NCUA RFI for MetricStream Support 2023.pdf

REQUEST FOR INFORMATION

MetricStream Support

The National Credit Union Administration (NCUA) is an independent federal agency that regulates, charters, and supervises federal credit unions throughout the United States and its territories. NCUA insures savings in federal and most state-chartered credit unions through the National Credit Union Share Insurance Fund (NCUSIF), a federal fund backed by the full faith and credit of the United States Government. The NCUSIF insures the savings of more than 120 million credit union account holders. NCUA administers the Federal Credit Union Act created by Congress to serve, protect, and promote a safe, stable national system of cooperative financial institutions that encourage thrift and offer a source of credit for their members.

1. Purpose

The NCUA is seeking to identify contractors with the necessary experience, resources, and capability to support the NCUA’s MetricStream GRC platform. As a Federal government agency, the NCUA requires U.S. citizen technical resources to support ongoing system enhancements, operations and maintenance. The responses from this RFI will assist the NCUA in our acquisition strategy determination and fine-tuning our requirements.

This RFI is issued solely for informational, market research, and planning purposes. It does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This RFI does not commit the NCUA to contract for any supply or service whatsoever. Further, the NCUA is not seeking proposals at this time, and will not accept unsolicited proposals. The NCUA is not liable for any costs (direct or indirect) associated with the preparation, submissions or responses to the market survey or any costs associated with the NCUA use of the information.

Please be advised that all submissions become Government property and will not be returned.

Not responding to this RFI does not preclude participation in any future RFP, if one is issued.

Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract.

2. Background

As a cornerstone of its Enterprise Solution Modernization (ESM) program, the NCUA conducted a competitive procurement to select and implement a governance, risk and compliance (GRC) solution to replace its legacy examination system, the Automated Integrated Regulatory Examination System (AIRES). The MetricStream GRC solution was selected as the best value for the agency, with Deloitte Consulting LLP, as the systems integrator. A contract was awarded in 2018 for the licensing, implementation, and maintenance of the solution, as well as the corresponding infrastructure to support the solution and others future elements of the ESM program.

National Credit Union Administration

NCUA MetricStream Support RFI

The Modern Examination & Risk Identification Tool (MERIT) is currently operational and being used by more than 4,500 users including NCUA staff, our State Supervisory partners, and credit unions. The NCUA’s solution includes a highly tailored (4 unique data objects, 18 unique data tables, 600 unique infolets) implementation of MetricStream’s internal audit application (including some customization) including integrations with Okta (Identity and Access management), MicroStrategy (analytics), custom micro-services built within Amazon’s Federal Gov Cloud, and Mulesoft based data exchanges with the NCUA’s on premise systems.

In 2020, the NCUA issued an initial RFI to support acquisition planning. This RFI is being issued to consider any changes to the marketplace.

3. Scope of Required Services

In preparation for the follow-on to its system integration contract, the NCUA is conducting market research to identify companies capable of providing technical application operations and maintenance services for MERIT, using U.S. Citizens, to continue with system enhancements, complete platform/application upgrades, and to provide ongoing operations and maintenance. Experience working in the Federal government is desired, but not required. Government suitability determination is required for U.S. Citizens supporting this contract.

4. Requested Information

We ask that you provide a written response that includes a brief overview of your company, including the extent of operations in the United States, and that addresses the following topics/questions.

Discuss your experience supporting MetricStream products for U.S clients. For each experience example, please include:

o A description of the engagement;

o The MetricStream product(s) supported (including versions of platform, applications, briefcase client, and databases) as well as information regarding any organization specific configuration, extensions, or customization associated with the MetricStream instance;

o Summary of the overall technical environment emphasizing integrations with any of the same (or similar) IT services included in NCUA’s solution;

o Summary of the scope of MetricStream specific elements of the work, the size and composition of your MetricStream technical team, capacity or thru point metrics (e.g., Story points per Sprint) to demonstrate service delivery performance, and overall accomplishments (e.g., number of successful upgrades, number of releases and change requests, etc);

o The duration and dates of those engagements;

o Customer type (e.g. commercial, federal government, state/local government, or other) and location;

o The number of personnel supporting the engagement.

NCUA MetricStream Support RFI

Discuss your ability to provide personnel experienced with MetricStream products as well as other software listed above (e.g., Okta, Custom Apps using Amazon microservices, MicroStrategy), including:

o Your ability to provide, recruit and retain U.S. citizen resources with this experience;

o The number of experienced and/or MetricStream trained/certified resources currently on staff;

o The number of resources currently on staff with experience/certification in other related products/services.

As part of the market research process, NCUA needs to generate the government’s IGCE (independent government cost estimate) for this requirement. As such, please provide the rates/pricing associated with the sample of key resources/labor categories in the table below. If your company doesn’t have experience with a particular technology and is unable to respond, leave the rate column blank. Please know this indicative pricing request is NOT a request for a quote or the start of a negotiation process. Your response to this indicative pricing request will not affect our review of your capabilities. This is solely a request for data from you to establish the government’s cost estimate. Include any other Labor Categories not listed below.

# Key Resource/Labor Category Rate ($/hr) 1 Senior Technical Project Manager 2 Senior MetricStream Developer 3 Junior MetricStream Developer 4 Functional Business Analyst/Tester 5 Senior Data integration subject matter expert/Mulesoft Developer

6 Senior MicroStrategy Developer 7 Senior Okta Developer

5. Submission

We ask that you limit your response to 15 pages and do not include marketing or other extraneous materials beyond the focus of this request. Additionally, no proprietary, classified, confidential, or sensitive information should be included in your response.

Please submit your responses to wthoreen@ncua.gov. The subject line should state the following: Your company name response to MetricStream RFI.

Your response is requested no later than 5:00 PM EST, May 31, 2022.