FDIC CORHQ-25-R-0409_QA Spreadsheet_10-3-25 - UPDATED.xlsx
XLSX spreadsheet 24 KB Posted
- Solicitation number
- CORHQ-25-R-0409
- Issued by
-
Federal Deposit Insurance Corporation
About this file
This document is a Questions and Answers (Q&A) spreadsheet for the Federal Deposit Insurance Corporation's (FDIC) File Management Categorization and Analysis Tool (FMCAT) solicitation. The procurement seeks a Records and Redundant, Obsolete, and Trivial (ROT) file management solution to support the agency's Content Information Management (CIM) initiative, with a focus on analyzing and cleaning up content across network shares before migrating to cloud systems. Key details include a software subscription for a 100TB platform (from 330TB total file shares), with a requirement for a tool that can identify, flag, and help manage unstructured files, supporting migration to cloud content management systems like Microsoft SharePoint and Teams.
The solicitation (CORHQ-25-R-0409) has been amended, with the proposal due date extended to October 13, 2025 at 11:59pm EST. Personnel requirements include specific citizenship restrictions, with high-risk roles requiring U.S. citizens and moderate/low-risk roles allowing non-U.S. citizens with valid work authorization. The solution will primarily be deployed remotely, with an expectation of assisting FDIC personnel in installation and configuration. The tool must support records lifecycle management, legal hold detection, and provide capabilities for identifying and managing files across the organization's content ecosystem, with an initial focus on migrating 100TB of on-premise file share data to a cloud environment.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| CORHQ-25-R-0409-Amendment 0002.pdf | ||
| Appendix B of SOO - Non-Functional-Requirements-10012025.xlsx | XLSX spreadsheet | |
| CORHQ-25-R-0409-Amendment 0001.pdf | ||
| Price Schedule - revised 10-2-25.xlsx | XLSX spreadsheet | |
| QA Spreadsheet.xlsx | XLSX spreadsheet | |
| Pre-Award SCRM Info - Example.xlsx | XLSX spreadsheet | |
| CORHQ-25-R-0409.pdf | ||
| Price Schedule.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Q&A
| FMCAT RFP Q&A | ||||
| Applicable Document | Page # | Question | FDIC Response | |
| 1 | CORHQ-25-R-0409, 7.3.2-06 - Questions Regarding Solicitation | 74 | Would the FDIC please extend the proposal deadline by three weeks? | The FDIC will extend the proposal due to to October 13, 2025. |
| 2 | CORHQ-25-R-0409, 7.1.2-03 - Pre-Award Supply Chain Risk Management (SCRM) Information | 72 | Please clarify that the SCRM information should be included in Volume 4 - Additional Information. | Yes. Please include the SCRM information in Volume 4 - Additonal Information of your proposal. |
| 3 | Price Schedule | The RFP states there is 330TB on file shares but requests a 100TB quote. Is it anticipated that this will be a phased deployment and additional data volumes will be required at a later date? | Yes, the FDIC will use a phased deployment. The 330TB estimate includes all storages/volumes identified by FDIC. | |
| 4 | https://sam.gov/workspace/contract/opp/22d9979a1a394fd0bc3e514636822cc1/view |
Product Service Code
| 7A21 - IT AND TELECOM - BUSINESS APPLICATION SOFTWARE (PERPETUAL LICENSE SOFTWARE) | The RFP on Sam.gov indicates a perpetual license – is a subscription license also an option? | FDIC will update the RFP to reflect this procurment is for a Subscription License only | |||
| 5 | CORHQ-25-R-0409, Appendix B - Non-Functional Requirements | 17 | Attachment B – Non-Functional Requirements does not appear to be present in the bid documentation. Will the FDIC please provide? | Appendix B - Non-Function Requirements have been provided as a separate attachment. | |
| 6 | CORHQ-25-R-0409, Appendix A – Business Requirements | 14 | Does FDIC have a Microsoft G5 license and is the labeling and migration of content (Retention and Sensitivity) in-scope for this project? | Yes, the FDIC has a Microsoft G5 license. Labeling and migration of content (Retention and Sensitivity) are in-scope for this project | |
| 7 | CORHQ-25-R-0409, 7.3.2-16 - Past Performance - Proposal Instructions | 77 | The requirements call for past performances. Is FDIC looking for up to 3 past performances between the prime and any sub-contractor or 3 from each? Is it acceptable to provide 3 Government past performances from our partner/sub-contractor? | The FDIC is looking for 3 past performances of work similiar to the requirements as defined in the Statement of Objectives of the solicitation. The FDIC will accept past performances from partners/sub-contractors that the prime has identified they plan to work with on this solicitation. | |
| 8 | CORHQ-25-R-0409, Attachment L-1 – Proposal Content and Evaluation Factors | 82 | Is it acceptable to embed the price workbook in Volume 3? | Yes, but we will still need a separate excel spreadsheet attachment. | |
| 9 | CORHQ-25-R-0409, 7.3.2-27 - Oral Presentation | 79 | Will we have the opportunity to demonstrate our ability to meet the use case requirements through a product demonstration or will the orals consist solely of slideware presentation? | The Oral presentation should include the Offeror's Product Demonstration as well. | |
| 10 | CORHQ-25-R-0409 - Statement of Objectives | 9 of 87 | How do you define a file as "trivial"? Do you have any examples that could help us understand? | Trivial - files that are NOT necessary to retain, not business related, draft or temporary files, not needed for decision making. | |
| 11 | CORHQ-25-R-0409 - Statement of Objectives | 5 of 87 | Software - Is "Record Lifecycle and Policy Enforcement Software" in CLIN0001 a new Records Management platform or integrtating with an existing Records Management Platform? | No | |
| 12 | CORHQ-25-R-0409 - Statement of Objectives | 5 of 87 | Software - What is the current Records Management Platform? | The FDIC does not have a single formalized "records management platform." FDIC uses a Content Manager for FDIC’s primary recordkeeping system. Records also may be maintained in any other FDIC information system with an approved records retention schedule. | |
| 13 | CORHQ-25-R-0409 - Statement of Objectives | 18 of 87 | Content Management - What are the Content Management systems being used? (i.e. MS Sharepoint) | The Content Management systems being used include Microsoft SharePoint and Microsoft Teams. | |
| 14 | CORHQ-25-R-0409 - Statement of Objectives | 20 of 87 | Software - Are the Content Management System(s) being used currently and/or intended in the furture to store the unstructured documents and maintain the records lifecycle and policy enforement? | Yes | |
| 15 | CORHQ-25-R-0409 - Statement of Objectives | 20 of 87 | Migration - Is data to be migrated to an identified platform (Content Management) or into this new "Record Liefecycle and Policy Enforcement Software"? 100 TB is referred to as the size of the platform. | Data will be migrated from existing FDIC on-premise file share drives and Content Management Systems to the FDIC cloud system where FDIC will continue to enforce the records lifecycle policy | |
| 16 | CORHQ-25-R-0409 - Statement of Objectives | 5 of 87 | Regulation Process - Is this "Record Lifecycle and Policy Enforcement Software" working independently of the Content Management System(s) used in the regulation process to enforce the lifecycle and policies? | Yes | |
| 17 | CORHQ-25-R-0409 - Statement of Objectives | 18 of 87 | Content Management - Is this "Record Lifecycle and Policy Enforcement Software" duplicating content within the technology supporting Content Management to protect records seperately? | No | |
| 18 | CORHQ-25-R-0409 - Statement of Objectives | 9 of 87 | In Section 1 and 2 for Introduction, Process, and Background; please clarify the relationship of the CIM initiative, the FCMAT tool and/or project, and the ROT Tool? FMCAT is stated as both a tool and project. ROT tool is repeatedly stated within the document independently and interchangeably with the FMCAT tool which is confusing. | FMCAT is a project under the CIM program. One of the goals/scope of the FMCAT project is to procure a ROT tool. | |
| 19 | CORHQ-25-R-0409 - Statement of Objectives | 15 of 87 | Is the ROT tool a capability within a larger FMCAT tool or is the ROT a separate tool informing and/or integrating with other tools for RM and CM platforms within the FMCAT project? | FDIC is seeking a tool to provide ROT file capabilities, so that on-premise files can be identified, reviewed, and taken action on prior to migrating files that meet the FDIC records retention schedule to the cloud | |
| 20 | CORHQ-25-R-0409 - Statement of Objectives | 15 of 87 | Does the on-prem environment offer GPU compute resources? | Yes, the on-prem environment offers GPU compute resources. | |
| 21 | CORHQ-25-R-0409 - Statement of Objectives | 14 of 87 | What file types should be included as part of the solution? | Please see Appendix D - File Types | |
| 22 | CORHQ-25-R-0409 - Statement of Objectives | 14 of 87 | When you state that "The ROT tool should be capable of flagging or tagging files and data", does "data" mean a data file or can it also include columns in a database, for example? | Only unstructured data - no databases | |
| 23 | CORHQ-25-R-0409 - Statement of Objectives | 14 of 87 | Are files that are on Legal Hold currently identified in some way? | Yes | |
| 24 | CORHQ-25-R-0409 - Statement of Objectives | 15 of 87 | Can you provide an example of how an end user might want to customize a report? | A sample report could be showing how many files are in certain time range, how many files are older than 5 years, 10 years or any time length. | |
| 25 | CORHQ-25-R-0409 - Statement of Objectives | 14 of 87 | What is the appropriate numbering for "1. System Integration"? Should it be part of 7.11, 7.12, or separate? | The FDIC has adjusted the numering scheme so that "System Integration" will be identified as 7.14. | |
| 26 | CORHQ-25-R-0409 - Statement of Objectives | 11 of 87 | The goal to "Ensure compliance with retention and data governance policies" appears to be a Records Management function outside the bounds of FMCAT and ROT. | Yes that is correct. FDIC will reference the existing records management system, and use the ROT tool to "identify/flag" an on-premise unstructured file. | |
| 27 | CORHQ-25-R-0409 - Statement of Objectives | 14 of 87 | Is the the alternative flow to upon "A3. Legal Hold | ||
| Detection" protect files from deletion, flag, and inform for manual review and expectain for the ROT tool to not "automatically delete files within the patfrom and workflows" and/or is it for the ROT tool to prevent "anyone from deleting" the file. | Any actions including deletion will be manually reviewedby an appropriate FDIC personnel after the ROT tool has identified a file based on the appropriate tagging | ||||
| 28 | CORHQ-25-R-0409 - Statement of Objectives | 14 of 87 and following | Business Requirements in Appendix A can be interpeted to both Records Management and FMCAT/ROT for enforcement and retention? terminology such as ensure, enforce, prevent, ... are Records Maangment Fucnitons requiring integration and/or duplicaiton of capabilties. Items such as "7.3.2 Deletion - The ROT tool should be able to prevent Legal Hold files/data from being deleted or altered" and "7.5.7 Identify - The ROT tools should be able to recognize files/data that are on Legal Hold." and "7.8.2 - Processing - The ROT tool should be able to process actions such as identify, select, delete, move, etc. in bulk." to name a few. | Any actions including deletion will be manually reviewedby an appropriate FDIC personnel after the ROT tool has identified a file based on the appropriate tagging. | |
| 29 | CORHQ-25-R-0409 - Section B | 5 of 87 | For CLINS 0004-0006, is the quantity of hours provided the total hours or the total hours per month? | The Total Hours | |
| 30 | CORHQ-25-R-0409.pdf | Are U.S. citizens required for all project roles, or are Legal Permanent Residents (green card holders) acceptable for some or all positions? | Please see section 7.5.2-08 (c) page 39 Personnel performing functional responsibilities designated at the High risk level must be United States |
Citizens. Personnel assigned to provide services under functional responsibilities designated as Moderate or Low risk do not need to be U.S. citizens or Lawful Permanent Residents (LPR) of the United States. Non-U.S. citizens without LPR status are permitted to work on a FDIC contract with functional responsibilities designated as Moderate or Low risk provided that they:
1. Meet the requirements of being legally admitted to the United States; and
2. Hold a valid authorization to work in the United States.
31 CORHQ-25-R-0409.pdf Are individuals with valid work authorization (e.g., H-1B, L-1, TN) eligible to participate in any roles? Please see section 7.5.2-08 (c) page 39 Personnel performing functional responsibilities designated at the High risk level must be United States Citizens. Personnel assigned to provide services under functional responsibilities designated as Moderate or Low risk do not need to be U.S. citizens or Lawful Permanent Residents (LPR) of the United States. Non-U.S. citizens without LPR status are permitted to work on a FDIC contract with functional responsibilities designated as Moderate or Low risk provided that they:
1. Meet the requirements of being legally admitted to the United States; and
2. Hold a valid authorization to work in the United States.
| 32 | CORHQ-25-R-0409.pdf | Do different roles (e.g., project management, technical implementation, support) have different citizenship requirements? | No. | |
| 33 | CORHQ-25-R-0409.pdf | Can contractor personnel perform work remotely, or are there specific location restrictions? | The FDIC does not anticipate any on-site personnel. Contract personnel shall adhere to section 7.4.02 in working remotely. Specifically - "The Contractor, subcontractor, or any entity under the Contractor’s control shall not access, disseminate, maintain, store, use or disclose FDIC information outside the United States, unless specifically directed by the contract or otherwise authorized by the Contracting Officer." | |
| 34 | CORHQ-25-R-0409.pdf | Can most project work be performed from contractor facilities, or is onsite presence at FDIC required for certain activities? | The licensed software will be installed on FDIC on-premise system. It is expected that the contractor resource(s) will assist/guide FDIC personnel on installing, configuring and training. The FDIC does not anticipate any on-site personnel. | |
| 35 | CORHQ-25-R-0409.pdf | What are the security requirements for contractor remote work locations (home offices, contractor sites)? | The security requirements for remote work locations will be provided in the Workplace Security Training post-award as defined in sections 7.5.2-14. | |
| 36 | CORHQ-25-R-0409.pdf | Can you confirm whether NIST 800-171 compliance certificate is a mandatory requirement? | No, the compliance certificate is not a mandatory requirement. | |
| 37 | RFP Section B | 5 of 87 | CLIN 1002 requests pricing for 4 months of Business Support & Updates, whereas CLIN 1001 calls for 12 months of software subscription. Typically these go hand-in-hand. Is there a reason that the Business Support & Updates should only be for 4 months, or should this be the full 12 months of the Option Year? | The FDIC has updated the pricing schedule to include 12 months of Business Support and Updates. |
| 38 | RFP Appendix A 7.5.6 | 14 of 87 | Please clarify the definition of a dormant folder. | A dormant folder has no activity/update to any files for at least one year. |
| 39 | RFP Appendix A 7.4.3 | 14 of 87 | Please define SII. | Sensitive Identifiable Information (SII) - Information that with another piece of information could identify a person or has been identified by FDIC as not to be disclosed. |
| 40 | RFP | 14 of 87 | Para 1, sentence 2 states that "...Offeror shall support all applicable non-functional requirements proposed by the Offeror and agreed to by the FDIC from those listed in Appendix B…", however Appendix B was blank. Please confirm that there are no additional non-functional requirements. | Appendix B - Non Functional Requirements (NFR) have been provided as a separate attachment. |
| 41 | could you please provide us with the current user count within the environment? This data is crucial for ensuring accurate and comprehensive pricing. | 8700 | ||
| 42 | What is the approximate number of File Servers? | 80 |
&"Source Sans Pro SemiBold"&12&K000000 NONPUBLIC//FDIC BUSINESS&1#_x000D_
File details come from the government source that posted it. Updated .