Attachment 1_Response Form 1-.docx
DOCX document 122 KB Posted
- Solicitation number
- C2APPSRFI-1
About this file
This is a Response Form for a Request for Information (RFI) regarding Next Generation Command and Control (NGC2) Software Application Storefront, Pipeline and Tailorable Warfighting Applications. The form functions as a template containing 38 primary questions and sub-questions organized under two topic categories: Business Models & Processes and Technology Stack Features.
The RFI seeks industry input on the feasibility of a teaming arrangement where a singular lead vendor would develop or partner to provide an application storefront platform, development pipeline, and tailorable warfighting applications in an Agile and DevSecOps environment. Respondents are required to address core capability areas including: proposed business models and willingness to serve as lead vendor; integration and development processes with timelines for both Government-provided and industry-provided data layers; cross-platform consistency and operating system requirements; software engineering maturity and Agile/DevSecOps processes; software licensing structures; continuous integration/continuous delivery (CI/CD) capabilities and update management; support models and technical performance measures; cybersecurity testing strategies including SAST/DAST tools; data throughput, bandwidth, and retention capabilities; API standardization and extensibility; operations in Denied, Degraded, Intermittent, or Limited (DDIL) environments; compatibility with Android, iOS, Linux, and Windows platforms; AI/ML integration; container orchestration for cloud and Tactical Edge Compute environments; telemetry and data-centric warfare capabilities; Authority to Operate (ATO) or Interim Authority to Test (IATT) documentation; and comprehensive training and documentation delivery plans. The form includes provisions for respondents to reference pricing information in separate sections of the response.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| PM C2 Apps RFI QA.xlsx | XLSX spreadsheet | |
| Industry Day Recording Link.docx | DOCX document | |
| PM C2 Apps Industry Day QA.pdf | ||
| THE FULL RFI TEXT AND ADDITIONAL SECTIONS.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
NGC2 PM C2 Applications Section 3.4.2 Rough Order Magnitude (ROM) NGC2 PM C2 Applications RFI Section 3.4.2 Notional Schedule
COMPANY NAME
Date
Topic: Business Models & Processes Row #1: Similar to NGC2 efforts, PM C2 Apps is considering a “teaming” arrangement for the entire portfolio on the assumption that a singular team lead could develop and/or partner with others to provide a pipeline and application storefront, while working with the Government in an Agile and DevSecOps environment to provide applications to the Warfighter. These applications would be based on approval from the Government and be brought on to existing efforts as a combination of Government, Commercial, and Tactical solutions. Please describe if you believe this approach seems feasible and/or would your solution support this concept?
Response:
Row #1a: Please identify which of the following solutions you already have available; software application storefront platform, pipeline and/or tailorable warfighting application and are they commercial?
Response:
Row # 1b: For available solutions, please describe your integration process and include a timeline for implementation. This should incorporate a scenario where a data layer is provided by the Government and a scenario where a data layer is provided by a separate industry partner.
Response:
Row # 1c: For available solutions that need to be created, please describe your development process and include a timeline for implementation. This should incorporate a scenario where a data layer is provided by the Government and a scenario where a data layer is provided by a separate industry partner.
Response:
Row # 2: Would you be willing to operate as a lead vendor to incorporate approved applications into your proposed solution? Would you be willing to onboard applications to the Government as a container and maintain them.
Response:
Row # 3: What would your business model strategy look like if the Government requires the storefront provider to be a lead?
Response:
Row # 3a: What additional costs would be associated with this requirement? If any, please provide the cost structure and pricing in Section 3.4.2 and reference Row # 3a in your response.
Response:
Row # 3b: Please describe your expertise in being a lead.
Response:
Row # 4: Does your proposed solution allow cross-platform consistency for existing, new or partnering data layers? Please describe.
Response:
Row # 4a: What is your proposed solutions minimum requirements for operating systems such as Windows, MacOS, Linux and Android. Please describe any limitations?
Response:
Row # 5: Please describe your proposed solutions software engineering maturity standard operating procedure in an Agile and DevSecOps environment. (planning/developmental phase) Please describe your proposed solutions process regarding an Agile and DevSecOps environment given iterative and continuous updates and feedback. (execution phase) Is this product live and in use? Please describe your use case.
Response:
Row # 6: Please describe your proposed solutions Agile and DevSecOps software technical maturity process and workflows.
Response:
Row # 7: Please describe your proposed solutions software license structure in an Agile and DevSecOps environment.
Response:
Row # 8: Please describe how your proposed solution enables (CI/CD) Continuous improvement and Continuous Delivery to capabilities based on user feedback and performance issues. Please include concepts of how the updates are managed and pushed to devices.
Response:
Row # 8a: What is an acceptable amount of times an upgrade or update is allowable for an application storefront platform?
Response:
Please describe your process for reverting to a prior known-good version if an application has a vulnerability Response:
Row # 8b: Does cost change based on total updates, upgrades and/or reversions? If so, please provide the cost structure and pricing in Section 3.4.10 and reference Row # 8b in your response.
Response:
Row # 9: Please describe your release and deployment strategy upon development of the App store and any enhancements and updates.
Response:
Row # 10: Please describe how your solution’s flexible fielding strategies will ensure the continuous fielding of the latest advances in technology.
Response:
Row # 11: Please describe your software Technical Performance Measures (TPM).
Response:
Row # 12: Please describe your solution’s tiered support model (e.g., Tier 1, 2, 3).
Response:
Row # 12a: What are the standard hours of operation for technical support, and is 24/7/365 support available for mission-critical issues?
Response:
Row # 13: Please describe your solution’s trouble ticketing process from the user's perspective.
Response:
Row # 13a: How can a user submit a ticket, track its status, and provide feedback on the resolution?
Response:
Row # 14: Please describe your solution’s license management framework and how it accommodates the dynamic nature of an application storefront containing a mix of Government Off The Shelf (GOTS), and third-party Commercial Off The Shelf (COTS) applications.
Response:
Row # 15: What tools or dashboards are provided for monitoring real-time license utilization, tracking compliance across the enterprise, and generating reports to forecast future licensing needs and inform budget decisions?
Response:
Topic: Technology Stack Features Row # 16: Please describe limitations of your solution if any (run time errors, crashes/downtime in Denied, Degraded, intermittent, or Limited (DDIL) scenarios, quantity of applications in use and data output size per application).
Response:
Row # 17: Please describe how your solution will provide a IL5 up to IL6 secured network while also maintaining updates.
Response:
Row # 17a: Please describe how you will maintain those updates from your commercial environment to a secured environment.
Response:
Row # 18: Does your proposed solution function in multiple environments to include hybrid cloud, on premise environment and DDIL environments Does the solution require cloud-enabled services? Please describe.
Response:
Row # 19: Does your proposed solution include cloud-independent and cloud-enabled services? Please describe.
Response:
Row # 20: What is your commercial standard for providing Intellectual Property (IP)/Data Rights?
Response:
Row # 21: Please describe your cybersecurity testing strategy to include cybersecurity scanning with counterintelligence and software integration and functional test activities for items such as but not limited to; automated static and dynamic code analysis and automated fuzz testing.
Response:
Row # 21a: What SAST and DAST tools are you using today?
Response:
Row # 22: What is your proposed solutions maximum data throughput and bandwidth you can support on a network?
Response:
Row # 22a: How much data can your proposed solution retain? Please provide pricing for any retainment policies if applicable in Section 3.4.2 and reference Row # 22a in your response.
Response:
Row # 22b: How much user interface can the storefront manage without degraded connectivity?
Response:
Row # 23: Does your proposed solution have open, standardized, and extensible Application Programming Interfaces (APIs) that enable modern approaches for orchestration both within and between data layers. Please describe your common APIs Response:
Row # 24: Does your proposed solution incorporate flexible ontology. Please describe.
Response:
Row # 25: Please describe how your proposed solution ensures uninterrupted operations when in a DDIL situation?
Response:
Row # 26: Please describe how your proposed solution includes data-centric warfare ensuring access from any hardware end device to include Android, IoS, Linux, and Windows.
Response:
Row # 26a: Please describe any compatibilities issues you see.
Response:
Row # 27: Please describe your solution’s software orchestration and how it transforms capabilities for operational demands of multiple warfighting units, such as different compute and transport needs for different echelons throughout the Army including legacy and modern hardware solutions.
Response:
Row # 28: Please describe how your solution shares and transports data through a single source of truth data layer.
Response:
Row # 29: Please describe how your solution relies on modern approaches for things such as; Continuous Integration / Continuous Delivery (CI/CD) pipelines, Application Programming Interfaces (APIs), Software Development Kits (SDKs), Modular Open Systems Approach (MOSA), Natural Language Processing (NLP). Please include any other modern approaches not listed.
Response:
Row # 30: Please describe how your application and/or storefront solution will be developed with modern maximum reuse of composable core services within a data layer.
Response:
Row # 31: Please describe how your application solutions consume and publish data from and to a data layer.
Response:
Row # 31a: Please describe how your application solutions application boundary.
Response:
Row # 32: Please describe how your application solutions consume and publish Artificial Intelligence/Machine Learning (AI/ML) models from and to a data layer using AI/ML data layer services.
Response:
Row # 32a: Also, please describe your application solutions application boundary.
Response:
Row # 33: Please describe your application solutions compatibility with modern approaches for autonomous container orchestration for both cloud and Tactical Edge Compute (TEC).
Response:
Row # 34: Please describe your application solutions telemetry for data-centric warfare, to include, the parameters that collect telemetry data to inform performance of the application, the layer, and between-layer orchestration to the storefront and throughout the development.
Response:
Row # 35: Please describe your application solutions central repository and its accessibility to developers, administrators and users.
Response:
Row # 36: Please describe your application solutions no-code/low-code options for tool or workflow integration.
Response:
Row # 37: Provide your current Interim Authority To Test (IATT) or Authority to Operate (ATO) approvals or ability to provide documentation to enable IATT or ATO approvals for your proposed solution.
Response:
Row # 38: Provide your training plan, documentation, software package, and estimated timeframe as a full delivery.
Response:
Row # 38a: Describe how your solution allows for local hosting, training video playback support, and document downloads.
Response:
NGC2 PM C2 Applications RFI Section 3.4.1 Table 1. Software Applications Storefront Platform, Pipeline and Tailorable Warfighting Applications Questions & Requests
Rough Order Magnitude (ROM)
Notional Schedule image1.png image2.png
File details come from the government source that posted it. Updated .