24RFI0004_RFI_UpperLevelMathematics_072924.pdf

REQUEST FOR INFORMATION - HE125424RFI0004

High School Mathematics - Upper-Level Instructional Resources Advanced Quantitative Reasoning, Financial Algebra, Discrete Mathematics, Precalculus, AP® Precalculus, AP® Calculus AB/BC, and AP® Statistics

1.0 Description

1.1 The Department of Defense Education Activity (DoDEA) seeks information on how interested contractors could provide who can provide instructional resources and related professional learning and technical support for one or more of the seven courses listed in Table 1.

Table 1: Estimated Enrollment by Course and Year

Course Names Year 1 Year 2 Year 3 Students Teachers Students Teachers Students Teachers

Advanced Quantitative Reasoning 185 8 212 10 236 12 Financial Algebra 1,573 45 1,730 48 1903 51 Discrete Mathematics 191 10 210 12 231 14 Precalculus 1145 46 1155 47 1165 48 Advanced Placement (AP®) AP® Precalculus 1038 45 1141 47 1255 49 AP® Calculus 485 24 497 25 511 26 AP® Statistics 480 24 495 25 505 26

Course Names Year 4 Year 5 Year 6 Students Teachers Students Teachers Students Teachers

Advanced Quantitative Reasoning 260 14 286 16 314 18 Financial Algebra 2093 54 2302 57 2532 60 Discrete Mathematics 254 16 280 18 308 20 Precalculus 1175 48 1185 49 1195 50 Advanced Placement (AP®) AP® Precalculus 1380 51 1513 53 1664 55 AP® Calculus 526 27 557 29 573 30 AP® Statistics 520 27 535 28 550 29

1.2 This request for information (RFI) is issued solely for information and planning and does not constitute a request for quote (RFQ) or a promise to issue an RFQ in the future.

The Government will not pay for any information or administrative costs incurred in response to this RFI;

i.e., all costs associated with responding to this RFI are solely the responder’s responsibility.

Not responding to the RFI does not preclude a contractor from responding to a future RFQ/RFP. If a solicitation is released, it will be synopsized on the SAM.gov website. Potential responders are responsible to monitor the relevant site for additional information pertaining to this requirement.

2.0 Overview

2.1 Agency: For school year 2024-25, the Department of Defense Education Activity (DoDEA) will provide PK-12 instruction in 161 schools to approximately 67,000 dependents of active-duty military and civilian employees. In the Americas, DoDEA operates 50 schools located in seven states, Puerto Rico, and Cuba. In Europe and the Middle East, DoDEA operates 64 schools located in Germany, England, Netherlands, Belgium, Spain, Italy, Turkey, and Bahrain. In the Pacific, DoDEA operates 46 schools located in Korea, Japan (mainland and Okinawa), and Guam. DoDEA also operates a fully accredited virtual high school with teaching hubs in each DoDEA region.

DoDEA's curriculum, resources and student achievement scores on standardized assessments compare favorably to those of high-performing US public school systems.

2.2 Background: For the first time, DoDEA is seeking to procure instructional resources for AP® Precalculus classes systemwide. For the expiring contracts of the other six courses, DoDEA is recompeting them.

2.3 Requirements: DoDEA requires print and digital instructional resources and related support for one or more of the seven courses listed above for DoDEA grades 9-12 students, teachers, school-based support teachers, and subject matter experts (SMEs, above-school-level specialists); aligned to the DoDEA’s Mathematics standards found at https://www.dodea.edu/curriculum/mathematics/standards.

2.3.1 Advanced Quantitative Reasoning (AQR): DoDEA requires the publisher’s most recent edition for print and digital resources, having the latest copyright date no earlier than 2022, curricular resources that align to a blend of plus and non-plus Common Core Standards for Mathematics (CCSSM).

Provide a complete print and digital standards alignment correlation document showing how all the proposed resources align to the CCSS —a blend of plus and non-plus CCSSM. DoDEA requires instructional resources that:

1) Are based on the most current research-based best practices for mathematics instruction aligned to the National Council of Teachers of Mathematics (NCTM).

2) Align and address the expectations of the DoDEA College and Career Ready Standards for Mathematics and Standards for Mathematical Practice, making connections within and across content, for what students should know and be able to do for the course.

3) Are designed to help students apply mathematical content to solve novel, ill-defined, and/or complex problems that arise in industry, the workplace, and everyday life.

4) Include print and digital resources and integrate technology and tools to help students build both 21st century technology and critical thinking reasoning, and modeling skills.

5) The core instructional resources must be print and digital and include formative and summative assessments, digital only is not sufficient.

6) Provide guidance to help teachers differentiate instruction to meet the needs of all learners, including English learners and students who require accommodations based on their individual education plans.

7) Provide pacing recommendations/guide for sequencing of instruction for course content (i.e. days, sessions, units, topics, etc.)

8) Include instructional strategies aligned to the NCTM Principles to Action, Math Teaching Practices to support reasoning, modeling, and conceptual understanding of concepts.

2.3.2 Discrete Mathematics: DoDEA requires the publisher’s most recent edition of print and digital resources, having the latest copyright date no earlier than 2022 of curricular resources and most closely aligned with the CCRM standards. DoDEA requires instructional resources that:

1) Are based on the most current research-based best practices for mathematics instruction aligned to the National Council of Teachers of Mathematics (NCTM).

2) Align and address the expectations of the DoDEA College and Career Ready Standards for Mathematics and Standards for Mathematical Practice, making connections within and across content, for what students should know and be able to do for the course.

3) Are designed to help students apply mathematical content to solve novel, ill-defined, and/or complex problems that arise in industry, the workplace, and everyday life.

4) Include print and digital resources and integrate technology and tools to help students build both 21st century technology and critical thinking reasoning, and modeling skills.

5) The core instructional resources must be print and digital and include formative and summative assessments, digital only is not sufficient.

6) Provide guidance to help teachers differentiate instruction to meet the needs of all learners, including English learners and students who require accommodations based on their individual education plans.

7) Provide pacing recommendations and a guide for sequencing of instruction for course content (i.e. days, sessions, units, topics, etc.)

2.3.3 Financial Algebra: DoDEA requires the publisher’s most recent edition of resources, having the latest copyright date no earlier than 2022, that align to the aforementioned standards with content that can be organized into two semesters and that can be taken simultaneously or in either order.

DoDEA requires instructional resources that:

1) Are based on the most current research-based best practices for mathematics instruction aligned to the National Council of Teachers of Mathematics (NCTM).

2) Align and address the expectations of the DoDEA College and Career Ready Standards for Mathematics and Standards for Mathematical Practice, making connections within and across content, for what students should know and be able to do for the course.

3) Are designed to help students apply mathematical content to solve novel, ill-defined, and/or complex problems that arise in industry, the workplace, and everyday life.

4) Include print and digital resources and integrate technology and tools to help students build both 21st century technology and critical thinking reasoning, and modeling skills.

5) The core instructional resources must be print and digital and include formative and summative assessments, digital only is not sufficient.

6) Provide guidance to help teachers differentiate instruction to meet the needs of all learners, including English learners and students who require accommodations based on their individual education plans.

7) Provide pacing recommendations/guide for sequencing of instruction for course content (i.e. days, sessions, units, topics, etc.)

2.3.4 Precalculus: Ensure that all materials are aligned to the CCRSM and explicitly fill the gap between

CCRSM Algebra II (as defined by CCSSM Appendix A and AP Calculus Course Description 2020).

Provide the publisher’s most recent edition of resources, having the latest copyright date no earlier than 2022, that align to the aforementioned standards. DoDEA requires instructional resources that:

1) Are based on the most current research-based best practices for mathematics instruction aligned to the National Council of Teachers of Mathematics (NCTM).

2) Align and address the expectations of the DoDEA College and Career Ready Standards for Mathematics and Standards for Mathematical Practice, making connections within and across content, for what students should know and be able to do for the course.

3) Are designed to help students apply mathematical content to solve novel, ill-defined, and/or complex problems that arise in industry, the workplace, and everyday life.

4) Include print and digital resources and integrate technology and tools to help students build both 21st century technology and critical thinking reasoning, and modeling skills.

5) The core instructional resources must be print and digital and include formative and summative assessments, digital only is not sufficient.

6) Provide guidance to help teachers differentiate instruction to meet the needs of all learners, including English learners and students who require accommodations based on their individual education plans.

7) Provide pacing recommendations and a guide for sequencing of instruction for course content (i.e. days, sessions, units, topics, etc.)

2.3.5 Advanced Placement Courses: AP® Precalculus, AP® Calculus AB/BC, and AP® Statistics:

Ensure that all materials meet the College Board 2024 - AP® Precalculus (2023), AP® Calculus AB/BC (2020) Course Description requirements, and AP ®Statistics (2020) Course Description requirements, respectively. Provide the publisher’s most recent edition resources, having the latest copyright date no earlier than 2022. DoDEA requires instructional resources that:

1) Align to the current College Board standards, per https://www.apcentral.collegeboard.org for the above mentioned AP® mathematics courses.

https://www.thecorestandards.org/assets/CCSSI_Mathematics_Appendix_A.pdf https://apcentral.collegeboard.org/media/pdf/ap-calculus-ab-and-bc-course-and-exam-description.pdf https://apcentral.collegeboard.org/courses

2) Provide a complete digital standards alignment correlation document showing how the contractor’s proposed curricular resources align to the College Board requirements for each of the above-mentioned AP courses.

3) Provide a textbook instructional resource (print and digital) that meets the requirements of both AP Calculus AB and BC

4) Are based on the most current research-based best practices for mathematics instruction aligned to the National Council of Teachers of Mathematics (NCTM).

5) Are designed to help students apply mathematical content to solve novel, ill-defined, and/or complex problems that arise in industry, the workplace, and everyday life.

6) Include print and digital resources and integrate technology and tools to help students build both 21st century technology and critical thinking reasoning, and modeling skills.

7) The core instructional resources must be print and digital and include formative and summative assessments, digital only is not sufficient.

8) Provide guidance to help teachers differentiate instruction to meet the needs of all learners, including English learners and students who require accommodations based on their individual education plans.

9) Include instructional strategies aligned to the NCTM Principles to Action, Math Teaching

2.3.6 All Courses: DoDEA requires the following:

1) The publisher’s most recent edition of curriculum resources and most closely aligned with the standards, which communicate current research-based information and reflect modern best practices in a standards-based classroom (e.g. learning environment and classroom culture, teacher facilitating student discourse, reasoning, modeling, Standards for Mathematical Practice, NCTM Principles to Action Eight Teaching Practices, etc.).

2) Curricular materials that meet DoDEA’s Mathematics standards, as defined here:

http://www.dodea.edu/Curriculum/Mathematics/Standards.cfm. (See Background 1.2.2 and 1.2.3 for Standards Alignment Correlation requirement.)

3) Print and/or related digital curricular resources of the publisher’s most recent edition with a copyright date no earlier than 2022.

4) Digital/online access to resources for teachers, students, administrators, and above-school-level subject matter experts (district and headquarters mathematics ISSs).

5) Standards alignment Correlation: Complete standards alignment correlation document (digital format is acceptable) showing how all proposed materials align to DoDEA’s CCRSM (http://www.dodea.edu/Curriculum/Mathematics/Standards.cfm), and the College Board’s Advanced Placement Course Descriptions for AP Statistics (2020), AP Precalculus (2023), AP Calculus (2020).

6) Student Resources: Student instructional resources that include:

Both tasks and problems, where students learn through reasoning and modeling, that build conceptual understanding, procedural skills and fluency for real-world application.

Tasks and problems that engages students in meaningful mathematics discussions and student discourse.

7) Teacher Resources: Teacher materials that:

Explicitly support the student resources, guiding teachers to facilitate a mix of instructional approaches for a variety of learners (e.g. using multiple representations, using low-floor high-ceiling tasks that are highly engaging and allow multiple entry points for students, facilitating discourse, etc.).

Provide planning resources within the teacher resources to support the lesson planning process (i.e. pacing support/guides, unit/topic planner, lesson-level facilitation notes, professional learning videos).

8) Assessments: Provide a variety of curriculum-embedded assessment options, to include:

Item banks from which teachers can create and customize their own assessments aligned to course DoDEA CCR Standards. Examples include pre-assessment, diagnostic, formative, summative, performance tasks, standardized, and self-assessment resources.

https://www.dodea.edu/curriculum/mathematics/standards https://www.dodea.edu/curriculum/mathematics/standards

Assessments that include aligned rubrics, sample answers, and scoring guidelines that provide sufficient guidance for interpreting student performance.

9) Differentiated Instruction and Supports: Differentiated interventions, strategies, and supports for English learners, students with individualized education programs (IEP), and a broad range of learners.

10) Print and/or Digital Resources: Hands-on print materials and/or digital resources for students and teachers:

Utilize a visual design of print and digital materials that is engaging and easy for students and teachers to access and navigate. Solely digital offerings shall not require each student his/her own digital device during school (a “one-to-one program”) and shall allow for teachers to deliver instruction offline as well (by downloading lessons, printing student work, etc.)

Ensure materials are free of racial, color, national origin, age, disabling conditions, sexual, religious, and ethnic bias, and present a balanced coverage of multi-cultural contributions and representation.

11) Focus and Coherence: DoDEA requires curricular materials designed to deliver student learning that is focused on important work and coherent with other mathematics along students’ learning paths:

Materials provide the appropriate level and type of scaffolding, differentiation, intervention, and support for a broad range of learners with the gradual removal of supports to allow students to demonstrate their understanding independently.

Materials explicitly relate and make connections to course concepts for prior knowledge from earlier courses so that prior knowledge becomes recognized and extended to accommodate new understanding and future learning.

12) Rigor and Balance: DoDEA requires materials that:

Develop student conceptual understanding of key mathematical concepts beyond a simple knowledge of a topic or the ability to replicate steps. Materials are designed to help students attain the fluency and procedural skills required by the standards.

Balance conceptual understanding and procedural fluency with applications that require reasoning and mathematical modeling of problems that occur in everyday life and the workplace (i.e. real-world application).

2.3.7 Product Training, Professional Learning, and Program Support Tools: Provide virtual professional learning to enable teachers to implement the program effectively. Digital modules are included in the base period of the contract. DoDEA requires:

2.3.7.1 Professional Learning (PL) Plan that includes

1) High-quality PL using the assumption that twelve hours of live virtual professional learning spread over four days occurs in Base Year 1. Finalize draft plan based on written feedback from the contracting officer’s representative (COR).

2) Draft PL outline and summary. Finalize the draft outline and webinar presentation within 10 days after receipt of written feedback from the COR.

3) Digital handouts and resources unless permission is granted in writing by the COR for print materials.

4) Draft session evaluation to be given to participants upon completion of the professional learning. Note: DoDEA will finalize and administer the session evaluation.

2.3.7.2 School Administrator Overview

1) DoDEA requires a 50-60 minute asynchronous webinar or digital module that prepares school administrators to do informed classroom observations/walkthrough.

2) Provide a digital archive of the professional learning (Video or SCORM® package-compliant, per https://adlnet.gov/policy/ for asynchronous viewing for participants who are unable to attend the live professional learning.

3) Include an implementation monitoring tool with coaching strategies for building administrators and above-school level support staff.

2.3.7.3 Product Training

https://adlnet.gov/policy/

1) DoDEA requires asynchronous webinars and/or digital modules that present such general information as an overview of each proposed course and how to navigate the website.

2) On-Demand Coursework, Videos, Etc.: Vendor-provided videos, walk-throughs, etc.

must be made available to be embedded in coursework that participants can access through DoDEA’s Learning Management System (LMS), Schoology. Coursework shall expect participants to engage with content that helps them better understand the mathematics, instructional approaches, and/or organization of the curricular resources.

Coursework shall be built to engage participants in activities, scavenger hunts, discussion questions, etc. through the LMS.

2.3.7.4 Professional Learning—For each course, DoDEA requires the following:

1) Present live virtual professional learning including digital facilitator guides, as a dry run to DoDEA HQ personnel. Final the PL based on written feedback provided by the

COR.

2) Provide four 3-hour trainings during the normal business hours of each DoDEA region (US, Europe, and Pacific) in Base Years 1, 2, and 3—a total of 36 hours per year. Note:

Exact dates and times will be finalized post-award in consultation with the Contractor.

The normal business hours for each region are shown below:

o Americas: Eastern Standard Time (EST) 8am – 3:30pm o Europe: Central European Time (CET) 8am – 3:30pm o Pacific: Japan Standard Time (JST) 8am – 3:30pm

3) Ensure the live virtual trainings are accessible using software/web extensions that are subscription-free to DoDEA. See the Technical Requirements (below).

4) Cover—at a minimum—the following four topics: (1) overview and exploration of instructional resources, (2) use and implementation of resources to intentionally and purposefully plan and facilitate interventions, (3) best practices for classroom implementation, and (4) gathering student data to document progress and inform instruction utilizing the components of the Contractor’s resources.

5) Live webinars must be available for initial implementation and/or for teachers new to teaching accompanying courses. Webinars must be available for at least three time zones (EST, CET, JST) across the world. Webinars shall be two hours at minimum, six hours (seven hours with a one-hour lunchbreak) at maximum. Webinars shall acquaint participants with navigation of materials, engage them in pedagogical approach of materials, and allow for questions from participants. Webinars are to be hosted by the vendor using their virtual meeting platform and accommodate at minimum 50 participants.

2.4 Anticipated Period of Performance: 16 Jul 25 - 15 Jul 31

3.0 Responses

3.1 Interested parties are requested to respond to this RFI using Microsoft Word or a compatible format. We fully realize that you will be able to give a much more refined answer once the solicitation is released, but we hope you can provide some general information in this regard based on your experience. In that regard, please include the following information:

3.1.1 Administration & Subcontracting

1) Company name, DBA name (if applicable), mailing address, and CAGE code

2) Company’s North American Industry Classification System (NAICS) codes

3) Designated point of contact name, title, phone number, and email address.

4) Business type based upon the NAICS codes your business uses to provide the requested services, e.g., large business, small business, 8(a)-certified business, etc. (Refer to Federal Acquisition Regulation 19 for additional information on small business size standards.)

5) Describe, if applicable, any subcontracting possibilities. Note: The prime must perform at least 51 percent of the work.

3.1.2 Capability: Briefly describe your organization’s capability to provide the required resources and services.

3.1.3 Professional Learning: Briefly describe your experience providing virtual professional learning for the proposed courses. If available, please provide a link to professional learning webinars and/or digital modules.

3.1.4 Pricing:

3.1.4.1 Provide a non-binding price estimate or estimated range—that will be kept confidential.

See the Pricing attachment.

3.1.4.2 Please provide any block/tiered pricing estimate your company can offer to meet the requirements of this RFI.

3.1.5 Recommendations: Please provide any recommendations you believe might improve the Government’s performance work statement.

3.2 Please limit responses—not including pricing information—to seven pages per the first proposed course and five additional pages for each other proposed course. For example, a vendor offering three courses would have a 17-page limit.

3.3 Proprietary information, if any, should be minimized and be clearly marked. Please segregate the proprietary information. Note: All submissions become Government property and will not be returned.

4.0 Industry Discussions

DoDEA representatives may or may not choose to speak with potential offerors. Such discussions would only be intended to get greater clarification on such things as capability and pricing.

5.0 Questions

Questions regarding this announcement shall be submitted in writing by email to the Contract Specialist, Laura Holder and Contracting Officer, Mr. Alim Koroma at the following email addresses: laura.holder@dodea.edu and alim.koroma@dodea.edu, respectively. Verbal questions will not be accepted. Questions will be answered via email and will not contain proprietary or classified information. The Government does not guarantee that questions received after close of business on Friday, August 9, 2024 will be answered.

6.0 Summary

This RFI is issued solely for information and planning and does not constitute a RFQ/RFP. The information herein is subject to change and not binding on the Government. Release of this RFI is not a commitment that DoDEA will issue an RFQ/RFP in the future or that it authorizes costs to be incurred for which reimbursement would be required or sought. All submissions become Government property and will not be returned.

SUSPENSE: Submit your RFI response no later than 1PM EST on Thursday, August 15, 2024. Email your response to the Contract Specialist, Laura Holder and Contracting Officer, Alim Koroma at the following email addresses: laura.holder@dodea.edu and alim.koroma@dodea.edu, respectively.

TECHNICAL REQUIREMENTS

The Contractor shall comply with the applicable technical requirements detailed below.

1.1 Software and Cloud Security Requirements—The Contractor shall:

1.1.1 Ensure all online resources, cloud-based services and instructional software meet Department of Defense

(DoD) and DoDEA cybersecurity requirements as defined below. Note: Software, cloud services and associated websites are rigorously tested to ensure no security risks are posed to DoDEA infrastructure and its users.

1.1.2 Complete the Cloud Services questionnaire that was submitted as part of the proposal submission and provide copies of and/or access to any software listed in the proposed solution.

1.1.3 Ensure on-premises software support post-installation integration of the necessary Security Technical Implementation Guides (STIG) for applicable systems and applications, including Microsoft Windows 10, Microsoft Windows Server 2016, Windows Server 2019, Microsoft Windows IIS, Apache, Oracle databases, and Microsoft SQL Server databases. Note: The application to obtain the STIG Viewer is found at https://public.cyber.mil/stigs/srg-stig-tools/, and the STIGs themselves may be downloaded from https://public.cyber.mil/stigs/downloads/.

1.1.4 Ensure its content accessible from the web is compatible with the following browser platforms: Google Chrome, and Edge. Ensure that any applicable STIGs are implemented.

1.1.5 Ensure on-premises software, which is subject to static and dynamic analysis testing, imposes no risk to DoDEA systems, users and/or data. Note: DoDEA assesses software products to ensure compatibility with existing system configurations and software, testing may also include reverse engineering analysis.

1.1.6 Provide a plan of actions and milestones (POA&M) to mitigate any cybersecurity findings resulting from non-compliant and/or vulnerable components in 30 calendar days of written notification from DoDEA.

1.1.7 Be able to meet Federal Risk and Authorization Management Program (FedRAMP) Level 2 standards for all proposed software/digital resources and ensure that any third-party resources that are part of its proposed solution also meet the FedRAMP Level 2 standard. For more information on FedRAMP, see the following URL: www.fedramp.gov. Participate, if required, in interviews and deep system architecture inspections.

Per DoD policy for cloud-based services, DoDEA conducts a supplemental series of validations, which closely mirror the FedRAMP Internet Cloud vetting processes. Contractor participation/ cooperation is normally required to complete this process.

On a case-by-case basis, DoDEA may honor requests to waive the FedRAMP Level 2 requirement.

1.2 System Requirements—The Contractor shall:

1.2.1 Provide, per Section 1.1 (above), any software installed and/or accessed in or by a DoDEA system, network whether stand-alone or web-based, is compatible with the standards cited herein.

1.2.2 Provide minimum desktop/server system technical specifications, reference architectures, networking specifications and diagrams, and applicable systems configuration documentation for the proposed solution.

1.2.3 Provide software that is compatible with the following minimum baseline:

Specifications Minimum Memory 4 GB

Hard Drive 100 GB

Processor Intel® Core™ i5-8365U Processor 8th Generation (up to 4.1GHz, 6MB cache) equivalent or better (Must show benchmark/passmark scores)

Video Graphics Integrated Intel HD Graphics 620 (1920x1080) equivalent or better Operating System Windows 11

Browser Environment Chrome, Edge, Edge Chromium

1.2.4 Provide software that is completely functional on a standard DoDEA desktop without the need or requirement for administrative-level user rights and/or permissions or the requirement to use or insert external media to execute the software.

1.2.5 Provide software that does not require modifications to folder permissions while executing.

1.2.6 Provide, if applicable, software packages that support unattended installation methods used by enterprise software packaging and deployment systems. Note: DoDEA currently distributes software packages via Microsoft’s System Center Configuration Manager (SCCM) and Microsoft Intune. Note: All older 16-bit software are automatically denied.

1.3 Data Management Requirements—The Contractor shall:

1.3.1 Provide a mechanism for batch administration and automation of routine data management tasks via flat file import, or representational state transfer (REST) based web service application programming interfaces (APIs). The mechanism shall provision and manage data objects within the Contractor’s system, including but not limited to organizational structures, student accounts, staff accounts, courses, and class rosters.

1.3.2 Provide all necessary documentation and assets to facilitate batch administration and automation of routine data management tasks, including but not limited to roster template files (i.e., comma separated value templates); data element/field definitions documentation; data interchange formats and schemas (XML/ JSON); and/or data dictionaries for the purpose of mapping organizational student information system (SIS) data to the Contractor’s required input formats.

1.3.3 Provide a single point of contact to support DoDEA in performing the required data integration activities within the Contractor’s system.

1.3.4 Configure DoDEA enterprise within its system and/or databases as the appropriate organizational entity (i.e., region, district, school) upon a request in writing from the contracting officer’s representative (COR).

Note: DoDEA’s organization hierarchy consists of the following: one system, three regions, nine districts, 62 communities, and 161 schools, including the K-12 virtual school programs.

1.3.5 Participate in a technical meeting with DoDEA within ten business days after award for the purposes of preparing for onboarding of new services and initial configuration of administrator-level accounts.

1.3.6 Ensure the transfer of any Sensitive, Confidential data including but not limited to PII data be transferred in a secure means meeting any requirements set by DoDEA’s Chief Information Security Officer (CISO).

1.4 DoDEA Software License Keys: The Contractor shall provide (1) license keys and electronic downloads for software required under this Contract to the COR and (2) software directly to DoDEA schools, districts, or regions only if explicitly required to do so in the contract or in writing by the COR.

1.5 Cybersecurity Supporting Elements/Requirements and Scalability—The Contractor shall:

1.5.1 Comply with the same Federal law and DoD policies and guidance to which DoDEA is subject that include but are not limited to the cybersecurity requirements defined in the following documents:

DoD Directive (DoDD) 8500.01E, Information Assurance, be found at the following URL:

https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/850001_2014.pdf.

DoD Security Technical Implementation Guidance (STIG), which may be found at the following

URL: https://public.cyber.mil/stigs/downloads/.

DoD Risk Management Framework (DODRMF) per DoD Instruction 8510.01, which may be found at https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/851001p.pdf?ver=2019-02- 26-101520-3004.5.2.

1.5.2 Provide security patches/upgrades to include third-party applications in response to public-released security vulnerabilities associated with its software solution. Provide a POA&M for any security vulnerabilities within five business days of discovery. Software upgrades/patches shall be included in the licensing cost and be performed at the least disruptive times as determined by DoDEA in writing. Note: Any exception to this requirement must be approved in advance and in writing by DoDEA’s Chief Information Officer (CIO) or designated official.

1.5.3 Protect DoDEA data against all cyberattacks, notifying DoDEA within 72 hours of an identified and confirmed breach/intrusion.

1.5.4 Perform security incident investigations upon identification of an event or at the request of DoDEA.

1.5.5 Address all information assurance vulnerability messages (IAVM) in the defined timelines to include IA vulnerability alerts (IAVA), IA vulnerability bulletins (IAVB), and technical advisories (TA).

1.5.6 User passwords must not be readable by anyone having access to the system.

1.5.7 Ensure any portion of its solution that involves Internet access by DoDEA students complies with the relevant requirements of the Children's Internet Protection Act, Public Law 106-554, § 1(a)(4) [Div. B, Title XVII, § 1701], Dec. 21, 2000, 114 Stat. 2763, 2763A-335. All Contractor personnel that have access or may potentially have access to DoDEA data in any form shall be US citizens. Note: If its solution does not involve Internet access by DoDEA students, please ensure the following are included:

1) Maintaining system security IAW the latest versions of the (1) DoD Cloud Computing Security

Requirements Guide, (2) Family Educational Rights and Privacy Act (FERPA), and (3) Protection of Pupil Rights Amendment (PPRA).

2) Providing a solution robust enough to serve the needs of a large community of learners dispersed across the world using a variety of bandwidths and scalable to meet future growth, both in terms of instruction and the number of users.

3) Ensuring Contractor staff who have access to DoDEA’s student, teacher and/or staff personally identifiable information take the DoD Privacy Act/Personally Identifiable Information (PA and PPI/PII) training before gaining access to the data and yearly thereafter. Provide copies of the certificates to the COR which can be audited at any time by the CISO or his/her designee.

1.6 Program and System Integration—The Contractor’s solution shall:

1.6.1 Provide Single Sign-On (SSO) Capabilities / Platform which (1) integrates with an Industry Standard

SSO login solution. (ClassLink, Google, Azure, etc.); (2) supports Oauth 2.0, Security Assertions Markup Language (SAML) for integration with Azure, or Google; and (3) authenticates using Azure Active Directory (AD) or Google AD. Authenticates using Azure Active Directory (AD) or Google AD.

1.6.2. Support industry-standard data rostering standards via ClassLink and standard data formats such as OneRoster.

1.6.3. Ensure that data storage, handling, and security meet the following minimum standards:

1) DoDEA’s information and data shall be secured in data center located in the United States.

2) The system, including its server(s) and network devices, shall be in an environmentally controlled and secure facility under controlled circumstances (e.g., using authorized personnel access lists, ID cards, entry logs, etc.).

3) All Contractor personnel that have access or may potentially have access to DoDEA data in any form shall be US citizens, including any third-party penetration (PEN)/security testers.

4) All data transit shall be secured with Transport Layer Security (TLS) encryption.

5) All data at rest shall be secured with Advanced Encryption Standard (AES)-256 encryption.

1.6.4 Ensure that data integration includes the following:

1) Automated industry standard form of data integration using Representational State Transfer Application

Program Interface (RESTful API), Learning Tools Interoperability (LTI), or Secure File Transfer Protocol (SFTP) data sets (ClassLink, OneRoster, etc.).

2) Encryption of DoDEA’s data at rest to include unique encryption keys for each customer on systems hosting multiple customers.

3) Notification of DoDEA in writing within 72 hours of any changes made to corporate policies for data protection.

4) Use of only masked student data in a non-production environment.

5) Integration scheduling that meets DoDEA’s required timeframes.

6) Provision of fully automated data uploads per Agency schedule(s) and Agency requirements.

7) Support of SFTP capabilities using a single set of login credentials.

8) Provision of a single data set of DoDEA information. Note: The Contractor’s solution shall support

DoDEA at all levels: school, community, district, region, and HQ.

9) Maintenance of a backup and restore plan for DoDEA data in the event of a disaster.

10) Provision of detailed feedback of what caused errors if an integration transmission results in errors.

1.6.5 System Features—The system shall:

1) Allow user accounts to be created automatically based on a file provided by DoDEA either nightly or on another pre-determined scheduled feed.

2) Allow DoDEA to be able to choose the format of user login identification, e.g., an email address, and be able to create manual accounts, if needed.

3) Require the user—for manually created accounts—to reset the password on the user’s initial login or, upon request, a password reset.