Unicor_eCommerce_RFI.docx

FEDERAL PRISON INDUSTRIES, INC. (UNICOR)

Federal Prison Industries, Inc.

UNICOR

EPRFI-0017-15

Request for Information (RFI)

Modernization Effort for UNICOR.gov

Background and Scope Federal Prison Industries, Inc. (FPI), known by the trade name of UNICOR, is a government owned corporation operating prison industries within the Federal Bureau of Prisons (BOP). FPI was established to provide incarcerated individuals with skills sets for use upon their reentry into society in order to reduce recidivism and provide for public safety. FPI utilizes www.UNICOR.gov as a Business to Customer (B2C) site to generate sales leads and orders of FPI’s products.

Purpose FPI is seeking information about services to develop a robust e-commerce site with backend integration to SAP. FPI uses the SAP ECC 6.0 Business Suite as FPI’s financial and ERP system of record.

Information provided by responsive vendors will be used to further refine the BOP’s specifications for the eventual solicitation/acquisition for such services. The specific questions outlined in this Request for Information should be answered by vendors in as much detail as possible, including describing actual hardware/software, any peripherals required, and any configuration required to support the solution. A response that simply states that the vendor’s solution is compatible with the specified requirement will be considered non-responsive for that section.

Vendors should propose a solution which addresses the functional, technical and security requirements identified in the RFI. Any proposed solution should also include discussion of any mobile capabilities or limitations to ensure that the e-commerce site can be accessed either via a desktop or mobile interface. The vendor’s ability to comply with specific DOJ IT security requirements is also a key consideration and those requirements are described in various sections below.

The BOP may schedule an onsite, follow-up demonstration at FPI headquarters of select proposed solutions for vendors to provide more detailed information and display system functionality. If web/virtual conferencing is used for a remote demonstration, the following solutions would be supported: Cisco WebEx, Citrix GoToMeeting or Adobe Connect and the vendor should account for at least ten (10) possible remote connections.

SYSTEM SOFTWARE/HARDWARE AND PERFORMANCE REQUIREMENTS

Vendors must be able to demonstrate the ability to meet technical and system performance requirements through documentation, current client references and/or online demonstrations of the applicable solution.

Hardware Requirements The vendor will provide the minimum server hardware specifications required to support their solution, as well as specifications for a cloud-based solution. The vendor may be asked to provide a network architecture diagram which describes proposed network and system communications and interfaces.

Role and Access Management

1. Does system support tiered-role privileges that distinguish between users and administrators and their authorized functions?

2. Does system support separation-of-duties by group/role assignment so that content administrators can be restricted as to which areas of the site they can update?

WAN/Telecommunications

1. Does system support the IPv6 network configuration?

2. Can system operate with an internet proxy for any required internet access from the desktop?

3. Does system support HTTPS connections of at least 128-bit TLS 1.0 encryption?

Licensing Specifications

1. How is required software licensed? (e.g. by CPU core, by users, etc.; please specify)

a. If by user, does licensing distinguish between general users and administrators?

2. How is licensing monitored? (e.g. system only allows for specified user count or system allows additional users to be added and vendor performs “true up” at annual cycle, etc; please specify).

Software Upgrades and Patches

1. What is the process and cycle for software enhancements (e.g. if a customer requests a new feature or software modification, is there a threshold requirement as to the number of other customers requesting the same before development occurs? Do upgrades occur on a regular schedule)?

2. How soon after a security vulnerability (e.g. a Common Vulnerabilities and Exposures identified software flaw or misconfiguration) is identified, will you provide a patch or fix?

Network Software Specifications

1. Does administration of the e-commerce site provide authentication via an LDAP ver.3 interface? (Note: if only Microsoft Active Directory is supported vs. full LDAP-compliance, please indicate.)

2. Is the system capable of being PIV-enabled to support administrative login via the use of an HSPD-12 compliant card?

System Software Specifications

1. Is system fully web-based (i.e., no proprietary client agent software required)?

2. Is system capable of single sign-on to the user interface (i.e. separate logins are not required to access application subsystems)?

3. Specify how many concurrent users system supports;

4. Please describe the largest customer who is operating your solution (describe geographic dispersion, number of users, number of offices, departments or business units)

Cloud Specifications

1. If cloud-based, is system FedRAMP-certified?

a. If yes, specify the cloud service tier (IaaS, SaaS, PaaS);

b. If no, is certification under development? (specify planned date for certification);

E-COMMERCE DESIGN SPECIFICATIONS

Architecture

1. What server-side technology will be used in the creation of the e-commerce website? (Specify, e.g.: PHP, ASP, JSP, etc.)

2. What web architecture will be used? (Specify; for example, will database “CRUD” operations be performed using a RESTful web service architecture)

3. Specify security technology used to secure web applications.

Design

1. Can requested data be decoupled from the presentation? (For example, information about requested items are expected to appear on a standard web page, but can the data also be made available through the internet in other formats such as a XML, JSON, wrapped in a web service envelope such as a SOAP message, etc.).

2. Does your e-commerce website solution utilize a responsive design?

FUNCTIONAL REQUIREMENTS

For each of the core functionalities described below, place an “X” in the appropriate section to indicate that your solution supports the specified architecture (put “N/A” if the item is not a core function of your software or is not supported via that architecture):

Enterprise Capability (Functions across a WAN)

Content Management (including managing/updating page contents, adding new pages/sections/categories, ability to cross-sell/up-sell products, ability to highlight discounts, etc.)

Secure Customer portal (including self-service ordering, checking order status, making payments, etc.)

G-2-G procurement data collection (generating order document, configuring payment, etc.)

Shopping cart management (saving carts, sharing cart, etc.)

Integration with External Shipping Providers

User Account management via SAP (Real-time integration for registration, login, status checks, waiver/order creation)

Search and filtering capability to view information

Ordering from inventory or for “made-to-order”

Business rule engine to calculate volume pricing, overseas freight calculations, installation quotes

Personalized catalog display based on customer

Real-time synchronization with SAP master data (products, prices, factories, problematic customer data)

Scalable (including across multiple product lines and storefronts)

Configurator that dynamically generates SAP smart part numbers based on user-supplied options.

Web analytics engine that collects, measures and analyzes web data for purposes of web optimization.

Ability to support development of custom functionality.

Customer feedback/support

1. What other functions does the system support (e.g. does it support mobile access? please specify the additional features)

2. Does Vendor provide application support and training?

Additional Notes: The application environment should be capable of supporting a test environment, separate from the production region, to facilitate troubleshooting and new test/process development.

The vendor should also specify peripheral components which are included in the proposed solution.

PERSONNEL SECURITY

Any individual who desires to access or develop a BOP-networked system:

• Must undergo an OPM Moderate-Risk Background Investigation (MBI). This requirement applies to anyone physically and directly accessing a networked device, or via remote access.

• Must be a US citizen.

Is vendor capable of complying with the above personnel security requirements?

ADDITIONAL INFORMATION

Please provide the following information to Kimberly Schwinn, Contracting Officer at Kimberly.Schwinn2@usdoj.gov Response is due no later than Monday, August 03, 2015. Please include the following information with your response:

Company Name:_______________________________ DUNS Number:________________________________ Address:_____________________________________ Contact Person:_______________________________ Contact Person’s email:_________________________ Phone number:_______________________________ The NAICS Code planned for this procurement is 454111 Small Business Size Standard associated with NAICS code 454111 is $32.5 Million.

Business Size (Check one) _________ Small Business _________ Other than Small Business Small Disadvantaged Business: _______YES _________NO Current 8(a) Program Participant: _______YES _________NO Woman Owned Small Business: _______YES _________NO Service Disabled Veteran Owned Small Business: _______YES _________NO Current HUBZone Program Participant: _______YES _________NO Active Registered in the SAM database (System Award Management) _______YES _________NO image1.png image2.jpeg