QA_-_Part_1.pdf

RFP: OPIC-18-R-0007 Questions and Answers – Part 1

Answers in RED Below

1) Section 6.0 – Contract Overview: A hybrid Firm-Fixed Price (FFP) and Time & Materials (T&M) contract is anticipated. Question: can we interpret the “Hybrid” pricing as Time & Materials with a cap? Yes

2) SOW p9: A cloud delivery is mentioned multiple times and the ability to be FedRamp authorized;

Question: does OPIC have a “private cloud” vendor approach?

Currently, OPIC does not have a standardized “private cloud” vendor approach. OPIC utilizes software solutions that are hosted by the vendor, but such instances are approved only after OPIC’s OCIO/CISO have analyzed/approved the vendor’s private cloud environment (especially with respect to security, access control, Federal Government policies, and other applicable controls and standards). OPIC also has a presence on Azure (Government Cloud) where we utilize both IaaS and PaaS offerings provided by Azure.

3) SOW p10: Environment Setup - Assuming the hosting will be on-premise at OPIC, will OPIC’s own IT team be involved in the setup, configuration and maintenance of the servers + deployment of application packages provided by the vendor?

OPIC IT team will provide the infrastructure layer services that are required to setup that software provided by the vendor. This will include setting up the server(s) and networking infrastructure, installation and configuration of the operating system, database platforms etc. and hardening the platforms in accordance with the applicable Government standards. The vendor is expected to perform the setup, deployment and configuration of the application packages provided by the vendor.

4) SOW p8: Integration - For the Integration with other systems (SalesForce, Oracle On-Demand …) can we assume OPIC has a middleware / ETL data transformation architecture / software to perform the interfaces provided we support web services?

OPIC will assume that the vendor will provide mechanisms to integrate the software solution with OPIC’s business information systems through a standardized web service / API platform. OPIC’s IT team will collaboratively work with the vendor to implement the necessary integration functions between OPIC’s systems and the vendor’s software solution. OPIC will provide the expertise with respect to the systems that are currently utilized by OPIC (i.e., Salesforce, OOD, SharePoint).

5) SOW p8: Integration - Assuming Active Directory and Centrify SSO integrations, will OPIC administrators manually onboard new user profiles into the application, or should that be automated through web service or daily file upload?

The vendor’s solution should be able to be integrated with OPIC’s Active Directory and Centrify for SSO/authentication/access control. Since not every OPIC employee will need access to the risk score card platform, the user creation process will be a manual process – a user will need to be created in two places (OPIC AD and the vendor’s software solution).

6) SOW p9: Integration - What sort of information must be integrated with SharePoint? Is there an existing Sharepoint integration layer that should be used by the Vendor?

OPIC requires that approved scorecards need to be available to SharePoint through a PDF but this does not need to be an automated function. So there really isn’t envisioned any direct system integration between OPIC systems and the new platform.

7) SOW p9: Integration - What information must be integrated from Country & Regulatory Environment Ratings Application? Is there an existing integration layer or API available to the Vendor to retrieve information from that system?

The Country & Regulatory Environment Ratings Application is an MS Access database internal to OPIC, as well as the Moody’s, Fitch, and S&P Sovereign and Non-Sovereign Ratings Excel worksheets. Data from these data sources would need to be pulled automatically into the 10 scorecards.

8) SOW p6: Integration - Other MS .Net Solutions (TBD?) – Can OPIC clarify which applications should be considered for integration? If the Vendor is expected to price these integrations, please identify them and provide details about the data to be integrated in the Risk Rating Platform.

Currently, there are no requirements for integration with other MS .NET solutions.

9) SOW p8: Integrations - can we assume that the integrations to MS SQL Server XXX and Windows

Server XXX are mentioned as required compatibility with the Risk Rating application? (i.e. FACT Database runs on SQL Server and Windows Servers) Else, can additional details be provided on what integrations are expected for those systems?

Yes.

10) SOW p12: Which of the Integrations should be considered “scorecard-specific”? Since Task 4 specified the same “System Interfaces and Integrations” listed in Task 3, is the expectation that some of these integrations might be incremental and affected by specific scorecards? At a high level, we could presume that MRA and the Reporting warehouse integrations could indeed be “scorecard” specific, at least in terms of the data points being sent/received. But what about Salesforce, EBS, LNB, SharePoint, Country & Reg Ratings,…?

The data points being pulled from Insight and Oracle are not scorecard –specific. However, each scorecard has unique information that is not identical across or required for all scorecards but that must all be captured (or pushed) into the data warehouse solution. So overall, integrations do not have to be ‘scorecard-specific’, however, Task 3 should be considered as a fully operational pilot for one scorecard, with all required integration functionality implemented. Task 4 pertains to the remainder scorecards development and integrations.

11) SOW P22: Clarify whether “Budget”, “PMD Officer” and “TRIM” refer to systems into which the data must be pushed? (or could it be users interacting with the Scorecard Platform directly, like PMD Officer?)

“Budget” and “PMD Officer” refer to roles/business functions while “TRIM” refers to OPIC’s records management software (currently known as HPRM).

12) SOW p25, #19:For Covenants Monitoring, can you provide details on the scope? (financial covenants / non financial, ticklers)

OPIC does not currently have a Covenant Monitoring system but envisions it as part of the platform solution. It is not an essential requirement, but OPIC would like this capability.

13) SOW p25, #16: For Peer Groups Analysis, can you provide more details? (peers per industry, globally, data source for peers …)

Uses of OPIC data for analytics across different metrics within sectors, (size, industry country). This is more of a reporting functionality.

14) SOW p25, #26: general requirement text is cut – could the full text be provided?

Full text should read “General timeframe for deployment is manageable/acceptable (I.e. Fall of 2018)

15) SOW p26, #37: “Federally regulated user interface standard” => are there any specific requirements

/ references we can check compliance against?

Section 508 compliance, please reference https://www.section508.gov/

16) SOW p26, #40: “Mobile capabilities are offered” => does that refer to the ability to access the platform through browser on mobile phones and tablets? Or through dedicated mobile applications?

Which mobile O/S are contemplated? (iOS, Android, …)

OPIC envisions being able to access the platform solution through IPhones and tablets but this is not critical function.

17) SOW p26, #45: “Integrates well with OPIC Shared Drives” => Is that the Sharepoint integration mentioned earlier?

Please disregard this requirement.

18) SOW p26, #47: Clarify how OPIC will onboard / manage new user accounts into the platform

(either manually added by Admin or requires an automated service to push new users daily?)

Manually added by the administrator, but SSO/authentication managed through Active Directory/Centrify. See answer for question #5.

19) SOW p27, #54: Tableau is mentioned as a reporting tool, but no STAR-Schema or OLAP cube details are known to move data for that BI tool; Question: can you provide more data on the vision for BI?

OPIC should be able to use the vendor’s integration layer functionality to extract data from the score card platform into OPIC’s data warehouse, irrespective of the Warehouse’s design/structure and reporting tools. See answer for question #4.

20) SOW p27, #58: For the integration with SharePoint 2013 and Online365, how does OPIC foresees attachments in the vended solution Vs these applications? For example: duplicating files in 2 systems.

OPIC foresees that the score card information will be stored in a structured format within the vendor’s software solution and as unstructured within SharePoint/Office 365.

https://www.section508.gov/

21) SOW p28, #79: “Version Control is available” -> could OPIC clarify whether this refers to version control of configuration, or version control of data?

OPIC expects the vendor’s software solution to provide version control for both the configuration of the underlying scorecards, and throughout various stages of scoring and approval via the workflow process.

22) SOW p28, #81: “Point in Process is available” -> could OPIC clarify what this means? Question:

what’s “Point in Process”

Please disregard this requirement.

23) SOW p29, #86: Email Alerts & notifications; can you provide more details if the notifications are within the system or an email server to be interfaced

OPIC expects the vendor’s software solution to send out email notifications that are necessary as part of business processes/workflows. These emails should be relayed through OPIC’s email infrastructure, as per directions from the OCIO/CISO.

24) Do we need to come over there for meetings? Please see page 1 of RFP OPIC-18-R-

0007. Meetings are to be held at OPIC located at 1100 New York Avenue, Washington DC.

25) Can we perform the tasks (related to RFP) outside USA? Yes, but all contractors must be registered in the System for Award Management (SAM). See page 2 of the RFP OPIC-18-R-0007.

26) Can we submit the proposals via email? Please see page 5 of RFP OPIC-18-R-0007. Proposals are to be emailed the Contracting Officer listed in OPIC-18-R-0007.

27) Page 1 references NAICS 511210 as the primary NAICS for this acquisition. The use of this NAICS would seem to imply that this procurement is directed more toward establishments primarily engaged in computer software publishing or publishing and reproduction. The SOW, however does seem to indicate that the work is more custom development in nature. Would the Government please clarify the use of NAICS 511210 and whether it is directing this procurement more towards traditional software vendors/publishers versus software developers? OPIC is agnostic between vendors and developers, provided the solution meets the requirements and provides the best value for the price.

28) OPIC refers to gaps and issues that need to be addressed with the new solution. Given this is an FFP hybrid contract we request the Government provide the key gaps/issues that need to be addressed. Examples of the Gap/Issues OPIC is currently facing are a) scorecard version/audit control, b) lack of an automated workflow to manage approvals, c) lack of a data warehouse for robust, secure data storage, d) insufficient reporting, e) lack of integration with other OPIC systems.

29) Would the Government please provide a sample display of one of its existing scorecards. We understand that the data would need to be redacted. Again, we are requesting this given the nature of the contract. An example of an existing scorecard is uploaded.