DRAFT Performance Work Statement _ Business Systems Modernization_Additional RFI_06292026.pdf

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

Selective Service System Business Systems Modernization

PERFORMANCE WORK STATEMENT (PWS)

SELECTIVE SERVICE SYSTEM (SSS)

1501 Wilson Blvd

Arlington, VA 22209

June 29, 2026

DRAFT

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

Contents

1.0 AGENCY

1.1 Background

1.2 Task Order Strategy

2.0 SCOPE

2.1 Enterprise Registration and Data Management

2.2 Registrant Services and Case Management

3.0 TECHNICAL REQUIREMENTS

4.0 DISCOVERY AND REQUIREMENTS VALIDATION

5.0 DELIVERABLES

5.1 Program Management and Administrative Deliverables

5.2 Technical Deliverables

5.3 Functional Capability Deliverables

5.4 Deliverable Review and Acceptance

6.0 PERFORMANCE STANDARDS

7.0 QUALITY ASSURANCE SURVEILLANCE

8.0 GOVERNMENT-FURNISHED INFORMATION (GFI)

9.0 PERIOD AND PLACE OF PERFORMANCE

10.0 CONTRACT TYPE

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

1.0 AGENCY

The Selective Service System (SSS) is a federal agency established under the Military Selective Service Act (MSSA), 50 USC 3801 et seq. Its mission is to register men and maintain a system that, will rapidly provide manpower in a fair and just manner. The Agency carries out its statutory responsibilities through Mission Essential Functions (MEF). These functions are described at a high level to help industry understand the Agency operational areas.

a. Registration: Maintaining complete and accurate registration information for individuals required to be registered.

b. Selection: Conducting an impartial process to determine which eligible individuals would be selected for potential induction into military service.

c. Notification: Providing timely, reliable communication to individuals who have been selected, including instructions on required next steps.

d. Delivery: Coordinating the movement of selected individuals to Military Entrance Processing Stations.

e. Classification: Administering a process to evaluate claims submitted by selected individuals, and assigning classifications

f. Alternative Service Program: Managing a program that assigns individuals classified as Conscientious Objector to approved civilian work contributing to national health, safety, or welfare.

1.1 Background

The Selective Service System (SSS) currently operates multiple legacy systems and business processes supporting registration, readiness, data management, communications, reporting, and mission support functions. Many of these systems require modernization to improve interoperability, scalability, operational efficiency, cybersecurity, data governance, and long-term maintainability.

The Government seeks to modernize and consolidate enterprise business capabilities through implementation of interoperable Commercial Off-The-Shelf (COTS) technologies and associated integration, configuration, deployment, training, sustainment, and operational support services.

The Government intends to award a single Indefinite Delivery Indefinite Quantity (IDIQ) contract for services and capabilities within the scope of this Performance Work Statement (PWS). Task orders may be issued for discovery, implementation, integration, migration, sustainment, cybersecurity, analytics, operational support, or other related modernization activities as Government requirements evolve.

1.2 Task Order Strategy

The Government anticipates issuing task orders for discrete discovery, implementation, integration, migration, sustainment, cybersecurity, analytics, operational support, or related modernization activities within the scope of this PWS.

Task orders may be structured as:

• Discovery-only efforts intended to validate requirements, assess existing environments, identify risks, and support implementation planning;

• Combined discovery and implementation efforts for well-defined capability areas;

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

• Implementation, enhancement, migration, sustainment, or operational support efforts informed by prior discovery activities.

The Government anticipates using a phased and modular modernization approach to reduce technical, operational, schedule, and pricing risk associated with large-scale enterprise modernization activities.

Initial task orders may focus on enterprise discovery, architecture assessment, requirements validation, and implementation planning activities intended to establish a modernization roadmap and support future implementation efforts.

Subsequent task orders may include discrete capability implementation, system integration, data migration, analytics, cybersecurity, sustainment, or operational enhancement activities based on Government priorities and validated requirements.

Specific task order scope, pricing structure, milestones, deliverables, performance requirements, and acceptance criteria will be defined at the individual task order level.

2.0 SCOPE

The Contractor shall provide all labor, materials, tools, equipment, facilities, management, supervision, and other resources necessary to modernize, integrate, deploy, and sustain enterprise business capabilities supporting Selective Service System operations.

The solution shall support current operational requirements while maintaining the flexibility and scalability necessary to support future mission expansion, surge operations, and national emergencies.

The Contractor shall provide interoperable enterprise capabilities that support the full lifecycle of SSS operations, including but not limited to the following functional areas:

2.1 Enterprise Registration and Data Management

The Contractor shall provide capabilities to:

• Ingest, validate, normalize, and manage data from authorized Federal, state, local, tribal, territorial, commercial, and other approved sources.

• Maintain authoritative registrant records and associated lifecycle management processes.

• Support structured and unstructured data collection and processing.

• Support enterprise data governance, retention, archival, and records management requirements.

• Provide data quality controls, auditability, traceability, and reporting capabilities.

• Support secure automated data exchanges and API-based integrations.

2.2 Registrant Services and Case Management

The Contractor shall provide capabilities to:

• Support secure registrant self-service operations.

• Allow registrants to review, update, and manage authorized information.

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

• Support secure submission, routing, adjudication, and tracking of claims and related documentation.

• Provide workflow automation, notifications, correspondence management, and status tracking.

• Maintain audit trails and records associated with registrant interactions and determinations.

2.3 Future Operations

The Contractor shall provide capabilities to:

• Support random selection processes.

• Support notification and communication workflows.

• Support accession scheduling and operational coordination activities.

• Support logistics and transportation management

• Support personnel tracking and readiness, staffing levels, location operations, training, volunteer management, and operational surge requirements.

• Support continuity of operations.

2.4 Enterprise Analytics, Reporting, and Decision Support

The Contractor shall provide capabilities to:

• Deliver dashboards, reporting, analytics, and data visualization capabilities.

• Support executive decision-making, operational oversight, and performance management.

• Provide configurable reporting and business intelligence capabilities.

• Support geospatial visualization and operational analytics where required.

• Provide role-based access to reporting and analytical data.

2.5 Security, Compliance, and Risk Management

The Contractor shall:

• Maintain compliance with applicable Federal cybersecurity, privacy, records management, and accessibility requirements.

• Support FISMA Moderate security requirements and applicable NIST security controls.

• Support continuous monitoring, audit logging, incident response, and vulnerability management activities.

• Support identity, credential, and access management capabilities including role-based access control and multi-factor authentication.

• Provide security documentation, configuration baselines, architecture documentation, and artifacts necessary to support authorization, assessment, and ongoing operational sustainment activities.

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

3.0 TECHNICAL REQUIREMENTS

The Contractor shall provide secure, scalable, maintainable, interoperable, and cloud-capable enterprise solutions that support current and future SSS operational requirements.

The solution shall:

• Support Role-Based Access Control (RBAC).

• Support Multi-Factor Authentication (MFA).

• Encrypt data in transit and at rest using FIPS-validated cryptographic standards.

• Maintain immutable audit logs and user activity tracking.

• Support secure API-based integrations and automated data exchanges.

• Support scalable cloud-hosted or hybrid deployment architectures, where applicable.

• Support automated backup and recovery operations.

• Support DevSecOps principles including automated testing, configuration management, and deployment pipelines.

• Support high availability, resiliency, and continuity of operations capabilities.

• Support enterprise monitoring, logging, observability, and performance management capabilities.

• Support Section 508 accessibility requirements.

• Support records retention and records lifecycle management requirements.

The Contractor shall ensure compliance with all applicable Federal laws, regulations, standards, policies, and guidance in effect at the time of contract award and throughout contract performance, including but not limited to:

• Federal Information Security Modernization Act (FISMA)

• NIST SP 800-53 and applicable NIST guidance

• Federal Risk and Authorization Management Program (FedRAMP), where applicable

• Section 508 of the Rehabilitation Act

• Federal Records Act and National Archives and Records Administration (NARA) requirements

• NIST SP 800-63 Digital Identity Guidelines

• Applicable Office of Management and Budget (OMB) memoranda

• Applicable Binding Operational Directives (BODs)

• Applicable Executive Orders (EOs) governing cybersecurity, digital modernization, records management, and Federal information systems

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

4.0 DISCOVERY AND REQUIREMENTS VALIDATION

When specified at the task order level, the Contractor shall conduct a structured Discovery and Requirements Validation Phase prior to implementation, migration, integration, or significant enhancement activities.

The purpose of the Discovery Phase is to validate operational requirements, identify technical and programmatic risks, refine implementation planning, and ensure alignment between Government mission needs and Contractor implementation activities.

At a minimum, the Discovery Phase shall include:

• Review and analysis of existing systems, documentation, interfaces, workflows, business rules, and operational processes.

• Stakeholder engagement activities including workshops, interviews, demonstrations, and process validation sessions.

• Identification of data sources, interfaces, dependencies, integration requirements, and data quality considerations.

• Assessment of the current technical environment, infrastructure, security posture, and operational constraints.

• Identification and documentation of technical, operational, cybersecurity, integration, and programmatic risks.

• Development of preliminary solution architecture recommendations and implementation approaches.

• Development of draft implementation schedules, milestones, and release planning recommendations.

• Development of requirements traceability and prioritization artifacts.

At the conclusion of the Discovery Phase, the Contractor shall provide, at a minimum:

• Validated functional and technical requirements

• Updated workflows and process documentation

• Preliminary architecture and integration recommendations

• Risk identification and mitigation recommendations

• Implementation roadmap and milestone schedule

• Estimated level of effort and resource requirements

• Recommended deployment or modernization approach

The Contractor shall not begin implementation, migration, development, or configuration tasks until the Government reviews and approves the Discovery deliverables.

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

5.0 DELIVERABLES

The Contractor shall provide all management, administrative, technical, operational, security, training, and sustainment deliverables necessary to support successful execution of this contract and associated task orders.

Unless otherwise specified at the task order level, all deliverables shall be submitted electronically in Government-approved formats. The Government reserves the right to review, comment on, reject, or require revision of submitted deliverables that do not meet contract requirements.

Deliverables identified within this section are representative baseline requirements. Additional deliverables, milestones, acceptance criteria, and reporting requirements may be identified at the task order level.

5.1 Program Management and Administrative Deliverables

The Contractor shall provide the following program management and administrative deliverables in support of contract execution, coordination, governance, reporting, and oversight activities.

Deliverable Description Frequency Format Submit To

Non-Disclosure Agreements (NDAs), PWS 4.0

Signed NDAs for contractor personnel requiring access to Government systems, facilities, or information

Prior to onboarding personnel and as personnel changes occur

Adobe PDF COR or Designee

Project Charter, PWS 2.0, 3.0, 4.0

High-level governance document defining scope, objectives, stakeholders, assumptions, risks, and management approach

Initial task order award and updated as required

Microsoft Office or Adobe PDF

COR

Communication Plan, PWS 4.0, 7.0

Defines communication methods, meeting cadence, escalation procedures, reporting structure, and stakeholder engagement approach

Initial task order award and updated as required

Microsoft Office or Adobe PDF

COR

Integrated Master Schedule (IMS), PWS 2.0, 4.0

Defines planned activities, milestones, dependencies, releases, implementation timelines, and major delivery events

Initial task order award and monthly updates

Microsoft Project, Microsoft Office, or Adobe PDF

COR

Weekly Status Report, PWS 2.0, 4.0, 6.0

Summarizes accomplishments, planned activities, risks, issues, dependencies, and overall execution status

Weekly Microsoft Office or Adobe PDF

COR or Designee

Monthly Program Management Report, PWS 2.0, 4.0, 6.0, 7.0

Summarizes overall contract performance, operational status, risks, schedule performance, and major accomplishments

Monthly Microsoft Office or Adobe PDF

COR

Quarterly Program Review Briefing, PWS 2.0, 3.0, 6.0, 7.0

Executive-level briefing summarizing contract performance, operational readiness, strategic risks, milestones, and significant activities

Quarterly Microsoft PowerPoint or Adobe PDF

COR and Governm ent Stakehold ers

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

Risk Register, PWS 2.5, 4.0, 6.0, 7.0

Tracks identified technical, operational, cybersecurity, schedule, and programmatic risks and associated mitigation activities

Initial task order award and monthly updates

Microsoft Office or Adobe PDF

COR

Staffing Plan, PWS 2.0, 4.0

Identifies contractor staffing structure, labor categories, onboarding approach, and key personnel assignments

Initial task order award and updated as required

Microsoft Office or Adobe PDF

COR

5.2 Technical Deliverables

The Contractor shall provide technical, engineering, operational, cybersecurity, testing, deployment, and sustainment documentation necessary to support implementation, operation, maintenance, authorization, and transition activities.

Deliverable Description Frequency Format Submit To

Discovery Report, PWS 4.0

Documents validated requirements, business processes, technical findings, risks, dependencies, and implementation recommendations identified during the Discovery Phase

At completion of each Discovery Phase

Microsoft Office or Adobe

PDF

COR or Designee

System Architecture Documentation, PWS 2.0, 2.1, 2.5, 3.0

Documents logical, physical, application, infrastructure, cloud, and integration architectures

Initial and updated upon significant changes

Microsoft Office, Visio, or Adobe

PDF

COR or Designee

Interface Control Documents (ICDs), PWS 2.1, 3.0

Defines interface specifications, APIs, protocols, integration dependencies, and secure data exchange requirements

Initial and updated as required

Microsoft Office or Adobe

PDF

COR or Designee

Data Mapping and Migration Documentation, PWS 2.1, 4.0

Documents data mappings, transformation logic, migration procedures, validation activities, and reconciliation processes

Per migration activity or release

Microsoft Office or Adobe

PDF

Security Documentation and Artifacts, PWS 2.5, 3.0, 6.0

Includes system security documentation, configuration baselines, vulnerability reports, audit artifacts, incident response documentation, and supporting authorization materials

As required by task order or Government direction

Microsoft Office or Adobe

PDF

COR,

ISSO, or Designee

Test Plans and Test Results, PWS 3.0, 6.0, 7.0

Includes testing strategies, test cases, scripts, defect tracking, validation activities, and test execution results

Per test cycle, sprint, release, or deployment activity

Microsoft Office or Adobe

PDF

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

Configuration Baseline Documentation, PWS 2.5,3.0

Defines approved system configurations, baseline settings, and controlled technical standards

Initial and updated as required

Microsoft Office or Adobe

PDF

COR or Designee

Deployment and Rollback Procedures, PWS 3.0, 6.0

Documents deployment activities, rollback procedures, contingency actions, recovery steps, and implementation coordination requirements

Prior to production deployment and updated as required

Microsoft Office or Adobe

PDF

Production Deployment Schedule, PWS 3.0, 6.0

Defines deployment timelines, implementation windows, operational coordination requirements, validation activities, and milestone events

Prior to deployment and updated as required

Microsoft Office or Adobe

PDF

Runbooks and Operational Procedures, PWS 3.0, 6.0, 9.0

Documents operational support procedures, monitoring activities, escalation procedures, maintenance processes, and recovery operations

Prior to operational handoff and updated as required

Microsoft Office or Adobe

PDF

Maintenance Logs, PWS 3.0, 6.0

Tracks operational maintenance activities, outages, upgrades, patches, corrective actions, and support activities

Monthly Microsoft Office or Adobe

PDF

COR or Designee

User Access Control Documentation, PWS 2.5, 3.0

Identifies authorized user roles, permissions, provisioning controls, account management activities, and access review procedures

Initial and updated as required

Microsoft Office or Adobe

PDF

COR or Designee

Training Materials and User Guides, PWS 3.2, 3.3, 4.0

Includes administrator guides, user manuals, operational reference materials, and training presentations necessary to support operational use and sustainment

Prior to production deployment and updated as required

Microsoft Office or Adobe

PDF

5.3 Functional Capability Deliverables

The Contractor may be required to design, configure, integrate, deploy, operate, maintain, and sustain interoperable enterprise capabilities supporting mission, operational, administrative, analytical, mobilization, and cybersecurity functions identified within this PWS and associated task orders.

Capability delivery requirements shall be defined at the task order level and may include, but are not limited to, the following functional capability areas:

Functional Capability Area Related PWS Section(s)

Enterprise Registration and Data Management 2.1

Registrant Services and Claims Processing 2.2

Mobilization and Operational Support 2.3

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

Volunteer and Personnel Readiness Management 2.3

Enterprise Analytics and Reporting 2.4

Workflow Automation and Communications 2.2, 2.4

Data Integration and Exchange Services 2.1, 3.0

Security and Compliance Operations 2.5, 3.0

Training and Exercise Support 2.3

Continuity of Operations Support 2.3, 3.0

Specific implementation milestones, operational acceptance criteria, deployment schedules, testing requirements, security requirements, sustainment expectations, and transition requirements shall be identified at the task order level.

5.4 Deliverable Review and Acceptance

The Government will review submitted deliverables for completeness, accuracy, quality, compliance, and alignment with contract requirements.

The Contractor shall correct identified deficiencies and resubmit deliverables within timelines specified by the Government.

Government review or acceptance of deliverables shall not relieve the Contractor of responsibility for meeting contract requirements, performance standards, security requirements, or operational objectives.

6.0 PERFORMANCE STANDARDS

The Contractor shall meet the following minimum performance standards unless otherwise specified at the task order level:

Performance Area Standard

System Availability 99.9% uptime during operational periods

Critical Vulnerability Remediation Within 15 calendar days

High Vulnerability Remediation Within 30 calendar days

Incident Response Acknowledgement Within 1 hour

Data Backup Validation Quarterly

Deliverable Timeliness 95% on-time delivery

Selective Service System - Business Systems Modernization Requirements Performance Work Statement (PWS)

Performance Area Standard

User Access Provisioning Within 1 business day of approval

Defect Resolution for Critical Issues Within 24 hours

7.0 QUALITY ASSURANCE SURVEILLANCE

The Government will monitor Contractor performance through review of deliverables, status reports, system metrics, testing activities, security assessments, operational demonstrations, and other surveillance methods as determined appropriate by the Government.

The Contractor shall support performance monitoring, quality assurance reviews, operational testing, inspections, and corrective action activities throughout the period of performance.

8.0 GOVERNMENT-FURNISHED INFORMATION (GFI)

The Government will provide access to existing systems, documentation, data, facilities, and Government Furnished Equipment (GFE), as determined necessary for contract performance.

The Government will identify applicable points of contact, provide access authorization approvals, and coordinate stakeholder participation necessary to support contract execution.

9.0 PERIOD AND PLACE OF PERFORMANCE

The period and place of performance shall be specified at the task order level.

Work may be performed at Government facilities, Contractor facilities, or approved remote locations, as authorized by the Government.

10.0 CONTRACT TYPE (Possibility based on the responses to the RFI)

This effort will be executed through an Indefinite Delivery Indefinite Quantity (IDIQ) contract with task orders issued for specific requirements, capabilities, or support activities within the scope of this PWS.