Attachment J-3 Relevant Technical Experience Self-Assessment and Validation Matrix.xlsx
XLSX spreadsheet 34 KB Posted
- Solicitation number
- 77344423Q0005
About this file
This document contains a self-assessment matrix and instructions for a federal contract opportunity with the United States International Development Finance Corporation (DFC) Office of Information Technology (OIT) for Cloud First Enterprise Systems Support Services (CFESSS). The CFESSS solution consists of four pools: Pool A for Operations, Pool B for Application Development, Pool C for Cyber Security, and Pool D for Program Management Office support services. These pools will provide resources to support DFC OIT's operations and mission to support the whole agency. The total ceiling value for all task orders issued against multiple award IDIQ contracts under this opportunity is $250 million. Offerors must complete the self-assessment matrix by identifying relevant technical experiences for each task listed and scoring themselves accordingly based on business size and prime contractor status.
View the file
Other files
Show all 23
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Instructions See Sections L and M of the Request for Proposals (RFP) for detailed information regarding the Instructions and Evaluation of this Attachment.
The Offeror shall submit a completed copy of this Relevant Technical Experience Self Assessment Matrix, identifying which element(s) of the Performance Work Statement (PWS) the Offeror (including proposed subcontractors(s)/team member(s)) is capable of performing. Through the Relevant Technical Experience Self Assessment, the Government intends to gather a high-level understanding of the breadth and depth of the Offeror’s capabilities and experience as it relates to the Government’s requirements in the PWS.
Relevant technical experience is hereby defined as a project that is similar in size to current DFC services, meets an element of the PWS
Fill out Column C with up to ten relevant technical contrac experiences. In Column D please reference which of these experiences you were the Prime for. In Column E please place either a yes or no for whether you are a small business.
SCORING INSTRUCTIONS- If you are a Large Business, Award yourself one point per relevant technical Contract experience. Award yourself an additional point per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 20 points. If you are a Small Business, Award yourself two points per relevant technical Contract experience. Award yourself an additional two points per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 40 points.
Pool A See Sections L and M of the Request for Proposals (RFP) for detailed information regarding the Instructions and Evaluation of this Attachment.
The Offeror shall submit a completed copy of this Relevant Technical Experience Self Assessment Matrix, identifying which element(s) of the Performance Work Statement (PWS) the Offeror (including proposed subcontractors(s)/team member(s)) is capable of performing. Through the Relevant Technical Experience Self Assessment, the Government intends to gather a high-level understanding of the breadth and depth of the Offeror’s capabilities and experience as it relates to the Government’s requirements in the PWS.
Relevant technical experience is hereby defined as a project that is similar in size to current DFC services, meets an element of the PWS
Fill out Column C with up to ten relevant technical contrac experiences. In Column D please reference which of these experiences you were the Prime for. In Column E please place either a yes or no for whether you are a small business.
SCORING INSTRUCTIONS- If you are a Large Business, Award yourself one point per relevant technical Contract experience. Award yourself an additional point per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 20 points. If you are a Small Business, Award yourself two points per relevant technical Contract experience. Award yourself an additional two points per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 40 points.
| Task Area | Pool A: Operations | Number of Relevant Technical Experiences | Prime | Small Business | Total |
| C.3.1.1 | Provide a business forward focused agency-wide IT service desk, capable of resolving all tickets within the Service Level Agreements (SLAs) at the task order level. This will be monitored through the operation of a DFC ticketing system, while simultaneously ensuring incidents that are not entered via the system such as phone calls, emails, IMs, on-site desk support, and walk ins, are entered in for monitoring and reporting purposes. Support for service desk operations will consist of the following groups: |
1. Tier 1 Support: The first level, customer-facing support. Tier 1 should resolve most common incidents and requests, escalating when appropriate, while performing Total Cost of Ownership of all incidents and requests within or outside of Service Desk queues.
2. Tier 2 Support: The second level support team. Tier 2 intercepts and handles all escalations from Tier 1 and serves as Senior Systems Administrators. Tier 2 is responsible for daily operations and maintenance of DFC infrastructure. Tier 2 will also include a security operations team that will focus primarily on security operations and compliance. This includes work such as system patching and vulnerability mitigation.
| 3. | Tier 3 Support: This is the engineering support team responsible for network modernization, technical refresh implementations, and enterprise architecture solutions. This team also serves as technical and application support specialists in cases of major service desk ticket escalations, system-wide outages, and total cost of ownership activities. | |
| C.3.1.2 | Provide support for all OIT-issued end-user IT equipment (laptops and docking stations, conference room equipment, network and personal printers, wireless devices, computer monitors, mobile devices and assorted peripheral devices) to support the current organizational IT structure, conduct asset tracking on the supplies, and accommodate all future changes such as the refreshes (current PC refresh cycle 1/3 agency per year) and migrations operationally and via market expertise on best-in-class equipment purchase recommendations. This includes managing the inventory of the Service Desk IT Stock equipment, reporting to the cognizant DFC FTE when items run low, and overseeing the shipment of hardware or peripherals to remote/onboarding staff to private residences. Coordinate the warranty/non-warranty repair of all OIT-approved end user hardware after authorization by the COR. | |
| C.3.1.3 | Conduct conference room support via a daily early morning walk through of all DFC HQ conference rooms (currently 17) to confirm equipment availability and functionality, documenting and reporting discrepancies. This includes providing direct support when the conference rooms are in use via WebEx and other A/V conference support (such as Teams, Zoom, Cisco, etc.). As well as perform daily verification of onsite printers, scanners, and faxes. | |
| C.3.1.4 | Provide written reports on the status of OIT Service desk operations upon request of the government, and weekly activity reports that summarize application failures, root causes, and resolution steps taken. | |
| C.3.1.5 | Draft, update, and maintain Standard Operating Procedures (SOPs) and checklists and store them in a master document repository | |
| C.3.1.6 | Manage all directory and application accounts, including disabling inactive user and admin accounts, account review, and administrative account management. | |
| C.3.1.7 | Provide accurate and timely information on the status of all applications, systems, reports, and interfaces. The Contractor shall monitor and evaluate at least 95% of all applications, reports, interfaces and batch jobs in real-time. Monitoring shall include system resources such as disk usage: CPU utilization. Specifications on monitoring procedures and protocol will be outlined at the order level. | |
| C.3.1.8 | Optimize performance by tuning systems, making required changes to the way in which the various system resources are consumed. Coordinate with the Infrastructure Team to make required changes to DFC infrastructure, recommending changes to business practices, and making changes to the applications. | |
| C.3.1.9 | Ensure that all software components are upgraded and/or maintained at the software vendor’s specified release/patch levels, and test and validate applications whenever any patches are deployed. Conduct change and configuration management, logging all application changes and bug fixes in a Kanban like dashboard that is tracked within DFCs approved ticketing system. Confirm that all nightly batch and other data exchanges are completed | |
| C.3.1.10 | Collaborate with DFC support contractors and government staff on the as-is and future state logistics of DFC hardware, software, and leasing licenses, including asset tracking. This includes an in-depth process for the identification of existing resources and making timely recommendations for best-in-class process improvements. Procure hardware, software, and leasing equipment as specified at the task order level, with the ability to store the equipment in inventory offsite, at a secure facility operated by the contractor, manage and report on the inventory, and conduct imaging and shipping activities. Provide a turn-key equipment solution to include set up of a web page/portal for ordering equipment (Fedramp certified and integrable with Service Now), inventory and storage capabilities for items ordered through the portal or otherwise for DFC, that meets the standards for secured facilities, verify receipt and condition of items received (working with the manufacturer to return items Dead on Arrival, installation of a software image, preliminary asset management tagging and reports, and shipping to Washington, DC and other locations for the deployment of workstations, laptops, monitors, tablets, and other peripherals. | |
| C.3.1.11 | Provide services to install, configure, and integrate an audio-visual conference system into DFC conference rooms using three standardized options (small, medium, and large). The new system must fully integrate into a Cisco WebEx and Microsoft Teams environment, as well as Cisco Call Manager and Cisco Unity. Assist CISCO in resolving Plan of Action and Milestones (POA&M). | |
| C.3.1.12 | Ensure all DFC required applications and interfaces are fully operational in the Disaster Recovery (DR) and COOP sites, participating in one live exercise per year to ensure application availability. In the event of a disaster, execute the DR plan to restore the applications in the DR site. | |
| C.3.1.13 | Update and maintain the Service Now (SNOW) executive dashboard daily to allow OIT leadership to keep track of operations. Gather user stories and conduct business analysis activities in relation to SNOW, verifying user needs are met and kept within a backlog for future developments. Ensure the full operational integration of SNOW within the larger DFC system, including the unimpeded flow of information between SNOW and other DFC applications and conducted any additional development found to be necessary. | |
| C.3.1.14 | Process, procure, and maintain an inventory of term and perpetual software licenses, hardware maintenance, and support requirements. Part of this includes having a detailed strategy and lifecycle management plan for software applications, infrastructure licenses, and hardware licenses. Manage a software and license executive dashboard that incorporates all software and licenses in use at DFC, as well as maintain access both as directly and for appropriate DFC government personnel to all external licensing portals. | |
| Total |
Pool B See Sections L and M of the Request for Proposals (RFP) for detailed information regarding the Instructions and Evaluation of this Attachment.
The Offeror shall submit a completed copy of this Relevant Technical Experience Self Assessment Matrix, identifying which element(s) of the Performance Work Statement (PWS) the Offeror (including proposed subcontractors(s)/team member(s)) is capable of performing. Through the Relevant Technical Experience Self Assessment, the Government intends to gather a high-level understanding of the breadth and depth of the Offeror’s capabilities and experience as it relates to the Government’s requirements in the PWS.
Relevant technical experience is hereby defined as a project that is similar in size to current DFC services, meets an element of the PWS
Fill out Column C with up to ten relevant technical contrac experiences. In Column D please reference which of these experiences you were the Prime for. In Column E please place either a yes or no for whether you are a small business.
SCORING INSTRUCTIONS- If you are a Large Business, Award yourself one point per relevant technical Contract experience. Award yourself an additional point per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 20 points. If you are a Small Business, Award yourself two points per relevant technical Contract experience. Award yourself an additional two points per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 40 points.
| Task Area | Pool B: App Dev | Number of Relevant Technical Experiences | Prime | Small Business | Total |
| C..3.2.1 | Support for DFC adoption/migration to/governance/management of Cloud computing operations, including support for generating and maintaining the FedRamp ATO documentation and participating in the continuous monitoring (CONMON) program. As well as activities associated with assessing Cloud solutions, refactoring workloads for Cloud solutions, migrating legacy or other systems to Cloud solutions, and providing management/governance for Cloud solutions. Development of cloud native applications or other Cloud orientated activities. | ||||
| C..3.2.2 | Database administration activities for all applicable DFC databases, responsible for the installation, upgrade, migration, patching, monitoring, performance tuning, enhancements conducting backup and recovery on databases and application servers and maintaining users and role-based security and object level security in the databases and applications. | ||||
| C..3.2.3 | Work with DFC Finance and Acquisition Offices on contracting and financial systems to assist DFC in management of the General Leger, Account Payable, Account Receivable, Federal Administration, Small Fixed Asset, Load, Core Purchasing components, and development programs to fit business needs and maintain Axway Secure Transport connections to interact with other government agencies. | ||||
| C..3.2.4 | Develop full-cycle Informatica and Oracle Data Integrator programs to perform Extract-Transform-Load (ETL) from Salesforce and Oracle Enterprise Business Systems to dimensional models in Enterprise Data Warehouse with reporting capabilities. | ||||
| C..3.2.5 | Oversee the installation, upgrade, migration, patching, management, monitoring, performance tuning, enhancements, functionality improvements and innovations, and backup and recovery operations applications, website, programs, and platforms on the DFC network. Develop and maintain system architecture diagrams, entity relationship models, and source to target mapping documents. | ||||
| C..3.2.6 | Conduct diagnostic and mitigation of DFC OIT approved hardware and software products, including the full complement of CDM Tools SIN products and services products associated with maintenance and other related activities such as training. | ||||
| C..3.2.7 | Manage service offerings for electronic credentials (assurance levels IAL, AAL, and FAL), identify and access management, authentication, and identity and access management professional services. Provide PIV products and PIV services to implement the requirements of HSPD-12, FIP-201, and associated NIST special publications and implementation components. Serve as a Public Key Infrastructure (PKI) Shared Service Provider (SSP) to provide reliable, authenticated, policy-compliant service offerings to support Federally issued Personal Identity Verification (PIV), Personal Identity Verification Interoperable (PIV-I), and associated certificates and cryptographic key service offerings. | ||||
| C..3.2.8 | Conduct as needed training on all hardware, software, cloud, and other applicable systems. | ||||
| C..3.2.9 | Support DFC’s wireless mobility solutions, including but not limited to CONUS/OCONUS, facilities and remote requirements for Wireless Carriers Services, Telecommunication Resellers, Other Mobility End-Point Infrastructure - Mobility infrastructure, Mobility-as-a-Service, Enterprise Mobility Management, Mobile Backend-as-a-Service, Telecom Expense Management, Mobile Application Vetting, Mobile Threat Protection, Mobile Identity Management, Internet of Things (IoT), and Other/Mobile Services. | ||||
| C..3.2.10 | Provide a technical approach and execution for elements of a data management program and supporting architecture that would eliminate current DFC pain points and yield new benefits such as: |
| • | A minimally customized data store that is easier to maintain and update | ||
| · | Role-based security for both row-level and column-level policies and firewalled data marts to protect sensitive data (e.g., PII and proprietary financial information) while supporting external user access and publicly available data | ||
| · | Robust metadata management for better cataloguing and definition of data fields | ||
| · | Decoupling data warehouse from data storage (i.e., ELT vs. ETL) to support evolving business logic while retaining original source data | ||
| · | Ability to connect best-in-class, stand-alone Business Intelligence (BI) tools to a data warehouse without having to build those BI tools into the data warehouse (Ideally already inhouse Tableau, Oracle Analytics and Power BI products) | ||
| · | Ability to incorporate external agency data via data connection (e.g., via application programming interface [API]) instead of batch uploading of flat files | ||
| · | Ability to add new data sources and easily combine with existing data in new schemas for ad hoc analyses | ||
| · | Ability to integrate from a Customer Relationship Management (DFC’s project origination platform) system (Salesforce), Oracle EBS and a document/records repository | ||
| · | Better incorporation of project and project impact data to enhance visualization and reporting | ||
| · | Underlying data models and designs that eliminate need for downloading datasets to local drives to perform analyses outside of the system | ||
| · | Capture real-time updates to data queries and associated dashboard or other reporting outputs, eliminating the need to rerun and re-analyze data (e.g., for recurring, standard reports) | ||
| · | Future data analysis capabilities that track the percentage of year-to-date revenue that could be impacted by potential investments | ||
| C..3.2.11 | Provide post data warehouse implementation operations and maintenance support services including, but not limited to, backlog grooming, sprint planning, incident and problem management, change and configuration management, patching, compliance, system monitoring, and application performance | ||
| Total | 0 |
Pool C See Sections L and M of the Request for Proposals (RFP) for detailed information regarding the Instructions and Evaluation of this Attachment.
The Offeror shall submit a completed copy of this Relevant Technical Experience Self Assessment Matrix, identifying which element(s) of the Performance Work Statement (PWS) the Offeror (including proposed subcontractors(s)/team member(s)) is capable of performing. Through the Relevant Technical Experience Self Assessment, the Government intends to gather a high-level understanding of the breadth and depth of the Offeror’s capabilities and experience as it relates to the Government’s requirements in the PWS.
Relevant technical experience is hereby defined as a project that is similar in size to current DFC services, meets an element of the PWS
Fill out Column C with up to ten relevant technical contrac experiences. In Column D please reference which of these experiences you were the Prime for. In Column E please place either a yes or no for whether you are a small business.
SCORING INSTRUCTIONS- If you are a Large Business, Award yourself one point per relevant technical Contract experience. Award yourself an additional point per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 20 points. If you are a Small Business, Award yourself two points per relevant technical Contract experience. Award yourself an additional two points per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 40 points.
| Task Area | Pool C: Cyber | Number of Relevant Technical Experiences | Prime | Small Business | Total |
| C.3.3.1 | Support classified as Highly Adaptive Cybersecurity Services (HACS) operations. These services include governance, risk management, and compliance support, security architecture, standards and design, cybersecurity monitoring (Detection, Response, and Prevention), and threat intelligence. |
The services covered under this response shall comply with the NIST RMF per Office of Management and Budget (OMB) guidance along with the NIST Cybersecurity Framework (CSF) Functions and be aligned with proven industry standards and best practices.
The DFC Cybersecurity Program is based on the NIST Risk Management Framework (RMF) and NIST Cybersecurity Framework in accordance with FISMA, OMB and all pertinent NIST 800 special publications along with industry standards and best practices where applicable.
C.3.3.2 Provide computer security incident response (CSIR) services aligned with appropriate NIST 800 publications and best practices including, but not limited to:
| i. | Contingency planning | |
| ii. | Plan development and review | |
| iii. | Coordination and scheduling testing and documenting lessons learned | |
| iv. | Operations per project including documentation created or updated initially, testing conducted annually, and documentation updated based on lessons learned | |
| C.3.3.3 | Provide CSIR services related to Incident Response (IR) activities including, but not limited to: |
| i. | Assist with IR Plan Development, Implementation and Review | ||
| ii. | Perform Investigation to identify root cause (Forensic and Malware Analysis) | ||
| iii. | Perform Data Recovery | ||
| iv. | Develop Monitoring and Reporting Metrics | ||
| v. | Documentation created or updated initially and develop IR Playbooks to be reviewed annually. Provide recommendations on reporting capabilities and periodicities for Agency approval. | ||
| C.3.3.4 | Respond to Freedom of Information Act (FOIA)/E-Discovery requests | ||
| C.3.3.5 | Develop rules of engagement for penetration testing for agency review and approval, providing a detailed report of testing to include lessons learned. Penetration tests are performed annually or as needed based on significant change or event. Support adversarial assessments as necessary to make sure DFC understands, if planned, how it would hold up to attacks. | ||
| Total | 0 |
Pool D See Sections L and M of the Request for Proposals (RFP) for detailed information regarding the Instructions and Evaluation of this Attachment.
The Offeror shall submit a completed copy of this Relevant Technical Experience Self Assessment Matrix, identifying which element(s) of the Performance Work Statement (PWS) the Offeror (including proposed subcontractors(s)/team member(s)) is capable of performing. Through the Relevant Technical Experience Self Assessment, the Government intends to gather a high-level understanding of the breadth and depth of the Offeror’s capabilities and experience as it relates to the Government’s requirements in the PWS.
Relevant technical experience is hereby defined as a project that is similar in size to current DFC services, meets an element of the PWS
Fill out Column C with up to ten relevant technical contrac experiences. In Column D please reference which of these experiences you were the Prime for. In Column E please place either a yes or no for whether you are a small business.
SCORING INSTRUCTIONS- If you are a Large Business, Award yourself one point per relevant technical Contract experience. Award yourself an additional point per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 20 points. If you are a Small Business, Award yourself two points per relevant technical Contract experience. Award yourself an additional two points per relevant technical experience if you were the Prime on that Contract Experience. The maximum number of points per Category is 40 points.
| Task Area | Pool D: PMO | Number of Relevant Technical Experiences | Prime | Small Business | Total |
| C.3.4.1 | Provide program management support in the areas of strategic planning, portfolio management, business case analysis, risk management, communication management/planning, contingency planning, operational division stand-up, performance measurement, program reporting, enterprise data gathering and reporting, and quality management | ||||
| C.3.4.2 | Perform release planning and management activities such as the development of release management plans, technical analysis and support for production and maintenance builds, the development of configurable release guidance and other documents tailored for each release, support for release readiness reviews, configuration and implementation of release management software, and the implement release management data and documentation standards (for example: release numbering, required documents, etc.) | ||||
| C.3.4.3 | Support each IT PMO project with project planning and management, milestone status tracking and reviews, risk and issue identification, tracking and resolution and participation in program and release level activities. Project support shall align with the DFC OIT selected development path, methodology, and delivery approach | ||||
| C.3.4.4 | Support a wide range of agile adoption and implementation needs across DFC, with the intent of assisting in leading the agency to full agile adoption | ||||
| C.3.4.5 | Assist DFC OIT Policy and Governance branch and the IT PMO to support the as-is state for policy and governance, but also recommend the to-be state based on best-in-class updates. This includes the ability to transform, tailor and maturate policy, process and standards in an agile and cloud first environment | ||||
| C.3.4.6 | Provide support in the selection, tailoring, management, and execution of Systems Development Lifecycle (SDLC) paths, methodologies, and approaches for development and delivery of program capabilities. Selected SDLC development paths shall include Waterfall, Iterative, COTs, Mobile Apps, Managed Services, or another DFC approved path | ||||
| C.3.4.7 | Establish and execute stakeholder engagement processes and models, as well as support the identification, as well as consistent definition, communication, and application of standards, processes, methodologies, and approaches for DFC operations | ||||
| C.3.4.8 | Provide systems engineering and integration services to support upfront identification of program dependencies and integration points, as well as continuous monitoring, management, and response. Engineering support shall also be used for applying subject matter expertise and best practices for requirements development, analysis, management, traceability, validation, reengineering, and tool integration. All solutions architecture must reflect the strategic directions of DFC/OIT | ||||
| C.3.4.9 | Perform business process analysis, reengineering support, creation of user stories, and project assessments to the program using modern techniques (ex: human centered design). This also includes work to define and establish Change Management and Change Control processes for DFC. The contractor shall support the establishment of a Change Control Board (CCB) as the official mechanism for reviewing and recommending dispositions of change requests | ||||
| C.3.4.10 | Support Configuration Management functions to include Investment Review Board, Engineering Review Board, and CCB activities, business rule changes, configuration identification, configuration control, configuration status accounting and configuration audits | ||||
| C.3.4.11 | Perform organizational readiness support working across technical and business organizations to ensure that the readiness work ties directly to the DFC’ goal of ensuring people, process and technology readiness to support development, delivery and operation of program capabilities. This also includes support to identify and plan for organizational change needed to support or resulting from the execution or delivery of OIT programs. | ||||
| C.3.4.12 | Support OIT budget operations, including identifying and recommending the optimal allocation and utilization of financial resources across contract in support of priority projects and services. This also includes planning and management support related to the CIO' s investment alignment with the corporate mission and strategic goals. The Contractor shall provide expertise to ensure business processes are appropriately engineered before investing in those processes. The Contractor shall provide support for capital planning and management support related to the CIO' s investment alignment with the corporate mission and strategic goals. The Contractor shall provide expertise to ensure business. In addition: The Contractor shall provide analyses of investments via the documentation of financial, technical and strategic merits to ensure each one demonstrates a strong business case and is adequately justified. | ||||
| C.3.4.13 | Perform integration and coordination support to the Applications Development organization that encompasses risk mitigation planning, application system requirements management and impact coordination, test planning, deployment and operations/production process support, financial material weakness resolution and related integration, , independent Verification and Validation (IV&V) type services for oversight of all work streams, and coordination activities as required. | ||||
| C.3.4.14 | 14 Ensure the facilitation of transition activities between third-party contractors on DFC contracts to accomplish the necessary knowledge transfer and ramp up activities between parties, including ensuring the OIT PMO can manage and oversee the program | ||||
| C.3.4.15 | Assist DFC OIT Contracting Officer’s Representatives (CORs) with non-governmental, overarching IT program coordination services for DFC. For project being performed by OIT contractors, the contract shall provide backup support/assist the COR in the monitoring of these contracts | ||||
| C.3.4.16 | Perform duties associated with User Interface (UI)/User Experience (UX) and/or CI (Continuous Improvement)/Customer Experience (CX)), User Interface (UI)/User Experience (UX) and/or CI (Continuous Improvement)/Customer Experience (CX)) | ||||
| Total | 0 |
File details come from the government source that posted it. Updated .