Attachment 3 Sources Sought Response Template.docx

Attachment 3: Sources Sought Response Template NAVAIR Procurement Group Acquisition Management Systems (AMS) Support Sources Sought - Response Template

Due Date: [Fill In]

Company Name: [Fill In] Company Address: [Fill In] Point of Contact Name: [Fill In] Point of Contact Phone Number: [Fill In] Point of Contact email address: [Fill In] CAGE Code: [Fill In] Unique Entity Identifier: [Fill In]

Company Size Standard under the following North American Industrial Classification System (NAICS) code: [Fill In] Number of Procurement Users Supported: [Fill In] Number of annual transactions and obligations supported: [Fill In] Number of Support Tickets/calls received, and category of tickets/calls: [Fill In]

Select One: Large Business / Small Business / Woman Owned Small Business (WOSB) / Economically Disadvantaged Women-Owned Small Business (EDWOSB) / Service-Disabled Veteran-Owned Small Business (SDVOSB) / 8a / Alaska Native Corporation (ANC) / Historically Underutilized Business Zone (HUBZone) Small Business Please note that under a Small-Business Set-Aside, in accordance with FAR 52.219-14, the small business prime must perform at least 50% of the work themselves in terms of the cost of performance. Provide an explanation of your company’s ability to perform at least 50% of the tasking described in this SOW. Similarly situated small businesses may team together to meet the 50% requirement. If your company is planning to team with a similarly situated small business, the response must clearly identify the proposed team members and the capability statement must clearly articulate which portion of the work each team member will be responsible for. The response must be detailed enough for the Government to make a determination whether or not the proposed team will be able to perform 50% of the work when combined.

Capability Determination Response Topics:

The following responses will be reviewed, and an initial assessment will be made based on the potential ability to successfully compete for and execute the potential requirements.

Please describe in each section how your company has supported enterprise level AMS and Contract Writing Systems within a large DoD acquisition environment, specifically NAVAIR or a similar sized and complex organization comprised of multiple programs, supporting multiple platforms, and performing a broad range of contracting actions, security actions, leadership actions, technical actions, architecture actions, and mission and operational goals. Describe details on the following:

Section 1: General Requirements & Deliverables

1. Compatibility with Government IT Environment (SOW 3.1.1)

· Describe your experience working in environments using Windows 11, MS Project 2021, Office Suite, Visio, Teams, Adobe Acrobat, LAN/Internet comms.

· Provide examples of projects where you successfully integrated deliverables into a Navy/DoD IT environment.

2. Work Location, Meeting Support, and Telework (SOW 3.1.2)

· How has your company supported a split work environment (e.g., 10% on-site with SIPR, 90% remote)?

· Provide support of SIPRNet access support and how proximity requirements were managed.

3. Contract Status Reporting (CDRL A001 & A002) (SOW 3.1.3)

· Provide examples of monthly progress and expenditure reports you have developed.

· What tracking/management tools (e.g., MS Project, Azure DevOps, custom dashboards) were used?

4. Government Furnished Property/Equipment (GFP/GFE/CAP) (SOW 3.1.3.1 (c))

· Describe your property accountability process.

· Provide an example of GFP tracking, inventory, or return at contract closeout.

Section 2: Security & Compliance

1. Non-SCI Support (SOW 3.2.3.3)

· Describe your experience with RMF, NIST SP 800-171/53 compliance, and STIG application in non-SCI systems.

· Provide an example of successful accreditation or ATO support.

2. SCI Support (SOW 3.2.3.3)

· Detail your company’s ability to support systems in SCIF environments.

· Do you maintain TS/SCI-cleared personnel? Provide evidence.

3. System Authorization Access Request (SAAR – A007) (SOW 3.2.3.1)

· Describe your process for onboarding personnel and managing SAAR (DD 2875) submissions.

4. Non-Disclosure Agreements (CDRL A008) (SOW 3.2.4)

· Provide an example of how you ensure NDAs are executed, tracked, and updated.

5. Operations Security Plan (CDRL A010) (SOW 3.2.6.5)

· Describe your OPSEC program and provide a sample plan (redacted if needed).

6. Transition Out Strategy (CDRL A011) (SOW 3.1.5.5)

· Provide an example of a transition plan you executed that ensured knowledge/data transfer with minimal disruption. Please include the topics of turnover, quality assurance, risk mitigation strategies, and data and information transfer.

Section 3: Software & Applications Management

1. Software Development Lifecycle (SDLC) (SOW 3.3.1.2)

· Provide an example of full lifecycle software development (requirements → sustainment).

· Which methodologies (Agile, Kanban, DevSecOps) have you used?

2. Configuration, Code, and Requirements Management (SOW 3.3.1.3)

· Describe your use of Azure DevOps or similar tools for requirements traceability, version control, and CI/CD.

3. Application Enhancement & Integration (SOW 3.3.1.21 and 3.3.1.4)

· Provide an example of integrating with Federal Systems of Record (e.g., Navy ERP, DITPR-DON, DADMS, COOP, ITPR).

4. Cloud and AI Integration (SOW 3.3.1.5)

· Describe projects where you migrated applications to DoD-compliant cloud environments.

· Provide an example of AI/ML integration into workflows.

5. DevSecOps, CI/CD, and Testing (SOW 3.3.1.6)

· Describe software development, deployment, and sustainment activities done within a secure DevSecOps Agile environment.

· Describe continuous compliance with Security Technical Implementation Guides (STIGs), updating documentation accordingly to reflect current system configurations and applied mitigations.

6. Web Development and Search Features (SOW 3.3.1.7)

· Describe and provide evidence of design, development, deployment and maintenance of modern, user-friendly web applications that are search-enabled to include various search-enabled interfaces for both: 1) the AMS internet and intranet environments, and 2) the data analytics environment that covers efforts and products that result from the analysis of existing data information, data sources and data applications.

7. Documentation & CDRLs (SOW 3.3.1.9)

· Provide evidence of producing required software documentation (SRS, SDD, DBDD, CDRLs A003–A006).

8. Government Technical Environment (SOW Table 3.3.1.10-1)

· Provide evidence of integration with the listed current tool set found in table 3.3.1.10-1.

Section 4: Data Analytics & Visualization (SOW 3.3.1.11 - 3.3.1.24)

1. Dashboards & Reports

· Provide examples of dashboards built using Tableau, Power BI, SQL Server, or Oracle.

· Evidence: screenshots, descriptions of metrics used.

2. Data Quality & Governance

· How do you ensure data validation, quality assurance, and accuracy? Provide examples.

3. Training Support (CDRL A009)

· Describe your experience developing training materials (classroom, cue cards, e-learning).

· Provide an example of training effectiveness.

Section 5: Program Oversight & Management

1. Program Oversight & Management (SOW 3.3.1.20)

· Describe your experience with managing contracts (cost, schedule, performance, ROI).

· Provide an example of risk management or issue resolution.

2. Transition-In / Transition-Out Execution (SOW 3.1.5.5.)

· Share lessons learned from prior contract transitions.

· Provide an example of a transition with metrics (e.g., zero downtime, knowledge transfer success).

3. CDRL Deliverables (SOW 3.1.3)

· Provide evidence of delivering accurate, timely CDRLs (status reports, OPSEC plans, training materials).

Section 6: Cybersecurity & IT Services

1. DoD 8140 Cybersecurity Workforce Compliance (SOW 3.2.7.3)

· Describe how you ensure personnel certifications meet 8140/8570 requirements.

· Provide evidence of maintaining compliant workforce.

2. Cyber Incident Response (SOW 3.2.7.7)

· Provide an example of how your team responded to a cybersecurity incident and coordinated with NCIS/DC3.

3. DNA/NTA Managed Services (SOW 3.3.2.2)

· Provide evidence of supporting HBSS, ACAS, patch management, and vulnerability reporting.

4. Cloud Services Support (SOW 3.3.2.4)

· Describe your experience with DISA SCCA, SRG compliance and cloud migrations.

5. Enterprise Transformation (SOW 3.3.2.5)

· Provide an example of process improvement or business transformation (KPIs, automation, digital workplace support).

Section 7: Key Personnel For each proposed Key Personnel role, provide:

· Name & Role

· Certifications (PMP, CISSP, Sec+, ITIL, Agile, etc.)

· Relevant Project Experience

· Evidence (resume highlights, prior performance metrics, customer feedback)

Section 8: Past Performance References Provide at least 3 past contracts relevant to AMS support:

· Contract Title/Number:

· Customer/Agency:

· Period of Performance:

· Scope of Work:

· Evidence of Success (metrics, deliverables, customer commendations):

· POC (Name, Title, Email, Phone):