Combine_RFI_and_Attachments.pdf

Office of Financial and HR IT Services (IB)

Pegasys Hosting and Operations & Maintenance Contracts

RFI: HE1AA-I-14-0025

Pegasys RFI (2014-07-07) 1

Pegasys Request for Information (RFI)

1. BACKGROUND

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This is not a solicitation announcement. The purpose of this synopsis is to gain knowledge of interest, capabilities, and qualifications of various companies. It is not to be construed as a commitment by the

Government. A contract will not be awarded as a result of this RFI. Since this is a RFI announcement, no evaluation letters and/or results will be issued to the respondents. No reimbursement will be made for any costs associated with providing information in response to this synopsis or any follow up information requests. Failure to respond will not in any way prevent a potential offeror from participation in future solicitations. The purpose of this RFI is to conduct market research on the subject of hosting and operations and maintenance (O&M) support services for the Momentum Financials® System, specifically:

A. Collect information about market capabilities, including small businesses, for hosting services and O&M support services for CGI Momentum Financials®;

B. Identify potential approaches for meeting GSA’s hosting and O&M needs for its CGI

Momentum Financials® application, known as Pegasys; and

C. Obtain industry insight and recommendations for using cloud computing to support hosting and O&M needs for Pegasys.

All information provided will be given consideration and may influence the development of future proposal requests.

2. DESCRIPTION

GSA’s Office of the Chief Information Officer (OCIO), Office of Financial and HR IT Services

(IB) strives to provide the best, most cost-effective, secure financial and human resource (HR) systems platform in the Federal government. An integral component of this mission is the need to develop and sustain an effective system of internal controls designed and implemented to ensure the confidentiality, integrity, and availability of OCIO-managed systems, consistent with

Federal Financial and HR system requirements, Federal accounting standards, and transactional accounting guidelines.

The primary goal of this RFI is to explore application and system support models that reduce the hosting and O&M costs of Pegasys, GSA’s version of Momentum Financials®, while maintaining adequate performance and support service levels including availability and security.

Respondents should include responses for those requirements and capabilities they are able to provide.

GSA considers the following as key objectives for O&M support:

A. Successful support for a Federal, enterprise-wide financial management system to ensure that the application is free of major errors and that minor errors are minimized and quickly resolved;

Pegasys RFI (2014-07-07) 2

B. Successful support for a Federal, enterprise-wide financial management system resulting in an application that meets user needs on demand; and

C. Successful support for a Federal, enterprise-wide financial management system to ensure that all GSA financial systems processes meet the business needs of the agency.

GSA considers the following as key objectives for hosting services:

A. Efficient use of system hardware and software through resource pooling;

B. Flexible scalability to accommodate new programs, expanded programs, modified business rules or compliance requirements, as well as surge requirements or additional users that are geographically dispersed;

C. Faster deployment of software and system capabilities through standardization, interoperability, and potential Infrastructure as a Service (IaaS) or another model; and

D. Ability to monitor, measure, and report program usage during initial deployment with an option to integrate this feature into back-end systems.

3. CONTRACTING STRATEGY

GSA is interested in obtaining information from vendors about potential contract strategies that meet Pegasys system requirements. Strategies may include cloud-based solutions and should enable GSA to determine if small businesses are able to support system requirements.

The illustration below shows the relationships between the existing Pegasys contracts and is meant to demonstrate the three major support areas for Pegasys. The existing contracts are listed below:

1. O&M (1 contract),

2. Middleware (7 contracts)

3. Hosting (1 contract)

Contracts 1 through 3, above, fall within the scope of this RFI while the Billing and Accounts

Receivable (BAAR) contract, in the illustration below, is provided for contextual purposes only.

The RFI cross references listed in the illustration refer to the requirements description paragraphs

1-3 below. Vendors should be prepared to respond to at least one of these three areas of support.

Pegasys RFI (2014-07-07) 3

IBM Tivoli

SSH

Oracle Maintenance

BEA WebLogic & Tuxedo

Quest Shareplex PowerTerm Pro Suite

SSL Cert. for phdc-pub.gsa.gov

S o ft w a r e

H o s ti n g u p p o r t u p p o r t

W

Note: The Billing and Accounts Receivable (BAAR) Project is an enterprise-wide effort to modernize and standardize GSA’s billing and accounts receivable business processes and technology. BAAR integrates billing / receivable / collection data into GSA's unified core financial management system, Pegasys.

All functionality added through BAAR will become part of Pegasys upon completion of the BAAR project.

The services provided through the BAAR Services contract are not within the scope of this RFI. The reference is made to provide context only.

BAAR Services

RFI cross-references: N/A

Project Management, System Integration COTS, System Integration - Custom, Communications Management, and Training Development and Delivery

Pegasys RFI (2014-07-07) 4

The following sections (1-3) provide a description of the key Pegasys hosting and

O&M requirements, as referenced in the contract illustration above.

1. Pegasys O&M

1.1 Application Support

The GSA OCIO requires application support activities to be performed in support of O&M services for Pegasys. These activities include the following:

Development and Implementation Support for New Interfaces

Development and Implementation Support for New Modules

Minor and Major Software Upgrade Support including:

o Analysis o Change Management o Data Management o Development o Implementation o Project Management o Reports Development o Testing

O&M Support for Interfaces including:

o Automotive Payments (AUTOPAY) o BULKLOAD o Payroll Accounting and Reporting (PAR) o PAR Employee o Federal Supply Service Payment System (FEDPAY) o Transportation Accounts Payable (TAP) o LABOR o VITAP o FODIS o FEDEX o ETS2/eTravel (Concur to Pegasys) o CAPS Credit Card o Cost Allocation Models Utilities o UPS o National Finance Center (NFC)/United States Commission on Civil Rights (USCCR) o National Finance Center (NFC)/Federal Election Commission (FEC) o FSS Fleet o National Electronic Accounting and Reporting System (NEAR) o Fixed Assets (Fleet vehicles & vehicle tags, buildings, projects and PBS building assets) o IPAC Bulk File (IPAC OUT) o Treasury Confirmation File (IPAC IN)

Pegasys RFI (2014-07-07) 5 o PBS Imputed Rent o Fleet Lockbox o National Billing Address System (NABAS) o HOTD Agreement Charges o Global Supply Inventory Adjustments, Receipts and Transfers (ART) o Global Supply/AutoPurch Detail Billing/DOD o RWA/HOTD Lockbox o Rent Detail Billing o MAS & GWAC Contract Fees (Lockbox and Pay.gov) o MAS & GWAC Contract Details o Contract Collections Outbound Query o DOD Outbound (summary, detail and treasury files) o Credit Card Outbound o Credit Card Settlement o TRS Collections o FAS Billing Inquiry History (outbound) o Supply Lockbox o Customer Account File (CAF) o DOD Interfund o Fleet Detail Billing o TRS Summary & Detail Collections o RETA Agreements o RWA Outbound Queries o Simplified Interagency Billing and Collection (SIBAC)

O&M Support for Momentum Modules including:

o Bulk Upload (Mass Import) o Fixed Assets (Asset Accounting) o General Systems/Security o Lease Management o Momentum Accounts Payable o Momentum Automated Disbursements o Momentum Billing and Accounts Receivable o Momentum Budget Execution o Momentum Central Contractor Registry (CCR) Connector Vendor o Momentum External Reports o Momentum General Ledger/Cost Allocation o Momentum Project Cost Accounting o Momentum Purchasing/Credit Card o Momentum Planning o Momentum Reports Portal o Momentum Vendor Customer Self-Service

Production Support including:

o Accounting Support o Annual Close Support o Archiving Support

Pegasys RFI (2014-07-07) 6 o Global Reorganization Support o M-Scripts (PERL) Configuration and Operational Support o Service Release Implementation Support o Technical Support for Financial Management Enterprise Service Bus (FMESB)

1.2 Annual Software Maintenance for Momentum Financials®

The GSA OCIO requires annual software maintenance to be performed in support of Pegasys.

1.3 Project/Technical Management

The GSA OCIO requires project/technical management activities to be performed in support of

O&M services for Pegasys. These activities include the following:

Change and Release Management

Communications Management

Configuration Management

Contract Administration

Documentation

Earned Value Management

Gap Planning and Analysis

Migration and Startup

Quality Assurance and Quality Control

Risk Management

Staffing/Resource Planning

1.4 Reporting Support

The GSA OCIO requires reporting support activities to be performed in support of O&M services for Pegasys. These activities include the following:

Development and Implementation Support for New Reports and Major Modifications to

Existing Reports including:

o Momentum Baseline Reports and Forms o Non-Momentum Baseline Reports (Open Source Eclipse-based Business Intelligence

Reporting Tool (BIRT))

O&M Support for Reports including:

o Momentum Baseline Reports and Forms o Non-Momentum Baseline Reports (Open Source Eclipse-based Business Intelligence

Reporting Tool (BIRT))

1.5 Security Support

The GSA OCIO requires security support activities to be performed in support of O&M services for Pegasys. These activities include the following:

Access Protection

Authentication

Information Assurance

Logical Security Support

Physical Security Support

Pegasys RFI (2014-07-07) 7

Security Management including:

o Audit Support o Certification and Accreditation (C&A) Support o Vulnerability Scanning

Virus Protection

1.6 Testing Support

The GSA OCIO requires testing support activities to be performed in support of O&M services for Pegasys. These activities include the following:

Support for Independent Verification and Validation (IV&V) contractor

Test Plan Development

Test Script Development

Unit/Module, System, User Acceptance, Integration (End to End), Regression, User

Load, and Batch Performance Testing

2. Middleware

2.1 Middleware Support

The GSA OCIO requires support to manage the annual software licenses renewals for middleware services for Pegasys. Installation and maintenance/upgrade activities for middleware will be conducted by the hosting vendor. The following middleware contracts support Pegasys:

BEA Weblogic and Tuxedo

IBM Tivoli

Oracle Maintenance

PowerTerm Pro Suite

SSH

SSL Cert. for phdc-pub.gsa.gov

Quest Shareplex

3. Hosting

3.1 Technical Support

3.1.1 Database Administration

The GSA OCIO requires database administration and support services to be provided in support of hosting services for Pegasys. These activities include the following:

Backup and Recovery

Software Installation and Maintenance

Writing and Maintaining Scripts to Automate Tasks

3.1.2 Infrastructure Services

The GSA OCIO requires infrastructure services to be provided in support of hosting services for

Pegasys. These activities include the following:

Architecture Tier Requirements

Pegasys RFI (2014-07-07) 8

Backup and Restoration Management

Capacity Management

Continuity of Operations (COOP)

Data Center Security

External Communications Connectivity

Multi-Tier Administration Services

Network Security Services

Operational Monitoring Management

Physical Environment

System Operations and Administration Services

Storage Management

3.1.3 Maintenance Support

The GSA OCIO requires maintenance support to be provided in support of hosting services for

Pegasys. These activities include the following:

Developing, Implementing, and Maintaining a Root Cause Analysis Process

Diagnosing, Analyzing, Recommending, and Taking Corrective Measures to Prevent

Recurring Problems and/or Trends

Maintenance and Repair of Hardware

Maintenance and Repair of Software

Maintenance and Repair of Networks

Minimizing the Adverse Impact of Incidents

Preventing the Recurrence of Incidents

Restoring Normal Service Operation

3.1.4 C&A and Monitoring Services

The GSA OCIO requires C&A and monitoring services to be provided in support of hosting services for Pegasys. These activities include the following:

Certification and Accreditation (C&A) Support for Systems/Applications and

Infrastructure

Deployment, Testing, Support, and Operation of Software and Development, Test, and

Production Servers

Developing/Updating Operations Procedures

Event Management Monitoring

Tier 2 and 3 Helpdesk Support

Management of Hardware, Software, Peripherals, Media, Services, and Spare Parts

Server Administration

System or Component Configuration Changes

System Operations and Monitoring Support

System Upgrade Support

User Account and Access Control Administration

3.1.5 Project/Technical Management

Pegasys RFI (2014-07-07) 9

The GSA OCIO requires project/technical management activities to be performed in support of hosting services for Pegasys. These activities include the following:

Change and Release Management

Communications Management

Configuration Management

Contract Administration

Documentation

Earned Value Management

Gap Planning and Analysis

Migration and Startup

Quality Assurance and Quality Control

Risk Management

Staffing/Resource Planning

3.1.6 Security Support

The GSA OCIO requires security support activities to be performed in support of hosting services for Pegasys. These activities include the following:

Access Protection

Authentication

Information Assurance

Logical Security Support

Physical Security Support

Security Management including:

o Audit Support o Certification and Accreditation (C&A) Support o Vulnerability Scanning

Virus Protection

3.2 Operations Support

3.2.1 Batch Job Support

The GSA OCIO requires batch job scheduling and operation services to be provided in support of hosting services for Pegasys. These activities include the following:

Batch Job Test, Demand, and Production Execution

Batch Job Test, Demand, and Production Reporting

Batch Job Test, Demand, and Production Resolution

Batch Job Test, Demand, and Production Result Validation

Batch Job Test, Demand, and Production Scheduling

4. ATTACHMENTS

The following files are attached to this RFI:

Attachment #1 – Pegasys O&M Technical Architecture

Attachment #2 – IFS Hosting Technical Architecture

Pegasys RFI (2014-07-07) 10

Attachment #3 – Cloud Aspects of Current Hosting and O&M Contracts

Attachment #4 – Pegasys Hosting and O&M Requirements Matrix

5. CAPABILITY STATEMENT & PAST PERFORMANCE

GSA is interested in vendor knowledge, capability, and experience in the following areas:

A. Momentum Financials® Hosting and/or O&M support experience and past performance;

and

B. Implementation and operation of cloud computing services, as defined by National

Institute of Standards and Technology (NIST).

The GSA OCIO requires a capability statement from all responders that addresses the following

(in order):

(1) Statement to demonstrate your firm’s (including teammates or subcontractors) methodology, capability, and past experience for each of the requirements (1-3) listed in Section 3. Contracting

Strategy above. Respondents need only provide responses for the requirements for which they have a methodology, capability, and past experience.

(3) Cloud computing services (substantially corresponding to the NIST definition) provided under previous contracts that are similar in size, scope and complexity to the GSA OCIO's needs as described in this RFI and attachments.

(4) Experience in developing and/or acquiring private or community cloud capabilities for users, and recommended development, integration, and acquisition strategies.

(5) Knowledge, capabilities, and past performance in providing Momentum Financials® hosting and data center services and O&M support.

Please limit your capability statement to ten (10) pages.

6. APPROACH

The GSA OCIO requests that respondents describe a potential approach to providing the Pegasys hosting and O&M support that is consistent with the description above (including O&M, middleware, and hosting), Attachment #1 – Pegasys O&M Technical Architecture, and

Attachment #2 – IFS Hosting Technical Architecture. Respondents should include information about how the GSA OCIO should structure the requirements, if the GSA OCIO would be best served with one or multiple contracts to consolidate or break up requirements, and what, if any cloud computing solution should be utilized. Respondents should emphasize which aspects of their potential approach would result in cost savings for the Government.

NOTE: GSA does not wish to drastically increase the number of contracts required to support

Pegasys.

Please limit approach responses to twelve (12) pages.

7. QUESTIONS

The GSA OCIO requests responses to the following questions. A complete response to all questions listed is appreciated, but not required. Please limit responses to the questions to a total of five (5) pages.

Pegasys RFI (2014-07-07) 11

1) Using Attachment #4 – Pegasys Hosting and O&M Requirements Matrix, rate the proficiency of your firm and its potential partners in executing each of the listed requirements. Additionally, describe how, if awarded a contract containing all of these requirements, you would integrate and manage each requirement concurrently to promote effective end-to-end process management and control and service level management, as well as meeting functional requirements. Note: Attachment #4 is not subject to the page limitations.

2) Given that the Momentum Financials® software is proprietary to CGI Federal, describe how you would address the system O&M and hosting requirements that are directly tied to any proprietary software and services.

3) Describe how you would help GSA save, if practicable, on its O&M and hosting costs by consolidating or separating out different aspects of the work described in Section 3.

Contracting Strategy. Indicate if unit service costs can be reduced through the use of virtualization or other cloud-related technologies and discussion of risks/constraints.

4) Describe how the requirements (1-3) listed in Section 3. Contracting Strategy should be grouped or otherwise organized to provide more efficient, lower cost, and higher quality services to GSA.

5) Describe how you would add value, if possible, to GSA’s Pegasys middleware contracts by taking ownership of the software license renewal process or consolidating.

8. RESPONSE INFORMATION

Interested businesses are required to provide an electronic copy in Microsoft Word or Portable

Document Format (PDF) of their response to the Contracting Officer by close of business (COB) on the due date. Responses should address relevant experience, business size and NAIC code, capability statement, approach, and questions. Responses must also indicate business capability to perform the proposed services identified above. Capability Statements are limited to 10 pages.

Approaches are limited to 12 pages. Questions responses are limited to 5 pages. All responses should be minimum font size 12 and Times New Roman. Respondents are not to submit brochures and marketing materials and any such material will be discarded.

Large and Small Business Concerns are invited to identify their interest, technical capability, and respond to this RFI by 3:00 PM EST, July 23, 2014.

The Respondent is requested to submit a response that includes the following (subject to the page limit):

Business name.

Point of Contact (POC) name, email, phone number, and web address

Business size classification (small, SDVO, WOSB, etc.)

Possible NIACS codes associated with this action

Capability Statement & Past Performance

Pegasys RFI (2014-07-07) 12

Approach to the Requirements

Responses to the Questions

Send written responses to Ms. Carolyn Turner, Contracting Officer, at the Email address listed below. No collect calls or telephone inquiries will be accepted.

This is a RFI. No solicitation exists; therefore, do not request a copy of the solicitation. If a solicitation is released it will be synopsized in FedbizOpps. It is the potential offeror’s responsibility to monitor this site for the release of any solicitation.

Point of Contact

Ms. Carolyn Turner, Contracting Officer

Internal Acquisition Division

Office of the Administration Services

1800 F Street, NW, Room 6307

Washington, DC 20405

Phone: (202) 501-2867

Email: carolyn.turner@gsa.gov

Attachment #1 – Pegasys O&M Technical Architecture

Attachment #2 – IFS Hosting Technical Architecture

Federal Management Servers

FED-BKUP zone

GSA-NAS zone

GSA-TE-APP zone

GSA-HR-TE zone

GSA-HFC-PR zone

GSA-CCR-PR zone

GSA-FMIS-PR zone

GSA-TE-DAT zone

GSA-PR-DAT zoneGSA-PR-EXT zone GSA-PR-APP zoneGSA-PR-DMZ zone

GSA Region 6

Kansas City

GSA Region 7

Fort Worth

CGI Federal

Fairfax

Lockheed Martin

Lanham

MRH

MRH

MRH MRH

MRH

MRH

MRH

IBM DS8100 SAN

PHX-NAS

IBM TS3500 Library

Federal TSM Server

TSM-F01

Virtual Server on NAS

Controller

(Secure EVS)

NAS Head

VLAN FW

PHX-GSA-BKSW01

GSA WAN RTR01 GSA WAN RTR02

PHX-RTR-03 PHX-RTR04

PHX-SW

PHX-FED PHX-FED

Fortinet 1460

PHX PHX

PHX-FW PHX-FW

MSNet MSNet

VLAN FW

VLAN FW

VLAN FW

VLAN FW

VLAN FW

VLAN FW

Internet

GSA-TE-DMZ zone

VLAN FWVLAN FW VLAN FW

VLAN FWVLAN FW

VLAN FW

VLAN FW

SAN Controller

SiteScope

Monitoring

Server

Unicenter NSM

Monitoring

Server

Active Directory

Domain Controller

Proxy Server

Attachment 2: IFS Hosting

Technical Architetcture

Active Directory

Domain Controller

WSUS Server and

McAfee ePO Server

NIDS TAP

Tap01

NIDS TAP

Tap04b

NIDS TAP

Tap03a

NIDS TAP

Tap03b

NIDS TAP

Tap04a

NIDS TAP

Tap07a

NIDS TAP

Tap08a

NIDS TAP

Tap05

NIDS TAP

Tap06

GSA-FW GSA-FW

GSA-IFSGSA-IFS

PHX-GSA

PHX-GSA

PHX-GSA

PHX-GSA

PHX-GSAPHX-GSA

PHX-GSAPHX-GSA PHX-GSAPHX-GSA

PHX-GSA PHX-GSA PHX-GSA PHX-GSA PHX-GSA PHX-GSA

PHX-GSA

PHX-GSA PHX-GSA PHX-GSA PHX-GSA

PHX-GSA PHX-GSA

PHX-GSA PHX-GSA

PHX-GSA

PHX-GSAPHX-GSA PHX-GSA

PHX-GSA

PHX-GSA PHX-GSA PHX-GSA PHX-GSA PHX-GSA PHX-GSA

PHX-GSA PHX-GSA

PHX-GSA-LAWS31 PHX-GSA-LAWS32 PHX-GSA-LAWS33

GSA-IFS-SW03

Core-bkup-sw

SAN Controller

Tier2 SAN

Blade Logic

Application Server

Nessus Scanner Oracle

Grid Control Server

GSA Central Office

AIX HMC

NetQoS – Super Agent

FLB

Load Balancing performed on

Fortinet

FLB

Load Balancing performed on

Fortinet

PHX-GSA

MRH

GSA Central Office

SWING

GSA WAN

PHX-SW

ArcSight SIEM

Tier1 San

Tier1 San

SAN Controller

SunGard Recovery Facility

Philadelphia

SunGard SecureNet

GSA Region 3

Philadelphia

Sprint MPLS

Data Domain Storage

Data Domain Storage

Attachment #3 – Cloud Aspects of Current Hosting and O&M Contracts

Pegasys O&M

The Pegasys Momentum Financials Support (Pegasys O&M) contract is not a cloud-based contract.

IFS Hosting

The Integrated Financial System (IFS) Hosting contract was written and awarded as a "Managed

Services" contract. This contract has many characteristics of a true cloud which include:

Virtualized Servers

On-Demand Storage (only pay for what we used)

Shared Network resources in and out of the Phoenix Data Center (PDC)

The IFS Hosting contract incumbent vendor has described the environment as being “80%” cloud.