NCUA RFI for MetricStream Support.pdf

REQUEST FOR INFORMATION

MetricStream Support

The National Credit Union Administration (NCUA) is an independent federal agency that regulates, charters, and supervises federal credit unions throughout the United States and its territories. NCUA insures savings in federal and most state-chartered credit unions through the National Credit Union Share Insurance Fund (NCUSIF), a federal fund backed by the full faith and credit of the United States Government. The NCUSIF insures the savings of more than 120 million credit union account holders. NCUA administers the Federal Credit Union Act created by Congress to serve, protect, and promote a safe, stable national system of cooperative financial institutions that encourage thrift and offer a source of credit for their members.

1. Purpose

The NCUA is seeking to identify contractors with the necessary experience, resources, and capability to support the NCUA’s MetricStream GRC platform. As a Federal government agency, the NCUA requires U.S. citizen technical resources to support ongoing system enhancements, operations and maintenance. The responses from this RFI will assist the NCUA in our acquisition strategy determination and fine-tuning our requirements.

This RFI is issued solely for informational, market research, and planning purposes. It does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This RFI does not commit the NCUA to contract for any supply or service whatsoever. Further, the NCUA is not seeking proposals at this time, and will not accept unsolicited proposals. The NCUA is not liable for any costs (direct or indirect) associated with the preparation, submissions or responses to the market survey or any costs associated with the NCUA use of the information.

Please be advised that all submissions become Government property and will not be returned.

Not responding to this RFI does not preclude participation in any future RFP, if one is issued.

Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract.

2. Background

As a cornerstone of its Enterprise Solution Modernization (ESM) program, the NCUA conducted a competitive procurement to select and implement a governance, risk and compliance (GRC) solution to replace its legacy examination system, the Automated Integrated Regulatory Examination System (AIRES). The MetricStream GRC solution was selected as the best value for the agency, with Deloitte Consulting LLP, as the systems integrator. A four-year contract was awarded in 2018 for the licensing, implementation, and maintenance of the solution, as well as the corresponding infrastructure to support the solution and others future elements of the ESM program.

National Credit Union Administration

NCUA MetricStream Support RFI

The Modern Examination & Risk Identification Tool (MERIT) is currently operational as Release 1 pilot to a limited set of users. Enhancements and expanded capabilities are in progress for a second release. The NCUA’s solution includes a highly tailored (4 unique data objects, 18 unique data tables, 600 unique infolets) implementation of MetricStream’s internal audit application (including some customization) including integrations with Okta (Identity and Access management), MicroStrategy (analytics), custom micro-services built within Amazon’s Federal Gov Cloud, and Mulesoft based data exchanges with the NCUA’s on premise systems.

3. Scope of Required Services

In preparation for the follow-on to its system integration contract, the NCUA is conducting market research to identify companies capable of providing support for MERIT, using U.S.

Citizens, to continue with system enhancements, complete platform/application upgrades, and to provide ongoing operations and maintenance. Experience working in the Federal government is desired, but not required.

4. Requested Information

We ask that you provide a written response that includes a brief overview of your company, including the extent of operations in the United States, and that addresses the following topics/questions.

Discuss your experience supporting MetricStream products for U.S clients. For each experience example, please include:

o A description of the engagement;

o The MetricStream product(s) supported (including versions of platform, applications, briefcase client, and databases) as well as information regarding any organization specific configuration, extensions, or customization associated with the MetricStream instance;

o Summary of the overall technical environment emphasizing integrations with any of the same (or similar) IT services included in NCUA’s solution;

o Summary of the scope of MetricStream specific elements of the work, the size and composition of your MetricStream technical team, capacity or thru point metrics (e.g., Story points per Sprint) to demonstrate service delivery performance, and overall accomplishments (e.g., number of successful upgrades, number of releases and change requests, etc);

o The duration and dates of those engagements;

o Customer type (e.g. commercial, federal government, state/local government, or other) and location;

o The number of personnel supporting the engagement.

Discuss your ability to provide personnel experienced with MetricStream products as well as other software listed above (e.g., Okta, Custom Apps using Amazon microservices, MicroStrategy), including:

o Your ability to provide, recruit and retain U.S. citizen resources with this experience;

NCUA MetricStream Support RFI o The number of experienced and/or MetricStream trained/certified resources currently on staff;

o The number of resources currently on staff with experience/certification in other related products/services.

With an emphasis on post-deployment support, please discuss the typical business arrangements you have for these engagements, including:

o How the engagements are priced (e.g. fixed price, cost-reimbursable, hourly labor);

o Performance metrics and/or service level agreements (SLAs), and how you manage and ensure compliance;

o Warranty periods on enhancements/bug fixes;

o What, if any, information other than an overview of the technical environment, general services descriptions/requirements, service level requirements, target team story point capacity, and historic help desk (incident/request) volumes would be helpful in a solicitation to allow for accurate pricing?

As part of the market research process, NCUA needs to generate the government’s IGCE (independent government cost estimate) for this requirement. As such, what would be the indicative pricing (e.g., labor categories/rates) for your firm to provide the services listed under the Scope section of this request for information assuming a labor mix to complete approximately 40-50 story points of work (one point equals eight hours of effort) per month? Please know this indicative pricing request is NOT a request for a quote or the start of a negotiation process. Your response to this indicative pricing request will not affect our review of your capabilities. This is solely a request for data from you to establish the government’s cost estimate.

5. Submission

We ask that you limit your response to 25 pages and do not include marketing or other extraneous materials beyond the focus of this request. Additionally, no proprietary, classified, confidential, or sensitive information should be included in your response.

Please submit your responses to wthoreen@ncua.gov. The subject line should state the following: Your company name response to MetricStream RFI.

Your response is requested no later than 5:00 PM EST, August 13, 2020.