A14_Request_for_Information_-_NPS_Environmental_Audit_DB_and_system_1.pdf

REQUEST FOR INFORMATION/MARKET RESEARCH

QUESTIONNAIRE

Environmental Compliance and Cleanup Division Environmental Audit Data Base and System

The National Park Service (NPS) conducts a robust environmental audit program across its more than

400 park units. The NPS Environmental Compliance and Cleanup Division (ECCD, a headquarters division) oversees and maintains a functional but antiquated data base and system for housing and analyzing current and historical audit findings.

System Capabilities. ECCD is seeking to purchase use of a comprehensive environmental audit system, requiring most of the following:

• Maintain a data base of current and future audit findings that is the property of the NPS and exists in a universally used format (or easily transferrable to such a format);

• Reliably transfer historical data from our existing ColdFusionTM 2016 and Oracle 11g system to a new one;

o Current dataset, while only totaling 60MB as raw data, involves 32,000 rows

(“findings”) with 26 fields per row for standard use, with additional fields per row

(not visible to us currently) for behind-the-scenes admin and maintenance.

• Apply governance and standard conventions to data quality, for example;

o Unique identifier per “finding,” o Method for identifying and deleting duplicates, o Archive vs. delete methodology.

• Capture information related to the resolution and status update of findings;

• Advanced search and filter functionality

• Employ different levels of administrative rights for access and functionality, for example;

o Adding and administering new data fields, o Restricted views by data type (e.g., Region, Park)

• Use can be tailored across all device types such as desktop, tablet, and mobile devices;

• Incorporate various forms of media, including geospatial information, images, audio, and video;

• Out-of-the-box (OOTB) creation of reports and dashboards from the data, with ability to customize;

• OOTB ability to configure notifications to system stakeholders, with a variety of notification methods;

• Ability to accommodate up to 150 users at one time;

• Provide scalable storage capacity for findings and pictures from all parks, to accommodate large data sets as records grow over time;

• Provide regularly updated federal and state environmental legal content (environmental audit check sheets);

• Provide and incorporate a system that tailors the legal content specifically to the environmental portfolio of the NPS;

• Although NPS is responsible for the Authority to Operate (ATO) and deliverables, assist development of the ATO (see below) by supplying guidance, research, and documentation of system configurations and settings needed to satisfy the required assessments; and

• Provide a system with current and comprehensive safety features and standards.

For any SaaS or cloud-based application maintained outside of the US Federal Government, FedRAMP certification is required. Additionally, internally, an “Authorization to Operate” (ATO) must be created. An ATO is a formal declaration by a designated approving authority that authorizes operation of a Business Product and explicitly accepts the risk to agency operations. The ATO is signed after a Certification Agent (CA) certifies that the system has met and passed all requirements to become operational. Acquisition of the ATO would commence after the contract’s award and is greatly facilitated if the contractor has FedRAMP certification.

- This RFI will be posted to Contract Opportunities via www.SAM.gov.

Please be advised that your participation in this survey is not required to ensure participation in future solicitations and contract awards. Participation is this survey is voluntary and the Government will not reimburse participants for any expenses associated with their participation in this survey. There is no commitment by the Government to issue a solicitation as a result of this RFI. Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract. Respondents will not be notified of the result of the review.

Part I. Response Requirements

A. Please provide the following business information for your company/institution and for any teaming or joint venture partners:

• Company/Institute Name:

• Address:

• Point of Contact:

• CAGE Code:

• Phone Number:

• E-mail Address:

• Web Page URL:

• Which North American Industry Classification System (NAICS) Code do you believe is most appropriate for this requirement? The anticipated NAICS code is 541620.

• Are you able to provide a cataloged price list of your products?

B. Based on the above NAICS Code, state whether your company is:

• Small Business (Yes / No)

• Woman Owned Small Business (Yes / No)

• Small Disadvantaged Business (Yes / No)

• 8(a) Certified (Yes / No) http://www.sam.gov/

• HUBZone Certified (Yes / No)

• Veteran Owned Small Business (Yes / No)

• Service-Disabled Small Business (Yes / No)

• SAM Registration (Yes / No)

C. Questions Submissions: Interested vendors must submit any questions concerning this RFI NLT

18 March 2022.

D. The RFI submission is due no later than 8 April 2022, 3:00 p.m. (CST) to Kacie L. Varner, kacie_varner@nps.gov.

Part II. Capability Survey Questions

Vendors interested in this work should possess the following specialized skills and experience and address these specialized skills and experience in responses to this RFI, and we are also interested in your responses to the other variables below:

Environmental Compliance Domain Expertise

• Expertise in and extensive experience with environmental compliance at all jurisdictional levels.

Interoperability & Architecture:

• How many application interfaces (APIs) or "connectors" does your platform support out-of-the-box?

• Are new integrations with 3rd-party platforms or services instantly available to all customers?

• If feature releases and updates are not instantly available to the platform, please provide details on the process required for a customer to update their instance to the new version.

• If new integrations are not instantly available to the platform, please provide details on the process required for a customer to get access to the new integrations within their instance.

Operations & Support:

• What is your service level agreement (SLA) in terms of uptime per month?

• What technical skills are required of users of your platform? If technical skills are required for some areas of the platform while others do not, please specify which areas of the platform must be managed by whom?

• What is the availability of product documentation? How is it accessed?

• Describe the various support tiers and service levels provided for the product.

• Describe the release cadence for major, minor, maintenance, other types of changes?

• Describe how upgrades work and how you limit the risk of changes to your customers.

• Describe the support you supply to your customers during a critical failure of the service.

Cybersecurity, Privacy, Authentication:

• For a broader understanding of Department of Interior requirements, please note the attached “DOI Baseline Compliance Contract Guidelines” document.

• Note: The system will rely on ADFS authentication via SAML 2.0 for internal (non-public) system access. NPS will coordinate with DOI Security Office to set up a Relying

Party Trust (RPT) endpoint for the system to authenticate users via the DOI ADFS service via PIV card.

• If experience with US Government clients, please specify what, if any, capabilities for data entry for non-PIV’d external authorized system users.

Please provide a Rough Order of Magnitude related to cost (broken out by the four critical elements) associated with the effort as described above.

Responses to the capability survey are limited to seven (7) pages with emphasis on System

Capabilities.