Sources_Sought_HCMSDS_Final.docx

SOURCES SOUGHT NOTICE

622673619

The Defense Information Systems Agency (DISA) is seeking sources for the follow-on to the Human Capital Management Software Development and Sustainment (HCMSDS) task order, inclusive of Corporate Management Information System (CMIS) and Integrated Workplace Management System (IWMS) programs for DISA Business Systems.

CONTRACTING OFFICE ADDRESS:

DISA/DITCO-NCR

6910 COOPER AVENUE

FT. MEADE, MD 20755

INTRODUCTION:

This is a SOURCES SOUGHT NOTICE to determine the availability and technical capability of small businesses (including the following subsets: Small Disadvantaged Businesses, Certified 8(a), Service-Disabled Veteran-Owned Small Businesses, HUBZone Small Businesses and Woman-Owned Small Businesses) to provide the required products and/or services.

The DISA Business Systems Program Management Office (PMO) is seeking information from potential sources for software development, implementation, and sustainment expertise for key DISA support applications requirements for the IWMS and CMIS. The DISA Business Systems Division (SD2) is structuring this requirement in this way as both systems share common data elements, infrastructure and business processes. Combined, these systems form solid architecture for DISA human capital management systems. Due to other systems sharing the same infrastructure, optional requirements involve development and sustainment activities in regard to CMIS. Software development support shall include all phases of the Software Development Lifecycle (SDLC), including concept development, planning, requirements definition and analysis, systems design and development, coding and testing, deployment, implementation, integration, documentation and software application maintenance.

Anticipated Period of Performance:

Base Period: 23 August 2026 - 22 August 2027

• Option Period 1: 23 August 2027 - 22 August 2028

• Option Period 2: 23 August 2028 - 22 August 2029

• Option Period 3: 23 August 2029 - 22 August 2030

• Option Period 4: 23 August 2030 - 22 August 2031

Place of Performance:

The work will be performed at the contractor's location. Travel in and around the primary place of performance may be required throughout the period of performance. Additional travel to CONUS locations may also be required.

DISCLAIMER:

THIS SOURCES SOUGHT NOTICE IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS NOT A REQUEST FOR PROPOSAL. IT DOES NOT CONSTITUTE A SOLICITATION AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT. RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS NOTICE. NO FUNDS ARE AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS NOTICE. ANY INFORMATION SUBMITTED BY RESPONDENTS IS STRICTLY VOLUNTARY.

CONTRACT/PROGRAM BACKGROUND:

DISA, a Combat Support Agency, engineers and provides command and control capabilities and enterprise infrastructure to continuously operate and assure a global net-centric enterprise. DISA directly supports joint warfighters, national level leaders, and other mission and coalition partners across the full spectrum of operations. The Business Systems Program Management Office (SD2) Division of DISA develops and sustains systems for use by mission partners both internal and external to DISA. As such, each mission partner has requirements to validate, and implement software associated with these systems. The SD2 portfolio includes complex business systems necessary for DISA to deliver capability to the warfighter. The Business Systems Portfolio develops and integrates Agency business systems solutions, which includes systems that address key areas such as personnel management, financial management, telecommunication services, contract management, and customer relations among other support services to the DISA mission. These systems include IWMS and CMIS.

Contract Number: HC102818D0032/HC104721F5000 Contract Vehicle: ENCORE III SB Suite Incumbent and their size: INTEGRAL CONSULTING SERVICES INCORPORATE (SB) Period of performance: 23-AUG-2021 TO 22-AUG-2026

Brief description of the current program/effort:

The HCMSDS task order will sustain, configure, update, implement, and integrate Human Capital Management (HCM) capabilities supported by CMIS and IWMS.

CMIS is a DISA specific system that supports Human Resources Management capabilities. CMIS primarily manages personnel records, manpower requirements, travel, security, and many other personnel-related functions for the DISA’s approximately 20,100 total employees; comprised of military, civilian, and contractors. The system has over 400 modules or “features” serving many agency functions, some interrelated and some stand-alone. This application is essential for agency HR functions, as well as several other non-HR related programs. Additional requirements may include business analysis functions to support the development team coding application enhancements and new applications within the CMIS suite. CMIS is coded in ColdFusion, with SQL as the database language. The current system has a webserver running on ColdFusion that interacts with a Structured Query Language (SQL) database and provides a user interface. The SQL database interfaces with CMIS and incorporates manpower reports (exported as csv).

IWMS is an integrated suite of web-based management tools that helps DISA improve and streamline overall workplace management in terms of human resources to include logistics: strategic planning, space planning, space reservation management, occupancy management, asset management, move management, lease and property management, facility maintenance management, and project management. These tools provide a portal to the workforce that streamlines the capture, analysis, and presentation of agency-wide data.

Contractors will evaluate customer requirements and break down each of the changes into artifacts, use cases, and or user stories with implementation within agile sprints. Additionally, the contractor will assist the Government in documenting existing application modules. The contractor will work on customer requirements in Government provided priority order, until the requirements are complete. At that time, the contractor will test the changes and demo to the customer. For existing applications, the contractor will be required to evaluate the code, learn the process, and integrate the requested changes into the code base. At any given time, there are approximately 50 requests in the system for modification to existing functionality or requests for new workflow capabilities.

REQUIRED CAPABILITIES:

1) The CMIS team supports the current legacy HR GOTS application, which has evolved over the past 20 plus years to include over 400 modules. The CMIS application supports the entire DISA workforce including military, civilian, and contractor personnel totaling approximately 20,100 employees. Describe and provide an example of your company’s experience and expertise with ColdFusion software development by providing an overview of your capabilities to support requirements analysis, user stories, technical specifications, software architecture and systems design, coding and development, testing, deployment and implementation, integration, and documentation support. Include your company’s experience with troubleshooting existing code and expanding on existing code to create new modules.

2) Many of the CMIS capabilities rely on a complex data architecture, which can be challenging when customers require specific reports and metrics to provide business intelligence to HR managers. Describe and provide an example of your company’s experience with developing and maintaining multiple SQL databases and creating complex reports. Provide details of a project example that highlights your organization's experience. For the example, include:

· A brief description of the project.

· The SQL database platforms and reporting tools used.

· The size and complexity of the database and reports.

· The outcomes and benefits achieved.

3) The IWMS application utilizes FM Interact and SQL databases to provide core facility management capabilities to the DISA J4 team for space management, hoteling, move management, room scheduling, real estate/lease management, facility maintenance, project management, and asset management. Describe and provide an example of your company’s experience with FM Interact Workplace Management Suite, configuring COTS products, interfacing multiple databases, and developing workflows.

4) The DISA CMIS and IWMS teams develop custom capability to support the agency’s core human resources management and facilities management missions. Describe and provide an example of your company’s experience with using agile/scrum product development strategies to sustain and deploy IT solutions supporting human resource management, logistics, facility management, strategic planning, property management, and project management software supporting DoD activities.

5) DISA is in the process of modernizing its HCM IT systems, which will eventually subsume current capabilities supported by CMIS. Describe and provide an example of your company’s experience with migrating functionality and data to support modernization efforts and Software as a Service (SaaS) solutions.

6) The CMIS and IWMS teams sustain applications hosted in the DISA stratus hosting environment. Describe and provide an example of your company’s experience with providing infrastructure support, specifically System Administration and Database Administration support for ColdFusion, Microsoft SQL, and other environments and platforms.

7) The CMIS and IWMS programs must apply the Risk Management Framework (RMF) security controls, as prescribed in the National Institute of Standards and Technology (NIST) Special Publications (e.g. NIST SP 800-37, NIST SP 800-53, SP 800-60) documents. These programs must obtain and Authority to Operate approval from the DISA Authorizing Official (AO) and maintain a solid cybersecurity baseline throughout the lifespan of the program. This introduces continuous monitoring, scanning and remediation requirements, upon whomever manages the application. Describe and provide an example of your company’s experience with implementing, supporting, or auditing Risk Management Framework (RMF) for human resource systems, details of past work you have done to obtain ATO certification(s) using the RMF process. Provide examples of tools (scanning tools, STIGs, eMASS controls (including experience with Revision 4 to Revision 5 controls migration), ESPS, etc.) you used in support of attaining or maintaining an ATO. Include company qualifications and team expertise.

SPECIAL REQUIREMENTS

· All personnel performing must be U.S. citizens with a Secret security clearance.

· Personnel must have experience with ColdFusion, SQL, and FM: Interact.

· Personnel must have computer science/engineering and programming backgrounds.

· The overall Facility Clearance Level (FCL) must be at the Secret level or higher. Please provide your current facility clearance level.

SOURCES SOUGHT:

The anticipated North American Industry Classification System Code (NAICS) for this requirement is 541512 with the corresponding size standard of $34,000,000.

To assist DISA in making a determination regarding the level of participation by small business in any subsequent procurement that may result from this Sources Sought, you are also encouraged to provide information regarding your plans to use joint venturing (JV) or partnering to meet each of the requirements areas contained herein. This includes responses from qualified and capable Small Businesses, Small Disadvantaged Businesses, Service Disabled-Veteran Owned Small Businesses, Women-owned Small Businesses, HUBZone Small Businesses, and 8(a) companies. Please provide information on how you envision your company's areas of expertise and those of any proposed JV/partner would be combined to meet the specific requirements contained in this announcement.

In order to make a determination for a small business set-aside, two or more qualified and capable small businesses must submit responses that demonstrate their qualifications. Responses must demonstrate the company’s ability to perform in accordance with the Limitations on Subcontracting clause (FAR 52.219-14).

SUBMISSION DETAILS:

Responses should include:

1) Information pertaining to required capabilities above;

2) Business name and address;

3) Name of company representative and their business title;

4) Type of Business;

5) Cage Code;

6) Prime contract vehicles; to include ENCORE III, SETI, NIH CIO-SP3, NASA SEWP V, General Service Administration (GSA): OASIS, ALLIANT II, VETS II, STARS III, MAS (including applicable SIN(s), groups or pools), or any other Government Agency contract vehicle that allows for decentralized ordering. (This information is for market research only and businesses with a valid cage that lack prime contract vehicles are still encouraged to respond to this notice.)

Vendors who wish to respond to this should send responses via email NLT November 12, 2025, at 8:00 AM Eastern Standard Time (EST) to sarah.k.mouton.civ@mail.mil and keiana.d.clarke.civ@mail.mil. Interested businesses should submit the information listed above. There is a ten-page limit, not including a cover page.

Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. All submissions become Government property and will not be returned. All government and contractor personnel reviewing submitted responses will have signed non-disclosure agreements and understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as pursuant to 41 USC 423. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.

For information on DISA’s requirements, you can find current information on our home page: www.disa.mil – that includes current forecast and the current acquisition strategies. If there is no information regarding the requirement you may be inquiring about, then there is no additional publicly available information. Please continue to review www.disa.mil.

Page 2 of 4 Pages

Template updated February 2025

Page 1 of 5 Pages