RFI FNA-OCPO-64962 Amendment 003.pdf

Notice Number: FNA-OCPO-64962 Title: Financial Management Software and Support Services NAICS: 541519 – Other Computer Related Services; Information Technology Value Added Resellers Amendment 003

1 | P a g e

The purpose of this amendment is to extend the RFI response date and provide responses to questions posed to prospective vendors. The RFI response date is hereby extended from October 26, 2026 5:00 p.m. EDT to October 30, 2026 12:00 p.m. EDT.

The following questions and responses are hereby provided –

Question 1: How many named users across the CFO, HR, OCIO and OCPO offices should respondents assume when pricing platform licenses?

Response 1: Please reference the amended RFI SAM posting and Response 12.

Question 2: Are the Enhancements listed under each Specific Task part of the base-year scope, or optional work to be priced separately?

Response 2: For the purpose of this RFI, all requirements are reflective of a one-year base period. Market research pricing shall reflect all requirements provided within the

RFI.

Question 3: How many fiscal years of historical financial data must be migrated from the current platform at transition?

Response 3: Ten (10) years of historical data.

Question 4: Beyond Oracle EBS, BAS, PRISM and SharePoint, which authoritative source systems must the platform interface with during the base year?

Response 4: DOC’s Oracle BAS implementation is comprised of EBS, PRISM, and EDW (Tableau). Primary reporting will come from EDW. E2/Go.gov (travel) and Citigroup/CitiManager (purchase card) systems must be interfaced also.

Question 5: Which system supplies the HR and payroll data that the predictive analytics task will ingest?

Response 5: EDW (Tableau) within BAS.

Question 6: What coverage window, such as business hours Eastern or 24x7, is required for the Tier 2/3 support?

Response 6: M-F, Eastern Time, 8:00am – 5:00pm.

Question 7: Approximately how many Government personnel will require training during the base year?

Response 7: 10 Government personnel

2 | P a g e

Question 8: What is the anticipated start date of the base period?

Response 8: As referenced within the RFI, the RFI is for planning purposes only and is not a Request for Proposal (RFP)/Request for Quotation (RFQ) or an obligation on the part of the FirstNet Authority for conducting a follow-on acquisition. As such, a start date is undetermined at this time.

Be that as it may, for convenience purposes, the current contract expires February 28, 2027.

Question 9: Is there an incumbent contract number for this requirement, and would the Government share it?

Response 9: The current contract number is NNG15SD74B/1333P223F00000012 (Software Information Resource Corp.)

Question 10: Please identify the current incumbent prime, implementation/O&M provider, and software reseller, and provide the current and predecessor contract/task order numbers and parent vehicles supporting FirstNet’s OneStream environment since initial implementation.

Response 10: Please reference Response 9 and reference RFI content.

Question 11: Is the intended approach to retain and enhance the existing OneStream applicable or is replacement/migration also in scope.

Response 11: FirstNet Authority is conducting market research to identify all solutions available in the marketplace capable of fulfilling the draft specifications provided in the

RFI.

Question 12: Please provide current and projected user counts by license/role, production and non-production environment counts, existing subscription/hosting entitlements and renewal dates, and entitlements for the RFI's named capabilities, including SensibleAI, Genesis, Modern Close, and People Planner. Should respondents price reuse/renewal of existing licenses or new subscriptions, and may software be supplied by OneStream or an authorized reseller separately from the implementation partner?

Response 12:

User Role Current

Projected Non-Production

Access Administrator N/A 4 Yes Interactive-End User 40 12 No View-Only 10 4 No Total 50 20

3 | P a g e

Respondents should provide pricing to ensure access for the users as noted above.

Software can be supplied by a manufacturer (e.g., OneStream, etc.) or an authorized reseller.

Question 13: Please identify which specified task areas are already operational, require enhancement, or represent new implementation, and which deliverables are required in the base year versus option years. Please provide target go-live dates, dependencies on source-system access and data readiness, Government acceptance criteria, and anticipated Government subject-matter expert and user acceptance testing availability. Please also distinguish steady-state Tier 2/3 O&M from enhancement/project work and identify required support hours, response/resolution targets, and expected enhancement volumes so implementation staffing and recurring support can be priced separately.

Response 13:

Reference Response 2. Additionally –

Task Status Dependencies Automated Technology Business Management (TBM) Reporting

New

Deploy SensibleAI Forecasting & People Planner Enhancement

New (Sensible AI Forecasting) Enhancement (People Planner)

Modern Close New Deploy Genesis/COTS Dashboards

New

Maintain EBS Integration Operational Integrate NPSBN obligations, payments, and CLIN details

New Ability to obtain appropriate reporting at CLIN-level and match payments to those CLINs.

Produce FASB and FASAB financial statements

New Ability to receive external work files (lease schedule, revenue schedule, etc.)

and adjusting entries.

Automate Contract to Budget Requirement Assignment

New

Integrate CPO’s Advanced Acquisition Plan (AAP)

New Integrate with SharePoint List

Question 14: For SensibleAI, governed AI agents, Genesis/COTS dashboards, and integrations, please clarify the required authorization boundary and whether each component must be available within the FedRAMP-authorized offering at award or may be introduced through

4 | P a g e phased authorization. Please identify approved AI use cases, permitted HR/payroll data use, human-review/model-validation expectations, and responsibilities for RMF/ATO evidence and ongoing security support among FirstNet, the SaaS provider, and the implementation partner.

Will the Government accept phased activation of capabilities not yet authorized in its environment, and what is the latest acceptable authorization milestone?

Response 14: All components must be FedRAMP-authorized. No phasing will be accepted. HR/payroll data will be from EDW (Tableau) and will include personally identifiable information (PII).

Question 15: For the integrations and data loads involving BAS, PRISM, Oracle EBS, SharePoint, and HR/payroll/operations data, including Alpha Roster alignment, please identify the authoritative systems and responsible owners, available interface methods, required data direction and refresh frequency, and approximate data volumes and historical periods. Which existing interfaces, if any, may be reused, and how will responsibility for source-system changes, data mapping, cleansing, historical data migration, and reconciliation be divided between the Government and contractor?

Response 15:

System Owner Method/Direction/Frequency Status Responsibility EDW DOC/NIST Data dump to Azure Blob – One-way - Daily Reuse Contractor

PRISM DOC/NIST Daily New Contractor SharePoint FirstNet CPO Ad hoc New Contractor Alpha Roster

FirstNet Mission Support

Manual Load - Bi-Weekly New Contractor

E2/Go.gov FirstNet Mission Support

Manual Load – Monthly New Contractor

Citigroup FirstNet CPO Monthly New Contractor

Question 16: Does the ten-page response limit include any cover page, table of contents, pricing schedules, case studies, and other attachments, or are any of these excluded from the limit?

Response 16: The page limitation is hereby amended from 10-pages to 15-pages. The 15-page limitation includes cover page, table of contents, pricing schedules, case studies, and other attachments.

Question 17: Does the Authority anticipate transitioning from the incumbent EPM platform to the selected solution, or adding capabilities alongside it? If transition, would a period of parallel operation be acceptable, and roughly how much historical data (years) would need to be migrated?

5 | P a g e

Response 17: Please reference Response 11. Should FirstNet Authority transition, a period for parallel testing would be acceptable. 10-years historical data would need to be migrated.

Question 18: Approximately how many users across the CFO, HR, OCIO, and OCPO offices would require full access versus view-only or executive dashboard access?

Response 18: See Response 12.

Question 19: In the RFI there are several specifications reference product-specific names (SensibleAI, Genesis, People Planner). Are these functional requirements that an equivalent capability may satisfy?

Response 19: Yes

Question 20: Could you clarify whether the three relevant federal contracts requested in the response may include contracts performed by a proposed platform or implementation partner, provided each reference clearly identifies the performing entity and its intended role? We would distinguish such references from our own corporate experience.

Response 20: The three relevant federal contracts must include a proposed platform and implementation partner for the respective proposed platform.

Question 21: The RFI describes FirstNet Authority’s existing use of the OneStream EPM platform while also identifying a requirement for a single, extensible platform supporting Financial, HR, IT, and Acquisition needs. Does FirstNet anticipate retaining OneStream as part of the future-state architecture and integrating the proposed solution with it, or should respondents propose a solution that replaces and transitions the existing OneStream capabilities?

Response 21: Reference Response 11. Respondents should propose solutions they believe best fit the Government’s draft requirements – whether it is the incumbent solution or an alternative solution.

Question 22: The RFI references “Implement Genesis UX and COTS dashboards.” Is Genesis UX specifically referring to OneStream Genesis, and is use of OneStream Genesis a requirement, or may respondents propose equivalent dashboard and user experience capabilities through their proposed platform?

Response 22: Yes, Genesis UX is specifically referring to OneStream Genesis.

Respondents may propose equivalent dashboard and user experience capabilities through its proposed platform – whether it be the incumbent or an alternative solution.

6 | P a g e

Question 23: Can FirstNet provide additional information regarding the “Alpha Roster” referenced under SensibleAI Predictive Analytics, including its purpose, source system, available data/interface, and expected integration requirements?

Response 23: The Alpha Roster is a spreadsheet listing onboard employees PII from the most recent pay period. It could be used to reconcile FirstNet Authority’s position tracking within the People Planner application. There is no known interface. The expectation is that the report would be loaded manually.

Question 24: Does FirstNet currently maintain an established Technology Business Management (TBM) taxonomy, General Ledger (GL)-to-TBM crosswalk, and associated allocation rules that the contractor would be expected to migrate or replicate? If so, can FirstNet identify the current TBM taxonomy/version and source system(s)?

Response 24: Yes, FirstNet Authority has an excel spreadsheet with all TBM taxonomy.

The Contractor is expected to transfer/translate it to the solution.

Question 25: Can FirstNet provide additional information regarding the anticipated integration with the Business Applications Solution (BAS), including available interfaces or data exchange mechanisms, anticipated frequency, and the financial data expected to be ingested by the proposed solution?

Response 25: The current interface involves a daily report sent to Azure Blob from BAS (EDW) that is picked up by OneStream and loaded. The report is essentially a daily trial balance.

Question 26: Is this RFI for a solution to do more than OS can currently do? Or is it an expansion of OneStream modules/capabilities? Or O&M for the current OneStream solution?

Response 26: Please reference Response 11.

Question 27: What TBM taxonomy, category rules, and OMB/FITARA reporting templates does FirstNet require the contractor to use, and will baseline crosswalk logic be furnished?

Response 27: TBM v4, which is publicly available, is required for use and can be electronically accessed here – The TBM Taxonomy (4.0) - TBM Council. FirstNet Authority will not require a FITARA template or use. Yes, a baseline crosswalk logic would be furnished upon any resultant award should a solicitation result from this RFI. ()

Question 28: What accuracy thresholds, baselines, or performance metrics should ML-driven forecasting aim to achieve, and are historical forecasting error benchmarks available?

7 | P a g e

Response 28: ~85% median monthly forecast accuracy, historical forecasting error benchmarks are not currently available. Final performance metrics may be included within any resultant solicitation.

Question 29: Does FirstNet have existing reconciliation templates (e.g., Cash, Property, AP/AR) or USSGL-driven formats that should be replicated or adapted?

Response 29: Yes

Question 30: What KPIs, data sources, and persona-based reporting requirements (analysts, executives, board-level) should drive the design of TBM, PortfolioStat/TechStat, and unit-cost dashboards?

Response 30: Reference Response 27. TBM should be driven by the current TBM v4 model.

Question 31: What rules govern contract number assignment, and which PRISM fields must be validated before assignment is complete?

Response 31: Contract number assignment is by DOC PRISM. PRISM has description fields that FirstNet Authority would use to note the related budget requirement when the requisition is created.

Question 32: What service-level expectations (incident response, issue resolution timelines, patching cadence, availability targets) does FirstNet require for Tier 2/3 support?

Response 32: Reference Response 6.

Question 33: Does FirstNet consider OneStream Sensible AI to provide the same capabilities as Agentic AI?

Response 33: Current understanding is that Sensible AI is an integrated LLM, like ChatGPT. It can access data, create reports and tables from that data, and provide analysis.

Question 34: Questions are due October 8, 2026, and full submissions are due October 16, 2026.

This creates an extremely short window (1 day for questions and 8 calendar days for submission) to respond to 11 complex specification areas, 3 case studies, an implementation plan, and pricing breakdowns. Is the Government willing to provide an extension?

Response 34: Amendment 002 extended the RFI response date from October 16, 2026 5:00 p.m. EDT to October 26, 2026 5:00 p.m.

8 | P a g e

The RFI response date is further extended from October 26, 2026 5:00 p.m. EDT to October 30, 2026 12:00 p.m. EDT.

Question 35: Section 2(a) requests capabilities to provide items/services for a "base period of one-year and four one-year option periods." Structuring an RFI response around a formal 5-year Period of Performance (PoP) structure is typical for a solicitation (RFP/RFQ) rather than early-stage market research.

Response 35: This RFI is strictly for market research purposes only. The referenced PoP is not “formal.” Be that as it may, please reference Response 2.

Question 36: The RFI requests a pricing structure that clearly reflects a breakdown of all draft specifications, including licenses and support services. However, the document does not provide the total number of anticipated users, concurrent user limits, or the breakdown of user personas required to build an accurate software licensing model. Can the Government please provide the following: Are current OneStream licenses handled with a third party or through the incumbent or another way; Does the Government wish to change the licensing structure; Current count of OneStream licenses, Future count/need for OneStream licenses?

Response 36: Reference Responses 9 and 12. FirstNet Authority currently has 40 Interactive Users and 10 View-Only Users.

Question 37: Can the Government detail their desired pricing approach, Firm Fixed Price (FFP) or Time and Materials (T&M)?

Response 37: Please reference Response Instructions 5(c).

Question 38: The specifications require the new platform to secure interfaces with Oracle EBS, PRISM, SharePoint, and other authoritative sources. It is unknown what specific versions of these systems are currently deployed, how they are hosted, or what the expected data transfer volumes will be for these integrations. Can the Government provide more details on data volumes and desired integration method for each system?

Response 38: There will not be direct integration. The source systems will provide reports/data to be ingested by the platform. The current daily load file (trial balance) used is 3 – 5 MBs.

Question 39: The task to "generate budgets for SharePoint items" lacks technical definition. Can the Government clarify the needs on whether SharePoint serves as a data source, a workflow trigger, or a distribution site, and what specific SharePoint lists/objects are involved.

Response 39: SharePoint stores a list of procurement actions, the Advanced Acquisition Plan (AAP), tracked by FirstNet’s Procurement Office (CPO). During budget formulation, an ideal workflow would involve loading the AAP to populate initial

9 | P a g e amounts and timing for known procurements. As the budget formulation process unfolds, an export of the AAP can be provided back to SharePoint and CPO for their tracking purposes.

SharePoint can serve as a data source, workflow trigger or distribution sites.

Question 40: The RFI outlines a requirement to support the entire finance lifecycle, which includes implementing workflows to load FASB beginning balances and current-year trial balances. Can the Government clarify how many years of historical financial data from the current systems will need to be mapped and migrated into BFACT?

Response 40: Reference Response 2.

Question 41: The document includes a specific task heading titled "SensibleAI Predictive Analytics". Under this requirement, the platform must ingest secure telemetry and configure machine learning baselines. Can the Government provide more details on this, such as: Is AI currently implemented at FirstNet; Is AI currently implemented in BFACT.

Response 41: Yes, SI is currently implemented at FirstNet Authority. No, SI is not currently implemented in BFACT.

Question 42: The technical capability narrative must describe services for a base period of one year and four one-year option periods. The RFI omits a target award date or anticipated period of performance start date, which is critical for providing the requested estimated timeline and major milestones for implementation. Can the Government provide an estimated timeline for project start date and Go Live date(s)?

Response 42: Reference Response 8. Additionally, as stated within the RFI, “This notice is for planning purposes only and is not a Request for Proposal (RFP)/Request for Quotation (RFQ) or an obligation on the part of the FirstNet Authority for conducting a follow-on acquisition. The FirstNet Authority does not intend to award a contract on the basis of this notice or otherwise pay for the information requested.”

Question 43: The RFI states a requirement for a COTS product to manage CFO, HR, OCIO, and OCPO needs, but also outlines extensive implementation, configuration, and Tier 2/3 O&M services. Is FirstNet seeking a new COTS software platform, an expansion/upgrade of its existing OneStream EPM deployment, or system integration / professional support services?

Response 43: Reference Responses 11 and 21.

Question 44: The specification requires loading FASB beginning balances and capturing FASAB and FASB adjustments. FASB (commercial) and FASAB (federal) follow distinct accounting standards and financial statement structures. Does FirstNet require full dual-reporting capabilities, or is primary financial statement reporting governed strictly by FASB or FASAB?

10 | P a g e

Response 44: FirstNet Authority requires full dual-reporting.

Question 45: Under NPSBN, actuals integration cites "BAS" (Department of Commerce Business Applications Solution), while Integration & Security references "Oracle EBS". Given the Department of Commerce's migration to BAS (SAP-based), please clarify if Oracle EBS remains an active integration endpoint or if BAS is the sole ERP integration target.

Response 45: Oracle EBS is one component of the overall BAS system. BAS included Oracle EBS, PRISM, EDW (Tableau), and Sunflower.

Question 46: The notice designates NAICS 541519 (Information Technology Value Added Resellers). However, the scope involves significant system customization, ML baseline configuration, data integration (PRISM, BAS, SharePoint), and Tier 2/3 O&M support. Should NAICS 541512 (Computer Systems Design Services) or 541511 (Custom Computer Programming) be considered for follow-on acquisitions?

Response 46: For the purpose of the RFI, the designated NAICS is 541519 – Other Computer Related Services; Information Technology Value Added Resellers.

Question 47: Vendors are required to cover 7 comprehensive sections, including narratives for 11 functional domains, 3 detailed past performance references with 6 sub-criteria each, an implementation/transition roadmap, and line-item pricing breakdowns, all within a strict 10-page limit. Will FirstNet consider expanding the page limit or excluding past performance and pricing from the page count?

Response 47: Reference Response 16.

Question 48: How much data will you be ingesting per day? This should be the raw data (typically logs or metrics) that will be brought in from other systems, typically measured as GB or TB per day. It is OK if you don't have an exact data volume, but the more accurate the information you can provide the more accurate our sizing recommendation will be. If you only know the number of events per day, we need to know the average size of the events.

If you don't know your data volumes or events per day, can you provide the number of servers, workstations, and devices from which you will be collecting events and logs?

Response 48: The current daily load file is 3 -5 MBs. Combining all other potential data sources would still be a relatively small amount of data.

Question 49: How long would you want to retain the data in the required solution?

Response 49: Minimum of 10 years and in accordance to the Records Retention and Schedule.

11 | P a g e

Question 50: What are the data compliance requirements? (e.g., FedRAMP High, CMMC, etc.)

Tracking FedRAMP Moderate, are there any other requirements?

Response 50: FirstNet Authority’s environment is FedRamp Moderate.

Question 51: Do you have different performance requirements based on the age of the data?

Response 51: No

Question 52: Will the Stack run in a physical or virtual environment?

Response 52: Virtual environment

Question 53: Will the Stack run on-premise, in a public or private cloud, or both?

Response 53: The solution shall be cloud based.

Question 54: Are you looking to deploy with a management or orchestration capability?

Response 54: FirstNet Authority is looking to deploy both.

Question 55: How many people will be querying?

Response 55: Reference Response 12 - no more than 20.

Question 56: What is the total number of Endpoints/servers in the environment?

Response 56: No more than 300 endpoints

Question 57: Are there any hardware limitations that we should be aware of such as CPU, RAM or Storage?

Response 57: None at this time

Question 58: Oracle EBS version, hosting location (on-prem, DoC data center, cloud), and whether direct database, API, or file-based extracts are permitted?

Response 58: Currently, only file-based extracts are permitted.

Question 59: SharePoint environment (Online in GCC/GCC High, or on-prem) and which budget items live there and in which format?

12 | P a g e

Response 59: FirstNet Authority’s SharePoint environment and all systems are GCC Moderate. SharePoint holds the Advanced Acquisition Plan (AAP), which stores procurement action data in a SharePoint list.

Question 60: What “other validated sources used by the Federal Government” does the RFI have within scope? Should this be considered in scope for the first round of implementation?

Response 60: Other validated sources used by the Federal Government may include, but not be limited to: Oracle, ServiceNow, Microsoft, etc. Yes, this should be considered in scope for the first-round implementation.

Question 61: Data classification: is any data CUI, Privacy Act, or sensitive financial pre-release (e.g., pre-audit statements)?

Response 61: Payroll/personnel data is PII and NPSBN data is considered sensitive.

Question 62: What are the Required environments (dev/test/prod)?

Response 62: dev/test/prod