PM C2 Apps Industry Day QA.pdf

Next Generation Command and Control (NGC2) Software Application Storefront, Pipeline and Tailorable Warfighting Applications – Industry Day Q&A

1. What is the RFI expecting from vendors that will be a supportive capacity (i.e.

App Provider) versus a vendor that is managing a Storefront?

The RFI is requesting all responses that get after the capabilities associated with the

1) Storefront, 2) Platform/Pipeline, 3) Application(s), and 4) Team Lead. While the Government sees the concept of a team lead to ensure all “pieces” of these capabilities can be provided, we are not limiting the responses to only those vendors willing to provide all capabilities. If you can and want to provide all capabilities, please explain that in the RFI. We also want to hear/know if you can only provide one (1) of these capabilities or even a part of those capabilities. Our goal is to see all possible solutions in order to deliver “best of breed” capabilities to the warfighter.

2. CECOM ASIC briefed that they have an approved pipeline. Are there partnership requirements with them?

The government does not want to limit itself to a single source solution at this moment and is exploring all possibilities.

3. In this process what role do you see the team lead playing? And what role does the Government team playing?

We are looking for all solutions for how a team-lead would centrally manage a DevSecOps environment to enable a secure, fast integration process for the tailorable warfighter applications through a DevSecOps pipeline pushed to the Storefront solution.

4. Where do you expect to host this platform in your own cloud or a FedRamp environment?

We are looking at all solutions to include hosting in a commercial cloud and/or Government Cloud.

5. Do you want a consolidated multi-impact level security marketplace, or should these be segmented by security level? Should we submit trial access to already production marketplaces at various security levels.

We want to know what works best for industry and leverage best practices in an IL5 and an IL6 solution that is segmented by security level. We are open to solutions that could promote an IL5 container to IL6 then apply IL6 application updates or changes automatically into the Storefront.

6. Regarding the question on license management: Is the Army looking to buy software licenses through the app store, or will the companies on the app store already be under contract?

This depends on feedback from Industry and the potential strategy in teaming. The vision of the App Store would provide telemetry data on licensing usage and provide links for purchase. As of now, we are seeking your innovative solutions to help shape this process. For example, if we were to use a “teaming approach,” we might expect the Team Lead to “own the contract” and the requirements/money would flow through there. The licensing would be conducted through those business relationships, where an application license would be paid through the lead and be “loaded” into the App store once it passes pipeline protocols. Another option is to potentially set up Enterprise licensing agreements where the government would pay for the licensing (separate from the structure) and provide it to the App store “owner” and/or the Team Lead as Government Furnished Equipment (software).

While these are two (2) examples, many more scenarios exist andw e are interested in feedback to see what industry believes is best/most achievable approach.

7. Does the Government expect the lead to own the storefront/pipeline product, or simply operate it?

While that is a viable option, we are not limiting the lead to the storefront/pipeline product. A lead could stem from someone who only has interest in creating a storefront, a pipeline, or a warfighter application. The lead could also be a different vendor who supports the business relationship between these industry providers.

8. Will both an IL5 and IL6 solution be delivered with data separation and defined data transfer across the levels, or will there be a single solution that will be deployed in IL5 or IL6 depending on a later decision?

We want to know what works best for industry and leverage best practices in an IL5 and an IL6 solution that is segmented by security and data levels. We are open to all cross-domain solutions that could promote an IL5 container to IL6 then apply IL6 application updates or changes automatically into the Storefront. If you have a single solution, we value your feedback.

9. Is it ok to submit protype?

Yes, the government will consider prototypes for offered capabilities and as a defined solution for requirements.

10. Is there an anticipation of a solicitation in 3rd Qtr (sam.gov RFI reference)?

Depending on feedback from this RFI, the application storefront, pipeline, or team lead concept may have additional RFIs. Please continue to monitor sam.gov for additional information.

11. What are all the target networks for these Apps, and will vendors have access to their test networks during automated testing?

Networks will consist of IL5 and IL6. In the Development environment, you will have access to your system. When the system is under test, you will not have access, but the results will be provided, and you may remediate.

12. You mention Agile in your RFI. re you expecting or wanting an Agile Development Framework being proposed to govern the execution of the Gov't/Industry relationships as the Storefront and integration into it to include lessons learned on the implementation on other large solutions?

We are looking for an Agile development and sprint cycle to ensure continuous integration and continuous deployment. We are open to lessons learned on how to implement DevSecOps.

13. Should the response include new application discovery, application provider recruitment?

We are looking for solutions for application discovery to include application providers.

14. For scaling/sizing purposes, can the Government provide approximate order of magnitude of number of applications in the storefront, users of the solution?

We are currently experimenting with around 90 applications. Please keep in mind that all information shared today reflects current intentions and are subject to change.

15. How does the Government define the role of “the lead” in this construct?

Conceptually, the lead will integrate the Storefront, Pipeline and Applications into the NGC2 ecosystem and manage the business relationships. They may also provide an application or solution that brings everything together. The government is looking for industry approaches and all feedback. Please refer to Question 1, table 1 in the RFI.

16. You mention Agile in your RFI, are you expecting or wanting an Agile Development Framework being proposed to govern the execution of the Gov't/Industry relationships as the Storefront and integration into it to include lessons learned on the implementation on other large solutions?

We are looking for an Agile development and sprint cycle to ensure continuous integration and continuous deployment. We are open to lessons learned on how to implement DevSecOps.

17. Is it your intent to leverage the Army Software Factory for this effort? Or are other SWF's going to be considered?

Yes, the government is open to and considering different avenues to obtain software.

18. Can a Federally Funded Research and Development Center respond to the RFI?

Yes.

Next Generation Command and Control (NGC2) Software Application Storefront, Pipeline and Tailorable Warfighting Applications – Industry Day Q&A