QnAs 1-30-26.xlsx
XLSX spreadsheet 20 KB Posted
- Attached to
- Sample Tasking and Tracking System (STATS)
- Solicitation number
- FA7022-26-RFI-STATS
About this file
This file contains Questions and Answers (QnAs) related to the Sample Tasking and Tracking System (STATS) Request for Information (RFI) issued by the Air Force Technical Applications Center (AFTAC). The document addresses 30 questions from potential contractors regarding system requirements, infrastructure, security, and implementation approach. Key technical requirements include deployment to Impact Levels 6 and 7, compliance with RMF and DISA STIGs frameworks, and Zero Trust (ZT) architecture phased over time. The system must operate in a hybrid cloud and on-premises environment utilizing Oracle 19+ databases and AWS Fargate for container orchestration, with approximately 70 users across 10 or fewer roles authenticated via Key Cloak PKI-based mechanisms.
The government indicated it will provide infrastructure and hardware support, with the anticipated contract vehicle and final cost unknown at the time of the RFI. The performance period shall not exceed 24 months, and the government anticipates including proof-of-concept activities within the awarded contract. The contractor will be responsible for requirement validation and refinement during initial phases, workflow definition assistance, and supporting Authority to Operate (ATO) processes on both classified and unclassified networks with timelines to be determined. AFTAC will retain responsibility for system administration and workflow maintenance post-award, though the contractor must provide appropriate support during implementation, integration, and operations phases. The RFP is anticipated within 60 days of the RFI closure.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| QnAs 2-12-26.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1 Questionnaire to Client
| Related Task Area | Questions | Government Response | |
| 2.1 & 2.3 | Is this solution required to be deployed to IL 4,5,6 and 7? | Yes. IL 6 & 7. | |
| 2.1 | What specific cybersecurity frameworks and standards must STATS comply with (e.g., NIST 800-53, RMF, DISA STIGs)? | Yes. RMF & DISA STIGs | |
| 2.1 | What are the zero-trust implementation expectations (e.g., identity management, micro-segmentation, continuous monitoring)? | The solution must be Zero Trust (ZT) compliant. The government anticipates Zero Trust requirements will be phased over time. The work statement will include applicable ZT requirements at the time of award. | |
| 2.1 | Will the government provide the infrastructure for STATS? If yes, what type of infrastructure will be provided (e.g., USAF-owned systems, government cloud such as Cloud One, or a hybrid environment)? | Yes. The government anticipates the solution will need to operate in a hybrid cloud and on-prem environment. | |
| 2.1 | Can you provide details on the existing systems and infrastructure that STATS will integrate with (e.g., Oracle database version, network architecture, container orchestration platform)? | Oracle 19+ is the anticipated database and AWS Fargate is the anticipated orchestration platform | |
| 2.1 | Will STATS need to integrate with any external partner systems or international networks? | It will need to integrate with systems internal to AFTAC initially. | |
| 2.1 | Is there a requirement on integration with external systems? | It will need to integrate with systems internal to AFTAC initially. | |
| 2.1 | Does the current STATS solution have a "web-based Graphical User Interface (GUI) front end"? If so, what tool(s) are being used to provide this function today? | No current STATS solution exist in this mission space. The solution is required to be web-based. | |
| 2.1 | What is the anticipated number of users and roles that will access STATS, and what authentication mechanisms are preferred (e.g., CAC, PKI, SSO)? | ~70 users. The government anticipates Key Cloak PKI based authentication and authorization. We anticipate 10 or fewer roles. | |
| 2.1 | Can you elaborate on who is responsible for making changes to the workflows, and what does the process look like? | AFTAC will be responsible for maintaining workflows. | |
| 2.1 | Does the current STATS solution have a reporting function? If so, what tool(s) are being used to provide this function today? | No current STATS solution exist. | |
| 2.1 | Are there specific reporting standards or formats required for autogenerated reports (e.g., XML, PDF, DoD-specific templates)? | Unknown at the moment, but will include PDF and formatted text. | |
| 2.1 | What types of file formats and external data sources will STATS need to ingest (e.g., CSV, XML)? Specifically, are there any proprietary laboratory formats that must be supported? | Proprietary formatted text and common file formats. | |
| 2.2 | Is there an anticipated timeline for moving from RFI to RFP, and what is the expected contract vehicle (e.g., GSA, IDIQ)? | 60 days post RFI. Contract vehicle is unknown at the moment. | |
| 2.2 | Will the Government provide funding for prototyping or proof-of-concept prior to full implementation? | Yes. The government anticipates proof-of-concept will be included in the awarded contract. | |
| 2.2 | Will obtaining Authority to Operate (ATO) be within the scope of this work? If so, what is the expected ATO process and timeline for deployment on classified and unclassified networks? | Yes. Timeline is TBD. | |
| What is the Government’s estimated cost value of eƯort? | The government anticipates a ROM with the RFI response. No IGCE is currently developed. | ||
| What is the POP that the Government prefers? | No more than 24 months | ||
| Are you requiring the vendor to assist in defining requirements during the first task? | The government anticipates requirement validation and refinement. | ||
| Are you requesting that the vendor assist in defining workflows and processes? | Vendor input will be sought. | ||
| Is there a Laboratory Information Management System (LIMS) that you are familiar with? | The government is currently LIMS agnostic. | ||
| Are you aware of any LIMS type system that is operationally approved for classified networks? COTS or GOTS | Not LIMS specifically, however Jira is operationally available on some networks. | ||
| Does the Oracle Database exist? | |||
| a. If yes, do you have a schema in mind, or is this part of the initial discovery? | Some databases exist. Schema will be part of initial discovery. | ||
| Would there be a consideration for using NiFi to do data ingestion? | Yes. | ||
| Can you expand on what is meant by “variety of similar workflows”? | Workflows from multiple data-sets, origins and users will be required. | ||
| Can you provide an example of how a workflow could change on the fly? | The solution will need to support dynamic re-tasking and ability to add additional tasks to workflows after workflow is initiated | ||
| Will all users have the same capabilities, or does this system require user roles for specific | |||
| activities? | System will employ roles to manage user activity. | ||
| Does the environment where this application will run already exist? | Environment is currently in development. | ||
| Who provides the required hardware and/or system administration for creation and maintenance of the application once it is operational? | AFTAC will provide the necessary HW as government hosted or GFP. The government anticipates a contract requirement for System Admin support during implementation, integration, and operations. | ||
| Is there a zero-trust environment already in place to host STATS? | The environment is in development. | ||
| What entity (GOV/CTR) would administer the ZT environment? | The government will include applicable ZT requirements in the STATS work statement, however those requirements are currently being developed. | ||
| What entity (GOV/CTR) would administer the STATS system? | The government will administer the STATS system, however the contract will include requirements for the appropriate level of support from the contractor. |
File details come from the government source that posted it. Updated .