74330226R0045 Attachment 2 Questions Matrix.xlsx
XLSX spreadsheet 32 KB Posted
- Attached to
- ABMC Global Payroll Services
- Solicitation number
- 74330226R0045
- Issued by
- Not on record
About this file
This file is a Questions Matrix attachment for the ABMC Global Payroll Services solicitation (74330226R0045), serving as an evaluation and response template for vendor proposals rather than a standalone requirements document.
The matrix comprises seven major evaluation categories with detailed questions addressing: (1) Payroll Services, including comprehensive service capabilities across multiple countries, system interfaces with HRIS platforms, file generation requirements (ITS and GL outputs), lodgment and disbursement services, legal/statutory reporting, pay slip delivery formats, third-party engagement, reporting capabilities, payroll cut-off procedures, out-of-cycle pay runs, shared service center operations, new hire/termination support, year-end processing, and customer service escalation; (2) Controls and Compliance, covering legal and statutory change management, audit logs, encryption standards, data storage and backup procedures, information security policies (ISO 17799 compliance), data protection laws adherence, business continuity plans, and SSAE16 audit reports; (3) Implementation, requiring project management methodologies, country-specific timeframes, data transfer capabilities, project team experience details, blueprinting and UAT processes, transition procedures, and training delivery across multiple languages and user levels; (4) Pricing, seeking monthly per-payslip costs, ongoing cycle costs, year-end costs by country, implementation costs including data migration and integration, ITS/GL file implementation pricing, change request cost structures, additional service charges, out-of-cycle pay run fees, training costs, and disclosure of annual fee escalations; (5) Qualification and Reputation, requesting financial information, headquarters location, multinational client demographics, service tenure, country-specific client references with comparable employee populations, customer satisfaction feedback, and departmental staffing levels; (6) Governance, addressing account management structure, performance metrics and measurements, communication protocols, and manual form handling procedures; and (7) Technology, encompassing detailed specifications for data interoperability, security controls, zero trust architecture, privacy controls, Section 508 accessibility compliance, records management, cloud/hosting infrastructure (FedRAMP certification), workflow capabilities, audit trails, performance standards, migration procedures, and transition-out requirements including data export formats and knowledge transfer.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 74330226R0044-45 Vendor Questions.xlsx | XLSX spreadsheet | |
| 74330226R0045 RFP Instructions.pdf | ||
| 74330226R0045 Attachment 3 Payroll ITS File Specifications.pdf | ||
| 74330226R0045 Attachment 4 GL File Specs.pdf | ||
| 74330226R0045 Attachment 1 PWS.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| 1 Payroll Services | Comment/Answer | |
| Required Questions | ||
| A. Confirm that you provide a comprehensive suite of payroll managed services for the countries listed in this RFP, covering the full payroll cycle including calculation, payment, reporting, and employee service. Indicate where there are gaps in country/service capability. | ||
| B. List which human resources information systems your payroll system can interface with, both for receiving timecards and employee data as well as transmitting pay slips. | ||
| C. Confirm your ability to generate an International Treasury Services (ITS) file to meet ABMC's requirements as detailed in Appendix III. | ||
| D. Confirm your ability to generate a GL output file to meet ABMC's requirements as detailed in Appendix III. | ||
| E. With reference to the country list in this RFP, indicate in which countries you provide lodgments services to local government authorities. | ||
| F. With reference to the country list in this RFP, indicate in which countries you can disburse payments to local government authorities or insurance companies on ABMC’s behalf. | ||
| G. Confirm that you will prepare all the legal and statutory reports for the primary countries listed in this RFP. | ||
| H. Confirm that you can provide pay slips for all countries listed in this RFP in 1) electronic, 2) paper, or 3) both formats. For electronic pay slips, describe the online repository including the duration for which the documents are accessible. | ||
| I. With reference to the country list in this RFP, indicate in which countries (if any) you engage in a third-party to provide the service on your behalf. | ||
| J. Describe the business reporting capability of your proposed service including consolidated reports, standard reports, custom reports, and self-generated reports. Explain the degree of data consolidation you are able to offer. What formats does the system support for reporting exports? | ||
| K. Describe how payroll cut off times are determined. | ||
| L. Describe your out-of-cycle pay run process - be specific on roles and responsibilities, and cut-off times. | ||
| M. If appropriate, provide details of how you manage multiple country payrolls from shared service locations, including the knowledge and qualifications of SSC staff. Also indicate the range of languages your service team can provide support. | ||
| N. Describe how your proposed service will support new hires and terminations. | ||
| O. Describe your year-end process, including roles and responsibilities and timelines. | ||
| P. Describe your process for managing and escalating employee and corporate customer service queries. | ||
| Q. Do you provide English language support for and in each country? | ||
| R. Provide details of any additional optional services that have not been covered already in your response. (Please include only services that you think may suit ABMC’s business requirements.) | ||
| Supplemental Questions | ||
| A. If you use partners, will all interactions be managed centrally through you or will ABMC deal directly with the partner? | ||
| B. If you use partners, provide brief details of your selection process, governance model, and integration policy. | ||
| C. If payroll is done by payroll experts in-house, please indicate the profile of such experts and please indicate the list of payroll tasks and documents related to payroll process. | ||
| D. Explain to what degree your system can be configured to suit ABMC's specific business requirements (as opposed to being customized). | ||
| E. Indicate any known constraints by country to your payroll service including date constraints, gross-ups, and retro calculations. | ||
| F. Describe for each of the countries in this RFP how you propose to provide disbursements. Be specific on 3rd party involvement, escalation process, cut-off times, governance, communication channels. | ||
| 2 Controls and compliance | ||
| Required Questions | ||
| A. Provide details of your legal and statutory change process, with specific details on how you would communicate changes to the client. | ||
| B. Can you provide a report itemizing all changes to pay items per employee in an audit log? | ||
| C. Describe the encryption standards and methodologies you use to protect your customer data, including during transport, storage and processing. | ||
| D. Provide an overview of your data storage, back-up and protection procedures, and record management procedures. | ||
| E. Outline your information security policy including compliance with ISO 17799, or any other relevant information security standards. | ||
| F. Confirm that you will meet the data protection & privacy laws of each country outlined in this RFP. | ||
| G. Outline your Business Continuity Plan for the countries listed in this RFP. | ||
| H. Provide a copy of your SSAE16 audit report if you have such an audit. | ||
| 3 Implementation | ||
| Required Questions | ||
| A. Provide details of your project management approach, including standard project management methodologies used by your team. | ||
| B. Outline an indicative implementation timeframe/time range per country, using the countries/employee populations listed in this RFP. | ||
| C. Describe your ability to transfer/import personnel and year-to-date payroll data from other payroll services. | ||
| Supplemental Questions | ||
| D. If requested in the selection process, would you be ready to outline the experience of project managers and project team members that you anticipate working on this project, based on the country list in this RFP? | ||
| E. Describe your proposed blueprinting/UAT testing/parallel running processes for this project. | ||
| F. Describe the transition process between the project team and sustaining (as the project team disengages). | ||
| G. Describe the level of training that will be given pre-implementation, during, and post-implementation for Administrators, Managers and Users and on which frequency. Please also confirm in which language. | ||
| 4 Pricing | ||
| Required Questions | ||
| A. Provide price per monthly pay slip, ongoing costs per cycle (bi-weekly or monthly), and year-end costs for each country in this RFP. | ||
| B. Provide the Implementation (including integration) cost per country for your proposed service, to include transferring data from ABMC’s current provider. | ||
| C. Provide the price to implement the ITS and GL files as specified in Appendix III and IV. | ||
| D. Provide the cost structure used for change requests, for example adding new pay codes, or configuring non-standard reports. | ||
| E. Provide the cost structure used for charges for additional services during payroll processing, such as late additions or changes to variable data. | ||
| F. Indicate if there is a charge for out-of-cycle pay runs or distribution of year-end forms. | ||
| G. Outline all training included as part of the implementation costs and any additional training costs that could be incurred. | ||
| H. Outline any other costs that may not have been included in the above questions. | ||
| I. Outline any annual increases that may not be included in your ongoing fees, e.g. consumer price index increases. | ||
| 5 Qualification and Reputation | ||
| Required Questions | ||
| A. Provide appropriate information on your company's funding and financial health. | ||
| B. Indicate where your company is headquartered. | ||
| C. Provide information on the size of your multinational client base, relevant demographics (e.g. industry type) and scope of services being provided. | ||
| D. Indicate how long you have been providing multi-country payroll services. | ||
| E. For each of the countries listed in this RFP, list the countries where you have live clients, and indicate whether employee populations are of a similar size to those outlined in this RFP. | ||
| F. Confirm that you are willing to provide the names of at least three clients who are willing to provide a reference for your service. | ||
| G. Provide some feedback from current customers regarding customer service satisfaction percentage. | ||
| H. How many employees do you have total and per department: sales, operations, services, help desk, integration, IT, legal, etc. | ||
| I. Please indicate your company’s annual staff turnover. | ||
| 6 Governance | ||
| Required Questions | ||
| A. Describe your overall governance model, including communications, escalation, change management, and conflict resolution. | ||
| B. Provide details of the proposed account management structure that you will put in place for our relationship. Be specific about the roles and responsibilities. | ||
| C. Give details of your performance management, measurements, & review process for both implementation and sustaining. Provide samples of the indicators and measures used. | ||
| D. How are manual forms handled in your proposed solution, e.g. court orders, etc.? | ||
| 7 Technology | ||
| A. Data and Interoperability | ||
| 1. Please describe data structure, supported standards and formats, and export/import formats? | ||
| 2. Does the system support industry-standard data feeds for personnel and payroll data? Please list supported feed types and protocols. | ||
| 3. Which third-party Human Resources Information System (HRIS) vendors do you currently have a "standard" interface with, and which new vendors do you plan to include in your standard product line? | ||
| 4. Does the system provide auditable data lineage, allowing traceability from source transactions through outbound reporting? Please explain how lineage is tracked and audited. | ||
| 5. Does the system provide APIs or secure batch interfaces to integrate with: | ||
| • | HRI systems | |
| • | Identity management platforms | |
| • | Time and attendance systems | |
| • | Reporting tools | |
| • | Please describe supported integration methods and security controls. | |
| B. Security Controls | ||
| 1. Does the system implement role-based and attribute-aware access control? Please describe how roles and attributes are defined and enforced. | ||
| 2. Does the system require multi-factor authentication (MFA) for both privileged and non-privileged remote access? | ||
| 3. Does the system enforce least privilege and separation of duties across HR, payroll, and administrative functions? Please provide examples. | ||
| 4. Is data encrypted in transit and at rest? Please specify encryption standards used. | ||
| 5. Does the system provide centralized logging, audit trails, and alerting for security-relevant events? | ||
| 6. Does the system support vulnerability scanning and patch management? Please describe cadence and responsibility. | ||
| 7. Are secure configuration baselines documented and maintained? | ||
| 8. Does the system enforce session timeouts and reauthentication controls? | ||
| 9. Does the system support privileged access monitoring? Please describe monitoring and alerting mechanisms. | ||
| 10. Does the system provide backup, recovery, and continuity capabilities? Please specify RTO/RPO options. | ||
| 11. Are development, test, and production environments segregated? | ||
| 12. Are all interfaces and APIs secured and authenticated? Please describe authentication methods. | ||
| 13. Does the system comply with NIST SP 800-63-4 for identity proofing, authentication, and federation? | ||
| C. Zero Trust and Network Access | ||
| 1. Does the system support a Zero Trust operating model, where access decisions are based on identity, device, session, and context rather than network location? Please describe the model and roadmap. | ||
| 2. Does the system support modern federation, conditional access, encrypted traffic, and strong segmentation between application tiers and administrative paths? | ||
| D. Privacy Controls | ||
| 1. Does the system incorporate privacy-by-design principles? | ||
| 2. Does the system support: | ||
| • | Data minimization | |
| • | Purpose limitation | |
| • | Field-level visibility restrictions for sensitive data |
Please describe how these are implemented.
| 3. Does the system support consent and notice handling, where applicable? | |
| 4. How does the system facilitate access to information in the context of GDPR or Privacy Act requests? | |
| 5. Are disclosures and data sharing events logged? | |
| E. Accessibility | |
| 1. Does the system conform to Section 508 (Home | Section508.gov) accessibility requirements, including: | |
| • | Keyboard accessibility |
| • | Assistive technology support |
| • | Proper labeling and focus order |
| • | Color-contrast compliance |
| • | Accessible documents and forms |
| 2. Is accessibility testing conducted throughout the software development lifecycle and after major changes? | |
| F. Records Management | |
| 1. What is the retention policy applied to payroll records? | |
| 2. Does the system support the items below? | |
| • | Designation of official record copies |
| • | Metadata preservation |
| • | Retention and disposition controls |
| • | Legal hold capability |
| 3. Can records be exported in usable, non-proprietary formats? | |
| 4. Does the system provide auditability of record changes and destruction events? | |
| 5. Does the system support portability to enable transition to a new platform? | |
| 6. Are linked artifacts (approvals, attachments, notices) retained with the official record? | |
| 7. Does the system support records retention durations required by U.S. federal regulations and longer local-country requirements where applicable? | |
| G. Cloud and Hosting | |
| 1. If cloud-hosted, is the system Fedramp (FedRAMP | FedRAMP.gov) certified? | |
| 2. Describe how the system meets NIST SP 800-53 rev5 security baseline controls? | |
| 3. Is a documented shared-responsibility model provided? | |
| 4. Does the system provide tenant isolation? | |
| 5. Are disaster recovery objectives contractually defined? | |
| 6. Does the system provide data extraction rights upon transition or termination? | |
| H. Workflow and Internal Control | |
| 1. Does the system support configurable workflows based on: | |
| • | Delegation of authority |
| • | HR servicing office structure |
| • | Supervisory chain |
| • | Legal review requirements |
| 2. Does the system enforce or flag incompatible role combinations and support compensating controls? | |
| I. Application Specifications | |
| 1. Do you support custom fields and interfaces? The Agency needs to be able to enter a specific rate of exchange at the time of payroll disbursement. How can the system be customized to accommodate this functionality? Please refer to Appendix II and III. | |
| 2. Is the Application User Interface following a Responsive Design? | |
| 3. Is the Application supporting Edge, Safari and Chrome browsers? | |
| J. Audit and Traceability | |
| 1. Does every payroll transaction include a complete audit trail, showing: | |
| • | Who initiated, viewed, modified, approved, rejected, transmitted, or deleted the action |
| • | Timestamps |
| • | Before/after values for key fields |
| 2. Are audit logs tamper-resistant and exportable? | |
| K. Performance and Service | |
| 1. Does the system support 99.9% or better production availability, excluding approved maintenance? | |
| 2. Are RTO and RPO targets defined? | |
| 3. Are response-time targets defined? | |
| 4. Does the system support defined batch processing windows for nightly interfaces? | |
| 5. Is the architecture scalable to accommodate growth? | |
| 6. Does the system provide monitoring for interface failures and transaction reconciliation? | |
| 7. Are release management and regression testing processes documented? | |
| L. Migration and Transition-In | |
| 1. Does the solution support: | |
| • | Data mapping and cleansing |
| • | Validation and conversion rehearsal |
| • | Document migration |
| • | Parallel testing |
| • | Interface cut-over |
| 2. Does the system preserve legal and audit integrity of historical personnel actions, attachments, and approvals? | |
| M. Transition-Out Requirements | |
| 1. How will the contractor support an orderly and secure transition of services, data, documentation, and operational knowledge upon contract expiration or termination? | |
| 2. Does the contractor maintain a Transition-Out Plan that can be activated at the client’s direction? | |
| 3. Can all client data be exported in complete, usable, and documented formats? | |
| 4. Do data exports support the following requirements? | |
| • | Use non-proprietary formats |
| • | Include data dictionaries |
| • | Preserve data relationships and referential integrity |
| • | Support bulk export of all records |
| 5. Will tools or scripts required to import data into a successor system be provided? | |
| 6. Will complete and up-to-date documentation be provided prior to transition completion? | |
| 7. Will structured knowledge transfer be provided to client personnel or a successor contractor? | |
| 8. Will full operational support continue until transition is confirmed successful? | |
| 9. Will full security and privacy compliance be maintained throughout transition-out? | |
| 10. Will a Certificate of Data Destruction be provided after decommissioning? |
File details come from the government source that posted it. Updated .