3.2 Software Development Tasks

The Contractor must provide support for operations, compliance debt, technical debt, and new enhancements for the products and platforms covered by this PWS. See section 4.0 for scope of work planned for maintenance of existing products and new development work.

3.2.1 Operations, Compliance, and Business Investment

Unless explicitly excluded, the Contractor is responsible for all aspects of operations, compliance debt, technical debt, and new enhancements activities. These activities include the following:

· creating and maintaining platform and product architectural roadmap

· monitoring and documenting product tool version levels

· creating and maintaining SDLC documentation for OCC products

· analyzing and resolving software defects reported

· modifying existing software to resolve reported system problems

· managing the configuration of new and modified system software

· designing, testing, and deploying new system software (including inbound and outbound interfaces)

· repairing and recovering data for OCC systems

· managing OCC data in transit until it is received by its destination system

· implementing process improvements associated with specific maintenance activities.

The Contractor must ensure that maintenance system changes continue to meet the OCC’s functional requirements, are interoperable with other enterprise products, are consistent with the approved enterprise architecture, and meet operational expectations for system monitoring and disaster recovery. The Contractor must also proactively identify opportunities, within specific software releases or sprints, for combining software enhancements and/or code fixes in a manner that increases efficiency and/or reduces costs.

The Contractor is responsible for ensuring the acceptability of the software and associated documentation quality that it delivers, as defined in the Quality Control Plan. Sufficient unit and system testing of new and modified software, changes to configuration settings, and changes to database schemas is required to ensure the successful operation of OCC systems prior to User Acceptance Testing (UAT) or deployment into production (for changes not subjected to UAT). In the performance of its software maintenance activities, the Contractor’s team must adhere to the OCC’s processes for event, incident, problem, and change management, as well as to the OCC’s processes, policies, and procedures for security management (including the Security Assessment & Accreditation [SA&A]). The Contractor must perform some or all the types of work, as necessary, described in Table .

Table 3‑3 Operations, Compliance, and Business Investment Tasks

Task ID
Task Description
3.2.1.1
Requirements Gathering and Analysis: With input from the business units, elicit, document, and manage the functional and technical requirements for the relevant products.

The Contractor must:

· Follow Agile practices. The Contractor’s Appian development staff must perform the full range of software development activities (e.g., requirements, design, development, testing, QA, and documentation tasks).

· Perform release planning for each quarterly and monthly release, based on customer assigned priority. The Contractor must manage all product-specific change requests and defect fixes within the OCC's enterprise configuration management tool. There is a maximum of five (5) defects and a minimum of two (2) changes requests in each quarterly release for each product. There is a maximum of one (1) defect in a monthly release for each product.

· Use agile development principals to manage product-specific work items, including relative estimation (story points) for unapproved change request.

· Convene a biweekly sprint planning meeting to obtain:

1. clarification on outstanding requirements

2. signoff on acceptance criteria from the Business Unit on all defect fixes and change requests included in the sprint. Development on said defect fixes and change requests may not begin until BU approval is obtained on the acceptance criteria.

· Deliver a sprint planning slide deck. The slide deck should cover the following information (at a minimum) for each item being presented:

-ID

-Description/Summary -Acceptance Criteria -High-Level Design Plan -Found By -Priority

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Sprint Planning Slide Deck
One (1) deck
Document (format as agreed)
Biweekly, but may vary by product as necessary
3.2.1.2
Design: Create and maintain the functional and technical design specifications and validate these specifications to ensure that:

· All functional requirements are met

· All audit requirements are met

· Designs meet the OCC’s disaster-recovery standards

· Designs minimize data loss and downtime

· Designs are sufficiently documented and traceable to one or more requirements

· Designs are testable

· Designs are flexible and extendable for future needs

· Designs are flexible and extendable to support data migration from legacy systems The Contractor must do the following:

· Design Product specific changes requests and defect fixes according to OCC defined best practices and standards

· Design specifications meet the acceptance criteria agreed upon with the Business Unit

· Coordinate significant change requests/integrations with the Appian Platform and Enterprise Architecture teams (e.g., integration with a new system inside or outside of the OCC)

· Document the design and implementation of any new functionality which takes more than 40 hours to implement, in a requirements/design document. Examples of new functionality may include implementing a new component or workflow, design a new integration (e.g., OCR, Interface with GetITHelp)

· Apply Appian and OCC UI/UX customer/user centered design concepts and best practices for Appian development

· Evaluate the overall digital experience of Appian products (new and existing) across desktop and other relevant screen sizes

· Gather qualitative data to build an understanding of user needs through user interviews or contextual observation

· Identify trends and patterns across the information collected during UI/UX research.

· Identify areas of UX improvement and provide recommendations for a path forward

· Develop and maintain UX & UI recommendations and best practices to improve the user experience across the Appian platform

· Design detailed mockups and designs that can be used directly by developers to build custom software or interfaces

· Deliver User Experience (UX) flows, wireframes, high fidelity mockups, interactive prototypes, design specifications, and final components

· Translate user needs and requirements into elegant solutions, concepts and interaction models that scale and fit within larger established systems and patterns

· Develop personas and use cases

3.2.1.3
Development: Develop software, in accordance with the approved design, that meets or exceeds the quality standards identified in the OCC Service Level Agreements (SLAs). Development tasks include:

· Configure/build development, prototyping, and test environments to support the development and testing of modified or new software

· Coordinate with the Infrastructure and Operations (I&O) team to implement required technology environment changes

· Develop software to support the implementation of new or revised system requirements

· Develop software/programs/scripts to support data migration from legacy systems

· Configure COTS software to support the implementation of new or revised system requirements

· Design, create, and/or maintain (if already existing) the product architecture

· Design, create, and/or maintain (if already existing) the product business databases

· Identify any necessary database changes to be conveyed to the Database Administrator for implementation

· Coordinate the scheduling of database maintenance with the database-administration team

· Leverage the OCC’s existing development tools and recommend new third-party tools to improve developer productivity, code stability, and code reusability.

The Contractor must do the following:

· Develop Product specific change requests and defects using OCC defined best practices for Appian development.

· Perform technical code reviews on all work items developed as part of a quarterly or monthly release. The code reviews must be performed by a technical lead, who is familiar with the OCC defined best practices for Appian development and has an Appian Lead Developer Certification.

· Design and develop all Product specific change requests and defect fixes using Appian out of the box configurations and code as much as possible.

· Demonstrate release-worthy functionality for each sprint within a quarterly release.

3.2.1.4
Testing: The Contractor must perform unit, regression, integration, performance, security, and system testing to ensure the added features or fixed bugs do not adversely affect existing functionality. This includes the following:

· Create and maintain product-specific test plans, test scripts and test cases that utilize the appropriate SDLC document templates.

· Create and maintain requirements traceability matrices (RTMs).

· Utilizing OCC approved automated test and performance test tools, create, and maintain automated test scripts that can be reliably executed in a repeatable fashion.

· Conduct regression, functional, integration, and system testing in a dedicated test environment that is isolated from Production.

· Conduct installation testing in a dedicated staging environment that is isolated from Production.

· Create and maintain product-specific test results that utilize the appropriate SDLC document templates. These test results should represent the output of executing the test cases identified in the relevant test plan.

· Perform security testing of new, modified, and reconfigured software

· Create and maintain simulation data for development, testing, and training purposes. To the extent possible, these data sets should be created and maintained so that they can be re-used for testing across multiple products. This task will include the following:

· Work with business-unit and IT stakeholders to identify confidential data that requires protection

· Create and maintain a process for creating simulated data, including a process for redaction

· In situations where simulated data cannot be used for testing, secure the testing data to ensure that no Personally Identifiable Information (PII) is compromised during testing.

· Adapt the testing instance of a product, where necessary, to protect PII during testing

· Consult with the appropriate DBA team to implement database-level protection strategies

· Conduct weekly tests of the products to ensure that the implementation of Microsoft security patches has not negatively impacted the products

· Create and maintain disaster recovery test plans and conduct annual disaster recovery tests.

The Contractor must do the following:

· Write test scripts using approved OCC Enterprise tools for automated (e.g., Selenium) and manual testing (e.g., Rational Functional Tester) for all defect fixes and change requests.

· Use the OCC's approved enterprise performance testing tool (currently Rational Performance Tester) to perform performance testing for a Product release on an as-needed basis.

· Support OCC Security team on performing continuous security testing on any of the Products on the Appian Platform and related components (e.g., IIS web server, JBoss application server, SQL relational database)

· Support User Acceptance Testing for each major release for each Product.

· Use OCC's approved accessibility technology tool to perform 508 testing for each major release for each Product.

· Perform integration testing for all major and minor releases for each Product. This effort is estimated to take a minimum of 40 hours per month.

Deliverable
Quantity
Deliverable Type
Delivery Cycle

Test Plans, Test Scripts, and Test Cases (Create and/or update scripts for product. The method of delivery is to place in the OCC’s ALM.)

Variable

Electronic Deliverable

As part of product monthly or quarterly releases, as needed

Requirements Traceability Matrices (RTMs) (Create and/or update scripts for product)

Variable

Document (format as agreed)
As part of product monthly or quarterly releases, as needed

Sprint Test Results stored in ALM

One (1) set of test results per product sprint
Document (format as agreed)
Delivered by the last calendar day of the sprint.
Installation Test Plan in ALM to include test cases, expected results, test scripts, and test data
One (1) plan per product release
Document (format as agreed)
Delivered one (1) business day after the end of the last sprint
Installation Test Results comprised of the test results in ALM
One (1) plan per product release
Document (format as agreed)
Delivered two (2) business days after the end of the last sprint
3.2.1.5
Knowledge Transfer: For software modifications that impact end-user functionality, create, and maintain either: 1) release notes if the functional change needs to be communicated to users but they do not require training; or 2) training materials if the functional change will require users to be trained. Update online help files to reflect the functional change. Deliver training, if requested, in a small group setting to support train-the-trainer activities.

The Contractor must do the following:

· Generate release notes using the acceptance criteria defined in the OCC's enterprise configuration management tool for each major and minor release for each product. The release notes must be created at a minimum of 5 days before the release deployment.

· Maintain the user guides and any other communication/training material for each product.

3.2.1.6
Collaboration: In situations which software modifications to one product may impact another product, validate that the design of the proposed software modifications will not negatively impact the other product with which there are integration points.

The Contractor must do the following:

· Present changes to the design of the system at both the Enterprise Review Group (ERG) and Enterprise Change Control Board (CCB) as part of the release management process to ensure that other OCC applications are not impacted by the upcoming system release

· Perform integration, regression, and end-to-end testing for all major releases of a product on the platform. The testing must include validation of product-specific interfaces (e.g., EIR, AEM, BankNet)

3.2.1.7
Development Tools: Capture existing product defects, tasks, product/configuration changes, source code (e.g., storing the Appian application in a zip file format within the OCC source code repository), requirements, use cases, test cases, and test scripts in the ALM product.

The Contractor must do the following:

· Submit requests for all developer and testers for the install of OCC Enterprise Configuration Management tools (currently Rational tools) immediately after adding the resource to the project team

· Submit requests for access to the appropriate ALM project area(s) immediately after adding the resource to the project team

· Ensure its employees are fully trained in the use of the ALM application prior to being added to the project team

3.2.1.8
Development Standards: Create, maintain, and implement product-specific development standards. Ensure that new contractor team members are briefed regarding the appropriate standards for the products that they are supporting.

The Contractor must do the following:

· Review and maintain the Appian Platform and product-specific best practices, procedures, and tips & tricks in the OCC's Center of Excellence application.

· Convene a biweekly best practice meeting to discuss new best practices/standards as well as updates to existing best practices/standards.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle

Development Standards

(Update the OCC’s Center of Excellence application. Subject to approval by the OCC’s Appian Architect.

Variable

Electronic Deliverable

Biweekly, as needed

3.2.1.9
Maintenance Standards and Checklists: Create and maintain documented standards for the secure maintenance of new, modified, and reconfigured software. Create and maintain checklists that developers can use to validate the conformance of their code to these standards.

The Contractor must review and maintain the Appian Platform and product-specific best practices, procedures, and tips & tricks in the OCC's Center of Excellence application.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle

Maintenance Standards and Checklists

(Update the OCC’s Center of Excellence application) Variable

Electronic Deliverable

Biweekly, as needed

3.2.1.10
Documentation: Create and maintain the SDLC documentation required for the designated products. The OCC has identified, an example list of SDLC documentation that may require the Contractor’s support (see enclosures 11 to 15). The Contractor must be aware that the list of required SDLC deliverables for a given product will not be specified until after award. Annually review and update the existing system admin guides and create new guides for new products before production release of the product.

Refer to assumptions identified in 3.2.1.1.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle

System Administrator Guide. See the embedded file for the required content, format, and organization of the guide.

One (1) guide per product per year
Document (format as agreed)

Annual review and update at the beginning of the fiscal year.

Environment Diagrams for development and production environments of each Appian product. See the embedded files for the required content, format, and organization of the document.

One (1) diagram per product per year
Document (format as agreed)
5 days before each major product release (minor document change) or change in product architecture (e.g., SQL 2016 upgrade)

Secure Baselines for product components, which includes the OCC Enterprise baseline with tailored settings for each Appian product and its components (e.g., Appian, IIS)

One (1) baseline per product per year
Document (format as agreed)
Annually at the beginning of each fiscal year.

Information System Contingency Plan (ISCP) See the embedded file for the required content, format, and organization of the document.

Four (4) to twelve (12) for each minor update and once for each major update per year per product.
Document (format as agreed)
Annually at the beginning of each fiscal year.

Information System Contingency Plan (ISCP) Table-top exercise. Includes presentation, simulation, and after-action report. See the embedded files for the required content, format, and organization of the document and presentation

One (1) table-top exercise per year
Documents (format as agreed)
Annually at the beginning of each fiscal year.

Lessons Learned Meeting Minutes

(Sessions will be held each month, with a duration of no more than one (1) hour per session)

Twelve (12)
Document (format as agreed, e.g. , meeting minutes)

Within one (1) business day after the meeting

Sprint Planning Slide Deck comprised of the defects and change requests planned for a sprint

One (1) presentation per sprint per product

Document (format as agreed)
Delivered one (1) business day before the sprint planning meeting

A Customer Demo at each iteration review that demonstrates the release-worthy items for the sprint

One (1) demo per sprint per product

Electronic Deliverable
Delivered by the last calendar day of the sprint

3.2.2 Configuration and Release Management

The Contractor is responsible for the configuration management (CM) of all products within its area of responsibility using OCC provided CM tools. The Contractor must implement processes and controls to ensure that software configuration management is consistent with the OCC’s standards and industry best practices. In performance of its CM duties, the Contractor must follow the ITS Release Management Plan and the ITS Enterprise Configuration Management Plan. The Contractor must execute the processes and procedures set forth in these two documents in a uniform, standardized, and auditable manner. Moreover, the Contractor must support the OCC in initiatives including automated and continuous deployments (devops) using third-party tools that integrate with and support the Appian commercial off-the-self (COTS) product. The Contractor must perform some or all the types of work described in Table .

Table 3–4 Configuration and Release Management Tasks

Task ID
Task Description

3.2.2.1

Release Management Process: The Contractor must install all production releases during the designated after-hours timeframe. To the extent possible, the implementation of the release should be executed without significant degradation to the product’s performance and with minimal interruption to user access.

The Contractor must install major and minor Appian platform and product releases outside of normal OCC business hours. This effort is estimated to take a minimum of 4 hours.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Deployed Production-Ready Solution.
Four (4) quarterly releases and eight (8) monthly hotfixes, per Appian product
Electronic Deliverable

Monthly

Post-implementation Validation Results
One (1) set of results per each quarterly release and each monthly hot fix, per Appian product
Document (format as agreed)
Within 1 day after each release

Release Notes comprised of the business unit-approved acceptance criteria for each defect fix and change request in the release. See the embedded file for the required content, format, and organization of the release notes.

One (1) set of notes per product release
Document (format as agreed)
Delivered two (2) business days before the release deployment

The Release Installation Package

One (1) package per product release

Electronic Deliverable

Delivered two (2) business days after the end of the last sprint

The Configured System (i.e., properly baselined source code) including the release -worthy items for the sprint
One (1) system per product release
Electronic Deliverable

Delivered by the last calendar day of the release

The Configured System that is ready for production deployment
One (1) system per product release
Electronic Deliverable

Delivered two (2) business days after the end of the last sprint

Backup and Restore of Quick Apps from the Shared Appian Production Environment to lower environments
One backup/restore per platform release
Electronic Deliverable

Quarterly

Appian Health check (logs/analysis) See the embedded files for the required content, format, and organization of the document and presentation

One health check for each product per platform release
Document (format as agreed)
Quarterly
A final Customer Demo that demonstrates the successful use of the production installation package
One (1) demo per product release
Electronic Deliverable

Delivered one (1) business day after the end of the last sprint

3.2.2.2
Code Baseline: Manage the code baseline in the enterprise repository for the designated products. The Contractor must maintain code baselines for all Appian products within the OCC configuration management tool.

3.2.3 Technology Refresh, Architecture Support, and Research

The Contractor must research and recommend new technologies and products that will assist the OCC in implementing a comprehensive set of tools, techniques, and methods to conduct System Engineering/Architecture activities. Success factors for research and analysis include recommendations that consider: 1) Technical Feasibility of proposed technologies (e.g. compatibility with existing systems and infrastructure), 2. Scalability and Flexibility, 3. User Experience (selection of technology that provides an intuitive UI/UX) and 4. Regulatory and Security Compliance. The Contractor must perform some or all the types of work described in Table , as necessary.

Table 3–5 Technology Refresh, Architecture Support and Research Tasks

Task ID
Task Description
3.2.3.1
Architectural Roadmaps: Create and maintain an architectural roadmap for the designated products that identifies the desired to-be architectural state. This architecture must be consistent with the OCC’s enterprise architecture.

The Contractor must do the following:

· Support the OCC PMs with planning for MS SQL database upgrades for all Appian products This effort is estimated to take a minimum of 8 hours a year.

· Support the OCC integration teams with LDAP/Active Directory upgrades that impact Appian products

· Work with the OCC’s Appian vendor and the OCC Enterprise Database Management team to create a plan for database encryption for all Appian applications using a relational database (e.g., MS SQL)

· Support .Net upgrades which impact the Corporate Application Search (CAS) application within the CATS Boundary. This effort is estimated to take a minimum of 4 hours per year.

· Update deliverables within 30 days of identification of the need for an update.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Database Encryption Plan
One (1) plan
Document (format as agreed)
Ad-hoc, upon request by COR
3.2.3.2
Technology Research: The Contractor must evaluate new tools and technologies to recommend changes to the solution architecture of the designated systems. This task includes the following:

· Create an evaluation model to assess the third-party software currently utilized by ITS

· Conduct a gap analysis of the capabilities offered by the OCC’s existing third-party products within the portfolio and identify appropriate measures to remediate the gaps

· Utilizing this gap analysis, recommend new third-party software products, or upgrades to products currently utilized by the OCC, that will best address the agency’s business needs

· Identify opportunities to eliminate existing custom solutions and/or code elements within those solutions and replace them with a COTS product.

· Conduct knowledge transfer with OCC technical SMEs regarding the features of newly installed third-party software and tool upgrades.

· Proactively research, evaluate, and recommend new technologies, infrastructure modifications, industry-leading practices, and other innovations to provide the OCC a state-of-the-art IT environment

· Conduct market research for technology advancements

· Conduct evaluations of technology advancements in a research-lab environment

· Evaluate, assess, and compare different commercially available technologies using a Capability Maturity Model Integration (CMMI)-compliant Decision Analysis and Resolution (DAR) process

· Conduct trade-off analyses, identifying the advantages and deficiencies of competing technology products

· Determine if the introduction of a software upgrade into the infrastructure will impact the performance of production products.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Evaluation Model
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
Technical Gap Analysis
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
Market and Trade-Off Analysis
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
Technology Advancement Evaluation
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
3.2.3.3
Collaboration: Actively participate in integrated system engineering teams that are responsible for the design and execution of architectural components/services that are common across the project portfolio. This includes the following activities:

· Participate in ITS joint engineering meetings

· Create white papers, presentations, and briefings that address architectural topics identified in the joint engineering meetings as candidates for research.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
White papers, presentations and briefings
Various
Document (format as agreed)
Ad-hoc, upon request by COR
3.2.3.4
Technology Improvements: Review all systems—both products and the third-party software used to design, develop, and test those products to identify possible technology improvements. The Contractor must conduct the following to support that effort:

· Proactively research, evaluate, and recommend new technologies, infrastructure modifications, industry-leading practices, and other innovations to provide the OCC a state-of-the-art IT environment

· Conduct market research for technology advancements

· Conduct evaluation of technology advancements in a research-lab environment

· Evaluate, assess, and compare different commercially available technologies using a Capability Maturity Model Integration (CMMI)-compliant Decision Analysis and Resolution (DAR) process

· Conduct trade-off analyses, identifying the advantages and deficiencies of competing technology products

· Determine if the introduction of a software upgrade into the infrastructure will impact performance of production products.

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Technology Improvement Market Research
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
Technology Advancement Evaluation
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
Decision Analysis
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR
Trade-Off Analysis
One (1)
Document (format as agreed)
Ad-hoc, upon request by COR

3.2.4 Product Testing, Training, and Implementation

The Contractor must follow OCC direction in conducting software testing activities. The Contractor must conduct unit, integration, system, performance, and regression testing to confirm that the new, modified, and/or reconfigured code successfully addresses the requirements with the specified level of quality. The testing must be accomplished in accordance with the OCC’s ITS SDLC and IT Governance policies. The following objectives apply for testing of all products in scope:

· Each product developed, configured, and maintained must have a comprehensive test strategy and underlying test plan(s) aligned with ITS processes, standards, and procedures.

· Tests for each product release will directly address all requirements and components of the design so that the project team and stakeholders can verify and validate that the identified business need has been met.

· Product leads and project teams will implement measures that ensure all data and information related to testing is maintained throughout the life cycle of the project.

· For situations where the Enterprise Test Lab (ETL) is not available for product testing, provide a testing environment that emulates, to the extent possible, the production environment so that product testing can be performed.

· All test planning activities will be verified as complete (per Appian COE guidelines) before testing begins.

· Where possible, testing will be automated to improve efficiency and accuracy.

· All planned tests will be performed prior to system release to verify that a solution fully addresses all user requirements.

· Where possible, tests will be conducted independently by a team other than the original project team to verify and validate that the test results accurately reflect the system performance.

· Solutions for desktop release will be tested to confirm that they deploy and install properly on a standard ITS workstation. Performance testing will be conducted to verify that the solution is robust and scalable under increased load. Test results will be collected and analyzed during the test cycle to verify progress against the testing plan and to quickly find any deviations. When delays are encountered, test plans will be adjusted, if possible, to meet the original schedule without compromising the quality of the solution. Defects found during testing will be identified, categorized, and prioritized in a timely fashion to identify the code fixes that must be made before deployment, as well as the code fixes that can be deferred without compromising the quality of the solution.

The Contractor must perform all the types of work described in Table 3–6, as necessary.

Table 3–6 Product Testing Tasks

Task ID
Task Description
3.2.4.1
User Acceptance Testing (UAT): Provide support for UAT in a timely and professional manner, including the following activities.

· Create and maintain UAT test plans, test scripts, test cases, and test results

· Consult with the relevant OCC stakeholders regarding acceptance criteria for the release of the code into production. Document these criteria for use during UAT.

· Coordinate and schedule UAT execution with the appropriate OCC participants

· Create and maintain release notes to communicate to UAT testers the software modifications that they will encounter during testing

· Correct defects and nonconformities identified during UAT. Deploy as many iterations of code as required to secure acceptance from the COR for the software to be released into production.

The Contractor must conduct user acceptance testing for all major release for each product.

This includes:

· creating test accounts for participants

· creating testing assignment spreadsheets

· obtaining and documenting test results

· troubleshooting testing errors

· analyzing and aggregating test results

· entering defects and change requests because of test efforts.

This effort is estimated to take a minimum of 24 hours per major release

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle

User Acceptance Test Results comprised of the test results in ALM

One (1) set of test results per product release
Document (format as agreed)
Delivered one (1) business day after the end of UAT
3.2.4.2
Training: Develop a training plan, strategy and associated training materials following industry best practices. The training must cover all products on the Appian platform.

The Contractor must do the following:

· Create a training plan.

· Create training materials for appropriate user groups. The user groups are internal Executives, Analysts, Legal and Supervision staff, Tier 1 Help Desk, and external Bankers, Attorneys and Consultants.

· Customize and make the training material relevant to their role and method of training.

· Create online training materials (either user guides, power point or video) to explain access, navigation, functions, and tasks of the application.

· Use the testing environment for training.

· Create and maintain simulation data for training purposes in the testing environment.

· Support webinars given by the Government to the user groups by providing demonstrations of the application during each session.

The training plan must include the following to support the use and maintenance of the specific system or application:

· Training Objectives

· Audience Analysis

· Training Content

· Training Materials

· Training Tools, Techniques and Methods

· Training Schedule

· Instructors and Facilitators

· Support and Resources

· Communications

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Training Plan
one (1) plan
Document (format as agreed)
Update 10 days before a major product release when required. This deliverable will be required on an as needed basis as identified by the COR/PM.
Training Materials
Create and maintain training materials for the various user groups
Documents (format as agreed)
Update 10 days before a major product release when required. This deliverable will be required on an as needed basis as identified by the COR/PM.
3.2.4.3
Organizational Change Management: Develop an organizational change management plan and communication methods. The plan must include agile principles and guidance on best practices to better facilitate team dynamics with business units for adoption of process and system changes. The plan must cover all products on the Appian platform.

The Contractor must do the following:

· Develop a comprehensive change management plan, outlining strategies for communication, stakeholder engagement, training, and risk mitigation, in alignment with the organization's goals and objectives.

· Assess the organization's current Agile maturity level and identify areas where Agile principles and practices can be effectively applied to support the change initiative.

· Provide Agile coaching and mentoring to business unit teams and individuals involved in the change initiative, helping them understand Agile principles, practices, and methodologies.

· Facilitate Agile training sessions and workshops for employees and stakeholders, focusing on Agile concepts, roles, ceremonies, and tools as they relate to the change.

The change management plan must include the following in alignment with Agile coaching and mentoring:

· Executive Summary

· Change Vision and Objectives

· Stakeholder Analysis

· Communication Strategy

· Leadership and Sponsorship

· Change Team and Roles

· Training and Development

· Risk Assessment and Mitigations

· Feedback Mechanisms

· Timeline and Milestones

Deliverable Name
Quantity
Deliverable Type
Delivery Cycle
Change Management Plan
one (1) plan
Document (format as agreed)
Update 20 days before each major product release
3.2.4.4
Implementation: Develop an implementation strategy to ensure a comprehensive organizational change management effort in providing a smooth transition of a new or updated automated system for operational use by business units. The implementation strategy must include best practices to help minimize disruption, enhance user adoption, and maximize benefits.

The Contractor must do the following:

·…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .