AMENDMENT 1_RFI MOODLE Upgrade_Vendor Questions and Government Responses.pdf

AMENDMENT 1 TO THE RFI – MOODLE UPGRADE

QUESTIONS AND GOVERNMENT RESPONSES

Acquisition Structure - 1st SET OF QUESTIONS Q1 Does SSS anticipate this requirement being structured as a small business set-aside, HUBZone set-aside, or full and open competition?

A1 Full and open competition Q2 What contract vehicle(s) does SSS intend to use for this procurement — e.g., a standalone contract, GSA Multiple Award Schedule (MAS), or another GWAC?

A2 Standard single firm fixed priced contract.

Technical Environment Q3 What version of Moodle is SSS currently running, and is the platform self-hosted, cloud-hosted (e.g., Moodle Cloud or AWS GovCloud), or managed by a third-party hosting provider?

A3 Current version of Moodle is 4.4.3 Q4 Does the current Moodle environment have an Authority to Operate (ATO) in place, and will the modernization contractor be expected to support ATO maintenance or a new ATO package?

A4 SSS will migrate from on-premises Moodle to a Government-authorized cloud hosted within a FedRAMP Moderate environment (or higher if mission risk warrants). The solution must inherit FedRAMP controls from the underlying infrastructure and implement agency-specific overlays as required.

Q5 What third-party systems or integrations does the current LMS connect to — for example, HRIS, identity management (e.g., PIV/CAC), or agency reporting tools?

A5 Internal Integrated Management Information System (IMIS) for tracking local board training completion.

Q6 What is the approximate size of the current course inventory, and what percentage of existing content is believed to be SCORM/xAPI compliant?

A6 20 courses that have SCORM/xAPI compliance. Expectation is agency will provide internal course creation via Articulate Rise360 course building, course creation using other agency SCORM/xAPI and and creation of KSA internal how to proficiency training.

User Population Q7 What is the current registered user population for the SSS LMS, and what is the anticipated surge population SSS would need to support under conscription activation scenarios?

A7 Current population 2000+, active standby population 5,000+ and Mobilization up to 20,000+.

Q8 Does SSS require the LMS to support external user populations (e.g., Local Board Members and Reserve Service Members) through a public-facing or federated access model distinct from the internal Federal employee environment?

A8 Yes majority of the users are external. This is a public facing website.

Accessibility & Compliance

Q9 Has SSS conducted a Section 508 audit of its existing LMS content, and does SSS have documentation of current accessibility gaps that the contractor would be expected to remediate?

A9 The modernized solution must comply with all federal cybersecurity and accessibility requirements, including FISMA, NIST SP 800-53 security controls, and FedRAMP-aligned security and continuous monitoring expectations, while also meeting Section 508 accessibility standards. In addition, the system must adhere to CISA Binding Operational Directives—specifically BODs governing asset visibility, vulnerability detection, and remediation timelines. The solution must also align with the Federal Zero Trust strategy, including Zero Trust Network Access, centralized logging via Splunk Cloud, continuous diagnostics and monitoring, and data-centric Zero Trust principles outlined in the Federal Zero Trust Data Security Guide.

Q10 Will the contractor be required to adhere to any SSS-specific cybersecurity policies, data handling requirements, or IT standards beyond standard FISMA and NIST 800-53 controls?

A10 The modernized solution must comply with all federal cybersecurity and accessibility requirements, including FISMA, NIST SP 800-53 security controls, and FedRAMP-aligned security and continuous monitoring expectations, while also meeting Section 508 accessibility standards. In addition, the system must adhere to CISA Binding Operational Directives—specifically BODs governing asset visibility, vulnerability detection, and remediation timelines. The solution must also align with the Federal Zero Trust strategy, including Zero Trust Network Access, centralized logging via Splunk Cloud, continuous diagnostics and monitoring, and data-centric Zero Trust principles outlined in the Federal Zero Trust Data Security Guide.

Performance & Evaluation Q11 What are SSS's anticipated service level requirements — for example, system availability targets, help desk response times, and reporting delivery cadence?

A11 Anticipate no downtime except for maintenance windows. To be limited during work hours so that access is available during off hours. Same day contact and resolution for response times by helpdesk. Reporting cadence will be weekly.

2nd SET OF QUESTIONS - Government responses in red type font.

1. Current System Architecture & Environment

a. Can SSS provide an overview of the current Moodle LMS version, hosting model, and major plugins in use? Current Moodle version is 4.4.3, HTML with PHP and 478 plugins

b. Are there known technical limitations (e.g., plugin incompatibilities, performance bottlenecks, unsupported themes)? No

c. Will SSS provide system architecture diagrams, data schemas, or other GFI to support accurate migration planning? No, will provide technical information.

2. User Base & Load Requirements

a. Can SSS confirm the total number of registered users and the breakdown between active daily users and surge/occasional users? Current is 2000+ users; Active Standby 5000+ users; Mobilization up to 20,000+ users

b. Are there documented surge scenarios (e.g., readiness exercises) that define concurrency or load requirements? No

c. What is the anticipated annual growth rate for users, content, or training volume over the next 3–5 years? Ideal growth is 2000+ current to 5500+ for current agency posture. Training volume will increase to three types of training products.

3. Functional Requirements & Training Content

a. Will SSS provide an inventory of existing SCORM/xAPI content, custom training materials, and the current course catalog? Will provide access.

b. Will modernization efforts include new content development, redesign, or accessibility remediation of existing materials? Yes.

c. Are there specific automated compliance reports, dashboards, or KPIs required to support readiness and mission performance? Yes but not maintained on the site.

4. Integration & Interoperability

a. Can SSS identify required or planned integrations (e.g., identity management, HR systems, reporting platforms)? Will tie into current system of record and plan for a future system requirement.

b. Will the LMS be required to support CAC/PIV, Login.gov, or other federal identity standards?

The modernized LMS must support standards-based authentication (SAML 2.0, OIDC) and federal identity credentials (CAC/PIV). SSS anticipates SSO via a FedRAMP-authorized IdP and will accept Login.gov integration where appropriate.

Role-based access control (RBAC) will be enforced across administrators, instructors, learners, and auditors.

c. Are there limits or expectations regarding the number of custom integrations within the modernization scope? No.

5. Cybersecurity, Hosting, and Compliance

a. Are there ATO inheritance expectations from a FedRAMP cloud service provider, or will all NIST 80053 controls require full vendor documentation and assessment?

Yes, offerors may inherit appropriate controls, but system specific/ customer responsibility controls must be documented.

6. Data Migration & Legacy Records

a. Can SSS provide information on database size, number of historical training records, and applicable data retention policies? SSS will provide database size, and the vendor will be given all the data required. Retention policies have yet to be established.

7. Administrative Workflows & LMS Operations

a. Can SSS describe current administrative workflows, including user provisioning, course creation, reporting, and troubleshooting? Managed by the training office within operations for each type of training.

b. Does SSS prefer an SSS-managed LMS, a contractor-managed LMS, or a hybrid operational model? SSS-managed LMS with contract support during the first year of modernization.

c. Does SSS require on-site support? Remote support

8. Performance Metrics & SLAs

a. Are there required Service Level Agreements for up-time, response time, ticket resolution, or student support functions? No. However, the system is expected to be up 24/7 except for scheduled maintenance.

9. Procurement, Costing, and Submission Expectations

a. Is SSS requesting a Rough Order of Magnitude (ROM) only, or structured cost tiers (e.g., core staff, surge users, infrastructure, support labor)? No.

3rd SET OF QUESTIONS - Government responses in red type font

• How many active learners does your Moodle site support annually, and how many inactive learners does your site support for historical data? What are your goals or predictions for future growth?

o Current is 2000+ users o Active Standby 5000+ users o Mobilization up to 20,000+ users

• Is your Moodle site currently hosted in your own infrastructure environment? If yes, do you require infrastructure management for the site, and will you be considering a SaaS delivery?

o Currently on premises with anticipated move to cloud environment. SSS does not require infrastructure management for the site.

• Since your current LMS solution is Moodle-based:

o Do you need support for custom plugins?

Currently we have 478 plugins o Does your site rely on custom code that is forked from the native code?

HTML and PHP o If you do have customizations, what functionality do they provide?

Agency specific functionality.

• Do your security requirements include FedRAMP compliance? If yes, at what impact level?

o The modernized solution must comply with all federal cybersecurity and accessibility requirements, including FISMA, NIST SP 80053 security controls, and FedRAMPaligned security and continuous monitoring expectations, while also meeting Section 508 accessibility standards. In addition, the system must adhere to CISA Binding Operational Directives— specifically BODs governing asset visibility, vulnerability detection, and remediation timelines. The solution must also align with the Federal Zero Trust strategy, including Zero Trust Network Access, centralized logging via Splunk Cloud, continuous diagnostics and monitoring, and datacentric Zero Trust principles outlined in the Federal Zero Trust Data Security Guide.

• What integrations with external systems must be supported? Do you need support for existing or new integrations, or both?

o Both. Integrated Mobilization Information System (IMIS) is to be replaced by a future system.

The modernized LMS must support standards-based authentication (SAML 2.0, OIDC) and federal identity credentials (CAC/PIV). SSS anticipates SSO via a FedRAMP-authorized IdP and will accept Login.gov integration where appropriate. Role-based access control (RBAC) will be enforced across administrators, instructors, learners, and auditors.

• For improved administrative support, can you cite any particular pain points or objectives?

o Objective is improving the user experience, functionality, reporting, Pain points are file size limitation for SCORM/xAPI course building,

• As part of support to design, develop, update, and maintain SCORM/xAPI compliant training:

o Do you require content management system (CMS) functionality, such as versioning?

Yes o Are you seeking support for the SCORM 2004 format, which Moodle does not support natively?

SCORM/xAPI o Does your existing learning ecosystem (or modernization plan) include integration with a learning records store (LRS)?

No.

4th SET OF QUESTIONS

. RFI Reference Question Response in red type font.

1 RFI Notice Question: What are the expected user volumes for normal operations and surge scenarios?

Current is 2000+ with normal operations expectation at 5000+ with a possible surge to 20000+ during mobilization

2 RFI Notice Question: What performance, availability, reporting, accessibility, and federal security requirements must the Moodle environment meet?

The modernized solution must comply with all federal cybersecurity and accessibility requirements, including FISMA, NIST SP 800‑53 security controls, and FedRAMP‑aligned security and continuous monitoring expectations, while also meeting Section 508 accessibility standards. In addition, the system must adhere to CISA Binding Operational Directives— specifically BODs governing asset visibility, vulnerability detection, and remediation timelines.

The solution must also align with the Federal Zero Trust strategy, including Zero Trust Network Access, centralized logging via Splunk Cloud, continuous diagnostics and monitoring, and data‑centric Zero Trust principles outlined in the Federal Zero Trust Data Security Guide.

3 RFI Notice Question: Are there defined benchmarks for page load times, concurrent users, uptime, backup/recovery, and report generation during peak or surge usage?

Response: No there are currently no benchmarking requirements

4 RFI Notice Question: What Moodle version is currently running, what target version does SSS expect after modernization?

The current version of Moodle is 4.4.3. Intent is to have the most up to date version and the ability to continue updates during the contract support by the back end administrator to remain current.

5 RFI Notice Question: Are there any custom plugins, core overrides, theme customizations, or third-party integrations that must be preserved during the upgrade?

Response: There are currently 478 plugins

6 RFI Notice Given the lack of a formal PWS that would permit a reasonable rough order of magnitude (ROM) estimate of the costs associated with the Moodle-based LMS modernization effort and the Government's intention not to identify the precise personnel and their associated qualifications and certifications until the release of a formal RFP, would the Government consider selecting a select number of labor categories/roles that might be used and request that interested parties provide fully-loaded labor rates or a range of rates in order to provide comparisons among vendors and a ROM that the Government might use for a scope of work only known to the Government?

We researched cost estimates for the following: Moodle expert, Course developer, and back-end administrator using the GSA schedule for associated training requirements.

5th SET OF QUESTIONS - Government responses in red type font.

1. Is the current Moodle LMS hosted on-premise at an SSS facility, or is it currently in a cloud environment (e.g., AWS, Azure, GovCloud)? Currently on premises with the expectation to move to an azure cloud environment.

2. Will the modernized Moodle solution need to be hosted on infrastructure provided/managed by the vendor (e.g., a managed Moodle SaaS cloud), or will the vendor be managing and optimizing SSS-owned infrastructure? SSS- owned infrastructure.

3. Can the agency provide specific numbers regarding the "routine" vs. "surge" user capacity?

(e.g., concurrent active users during a surge event versus total registered users).

o Over 2000+ users depending on course release and training due date requirements.

4. What specific version of Moodle is the agency currently running? Moodle version 4.4.3

5. Are there core code modifications or critical third-party/custom plugins currently in use that must be preserved, or is the agency looking to align back closer to Moodle standard core features?

Limited third party and not opposed to standardized Moodle standard core features while maintaining functionality.

6. The document mentions "system integrations." What external systems (e.g., HRIS, Active Directory/IdP for Single Sign-On, FedRAMP identity providers) does the Moodle platform currently integrate with?

LMS has limited integration with Integrated Mobilization Information System (IMIS). The modernized LMS must support standards-based authentication (SAML 2.0, OIDC) and federal identity credentials (CAC/PIV). SSS anticipates SSO via a FedRAMP-authorized IdP and will accept Login.gov integration where appropriate. Role-based access control (RBAC) will be enforced across administrators, instructors, learners, and auditors.

7. Does the Moodle LMS application environment require a formal FedRAMP Moderate(or High) Authorization to Operate (ATO), or will it inherit compliance from an underlying federal cloud infrastructure?

SSS will migrate from on-premises Moodle to a Government-authorized cloud hosted within a FedRAMP Moderate environment (or higher if mission risk warrants). The solution must inherit FedRAMP controls from the underlying infrastructure and implement agency-specific overlays as required.

8. Will vendor personnel providing administrative support, troubleshooting, and database access require specific federal background checks or security clearances (e.g., Public Trust, Secret)?

Contractor personnel with admin/database access must hold Public Trust (Tier 1/2) or equivalent suitability, complete background checks, and follow agency onboarding/offboarding controls (account provisioning, privileged access management, audit trail).

8. Approximately how many existing courses, SCORM packages, or xAPI modules need to be migrated, audited, or updated as part of this modernization effort? Up to approximately 30 courses with fewer SCORM packages and no current xAPI.

9. Does SSS have a preferred instructional design authoring tool suite (e.g., Articulate Storyline, Adobe Captivate) that the vendor must utilize for creating and maintaining content? We use Articulate Rise 360 with AI.

10. Does the government anticipate competing with this requirement as a total Small Business Set-Aside, or through specific contract vehicles (e.g., GSA MAS, STARS III, Oasis)? No

11. The schedule outlines a delivery window between October 2026 and October 2027. Does the agency prefer a "big bang" cutover to the modernized Moodle platform, or a phased migration approach where legacy and modern systems run parallel for a period? Phased migration approach. Develop in DEV environment and push to production environment.

6th SET OF QUESTIONS - Government responses in red type font.

1. What version of Moodle is currently in production, and what is the target version for modernization?

a. The current version of Moodle is 4.4.3

2. Can SSS provide an overview of the current hosting architecture, including whether the LMS is hosted on premises, in a commercial cloud environment, or within a government cloud environment?

a. Hosted on premises (current)

b. Government cloud environment (intent is to go to this)

3. What is the current user population and anticipated surge capacity requirement for the LMS (including concurrent users and total registered users)?

a. Current user population is over 2,000

b. Upper end user population during readiness (active standby) 5,500

c. Could exceed or be around during response (mobilization) 20,000

4. Can SSS provide an inventory of existing Moodle plugins, customizations, integrations, and third-party applications currently connected to the LMS?

a. Current plugins 478

5. What reporting, analytics, and readiness indicators are most critical for the modernized LMS environment?

a. Completion %, grade expectations, proficiency

6. Has SSS completed any recent accessibility or cybersecurity assessments of the LMS, and are there specific compliance frameworks or remediation objectives that must be addressed during modernization?

a. The modernized solution must comply with all federal cybersecurity and accessibility requirements, including FISMA, NIST SP 80053 security controls, and FedRAMPaligned security and continuous monitoring expectations, while also meeting Section 508 accessibility standards. In addition, the system must adhere to CISA Binding Operational Directives— specifically BODs governing asset visibility, vulnerability detection, and remediation timelines. The solution must also align with the Federal Zero Trust strategy, including Zero Trust Network Access, centralized logging via

Splunk Cloud, continuous diagnostics and monitoring, and datacentric Zero Trust principles outlined in the Federal Zero Trust Data Security Guide.

7. Does SSS anticipate requiring contractor support solely for platform modernization and administration, or will instructional design, content development, and SCORM/xAPI course redevelopment services also be required as part of the engagement?

a. Modernization

b. Back End administration

c. Instructional Design/Content development

d. Yes, currently use SCORM and would like modern SCORM/xAPI course development e.

8. Are there any planned or desired integrations with federal systems (e.g., identity management, HR, personnel, or records management systems) that should be considered during the modernization effort?

a. HR - (e.g. federally mandated training)

b. Yes, talk to future system to support mobilization efforts.

c. Integration with internal systems expecting cloud based (government)

d. The modernized LMS must support standards-based authentication (SAML 2.0, OIDC) and federal identity credentials (CAC/PIV). SSS anticipates SSO via a FedRAMP-authorized IdP and will accept Login.gov integration where appropriate. Role-based access control (RBAC) will be enforced across administrators, instructors, learners, and auditors.

9. What are the 3 biggest pain points right now with your LMS?

a. File size restriction - SCORM/xAPI uploading large files shared by other Federal Agencies

b. Training records management by individual for proficiency and reporting - Reporting, statistics, proficiency tracking. Cohort management original design focused on two cohorts and now is up to five.

c. Require update, maintenance of the platform to provide modern LMS experience -two include administration of program code and version updates.

No one is currently performing these tasks.

7th SET OF QUESTIONS - Government responses in red type font.

1. Can the Government clarify whether it is seeking modernization of the existing Moodle environment only, or whether alternative Moodle-based learning platforms and distributions, such as TotaraGov, may be proposed as part of the modernization approach?

a. The agency is seeking modernization of its current Moodle environment.

2. Is the Government’s preference to retain the current Moodle instance and upgrade it in place, migrate to a new Moodle-based platform, or evaluate both approaches?

a. Current Moodle is on premises, and the expectation is to move to a Government Cloud environment.

3. What version of Moodle is currently in production, and are there known customizations, themes, plugins, or integrations that must be retained?

a. Current version is Moodle 4.4.3; themes are agency specific and there are 478 plugins currently.

4. Approximately how many active users does the current LMS support today, broken out by user type if available, such as Federal employees, Contractors, State Directors, Reserve Service Members, and Local Board Members?

a. Current total is 2000+ broken out like this:

i.Federal employees – 98 ii.Contractors – 40 iii.State Directors = 56 iv.Reserve Service Members - 134

b. Active Standby should be 5000+

c. Mobilization upper-level limit could exceed 20,000

5. What is the anticipated surge user population, concurrent user load, or peak training volume the modernized LMS must support?

a. Expectation may be 25% of the user population could be taking training at the same time at peak.

6. Does the Government require a cloud-hosted, FedRAMP-authorized, government community cloud, agency-hosted, or contractor-managed hosting model?

a. SSS will migrate from on-premises Moodle to a Government-authorized cloud hosted within a FedRAMP Moderate environment (or higher if mission risk warrants). The solution must inherit FedRAMP controls from the underlying infrastructure and implement agency-specific overlays as required.

7. Does the current LMS operate under an existing Authority to Operate, and will the contractor be expected to support ATO documentation, security control evidence, continuous monitoring, or other cybersecurity compliance activities?

a. Yes. The contractor will be expected to support all cybersecurity and compliance obligations associated with securing and operating the modernized LMS.

8. Which federal cybersecurity frameworks, standards, or requirements should vendors assume apply to this effort, such as FISMA, NIST SP 800-53, FedRAMP, TIC, Zero Trust, agency-specific policies, or other requirements?

a. The modernized solution must comply with all federal cybersecurity and accessibility requirements, including FISMA, NIST SP 800-53 security controls, and FedRAMP-aligned security and continuous monitoring expectations, while also meeting Section 508 accessibility standards. In addition, the system must adhere to CISA Binding Operational Directives—specifically BODs governing asset visibility, vulnerability detection, and remediation timelines. The solution must also align with the Federal Zero Trust strategy, including Zero Trust Network Access, centralized logging via Splunk Cloud, continuous diagnostics and monitoring, and data-centric Zero Trust principles outlined in the Federal Zero Trust Data Security Guide.

9. What authentication and identity management integrations are required or desired, such as SSO, SAML, OAuth, PIV/CAC, Active Directory, Azure AD, or other identity providers?

a. The modernized LMS must support standards-based authentication (SAML 2.0, OIDC) and federal identity credentials (CAC/PIV). SSS anticipates SSO via a FedRAMP-authorized IdP and will accept Login.gov integration where appropriate. Role-based access control (RBAC) will be enforced across administrators, instructors, learners, and auditors.

10. Are there existing integrations with HR, personnel, credentialing, reporting, document management, help desk, or other enterprise systems that must be maintained or replaced?

a. Current system does not have these functions. The premise is for the upgrade to allow for these types of requirements.

11. What types of learner, course, completion, compliance, readiness, or operational reports are currently produced, and which reports are considered mission-critical?

a. Most of our reports are as follows:

i.Competency breakdown ii.Course completion iii.Logs iv.Live logs v.Activity report vi.Course participation vii.Activity completion viii.Event monitoring rules ix.Ad Hoc.

12. Does the Government require dashboarding and analytics capabilities beyond standard LMS reporting, such as executive dashboards, readiness indicators, scheduled reports, ad hoc reporting, data exports, or integration with an external BI platform?

a. No requirement. Dashboards and reporting is not discouraged. Note:

This site is a public facing site and does not connect to internal agency data reporting tools.

13. Should vendors assume migration of historical learner records, course completion data, certificates, audit records, content, user accounts, enrollments, and course structures from the current Moodle environment?

a. Yes, migration of all LMS information to the current version: (users, historical learner records, course completion data, certificates, audit records, content, enrollment, and current course structures. Maintain data integrity.

14. If data migration is required, what is the approximate volume of historical training records, courses, users, and content objects to be migrated?

a. Users 2000+, 25+ courses, reports, etc.

15. What is the current state and volume of training content, including number of courses, SCORM packages, xAPI packages, videos, documents, quizzes, assessments, and certificates?

a. Moodle is version 4.4.3 with 25+ courses, SCORM/xAPI capabilities (2GB ceiling) quizzes for courses and each learner gets a certificate once completes course.

16. Does the Government expect the contractor to update existing training content, create new content, convert legacy content, remediate accessibility issues, or provide instructional design services?

a. One of the support contractors is for a course developer who will help the current staff update existing training, teach how to create new LMS content, convert legacy content, remediate accessibility issues, and streamline the use of Articulate Rise360 course SCORM/xAPI formats to create new training courses.

17. Will the Government provide access to the current Moodle environment, system documentation, architecture diagrams, plugin inventory, training catalog, and sample reports during a future solicitation phase?

a. Yes. Once vetted, onboarded and ready to work.

18. Are there required service levels for uptime, help desk response, incident resolution, system monitoring, maintenance windows, backup, disaster recovery, and continuity of operations?

a. System is supposed to work 24/7. Scheduling of maintenance. Dev environment for testing and pushing to operational site.

19. What level of LMS administration support is expected from the contractor after modernization, such as user management, course administration, enrollment support, reporting support, troubleshooting, configuration, and release management?

a. Yes to all the above.

20. Does the Government anticipate contractor support for end-user help desk activities, administrator-only support, or tiered technical support in coordination with Government personnel?

a. Government user support administrator activities and technical support.

21. What roles and permissions are currently used in the LMS, and are there desired improvements to role-based access control, delegated administration, or separation of duties?

a. Yes to all the above. 12 Cohorts

22. Are there specific branding, user experience, mobile access, multilingual, or accessibility usability requirements for the modernized LMS?

a. Comply with Federally mandated requirements (Section 508 accessibility standards). Multi-platform accessibility. Not multilingual currently.

23. What is the Government’s preferred implementation approach between October 2026 and October 2027, such as phased rollout, pilot, parallel operation, big-bang migration, or incremental modernization?

a. Phased rollout.

24. Are there critical dates, training cycles, blackout periods, operational events, or agency readiness milestones that vendors should consider when proposing the project timeline?

a. Blackout periods include Federal Holidays and Furlough.

The initial rollout lasts six months, with Moodle expected to be upgraded and maintained from midyear onward.

25. Does the Government expect pricing to include one-time implementation costs, recurring hosting/subscription costs, ongoing managed services, content services, cybersecurity support, and optional surge support as separate cost elements?

a. One-time implementation cost x three contract positions.

26. Will the future solicitation be set aside for any socioeconomic category, or will it be full and open competition?

a. KO will need to respond

27. What contract type and period of performance is the Government considering, including whether option years for sustainment and support are anticipated?

a. Firm-Fixed contract type. (KO Confirm)

b. Performance Period – October 1, 2026, through September 30, 2026.

c. No option years

28. What evaluation factors does the Government expect to prioritize in a future solicitation, such as technical approach, federal security compliance, Moodle experience, past performance, cost, implementation timeline, scalability, or support model?

a. All of the above with priority being Moodle experience and past performance. (KO Confirm)

29. Would the Government consider vendor demonstrations, technical discovery sessions, or solution briefings as part of market research before issuing a solicitation?

a. All of the above can be considered.

30. Does the Government anticipate a single-award solution provider, or is it considering multiple contractors for modernization, hosting, content development, and support functions?

31. Single award but would consider all proposals to ensure that the Performance Work Statement is addressed.

32. Are there incumbent contractors currently supporting the LMS environment or associated training content efforts?

a. Not currently.