Attachment J-8 Compliance w Personal Property Mgmt Sys Rqmts.docx

DOCX document 38 KB Posted

Attached to
Personal Property Management System
Solicitation number
9594CS26Q0025_1
Issued by

About this file

This is a compliance checklist attachment for a Personal Property Management System solicitation issued by the Court Services and Offender Supervision Agency (CSOSA) under solicitation 9594CS26Q0025. Contractors must complete and submit this attachment with their quotes to demonstrate their proposed system's alignment with stated requirements.

The attachment specifies mandatory system capabilities and features organized into compliance sections. The required solution must be a web-based Software as a Service (SaaS) platform compatible with Microsoft Edge and Google Chrome, capable of managing approximately 8,000-8,500 active assets with collection, storage, update, reconciliation, and reporting functionality. The system must support RFID and traditional barcode scanning technologies, integrate with CSOSA-supported mobile iOS devices and handheld scanners, enable offline scanning with synchronization controls, and maintain complete historical audit trails for asset retirement, transfer, and reassignment. Additional mandatory capabilities include configurable workflows for end-to-end asset lifecycle management, multi-factor authentication, and GAO-compliant reporting. The system must support 10 specific report types including asset inventory, lifecycle status, reconciliation and audit, location-based, transaction logs, end-of-life planning, periodic inventory certification, chain-of-custody, audit trails, and custom reporting. Required input fields encompass 19 data elements spanning acquisition date, asset identification, physical location, custodianship, status, end-of-life information, and funding source. The contractor must configure role-based access controls for up to 33 users with PIV card multi-factor authentication, provide comprehensive role-based and advanced training with Section 508-compliant materials delivered five business days before training, deliver digitally recorded training sessions within three business days after completion, perform ongoing system maintenance including patches and security updates with five business days' advance notification, and provide helpdesk support Monday through Friday, 8:00 AM to 6:00 PM Eastern Time, with 24/7 emergency support for critical outages. Critically, the proposed solution must hold current FedRAMP Moderate Authorization at the exact submission deadline; solutions with lower authorization status or "In Process" designation will be eliminated from competition.

View the file

Other files

Show all 20

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

9594CS26Q0025

Attachment J-8

Solicitation 9594CS25Q0025 ATTACHMENT J-8: COMPLIANCE WITH PERSONAL PROPERTY MANAGEMENT SYSTEM REQUIREMENTS AND FEATURES The Contractor must complete this Attachment J-8 and submit the completed attachment with its quote.

Contractor’s Name:

Identification of the Personal Property Management System Quoted:

Solicitation Reference
Description
Compliance with SOW Requirement
C.2.1
Web-based SaaS platform compatible with the current versions of Microsoft Edge and Google Chrome.

____ Yes ____ No

C.2.3
Support management of approximately 8,000–8,500 active assets, with the ability to collect, store, update, reconcile, and report on asset and location data.

____ Yes ____ No

C.2.4
Has the following capabilities:

C.2.4.1 Scan asset tag barcodes with an RFID and traditional barcode scanning technologies;

C.2.4.2 Scan and directly upload from CSOSA supported mobile iOS devices (e.g., tablets, smartphones) as well as dedicated handheld scanners (e.g., Zebra MC3000 or equivalent mobile operating systems);

C.2.4.3 Retire, transfer, or reassign assets without permanent deletion, preserving complete historical audit trails;

C.2.4.4 Perform persistence offline scanning capability with subsequent synchronization controls and automated conflict/audit logs; and C.2.4.5 Perform persistence offline scanning capability with subsequent synchronization controls and automated conflict/audit logs.

C.2.4.1 ____ Yes ____ No

C.2.4.2 ____ Yes ____ No

C.2.4.3 ____ Yes ____ No

C.2.4.4 ____ Yes ____ No

C.2.4.5 ____ Yes ____ No

C.2.5
Has configurable workflows supporting the end-to-end asset lifecycle management, including approvals and custody changes.

____ Yes ____ No

C.2.6
Provides support for templated, standardized, and customizable reporting aligned with Government Accountability Office (GAO) internal control and audit requirements.

____ Yes ____ No

C.2.7
Has multi-factor authentication.

____ Yes ____ No

C.3

Includes the following reporting capabilities:

C.3.1 Asset Inventory Reports (categorized by types, ownership, locations, and custodianship);

C.3.2 Asset Lifecycle, Status, and Risk Reports (including warranty, repair, missing, retired, disposed, and risk indicators);

C.3.3 Inventory Reconciliation and Audit Reports (identifying variances between physical counts and system records, discrepancies, and adjustments);

C.3.4 Location and Space Reports (down to the building, datacenter, room, and workstation level);

C.3.5 Barcode/Scanner Upload and Transaction Logs (with strict user and timestamp traceability);

C.3.6 End-of-Life (EOL) and Replacement Planning Reports;

C.3.7 Periodic Inventory and Certification Reports;

C.3.8 Chain-of-Custody and Accountability Reports;

C.3.9 Audit Trail and Change History Reports; and C.3.10 Custom/Ad Hoc Reporting Features.

C.3.1 ____ Yes ____ No

C.3.2 ____ Yes ____ No

C.3.3 ____ Yes ____ No

C.3.4 ____ Yes ____ No

C.3.5 ____ Yes ____ No

C.3.6 ____ Yes ____ No C.3.7 ____ Yes ____ No C.3.8 ____ Yes ____ No C.3.9 ____ Yes ____ No C.3.10 ____ Yes ____ No

Solicitation Reference
Description
Compliance with SOW Requirement
C.4
Required Input Fields:

C.4.1 Acquisition date;

C.4.2 Asset Name;
C.4.3 Asset Type (e.g., laptop, phone, equipment);
C.4.4 Asset Tag/ID (e.g., unique barcode or RFID number);
C.4.5 Model Number;
C.4.6 Manufacturer;
C.4.7 Serial number;
C.4.8 Description;
C.4.9 Hardware specifications (e.g., CPU, storage, etc., when applicable);
C.4.10 Operating System and Version (when applicable);
C.4.11 Date Received / Date Placed in Service;
C.4.12 Supported business function / program alignment;
C.4.13 Physical location (building, floor, room, and workspace type (e.g., office, shared space, storage, field use);
C.4.14 Asset Owner / Custodian;
C.4.15 Asset Status (e.g., active, in-use, in storage, decommissioned, retired, disposed);
C.4.16 End-of-Life (EOL) / End-of-Support (EOS);
C.4.17 Disposal Date and Method;
C.4.18 Replacement Schedule; and
C.4.19 Funding Source / Cost Center (for financial and audit traceability).

C.4.1 ____ Yes ____ No C.4.2 ____ Yes ____ No C.4.3 ____ Yes ____ No C.4.4 ____ Yes ____ No C.4.5 ____ Yes ____ No C.4.6 ____ Yes ____ No C.4.7 ____ Yes ____ No C.4.7 ____ Yes ____ No C.4.9 ____ Yes ____ No C.4.10 ____ Yes ____ No C.4.11 ____ Yes ____ No C.4.12 ____ Yes ____ No C.4.13 ____ Yes ____ No C.4.14 ____ Yes ____ No C.4.15 ____ Yes ____ No C.4.16 ____ Yes ____ No C.4.17 ____ Yes ____ No C.4.18 ____ Yes ____ No C.4.19 ____ Yes ____ No

C.5.3
C.5.3 Configure role-based access controls for up to a total of 33 users, strict segregation of duties, Multifactor Authentication (MFA) (PIV card), comprehensive logging, and audit mechanisms aligned with GAO internal control principles.

____ Yes ____ No

C.6
Base Period Training.

C.6.1 The Contractor shall provide all training required by solicitation Attachment J-1, section C.6.1.

C.6.2 The Contractor shall digitally record all training sessions and provide the video files to the Contracting Officer’s Representative (COR) as part of the training materials specified in solicitation Attachment J-1, section C.6.3.3.

C.6.3 Training will consist of, at a minimum:

C.6.3.1 Role‑based training tailored for end‑users (property custodians) and system administrators covering everyday operational workflows;

C.6.3.2 Advanced training on system administration, user provisioning, role configuration, custom workflow creation, and reporting functions including GAO compliance reporting; and

C.6.3.3 Training materials/deliverables to include comprehensive Section 508-compliant training materials shall be provided to the COR five business days prior to the first training session. Training materials include electronic user guides and quick reference sheets (provided in an accessible format (e.g., PDF).

____ Yes ____ No

Solicitation Reference
Description
Compliance with SOW Requirement
C.6 Cont’d
C.6.3.4 Within three business days following the final live training session, the Contractor shall deliver the finalized digital video recordings of all hosted sessions to the COR for future agency onboarding use.

____ Yes ____ No

C.7
System Maintenance and Updates. The Contractor shall perform ongoing system maintenance and updates, including:

C.7.1 Application patches, upgrades, and enhancements;

C.7.2 Bug fixes and issue resolution;

C.7.3 Security updates;

C.7.4 Maintenance scheduling aligned with Agency‑approved windows; and C.7.5 Notification to the Agency at least 5 business days before any planned maintenance.

C.7.1 ____ Yes ____ No C.7.2 ____ Yes ____ No C.7.3 ____ Yes ____ No C.7.4 ____ Yes ____ No

C.7.5 ____ Yes ____ No

C.8.1

Technical Helpdesk Support via a website, ticketing system, and phone:

· Minimum availability: Mon–Fri, 8:00 AM–6:00 PM Eastern Time

· Emergency support for critical outages: 24/7

C.8.2
Adherence to the Contractor’s established Service Level Agreement (SLA) for response and resolution times.

Insert Contractor’s SLA response and resolution times:

____ Yes ____ No

C.16
The Contractor understands and will provide all deliverables identified in Attachment J-1, Section C – Statement of Work.
____ Yes ____ No

File details come from the government source that posted it. Updated .