Attachment 1 - Capability Matrix.xlsx
XLSX spreadsheet 19 KB Posted
- Solicitation number
- RFI-DEAMS-UPK-2026-01
About this file
This file is a Capability Matrix template designed for vendors responding to the Department of the Air Force's Request for Information regarding Oracle User Productivity Kit (UPK) replacement solutions. The matrix requires respondents to provide company information, a point of contact, and a detailed compliance assessment across five major capability areas using a four-tier rating system: Fully Compliant, Partially Compliant, Not Compliant, or On Roadmap.
The capability requirements span Content Authoring & Development, including no-code content creation, multi-format recording capabilities for Oracle EBS and desktop applications, rich content editing with PII masking, multiple output formats (PDF, DOCX, PPT, HTML), localization tools, and UPK content migration capabilities; Agile Content Lifecycle Management & Governance, encompassing centralized content libraries, DevSecOps integration with version control and CI/CD pipeline support, role-based access controls, and reusable content objects; Content Delivery & End-User Experience, featuring in-application guidance, user segmentation, cross-application support, AI-powered assistance, and proactive change management tools; System & Technical Requirements, including FedRAMP Moderate or High authorization preference, Oracle EBS integration, scalability for 26,000+ users across 170+ locations, and comprehensive analytics dashboards; and Security, Compliance, and SCRM considerations, requiring FedRAMP and CMMC status, DoW compliance with DISA STIGs and CAC/PKI authentication support, Section 508 and WCAG 2.1 Level AA accessibility, SSDLC development per NIST SP 800-218, SBOM generation capability, and statutory compliance with FAR requirements and supply chain transparency provisions.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Request for Information.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| 1. | Company Name, Address, and Website. | |
| 2. | Point of Contact (Name, Title, Email, Phone) | |
| 3. | Solution Offered | |
| Attachment A: Capability Matrix |
Instructions for Industry: Please complete the following matrix to indicate your solution's level of compliance with each requirement. In the "Compliance" column, please state whether your solution is "Fully Compliant," "Partially Compliant," "Not Compliant," or "On Roadmap." Use the "Comments from Industry" column to provide details, clarifications, or explanations for your compliance status, especially for any "Partially Compliant" or "On Roadmap" responses.
| Area | Specific Requirement | Compliance ("Fully Compliant," "Partially Compliant," "Not Compliant," or "On Roadmap.") | Comments from Industry |
| 1. Content Authoring & Development | No-Code Content Creation: A user-friendly editor that allows non-technical personnel to rapidly create and update guidance without needing to write code. | ||
| Multi-Format Recording: Ability to record user interactions with web-based applications (specifically Oracle EBS) and desktop applications to automatically create simulations, step-by-step instructions, and videos. | |||
| Rich Content Editing: An intuitive editor that allows authors to easily add, edit, and format content, including annotations, callouts, masking of sensitive data (PII), and branching logic. Note for Emphasis: Oracle UPK offers a library catalog capability where hierarchy of job aid creations are connected and updated automatically (e.g., a “parent-child” link). | |||
| Multiple Output Formats: Ability to publish content to various formats from a single source recording, including interactive simulations, printable documents (e.g., .PDF, .DOCX), presentation slides (e.g., .PPT), or other formats (e.g., .HTML) for Learning Management System (LMS) integration. Note: Interaction with output format should also allow users to interact with output (i.e., select/deselect graphical images). | |||
| Localization and Translation: Tools to support the translation of content into different languages. | |||
| UPK Content Migration: Describe the solution's capability to migrate existing content from Oracle UPK. This includes the availability of automated conversion tools, support for a hybrid migration approach, or professional services to facilitate the transition. Note: Oracle UPK utilizes the .ODARC file type that necessitates a conversion. | |||
| 2. Agile Content Lifecycle Management & Governance | Centralized Content Library: A secure, centralized repository for storing, versioning, and managing all training and support content. | ||
| Agile Content Lifecycle Support (DevSecOps Integration): Capabilities that align the DAP's content lifecycle with the ERP's development cycle, including: - Version Control for Content - CI/CD Pipeline Integration - Testing in Non-Production Environments - Automated Change Detection & Testing | |||
| Role-Based Access Control & Workflow Management: Ability to define granular permissions for content authors, reviewers, and administrators, and features to support a collaborative content lifecycle with peer review and approval workflows. | |||
| Content Reusability: Ability to reuse content snippets across multiple training modules and perform bulk updates when the underlying application changes. Note: Oracle UPK utilizes Reusable Content Objects (RCO) automatically link objects. I.e., a “one to many” relationship model. | |||
| 3. Content Delivery & End-User Experience | In-Application Guidance: The ability to deliver real-time, context-sensitive guidance directly within the live Oracle EBS application. This includes interactive walkthroughs, tooltips, checklists, and field validations. | ||
| User Segmentation and Targeting: The ability to deliver different guidance to different user roles, groups, or site-specific workflows to improve usability. | |||
| Cross-Application and Desktop Support: The capacity to provide a unified guidance layer across a diverse technology stack, including web-based applications (Oracle EBS), custom systems, and on-premise desktop applications. | |||
| AI-Powered Assistance: Artificial intelligence capabilities to power a self-help knowledge base, provide predictive analytics, and offer intelligent, conversational help. | |||
| Proactive Change Management: Tools to create in-app announcements, pop-ups, and guided tours to inform users about software updates and process changes. | |||
| 4. System & Technical Requirements | Hosting: Preference for a solution that has achieved or is on a clear path to achieving FedRAMP Moderate or High authorization for cloud hosting (SaaS). Specify if on-premises or private cloud options are available and detail the authorization timeline. | ||
| Integration: Proven, stable integration with Oracle E-Business Suite (Forms and OAF pages) and modern web applications. | |||
| Scalability and Performance: Demonstrated ability to support a large, enterprise-wide user base (26,000+ users) across 170+ geographically dispersed locations without degrading ERP system performance. | |||
| Analytics and Reporting (KPIs): Comprehensive dashboards to track user behavior and measure success with measurable insights, including: - User Adoption/Engagement KPIs - Productivity/Performance KPIs - ROI KPIs | |||
| Sandbox and Simulation: The ability to create an interactive, risk-free replica of the live application to support hands-on training and User Acceptance Testing (UAT) without impacting the production environment. | |||
| 5. Security, Compliance, and SCRM | FedRAMP & CMMC: Information on the solution's current FedRAMP status (e.g., In-Process, Authorized) and at what impact level (Low, Moderate, High), and the solution’s CMMC status. | ||
| DoW Compliance: Ability to meet DoW security requirements, including DISA STIGs and support for authentication via Common Access Card (CAC) / Public Key Infrastructure (PKI). Note: If no STIG is available, please provide any Vendor Security Guide or “best practices” your provided solution has. | |||
| Accessibility: Compliance with: - Section 508 of the Rehabilitation Act - Title II of the Americans with Disabilities Act (ADA) (WCAG 2.1 Level AA) | |||
| Secure Software Development Lifecycle (SSDLC): Identify if the solution was developed in accordance with government-specified secure software development practices (per Executive Order 14028), such as NIST SP 800-218. | |||
| Software Bill of Materials (SBOM): The vendor must have the capability to generate and provide a comprehensive SBOM in a standard format (e.g., SPDX, CycloneDX). | |||
| Statutory & Regulatory Compliance: Compliance with: - FAR 52.204-25 (Section 889) - FAR 52.204-23 (Kaspersky Lab) - Section 1260H List (NDAA FY 2021) | |||
| Supply Chain Transparency: The vendor must demonstrate transparency regarding its supply chain, including providing information on foreign ownership, control, or influence (FOCI) and maintaining provenance data for all software components. |
File details come from the government source that posted it. Updated .