OneSAF Industry Day Q and A FinalpostPAOreview.xlsx
XLSX spreadsheet 34 KB Posted
- Attached to
- OneSAF SSN W900KK-22-R-0037 Documents
- Solicitation number
- W900KK-22-R-0037
About this file
This document contains questions and answers from an industry day held to discuss an upcoming OneSAF sustainment contract opportunity. The opportunity will involve sustaining and further developing the OneSAF modeling and simulation software suite. Key details include that the Army plans to release a draft request for proposal in the fourth quarter of fiscal year 2023 and finalized request for proposal in the first quarter of fiscal year 2024. The acquisition strategy and requirements have not been finalized but will likely require the contractor to meet CMMI Level 3 and utilize agile development practices. The opportunity involves operating and maintaining the OneSAF software through activities such as implementing customer requirements, performing integration and testing, and releasing new versions.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| OneSAF Industry Day and One one One Schedule and Sign Up Sheet May 2 sand 3.xlsx | XLSX spreadsheet | |
| Industry Day Consolidated Slides FINAL.pdf | ||
| List of OneSAF Codevelopers.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| Industry Questions | Government Response | Question Origin |
| Is Bifrost sustainment included in the OneSAF sustainment plan? | Yes it is. OneSAF is a tool suite and Bifrost is a part of the tool suite. The contractor would be responsible for that sustainment. | One on One Sessions |
| Are the development strategies the same for both Bifrost and OneSAF in terms of the UnITE onboarding process? | Yes it is. In the future, when we do have the UnITE infrastructure for DevSec Ops, this will be the environment where both products will be maintained. | One on One Sessions |
| Does that mean that Bifrost will also be sunset in 2030? | The Government has not made a decision when Bifrost will sunset. | One on One Sessions |
| Yesterday there was mention that you are leaning more towards a COTS solution. Does that mean you are not looking for a GOTS or a Government open source tool? | We mentioned COTS as a part of the UnITE infrastructure because that effort will be made up of COTS products similar to the Atlassian Suite of products. |
| The solution can be COTS or GOTS. | One on One Sessions | ||
| Is AFSIM a product that is supported? | We support a connection to AFSIM through Bifrost as well as NGTS. | One on One Sessions | |
| Is Bifrost the channel that everyone agrees to or are you in-depth developing a hook to their systems? Is the connection to the systems through Bifrost a Joint effort? | Yes, we do have their support when we are doing those kinds of activities in Bifrost. At the moment the focus is to use Bifrost | One on One Sessions | |
| Is this more about sustainment or is it about getting architectural changes to go from Cloud migrated to Cloud native? If so, where does NGC fit into this if at all? | We are in the crawl phase of those activities due to the architecture of what OneSAF is today. That does not mean that we aren't looking to the future but we are driven by our customer requirements. | One on One Sessions | |
| If the Army says Thou shall be Cloud now, as a part of this contract would the tasking be to server a what it would cost to do microservices migration component by component? | That is currently not one of our current RIB/requirement item. The cloud requirement will be defined in our draft RDP or Final RFP. | One on One Sessions | |
| The understanding from yesterday's discussion on the UnITE framework was that it was a Thou shalt move to the Cloud. | These questions should be directed to the UnITE team as we are not in the position to respond to them. | One on One Sessions | |
| We understand the boundaries of this contract is going to be O&M and we want make sure security is updated and all the customer funded modules are integrated and tested. As you move to a more modern DevSecOps pipeline you introduce automated testing, automated deployment all of that, do you anticipate that being formalized in the requirements or is that something where you need industry to give you feedback? | The team is still developing the acquisition strategy and can not confirm O&M funding will be a type of funding used for this effort. |
The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm this requirement will be formalized in the requirements. We do encourage our industry partners to review the DRAFT RFS and provide any comments or questions back to the Government.
| The vendor will have some levels of automated testing that they but we are also looking for industry to give us feedback. | One on One Sessions | |
| With the weighing of the different aspects of the different areas of the contract in terms of the activities of the selected NAICS, do you foresee that there are already small business vendors that already meets the needs. | The Industry day slides confirmed the following: |
Strategic and tactical market research indicates that the Government will receive two or more proposals from responsible small businesses at fair market prices.
| With that said we don't want to mislead any vendors that we are definitive in our acquisition strategy when it comes to the NAICS, we know they do change and we are constantly reviewing that and it's a collective decision. Our goal is to establish a NAICS code that is more encompassing of our efforts, we don't want to reduce that aperture to just a few subsets. That reduces the competitive pool. | One on One Sessions | ||
| What are your current concepts on whether primes would need to carry the past performance or what share of past performances would sub-contractors need to have? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm past performance requirements. | One on One Sessions | |
| One of the impression that folks came away with yesterday was that you want to get out of the box pretty quickly. Are you looking for activity that is going to accomplish something that first year and if so what is it, or is this something where a prime will come in and have an opportunity to slowly crank up? | Yes, we are expecting deliverables in the first year. Potentially Version 13, but The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is there a requirement to have access to SIPR? | Yes, SIPR access is intended to be required for the OneSAF effort. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| In terms of OneSAF, is there a current ATO for that system? | For the current OneSAF contract, the Government has an Assess Only ATO for the OneSAF suite. | One on One Sessions | |
| Has there been any discussions or considerations in terms of the development of the Cybersecurity team structure for the system or is that entirely the recommendation of the company coming in for ISSM, ISSO etc. | ISSM and ISSO is typically the role of the system owner PEO STRI. You will have to navigate within that space with the appropriate certification commensurate with the tasks to be performed. |
The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements.
| One on One Sessions | |
| Is time to development and release of OneSAF Q1FY25? | The product already has several release versions and we are currently on version 12. The new vendor is expected to take the current release version at the time of award and release the next version v13. The OneSAF delivery requirements will be identified in the Final RFP requirements. |
| The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | ||
| What is the interface between Bifrost and OneSAF and what do you look at OneSAF Core as? Is that the UDG? | Bifrost and OneSAF communicate with each other using the EFX server and the UDG, the OneSAF Core is the main product. The UDG communicates the OneSAF behaviors and the EFX communicates the objects. | One on One Sessions | |
| Are they commonly used together now and not just OneSAF by itself? | OneSAF and Bifrost each can be used independently or with each other. | One on One Sessions | |
| Is there a no cost license with Cole Engineering for Bifrost? | Bifrost is Government owned just like OneSAF so with the distribution agreement you have to request OneSAF and Bifrost Separately. There is no license cost for Bifrost to the Government or contractor under the DA utilized by OneSAF. | One on One Sessions | |
| During the briefing there was a statement made that the Government has unlimited rights to Bifrost. Is that in perpetuity so will it continue into the next contract? | Government has unlimited Government Purpose Rights (GPR) to Bifrost. | One on One Sessions | |
| Does the OneSAF Government program update Bifrost. | Yes. The incumbent is responsible for maintaining Bifrost just like OneSAF. | One on One Sessions | |
| Would version 13 or 14 line up with UnITE? | Delivery timeframe of OneSAF v13 and v14 which will be identified in the Final RFP requirements; however, these questions should be directed to the UnITE team as we are not in the position to respond to them. | One on One Sessions | |
| Do you have any requirements now in place or work to change the code that is works or builds better in a DevSecOps environment? | That information will be included in the RFP | One on One Sessions | |
| How could you characterize the velocity of new models being developed? | Models are continuously added and modified through the RIB process but that number ebbs and flows. We don't keep a running list of models developed | One on One Sessions | |
| There was a mention of MDO work. Is that primarily around Cyber or is there some Joint work too? | The work is usually funded by the Battle labs. | One on One Sessions | |
| Do you foresee a lot more customer interest in terms of do MDO? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is a requirement in the RIB like a capstone piece of work to be done? | Yes. Requirements are prioritized and executed based on where they fall and the amount of funding available. | One on One Sessions | |
| How about the Army modernization CFTs, has there been much modeling work with them? | No | One on One Sessions | |
| Can you quantify the current work in terms of number of models and number of defects so we can understand how to price this effort? | Defects (PTRs) are logged in the Confluence as a result of development defects and Coverity scans. That number ebbs and flows based on the developmental cycle and what's going on in the Cyber environment. The priorities are to deliver the RIB items with a minimum amount of defects. With that said, it is difficult to quantify work simply in terms of models. | One on One Sessions | |
| Do you use the term PTRs for new features too? | No, we only use them for bugs. | One on One Sessions | |
| Would you characterize development, project managements, do you use something agile development with something like SCRUM? | Yes | One on One Sessions | |
| Are PTRs, scans and features all on a single product backlog? | Yes, teams are organized to meet the objectives of the development cycle. | One on One Sessions | |
| Would you be interested in how we would handle that surge to support development activities? | Yes, We are also interested in any efficiencies that can be achieved by vendors. | One on One Sessions | |
| The IDE, is that all Government provided? | Yes, it is all GFE | ||
| Could we bring in additional tools or processes to exploit efficiencies? | You may propose your own process as you look at the RFP and determine how you are going to scope it. The scope of the IDE is going to be different from what exists on the contract today. We will identify tools that are currently used in facilitate the existing process. We current use the Atlassian tools | One on One Sessions | |
| How about the electronic process guide, is that still a thing? Would that be a place to propose efficiencies or new ways of doing business? | Yes, the EPG is still in place and it will be available. If you think there are better ways of doing things it is up to you to put in a proposal for improvement or change. | One on One Sessions | |
| Is CMMI Level 3 going to be a requirement? Will it be a requirement for the prime or can we meet the requirement within the team? | Yes. The Prime must meet the requirement. | One on One Sessions | |
| CMMI just recently last year or two upgraded their version to version 2, Is that what you will be expecting? | We weren't aware of that but we will look into the changes and make any necessary adjustments in the PWS and RFP. | One on One Sessions | |
| All the work you do is in a back log, how much work do you do on the common components like MCA, SCAM-T, etc. | Items that are placed on the backlog are driven by requirement prioritization and available funding combined with the needs of the user community. | One on One Sessions | |
| Any thought of moving to One World Terrain (OWT) or doing any interoperability work with them? | The OneSAF requirements will be defined in the Final RFP. The Government does not have a requirement to move to OWT or doing any interoperability work with OWT. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements | One on One Sessions | |
| What type of technical challenges will be driving the next source selection? | That will be identified in the PWS with the RFP release. It will not be identified in terms of challenged but instead things needed to fulfill the contract. | One on One Sessions | |
| Do you follow a specific model for acquisition? | A good guide is the DoD Source Selection. Anything else unique will evolve when we define our acquisition plan. | One on One Sessions | |
| Are you planning any additional industry engagements after this initial industry day? | We do not have any additional plans. | One on One Sessions | |
| Is this source selection intended to be like an IDIQ pool of contractors? | We have not defined that strategy yet but historically that has not been the approach for the OneSAF efforts. |
| The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | ||
| What is the Government sentiment on Joint Ventures or partnerships? | We don't have a preference, our main concern is being able to satisfy what we put out in the RFP. | One on One Sessions | |
| At the beginning of the new contractor will there be an effort to refactor existing code to understand what efficiencies could be recommended to the Government? | There is no intent at this time to refactor the baseline. The strategy is to continue developing the code base as is to build on capabilities that already exist. |
| The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | ||
| Are there any existing tools that handle automated gated check-in? | The only tool we use for analysis post check-in is Coverity but it is not a gate or check to the baseline. In the spirit of gated check-in, we do not have any tools like that or tools that do code analysis for efficiency. | One on One Sessions | |
| Are the Government thoughts on being cloud agnostic or is it considering choosing one cloud structure for the initial deployment? Will UnITE have an impact on this? | These questions should be directed to the UnITE team as we are not in the position to respond to them. | One on One Sessions | |
| Is there a preferred Agile methodology? | This is up the contractor to select a methodology that works for with the program goals. | One on One Sessions | |
| Is the plan to do infrastructure as a service and then move into coding? | No, we are not looking at IaaS. Coding would start immediately when the contract is awarded. | One on One Sessions | |
| What does the footprint look like with the current effort for number of people by activity? | We have a variety of users across the United states and it is hard for us to make that determination. | One on One Sessions | |
| Are the OneSAF trainers dedicated trainers and can developers be sent to receive the initial co-developer training? | Trainers are not dedicated but are usually developers or tester of the software. There are different levels of training conducted based on user needs which can be from OneSAF user up to OneSAF developer. | One on One Sessions | |
| What is going to be GFI for this effort? | OneSAF is ITAR controlled and will be the responsibility of the contractor to do any compartmentalization. Also, there is GFE hardware that is used to support the program that will be turned over for the continuation of the effort. All that information will be outlined in the PWS. | One on One Sessions | |
| How do you see the integration between the GOTS and COTS environment today, are you looking for more integration with other COTS or are you looking for GOTS solutions. | That information will be included in the RFP but you can get an idea based on where the Futures command is driving. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Do you know what COTS DevSec tools you will be using? | We will probably follow models that cArmy or CREAT is establishing and as you know those tools continue to evolve but they are all using COTS products. We will have better information by the time we release the RFP. | One on One Sessions | |
| How do you see the interplay with STE coming online and OneSAF? | We cannot provide a STE strategic vision, we work OneSAF requirements provided to the team. You would need to direct that question to the team working STE. | ||
| One on One Sessions | |||
| Where do you see the future OneSAF factory being? Is it in contractor locations or Government furnished locations? | The Government will continue to maintain a facility for testing the software which the contractor will maintain and support. In terms of development, the vendor will align with what the Government decides to do for a DevSecOps environment once the contract is awarded. The PWS will provide more information on the details. |
| The RFS will provide OneSAF factory locations. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | ||
| For your programs, do you have a specific software development methodology? | The current SDP uses Agile, but we don't dictate that. Having said that, DevSecOps is going to be the way the UnITE cloud is going to go. | One on One Sessions | |
| For Tech insertion, is that an option to bring new technology to the table or just stick with APL? | You can definitely use more tech to help you be efficient but we aren't looking to do major software improvements. The Government is always interesting in more efficient and innovative solutions towards satisfying the requirements. | One on One Sessions | |
| What are the key evaluation factors you are looking for in a team as you move forward with this program? Are you open to suggestions? | We have not identified that yet. We are absolutely open to suggestions. The Government has not finalized the acquisition strategy or the requirements package. The Final RFP will provide all acquisition information. | One on One Sessions | |
| How many key personnel do you think you will be requiring? | The Government will not be dictating or providing guidance to a specific approach in satisfying the OneSAF requirements. | One on One Sessions | |
| Will a draft PWS be distributed? | The Government is planning the release of a Draft RFP. | One on One Sessions | |
| What are the Top 3 or 5 priorities for the upcoming contract? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements or priorities. | One on One Sessions | |
| Will the new contract employ a continuous deployment methodology? | Annual releases are anticipated to be part of the new contract. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Transitioning out of IDE will result in changes, i.e. Acceptance testing, housing of servers, etc. How does the gov't see those activities at the start of the contract? Will that be a gov't or contractor responsibility? | Infrastructure provided by the gov't. Process is responsibility of the contractor. | One on One Sessions | |
| Is the intent of this contract, in regards to geographic boundaries, to leave it distributed and have it be open-ended? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Under current contract, there is a lot of GFE provided equipment. On the new contract will it be similar? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm GFE requirements. | One on One Sessions | |
| Will there be a specific CMMI requirement? Is the level identified? | Yes, Level 3 and it is anticipated to be in the RFP | One on One Sessions | |
| In relation to UnITE, is there a problem pursuing both opportunities from an OCI perspective? | The Government cannot answer specific questions for another project, such as UnITE. Once the UnITE and OneSAF requirements are released, the Government may be able to provide OCI concerns. The Government request that all UnITE question be directed to the UnITE team. The current contract has ITAR requirements and may carry over to the new contract. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements or OCI on other projects. | One on One Sessions | |
| Is this a one vendor solution or will there be multiple vendors? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. The Government is planning on releasing a DRAFT RFP in Q4 FY23 and the Final RFP in Q1 FY24. | One on One Sessions | |
| Will it be the responsibility of the contractor to have a facility to support test events and activities? | No | One on One Sessions | |
| How does industry get a copy of OneSAF? | Reviewing, complying, and signing the Distribution Agreement for use of OneSAF is the current process to receive the software. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | Day 1 Q & A | |
| Will slides be released? | Yes, the slides will be released with the Industry Q&A on www.sam.gov, after they have been approved for release. | Day 1 Q & A | |
| How many current co-developers participate in the OneSAF development? | We will provide a list of the current active co developers. | Day 1 Q & A | |
| Will the Government encourage /discourage/ neutral with Joint Ventures for this solicitation? | The Government is neutral on teaming arrangements. The Government is concerned with the industry partner or partners that can satisfy the requirements. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements | Day 1 Q & A | |
| Will the list of Industry Day participants be made public? | Yes, the industry attendance list, Industry Day slides, and Q&As will be made available on www.sam.gov, once they have been approved for release. | Day 1 Q & A | |
| How is security accreditation coordinated? | Not sure how to answer this question. Please provide more information and resubmit this question. If logistics to various sites is being asked, that information will be available in the Final RFP. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | Day 1 Q & A | |
| Still maintaining the code base or starting from scratch? | The vendor would maintain the previously released version and develop the next version. | Day 1 Q & A | |
| Is UnITE Software Factory working in tandem with OneSAF or is it separate? | They are separate efforts. OneSAF will exploit the capabilities of UnITE but, please note, the Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | Day 1 Q & A | |
| Can we see the Backlog list of big ticket items? | Not at this time. | Day 1 Q & A | |
| Is DevSecOps using COTS or proprietary? | DevSecOps will take advantage of existing COTS solutions | Day 1 Q & A | |
| Is the Cloud solution all cloud or hybrid? | We don't have a defined cloud solution at this time | Day 1 Q & A | |
| When was the last time the codebase was refactored? | The code base has never been refactored | Day 1 Q & A | |
| Are you looking for percent increases for efficiency for when we make improvements to the code base? | The Government no defined performance metrics for efficiency at this time | Day 1 Q & A | |
| In regards to code check-in, are there efficiency test, metrics checking focused on meeting customer satisfaction? | The Government no defined performance metrics for efficiency at this time | Day 1 Q & A | |
| Architecture: is OneSAF containerized, or are they separate services? | We currently have them containerized in separate services | Day 1 Q & A | |
| Are you open to seeing a demonstration? | We are open to it. Preferable to do it before the release of the RFP, since there are no restriction on demonstrations. There is no guarantee that it will be part of the scope. There is no guarantee of solicitation or an award off of the demonstration. | One on One Sessions | |
| What is the timeline of UnITE and OneSAF? | UnITE is anticipated to start Q4 FY 24 OneSAF award is anticipated to start in Q1 FY25. Please reach out to the UnITE team for any dates, the OneSAF team is not responsible for that acquisition | One on One Sessions | |
| Will there be info on UnITE before we bid? | TBD, but once more information is released it will be put into the draft RFP. Please reach out to the UnITE team for any information regarding their effort. The OneSAF requirements are anticipated to be available in the Final RFP in Q1 FY 24. | One on One Sessions | |
| Will the latest version of OneSAF be offered? | The Final RFS will provide the process to receive a version of OneSAF. | One on One Sessions | |
| Are you still doing the CDs? | Yes. We also have a downloadable option. (We still use CDs as some of our users work in closed environments disconnected from the internet) | One on One Sessions | |
| Will there be a Draft release of section L&M? | No, Sections L&M will be released in the Final RFP. | One on One Sessions | |
| What will be the contract type? | FFP is preferred, will depend on what the Government suggests. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Adding another socio-economic group? | We are undecided. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| How many CDRLs are on the contract currently? | 15 | One on One Sessions | |
| Typically do we have RDT&E, OPA and OMA? What's the percentage? | Mostly RDT&E funding. | One on One Sessions | |
| Who develops the hardware baseline? | The site is told what's needed and it's worked between the contractor and gov't. | One on One Sessions | |
| Is the lab equipment GFE? | Yes | One on One Sessions | |
| With IDE going away, is there a replacement? Will the space have to be provided for development work and labs? | Looking to become more virtualized, No need for outside space. Will be finalized in RFP. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will the contract structure be a 2 year base with a 1-year option? | Not sure how it will be structured. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will the contract be firm-fixed price, cost plus fixed fee, etc.? | It depends. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is there a lot of travel involved? | It depends on the customer activity. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| How significant is the help desk? Does a help desk phone have to be manned? | Help desk is mostly handled by email. Will be defined in the PWS. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will there be move toward One World Terrain or sticking with current terrain tool? | The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is the program Agile or Waterfall? | Agile | One on One Sessions | |
| How long is typical sprint? | 4 weeks | One on One Sessions | |
| How often is there a micro release? | Depends on how the capabilities are staggered | One on One Sessions | |
| How often are IAVA patches issued? | Quarterly | One on One Sessions | |
| How many sites are the patches released to? Are FMS included? | The patches are made available for download to the sites. | One on One Sessions | |
| Are the releases covered by the OneSAF ATO? | The OneSAF ATO is release only. Up to the site to determine if it can deployed on their system | One on One Sessions | |
| Will CMMI Level 3 be required? | Yes, Level 3 and it will be in the RFP | One on One Sessions | |
| Are there any other standards being considered? | Not at this time. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Under the current contract, have you exercised the full ceiling? | No, we have not exercised the full ceiling as the contract is still active. Don't know the funding for the new scope. | One on One Sessions | |
| Is the intent with the draft or final RFP to identify a certain set of capability requirements that the bidder will have to propose a solution to or cost? Is there a different strategy on how cost will be evaluated? | The Acquisition Strategy has not been finalized. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is there a timeline when OneSAF will be available to the bidder? | OneSAF will be provided. No timeline has been established. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are there any requirements outside of the technical requirements? | No, strategy is still in development. CMMI Level 3 is required. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is the OneSAF program currently executed out of a gov't or contractor facility? | Integrated Development Environment (IDE) is the current set up, however, with COVID the Government more to a remote work environment or a mini IDE. With this new effort, the Government will have a new lab at a Government facility for the testing activities however, the development of the software itself, the vendor will have the option to do it remotely. Moreover, office space will be responsibility of the new vendor. | One on One Sessions | |
| What is the current level of classification? | Unclassified. There are classified versions that go up to a Secret level. | One on One Sessions | |
| Is the current code base backwards compatible to all previous versions. | No. The current and previous versions are supported | One on One Sessions | |
| How involved is the contractor in collecting requirements from the 6 communities? | The gov't works with the communities and passes the requirements to the contractor. | One on One Sessions | |
| What's the approach if the requirements changes the scope? | It stays within the same scope of support and production for the contract. | One on One Sessions | |
| Can you talk about the plan to move to a full DevSecOps environment? | That plan will be a part of the UnITE effort which is still being defined but will be available when the RPF is released. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will the processes for DevSecOps be directed by the gov't? | The gov't will not dictate which choice is used since there are several out there that could be used to meet the requirement. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is UnITE a gov't owned product? | Yes. Please direct all UnITE questions to the UnITE acquisition team. | One on One Sessions | |
| What's the plan if the gov't wants to switch products? How does that impact the contractor? | That would be considered a requirement. An RFP would be submitted and evaluated. | One on One Sessions | |
| Will there be a small business set aside? | The Industry day slides confirmed the following: |
Strategic and tactical market research indicates that the Government will receive two or more proposals from responsible small businesses at fair market prices.
| The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | ||
| Are we looking for innovation in the PWS or RFP? | Not looking for innovation outside of DevSecOps within the cArmy construct. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are we looking at the cloud tactical edge? | Not at this time. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Do we have an index and catalog solution? | Not at this time. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is the nature of the integrated team changing and can we use a different approach? | No limitations on what approach can be proposed. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| How will the Cybersecurity requirements be defined? | Cybersecurity will be addressed in the RFP. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is all the OneSAF code backward compatible? | Not a requirement for the OneSAF code to be backward compatible. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will AS 9100 be accepted in place of the CMMI requirement? | The Government will evaluate AS 9100 and make a decision. | One on One Sessions | |
| Will earned value management be required? | Unknown at this time, developing the acquisition strategy. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| How is help desk implemented? | Is mostly implemented on e-mail. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| With IDE going away, is there a replacement? | Development space will be virtualized and Govt. will maintain lab space. Details will be in RFP. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Have oral presentations been decided? | The Acquisition Strategy has not been finalized. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will past performance be an evaluation factor? | The Acquisition Strategy has not been finalized. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will all equipment provided be GFE? | Yes. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will there be a requirement to software licenses? | No. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will OPA, OMA, and RDT&E funding be utilized? | Mostly RDT&E funding. | One on One Sessions | |
| Will Mission Command Adapter (MCA) be maintained as a product? | Yes. | One on One Sessions | |
| Is this a single IDIQ contract? | The acquisition strategy is yet to be develop. This means that the Government is in the process of determining the type of contract (FFP,CPFP, CPFF, etc). Once the Government develops the acquisition strategy, we will provide it to potential vendors. | ||
| When would you have the Draft RFP ready? | The Draft RFP is anticipated to be ready by 4Q FY23. | One on One Sessions | |
| Would it be work surges in this contract? This is related to personnel management. | Yes. Part of this program is to develop new capabilities in the form of Customer Funded Efforts and the normal software development cycle. This means that there will be instances that the vendor will have to surge to comply with the Government requirements. Having said this, the Government will not dictate the vendor's personnel requirements to accomplish the tasks in hand. How the vendor manage personnel is their prerogative. The Government will not present the requirement. How it is accomplished, is the responsibility of the vendor. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Would you need contractor personnel to support the Government lab? | The Software development team can be remote but it will be preferred if the computer admin team be on site. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Would additional GFE be outside of the Government lab? | Yes. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| How is One SAF product push to the customer? Delivered? | Disk set of media Mail/Shipped to the customer. Reviewing, complying, and signing the Distribution Agreement for use of OneSAF is the current process to receive the software. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are they any proprietary data systems from other sources/developers that interact with OneSAF? | Yes. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm GFE requirements. | One on One Sessions | |
| Transition plan? Is this going to be laid out in the RFP/PWS? | Yes | One on One Sessions | |
| Is CMMI Level 3 required? | Yes, and it is anticipated to be in the RFP. | One on One Sessions | |
| Is there any other restrictions to compete other than small business? | acquisition Strategy has not been finalized. Therefore, the Government has not yet determined if other restrictions will be placed. | One on One Sessions | |
| Is there any special/unique tech expertise needed for this contract? | Any tech expertise required for this contract will be disclose in the RFP/PWS | One on One Sessions | |
| How is OneSAF doing test management? | OneSAF incorporates new Testing Methodologies to |
- Leverage Operational testing using scenarios with Warfighter Functional Area focus
- Implement Automated Testing as approach for rapid identification of potential issues in daily builds
- Add Performance testing for periodic checking of key performance metrics
Functional Testing
- Validate Use Cases from design and User Manual
- Test threads - controlled step by step test of OneSAF capabilities
Operational Testing
- Distributed Large Scale Exercise
- Vignettes smaller scenario with Warfighter focus
Automated Testing
- Daily builds
- Repeatability testing
| - OneSAF behaviors | One on One Sessions | ||
| Are OneSAF doing any system modeling/architecture modeling? | No. The vendor is free to use any tools, models, etc. they see fit to comply with the Government requirements. | One on One Sessions | |
| Does CREATE provide anything of value to OneSAF? | We have looked at CREATE. But we are going into the direction of UnITE, which is TBD. | One on One Sessions | |
| How important is speed for ATOs /cyber(framework)? | We are looking at it in terms of ATO an AO. Framework will be dictated to us because its a program strategy implemented by PEO STRI. Will be provided in the RFP. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Is there an Army data like solution, we have to tie into before we get into sustainment? | Could be driven by a RIB would have to wait till the RFP. | One on One Sessions | |
| How remote is remote? | Up to the vendor’s ability to fulfill the requirement, meeting PWS and ITAR requirements. Lower 48. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will the PWS be prescriptive in labor skills and size? | The requirement will be prescriptive in terms of management. in To be determined in PWS levels. Some positions will have to be local. ATO lab environment will be local and will need to be maintained and managed. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are we looking at tactical cloud use, using Snowball? | No. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are we looking for anything OUTSIDE the box in the PWS business as usual with a modern twist? | As long as you meet the requirements and fall within the scope. If you have an innovative way to develop code, that creates a baseline and it's within the scope by all means. It has to fall within DevSecOps, cArmy and UnITE(which could be a little stifling to innovation). The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are you going to spell out the cyber requirements? | Yes. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are you working with international partners home team and away team? | In the international version we have code that sanitizes certain aspects of OneSAF for international use. It is tailored for each country. | One on One Sessions | |
| OneSAF scaling to a 100,000 entities, is there a plan to push it up into a million? | OneSAF already feeds into Bifrost to push it to four million entities. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Are there plans to serve other customers other than the training community? Since there are talks of converging with Next Gen Constructive under STE. | Our plan will and always has been to serve all 6 communities. | One on One Sessions | |
| What is the relationship between MSSV and Bifrost? | OneSAF purchased the license for MSSV and called the product Bifrost. STE awarded a contract to the MSSV vendor and received unlimited rights to MSSV which is now called STE MSSV. Bifrost and STE MSSV derive from the same baseline and periodically hand back and receive updates from that baseline. The goal is to have a common baseline. | One on One Sessions | |
| Will the new contract sustain the old way of operation? | Defined in RFP. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Will codevelopers have access to UnITE? | We are not sure. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| What is the relationship between DevSecOps OneSAF and cArmy? | Currently OneSAF has nothing up in cArmy as of right now, it is currently being explored and defined. | One on One Sessions | |
| Is it a continuous ATO? | No. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions | |
| Head count anticipated for Government and contractor? | We are going to be on Research Parkway. The seats and personnel remote or in office are determined by the contractor. There is likely to be a minimum personnel footprint on site. | One on One Sessions | |
| MCAS maintained as a common tool? | Yes, for the foreseeable future | One on One Sessions | |
| Are there any significant useability upgrades? | Will be outlined in the PWS. The Government has not finalized the acquisition strategy or the requirements package and we cannot confirm requirements. | One on One Sessions |
File details come from the government source that posted it. Updated .