RFI_FCI Atlanta_CTE (1).pdf

U.S. Department of Justice

Federal Bureau of Prisons

Administration Division

Field Acquisition Office

Grand Prairie, Texas 75051

REQUEST FOR INFORMATION (RFI) – CAREER & TECHNICAL EDUCATION (CTE)

The Federal Bureau of Prisons (FBOP) is conducting market research in accordance with Federal Acquisition Regulation, Part 10. The FBOP anticipates a single solicitation will be issued for Career & Technical Education (CTE) consulting, lab design, product sales, and comprehensive project services to establish a CTE training facility (trade/technical school) for adults in custody at the Federal Correctional Institution (FCI) Atlanta.

The purpose of this questionnaire is to gather more information for the upcoming requirement to provide all necessary equipment, labor, materials, and incidentals to design and outfit a trade/technical school designed to provide CTE training programs.

This RFI is a means of identifying interested firms who may be capable of providing a range of quality educational and technical training products and services, allowing for multi-tiered programs ranging from foundational knowledge to employment readiness. The vendor will offer products, curricula, software, and support in the delivery of industry-based learning experiences via cutting-edge educational technologies.

Products and services shall include industrial-grade components and industry-recognized software, ensuring students can seamlessly transition from classroom learning to real-world employment. The vendor shall have a documented history of proven work performance. The vendor shall be able to provide products and services onsite at the project location.

It is the vendor’s responsibility to obtain all permitting, should it be required. All manufacturers’ recommendations will be required to be implemented. All equipment specified must be brand name or equal product. All items shall be covered by the manufacturer's warranty. The products shall meet the specific technical and educational needs of the FBOP.

The vendor shall ensure all equipment and installations are compliant with safety and operational standards for a correctional setting.

Project Location: Federal Correctional Institution (FCI) Atlanta, located at 601 McDonough Blvd SE, Atlanta, GA 30315. FCI Atlanta is a low security correctional institution.

Project Site: A 200,000 square foot building located within the secure perimeter of the institution. The building is two-story, with approximately 100,000 square feet per floor.

The building was a production facility. The layout is open floor space, except for supporting pillars. There are no electrical/wattage restraints associated with the building. The building has a functional, pneumatic air system running throughout the overhead. The building has well maintained concrete floors.

The building has numerous access points including two loading docks. There is one loading dock on each floor.

Each loading dock is equipped with functional garage style doors.

A summary of the requirements is as follows:

Career and Technical Education Programs

Seeking a vendor specializing in Career & Technical Education (CTE) consulting, lab design, product sales, and comprehensive project services. These services shall include effective project planning, product purchasing, program implementation, and ongoing support.

The primary objective of this project is to design and establish a comprehensive CTE training center within FCI Atlanta. The training center will be designed to deliver high-quality, industry-based learning experiences to individuals serving federally imposed sentences, equipping them with skills and certifications necessary for employment readiness and successful community reintegration.

The vendor must be a licensed dealer, authorized to sell a range of CTE educational products and services, including industrial-grade equipment and industry-recognized software, ensuring provided curriculum meets real-world standards.

Manufacturers: The vendor shall be authorized to sell CTE educational products and services with industrial-grade components and industry-recognized software. Example manufacturers include but are not limited to FANUC, Amatrol, Bayport Technical, MakerBot, Lincoln Electric, SIMLOG, LJ Create, MSSC, Stokes Education, Artec 3D, Levil Technology, CARACOL, Minds-I, VRSIM, Lucas-Nulle, etc.

Products: CTE Educational products will include but are not limited to learning management systems, portable learning systems, simulators (e.g., heavy equipment, welding, paint), welding stations, welders, 3D printers, and robotic training equipment.

CTE Programs: Each CTE program must allow for differentiated learning, provide adequate learning flexibility, preparing students to have job-ready skills upon program completion. Class sizes will range from ten to fifteen students. Classes will be occurring simultaneously in different learning areas/labs.

All CTE programs submitted will be reviewed and considered. CTE Programs must be in fields with livable wages and a workforce demand. Example CTE Programs are listed below in no preferential order:

Science, Technology, Engineering, and Mathematics (STEM)

Energy (Clean/Green/Renewable)

Audio/Visual Technology, and Communications (e.g., Podcast Studio)

Construction/Building Trades

Auto (Internal-combustion-engine, Diesel, EV)

Culinary Arts

Autobody and Paint

Factory Automation Programming and Factory Automation Maintenance

Mechatronics Advanced Manufacturing

Additive Manufacturing (3D Scanning/Printing)

Computer Aided Design (CAD)

CNC/Robotics Certified Logistics

Welding Agriculture

CTE Certifications: CTE Program outcomes (completion) must result in a national and/or industry recognized certification, classifying the individual completing the program, to have achieved adequate job-skills and/or employment readiness. Programs may be multi-tiered and/or stackable, allowing students to start with one course not resulting in a certification if the final program result is a certification recognizing employment readiness.

Example certifications include Manufacturing Skill Standards Council (MSSC), National Center for Construction Education and Research (NCCER), Smart Automation Certification Alliance (SACA), National Occupational Competency Testing Institute (NOCTI), Fused Deposition Modeling (FDM), National Institute for Metalworking Skills (NIMS), Stratasys 3D Printing Certification, Automotive Service Excellence (ASE), Renewable Energy/Energy Efficiency Certifications, etc.

Please answer the following questions:

General Company Information

1. Provide a brief overview of your company's core competencies related to CTE.

Expertise and Services Offered

2. What specific CTE services do you offer, including project planning, lab design, product procurement, program implementation, and ongoing support?

CTE Programs, Products, Curricula, and Certifications

(An example table for answering these questions is provided below)

3. What national or industry-recognized certifications can students earn upon completing your CTE programs?

CTE Program Curriculum Learning Product/Equipment

Learning Product/Equipment Manufacturer

Certification(s)

Onsite Services

4. Are you able to provide products and services onsite at the project location?

Market Demand and Adaptability

5. How do you adapt your offerings to meet evolving industry needs and technological advancements?

Additional Questions:

6. Is your company registered in System for Award Management (SAM)? ____Yes ____No **All potential quoters are advised if a solicitation is issued it will include the clause at FAR 52.204-7 (Oct 2018) for System for Award Management (SAM). This clause requires all contractors doing business with the Federal Government after September 30, 2003, to be registered in the SAM database. If your company is not registered in SAM, registration can be completed at: www.sam.gov

7. The North American Industrial Classification System (NAICS) code for All Other Miscellaneous

Electrical Equipment and Component Manufacturing is 335999, which sets the small business size standard at 600 employees. Based on this standard, what is your business size, small or large?

______ Small ______ Large

8. If the requested NAICS code is not appropriate, what NAICS code(s) would adequately encompass this project? _______________________

9. If you are a small business, what level of subcontracting, if any, would be available for the service(s) your firm is interested in providing? ___________ %

10. Is your firm eligible for participation in one of the following small business programs? If so, please indicate the program.

________ “8(a)” Program

________ Women-owned small business concern

________ Veteran-owned small business concern

________ Service-disabled veteran-owned small business concern

________ Use of a price evaluation adjustment for a small-disadvantaged business concern http://www.sam.gov/

11. How many calendar days does your firm need to prepare a proposal resulting from this solicitation?

15 days 30 days 45 days 60 days

12. If awarded a contract, how many calendar days following an award would it take your company to begin providing services to the institution?

** Please note that all individuals providing services at the institutions must undergo a security clearance investigation. This investigation may take 30 calendar days or longer to complete.

__ Calendar days

System Software/Hardware and Performance Requirements

Vendors must demonstrate their ability to meet technical and system performance requirements through documentation, current client references and/or system demonstrations. Solution information shall include compliance details for 508, TAA (Trade Agreements Act), FISMA (Federal Information Security Modernization Act), NIST (National Institute of Standards and Technology), FIPS (Federal Information Processing Standards), FedRAMP (Federal Risk and Authorization Management Program), PGD 15-03 (DOJ Procurement Guidance Document 15-03), and HSPD-12 (Homeland Security Presidential Directive 12).

Hardware Requirements

The vendor is expected to provide the minimum server hardware specifications, if applicable, required to support a typical BOP site, as well as specifications for any centralized enterprise system considering the BOP’s size and geographic scope. A network architecture diagram describing the network and system communications and interfaces may be requested.

The system display must provide the following capabilities:

A. Access Device Components and Integration

1. Ability to provide a portal link to the classroom environment;

2. Ability to self-specifically authenticate individuals access to the environment;

3. Describe the solution architecture;

4. Describe the solution redundancy capabilities;

5. Describe the solution backup and failover processes;

Additional questions:

6. Is your solution compatible with VMware Virtual Desktop Infrastructure (VDI) platform? Please provide details on the compatibility and integration of your solution with VMware VDI or any other virtualization platforms, including any specific requirements or considerations for deployment.

7. Additionally, if there are any limitations or dependencies related to virtualization support, please provide relevant information.

8. Is your solution cloud based? If yes, does it have FedRAMP ATO hosted on Gov/Government Cloud?

9. Do you have the required FISMA, FedRAMP, NIST, ATO and ConMon expertise to create and maintain necessary BOP security, privacy and records management documentation for the controls that are BOP’s responsibility?

10. Does system support the IPv6 network configuration?

11. Can the system operate with/thru an internet proxy for any required internet access?

12. Does your solution integrate with Okta Multi-Factor Authentication (MFA) for enhanced security measures? If yes, please provide details on how your solution integrates with Okta MFA, including the authentication process and any additional security features that are supported. If not, please explain the alternative authentication methods or security measures that your solution offers to ensure secure user access.

13. Does your solution provide support for Security Information and Event Management (SIEM) collection and vulnerability scanning, similar to Tenable? If yes, please describe the integration capabilities with SIEM systems and how vulnerability scanning is conducted within your solution.

14. Additionally, provide details on the types of security events and vulnerabilities that can be monitored and reported on. If not, please explain the alternative security monitoring and vulnerability assessment features that your solution offers.

B. System Security Specifications

Additional questions:

1. Describe access control and permissions assignment within the application. Does the application support role-based access control (RBAC)?

2. Describe application event logging;

3. Are there any application screens, web pages, or resources that do not require authentication by default?

4. Are all authentication controls enacted on the server side?

5. Do authentication controls fail securely?

6. Please describe the platform support for multi-factor authentication for administrative and end users;

7. Please describe the user self-service feature for password or account reset.

8. Are credentials transported using a suitable encrypted link?

9. Please identify any pages/functions that require a user to enter credentials that are not done over an encrypted link;

10. Please describe the method of request throttling in place to prevent automated authentication attacks;

11. Is the data in motion encrypted? If so, what is the level of encryption?

12. Is the data at rest encrypted? If so, what is the level of encryption?

C. Software Upgrades and Patches

1. Describe the process and cycle, for all components of the solution, software patches and whether upgrades occur on a regular schedule.

2. Describe how soon after a security vulnerability (e.g. a Common Vulnerabilities and Exposures identified software flaw or misconfiguration) is identified, a patch or fix is provided.

3. Describe the cyber security protection and protocols for the solution.

Federal SLA Requirements:

The Bureau of Prisons requires that the submitted solution meets the following Service Level Agreement (SLA) requirements:

Availability: The system should have a minimum uptime of 99.9% during normal operating hours, excluding planned maintenance windows. Planned maintenance windows should be scheduled outside of peak usage hours and with advance notice provided to the Bureau of Prisons.

Response Time: The system should provide a response time of no more than 3 seconds for accessing and retrieving requested documents or information.

Help Desk Support: The solution should include a dedicated help desk support service to address technical issues and inquiries promptly. The help desk support should be available during standard business hours and provide a response within 4 hours of ticket submission.

Problem Resolution: Any reported problems or issues with the system should be resolved within a reasonable timeframe, based on the severity and impact on system functionality. Critical issues should be resolved within 24 hours, while non-critical issues should be resolved within 72 hours.

Data Security and Privacy: The solution should comply with all applicable federal regulations and guidelines regarding data security and privacy, including but not limited to FISMA, FedRAMP, and NIST standards. The vendor should have appropriate measures in place to protect the confidentiality, integrity, and availability of the data stored or processed by the system.

System Upgrades and Patches: The vendor should provide timely software patches, updates, and upgrades to address security vulnerabilities or to improve system functionality. The deployment of upgrades and patches should be planned and communicated in advance, and any associated downtime should be minimized.

Reporting and Monitoring: The system should include robust reporting and monitoring capabilities to track system performance, usage statistics, and security events. The vendor should provide regular reports on system performance and compliance with SLA requirements.

4. Does your company's solution meet the Service Level Agreement (SLA) requirements outlined in the RFI, including the availability, response time, help desk support, problem resolution, data security and privacy, system upgrades and patches, and reporting and monitoring criteria? If yes, please provide specific details on how your solution fulfills each requirement, including any relevant performance metrics or success stories from existing deployments.

D. Personnel Security

Generally, any individual who desires to develop a DOJ IT system:

Must undergo an OPM Moderate-Risk Background Investigation (MBI). This requirement applies to anyone physically and directly accessing a networked device, or via remote access.

Must be a US citizen.

Indicate whether the vendor is capable of complying with the above personnel security requirements.

1. Does Vendor provide support for:

a. Application/system software?

b. Training?

2. Specify power requirements (e.g. 240-volt, 60-amp circuit).

3. Do you have devices and/or a solution in any correctional environment? If so, please indicate where and the purpose.

The vendor should indicate if they have experience providing solutions to federal or government customers, acquiring and maintaining an Authority to Operate (ATO) for their environment or environments they connect their environment to and the systems are all existing in a FedRamp Certified cloud environment, and adhering to federal IT standards, policies, processes, and mandates.

Please furnish the following information in reference to your firm:

Name of Business: ________________________________________________

Address: ________________________________________________________

Point of Contact: _________________________________________________

Telephone Number: _______________________________________________

E-mail Address: __________________________________________________

UEI: __________________________________ CAGE: ________________________

VENDOR WEBSITE: ___________________________________________

I am extremely appreciative of the time you have taken to complete this questionnaire. Please email your response to me at sburke@bop.gov no later than January 15, 2025, at 10:00 am, CST.

Should you have any questions or concerns, please feel free to contact me.

Sincerely, Sarah Burke, Contracting Officer Federal Bureau of Prisons U.S. Armed Forces Reserve Complex Field Acquisition Office 346 Marine Forces Drive Grand Prairie, TX 75051

NOTE: The resulting solicitation will be distributed solely through the General Services Administration website at www.sam.gov. Hard copies of the solicitation will not be available. The website provides downloading instructions to obtain all documents relating to the solicitation. All future information concerning this acquisition, including the pre-solicitation notice, solicitation, and any subsequent amendments, will be distributed solely through the website. Interested parties are responsible for monitoring the website to ensure they have the most up-to-date information about the acquisition.

mailto:sburke@bop.gov