CSO GRC Problem Statement.pdf
PDF 118 KB Posted
- Solicitation number
- FA877025SC002
About this file
This document is a Request for Information (RFI) for a Governance, Risk, and Compliance (GRC) Application Monitoring Tool Replacement for the Defense Enterprise Accounting and Management System (DEAMS). The opportunity, solicitation number FA877025SC002, seeks innovative software solutions to replace Oracle's GRC tool, which is reaching end-of-life support. The replacement tool must provide comprehensive audit and monitoring capabilities, including creating configuration change baselines, tracking user activities, reporting changes across environments, scheduling reports, and publishing documentation in multiple file formats.
The technical requirements specify that the solution must be compatible with DEAMS server architecture, Air Force standard desktop and browser software, support multiple concurrent users, and meet current IT security and cyber requirements. Key functionalities include the ability to deliver reporting to a secure repository, tag and search reports, build approval workflows, analyze patching, and provide dashboard features for consolidated findings and data analysis. The Department of Air Force is seeking solutions that can be implemented quickly and cost-effectively, with an optional cloud transition capability, to support audit readiness and financial reporting across 170 installations worldwide.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
AFLCMC/GBG FY25 Pitch Day Problem Statements (RFI) Wright-Patterson AFB, OH
FA877025SC002 TITLE: Governance, Risk, and Compliance (GRC) Application Monitoring Tool Problem Set
TECHNOLOGY AREA(S): Information Systems, Software Publishing, Computer Systems Design Services, Finance Activities, Risk Management, Accounting Compliance
DESCRIPTION: Defense Enterprise Accounting and Management System (DEAMS) is an Enterprise Resource Planning (ERP) solution based on the Oracle e-Business Suite (EBS). It is the United States Air Force’s (USAF) target accounting and finance system and services Department of Defense (DoD) organizations including United States Space Force (USSF) and Joint Commands where the Department of Air Force (DAF) serves as the executive agent. DEAMS provides accurate and timely financial information using standardized business rules and processes (i.e., general ledger to record transactions) and is the solution to sustaining audit readiness and correcting financial reporting weaknesses across 170 installations world-wide.
The Governance, Risk, and Compliance (GRC) Application Monitoring Tool Replacement Effort seeks to replace this software, as Oracle is reaching "end-of-life" support for GRC Industry will have the opportunity to provide innovative solutions to DEAMS to assist in the replacement of Oracle GRC.
PROBLEM STATEMENT:
This topic is meant for innovative solutions to be adapted in innovative ways to meet DoD stakeholders’ needs in a short timeframe and at a low cost.
GRC provides a solution to monitor user activity to meet compliance & audit regulations.
This acquisition intends to replace Oracle GRC Application Monitoring tool on the Oracle E-Business Suite (EBS) with a newer software solution.
The solution will need to meet the GRC Configuration Data findings listed below:
Below is the GRC Application Monitoring Replacement Configuration Data that the proposed solution should meet. Missing functionality should be indicated in the Step 1 White Paper and Step 2 Pitch Day if invited. Missing functionality will not disqualify a company for award.
Software Functionality
1. Ability to create baselines of configuration changes
2. Audit Functionality to track/report creation and all last update information of selected configuration changes
3. Audit Functionality to track/report configuration changes against a baseline
4. Audit Functionality to track/report configuration changes between environments
5. Audit Functionality to track/report changes to master data
6. Ability to schedule reporting
7. Ability to publish documentation in multiple file types, including:
• HTML
• MS Office compatible (e.g., .DOCX, .PPT) file formats
8. Ability to deliver reporting to secure repository
9. Ability to tag reporting with common themes
10. Ability to search repository to search common tags
11. Ability to build approval workflows of reporting
12. Ability to analysis Patching
13. Dashboard features which consolidate findings, streamline reporting and data analysis
Hardware and Software
1. Solution's repository and software shall be compatible with DEAMS server architecture to be on-premises/client-hosted, unless approved by DAF Evaluated Products List (EPL).
2. Solution's client software shall be compatible with the Air Force standard desktop and browser software (e.g., Google Chrome, Microsoft Edge).
3. Solution shall be able to connect via remote access by multiple users concurrently.
4. Solution shall not require user/viewer licensing (or similar) to review authored content.
5. Prefer solution to have an optional cloud transition.
Connectivity and Network
1. Solution's development repository and tools shall be accessible and operable over standard DoD NIPRNET connection and in offline instances via local computing.
2. Solution's Library and Content shall be available and accessible over standard internet connection.
Security / Cyber
1. Solution shall meet current DEAMS IT security and cyber requirements.
File details come from the government source that posted it. Updated .