RFI Pegasys Financial Services__MSA 06032024.pdf

REQUEST FOR INFORMATION (RFI)

RFI No. 47HAA024N0010

Pegasys Financial Services

Posting Date: June 04, 2024 Questions Due: June 11, 2024, by 12:00 PM. EST

Closing Date: June 28, 2024, by 5:00 PM. EST

Pegasys Financial Services (PFS)

Office of the Chief Financial Officer (OCFO) Pegasys/MSA Hosting and Operations & Maintenance (O&M) Support Services Contract

Pegasys RFI (2024-06-03) 2

Pegasys Request for Information (RFI)

1. BACKGROUND

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. No solicitation exists; therefore, do not request a copy of the solicitation. If a solicitation is released, it will be synopsized in Sam.gov or GSA Ebuy. It is the potential offeror’s responsibility to monitor the release of any solicitation. The purpose of this synopsis is to gain knowledge of interest, capabilities, and qualifications of various companies. It is not to be construed as a commitment by the Government. The information provided in this RFI is subject to change and is not binding on the Government. A contract will not be awarded as a result of this RFI. Since this is a RFI announcement, no evaluation letters and/or results will be issued to the respondents. No reimbursement will be made for any costs associated with providing information in response to this synopsis or any follow up information requests. Failure to respond will not in any way prevent a potential offeror from participation in future solicitations. The purpose of this RFI is to conduct market research on the subject of hosting and operations and maintenance (O&M) support services for a Momentum Financials® System, specifically:

● Collect information about market capabilities, including small businesses, for hosting services and O&M support services for CGI Momentum Financials®;

● Identify potential approaches for meeting GSA’s hosting and O&M needs for its CGI Momentum Financials® application, known as Pegasys, as well for the GSA’s external client instance of Momentum Financials® application, known as Multi-Tenant Shared Application or MSA that supports the United States Institute of Peace (USIP) and 40+ small Commissions, Agencies and Boards (CABs)

All information provided will be given consideration and may influence the development of future proposal requests. All submissions become Government property and will not be returned.

2. DESCRIPTION

GSA's Office of the Chief Financial Officer (B), Office of Financial Management (BG), Pegasys Financial Services (PFS) strives to offer comprehensive, compliant and technologically advanced practices in federal financial management. An integral component of this mission is the need to develop and sustain an effective system of internal controls designed and implemented to ensure the confidentiality, integrity, and availability of OCFO managed systems, consistent with Federal financial system requirements, Federal accounting standards, and transactional accounting guidelines.

The primary goal of this RFI is to explore application and system support models that reduce the hosting and O&M costs of Pegasys and MSA, while maintaining adequate performance and

Pegasys RFI (2024-06-03) 3 support service levels including availability and security. Respondents should include responses for those requirements and capabilities they are able to provide.

GSA considers the following as key objectives for O&M support:

● Successful support for a Federal enterprise-wide financial management system to ensure that the application is free of major errors and that minor errors are minimized and quickly resolved;

● Successful support for a Federal enterprise-wide financial management system resulting in an application that meets user needs on demand; and

● Successful support for a Federal enterprise-wide financial management system to ensure that all GSA financial systems processes meet the business needs of the agency.

● System support is provided promptly and accurately assesses the root cause of the problem and delivers a plan of action to resolve the condition quickly.

● Software defects are repaired in the Momentum baseline code base and delivered to the government quickly and accurately addresses the error condition without collateral damage to existing system processes.

● GSA Financial Reports are generated accurately, timely and are free of errors and omissions.

GSA considers the following as key objectives for hosting services:

● Efficient use of system hardware and software through resource pooling;

● Flexible scalability to accommodate new programs, expanded programs, modified business rules or compliance requirements, as well as surge requirements or additional users that are geographically dispersed;

● Faster deployment of software and system capabilities through standardization, interoperability, and potential Infrastructure as a Service (IaaS) or another model; and

● Ability to monitor, measure, and report program usage during initial deployment with an option to integrate this feature into back-end systems.

● System performance should meet requirements defined in the Service Level Agreements and Quality Assurance Plan.

● System security should meet GSA and Federal Information System requirements including no end-of-life software, vulnerability resolution and adherence to Binding Operational Directives and Presidential Memorandums.

3. CONTRACTING STRATEGY

GSA is interested in obtaining information from vendors about potential contract strategies that meet Pegasys and MSA system requirements. It is GSA’s intent to determine if small businesses are able to support system requirements.

Pegasys RFI (2024-06-03) 4

The illustration below shows the relationships between the existing Pegasys/MSA contract and is meant to demonstrate the two major support areas for Pegasys and MSA. The existing contract services are listed below:

1. O&M and Reporting

2. Hosting

Contract services 1 through 2, above, fall within the scope of this RFI. Vendors should be prepared to respond to all of these three areas of support.

The following sections (1-2) provide a description of the key Pegasys and MSA hosting and O&M requirements, as referenced in the contract illustration above.

Momentum Software has been pre-vetted and received approval from the Financial Management Quality Service Management Office (FM QSMO) marketplace, affiliated with the Treasury Bureau. This authorization qualifies Momentum Software for use within the General Services Administration (GSA) to support financial system modernization and other financial management (FM) requirements. Additionally, the proposed financial system must possess FedRAMP Moderate authorization.

1. Pegasys and MSA O&M

1.1 Application Support

The GSA OCFO requires application support activities to be performed in support of O&M services for Pegasys and MSA. These activities include the following:

● Development and Implementation Support for New Interfaces

● Development and Implementation Support for New Subsystems

● Major and Minor Software Upgrade Support including:

➔ Project Management ➔ Requirements Analysis ➔ Configuration and Software Release Management ➔ Change Management ➔ Data Migration & Conversion ➔ Development ➔ Implementation ➔ Reports Development ➔ Testing

Pegasys RFI (2024-06-03) 5

➔ Documentation & Training

● O&M Support for Interfaces (Attachment A)

● O&M Support for Momentum Subsystems (Attachment B)

● Production Support including:

➔ Accounting Support ➔ Annual Close Support ➔ Archiving Support ➔ Global/Document Level Reorganization Support ➔ 1099 Reporting, Printing, and IRS Transmittal Operational Support ➔ M-Scripts (PERL) Configuration and Operational Support ➔ Business Intelligence and Reporting Tool (BIRT) and Reporting Scripts

Operational Support (ERNE) ➔ Momentum Service Release Implementation Support ➔ Technical Support for Financial Management Enterprise Service Bus (FMESB) ➔ Atlassian support for JIRA, Confluence, BitBucket ➔ Financial Management Information System (FMIS) Data Warehouse hosting support ➔ Pegasys User Access and Registration Portal (PUARP) ➔ Secure File Transfer, encryption, and Application Programming Interface (API) support ➔ Vendor Customer Self Service (VCSS) Registration Portal ➔ Federal system security and audit support.

➔ Batch job scheduling, hosting and configuration support ➔ Robotics process automation support

1.2 Annual Software Maintenance for Momentum Financials®

The GSA OCFO requires annual software maintenance to be performed in support of Pegasys and MSA.

1.3 Project/Technical Management

The GSA OCFO requires project/technical management activities to be performed in support of O&M services for Pegasys and MSA. These activities include the following:

➔ Quality Assurance and Quality Control ➔ Communications Management ➔ Risk Management ➔ Change Management

Pegasys RFI (2024-06-03) 6

➔ Configuration and Software Release Management ➔ Transition Management ➔ Contract Administration ➔ Staffing/Resource Planning

1.4 Reporting Support

The GSA OCFO requires reporting support activities to be performed in support of O&M services for Pegasys and MSA. These activities include the following:

➔ Development and Implementation Support for New Reports and Major Modifications to Existing Reports including:

o Momentum Baseline Reports and Forms o Non-Momentum Baseline Reports (Business Intelligence Reporting

Tool (BIRT) and ERNE scripts) o Pentaho Business Intelligence Reports o GTAS Reporting o DATA Act Reporting

➔ O&M Support for Reports including:

o Momentum Baseline Reports and Forms o Non-Momentum Baseline Reports (Business Intelligence Reporting

Tool (BIRT) and ERNE scripts) o Pentaho Business Intelligence Reports o GTAS Reporting o DATA Act Reporting

1.5 Security Support

The GSA OCFO requires security support activities to be performed in support of O&M and hosting services for Pegasys and MSA. These activities include the following:

➔ Access Protection ➔ Authentication ➔ Information Assurance ➔ Logical Security Support ➔ Physical Security Support ➔ Security Management including:

o Audit Support o Assessment and Authorization (A&A) Support

Pegasys RFI (2024-06-03) 7 o Vulnerability and Compliance Scanning o Section 508 of the Rehabilitation Act

➔ Virus Protection ➔ User Account Recertification Support

1.6 Testing Support

The GSA OCFO requires testing support activities to be performed in support of O&M and Upgrade services for Pegasys and MSA.

These activities include the following:

● Test Plan Development

● Test Script Development

● Management and Execution of Unit/Module, System, User Acceptance, Integration (End to End), Regression, Interface, User Load, and Batch Performance Testing

● Automated Testing Support (required percentage by task)

● Project Implementation Support (Implementation Checklist)

● Configuration Management Upgrade Support and Maintenance (Atlassian)

2. Hosting

2.1 Technical Support

2.1.1 Database Administration

The GSA OCFO requires database administration and support services to be provided in support of hosting services for Pegasys, MSA, and support systems. These activities include the following:

➔ Backup and Recovery ➔ Software Installation and Maintenance ➔ Writing and Maintaining Scripts to Automate Tasks

2.1.2 Infrastructure Services

The GSA OCFO requires infrastructure services to be provided in support of hosting services for Pegasys, MSA, and support systems. These activities include the following:

➔ Architecture Tier Requirements ➔ Backup and Restoration Management ➔ Capacity Management

Pegasys RFI (2024-06-03) 8

➔ Continuity of Operations (COOP) ➔ Data Center Security ➔ Disaster Recovery Planning, annual testing, and support ➔ External Communications Connectivity ➔ Intrusion Detection and Prevention Services ➔ Multi-Tier Administration Services ➔ Network Security Services ➔ Operational Monitoring Management ➔ Physical Environment ➔ Compliance with Service Level Agreement(s) for system and component uptime ➔ System Operations and Administration Services ➔ Storage Management

2.1.3 Maintenance Support

The GSA OCFO requires maintenance support to be provided in support of hosting services for Pegasys, MSA, and support systems. These activities include the following:

➔ Developing, Implementing, and Maintaining a Root Cause Analysis Process ➔ Diagnosing, Analyzing, Recommending, and Taking Corrective Measures to

Prevent Recurring Problems and/or Trends ➔ Maintenance and Repair of Hardware ➔ Maintenance and Repair of Software ➔ Maintenance and Repair of Networks ➔ Minimizing the Adverse Impact of Incidents ➔ Preventing the Recurrence of Incidents ➔ Restoring Normal Service Operation

2.1.4 A&A and Monitoring Services

The GSA OCFO requires Assessment and Authorization (A&Aand monitoring services to be provided in support of hosting services for Pegasys, MSA, and support systems. These activities include the following:

➔ A&A Support for Systems/Applications and Infrastructure ➔ Deployment, Testing, Support, and Operation of Software and Development, Test, and Production Servers ➔ Developing/Updating Operating Procedures ➔ Event Management Monitoring ➔ Tier 2 and 3 Helpdesk Support

Pegasys RFI (2024-06-03) 9

➔ Management of Hardware, Software, Peripherals, Media, Services, and Spare Parts

➔ Server Administration ➔ System or Component Configuration Changes ➔ System Operations and Monitoring Support ➔ System and 3rd party application Upgrade Support ➔ Vulnerability and compliance scanning and remediation ➔ User Account and Access Control Administration

2.1.5 Project/Technical Management

The GSA OCFO requires project/technical management activities to be performed in support of hosting services for Pegasys, MSA and support systems. These activities include the following:

➔ Quality Assurance and Quality Control ➔ Communications Management ➔ Risk Management ➔ Change Management ➔ Configuration and Software Release Management ➔ Transition Management ➔ Contract Administration ➔ Staffing/Resource Planning

2.1.6 Security Support

The GSA OCFO requires security support activities to be performed in support of hosting services for Pegasys, MSA, and support systems. These activities include the following:

➔ Access Protection ➔ Authentication ➔ Information Assurance ➔ Logical Security Support ➔ Physical Security Support ➔ Security Management including:

o Audit Support o Assessment and Authorization (A&A) Support o CISA bulletins, Binding Operational Directive, Presidential Memorandums o Vulnerability and Compliance Scanning

➔ Virus Protection

Pegasys RFI (2024-06-03) 10

2.2 Operations Support

2.2.1 Batch Job Support

The GSA OCFO requires batch job scheduling and operation services to be provided in support of hosting services for Pegasys and MSA. These activities include the following:

➔ Batch Job Test, Demand, and Production Scheduling ➔ Batch Job Test, Demand, and Production Execution ➔ Batch Job Test, Demand, and Production Reporting ➔ Batch Job Test, Demand, and Production Resolution ➔ Batch Job Test, Demand, and Production Result Validation

2.3 Middleware Support

2.3.1 Middleware update and support

The GSA OCFO requires support to manage the annual software licenses and renewals (for CGI-owned software) as well as middleware services for Pegasys, MSA, and ancillary systems.

Installation and maintenance/upgrade activities for middleware will be conducted by the hosting vendor. The following middleware contracts support Pegasys and MSA:

● Apache Jmeter

● Apache Webserver

● RedHat Openshift, Kubernetes Containers, Apache Mqueue

● IBM Tivoli

● Oracle RDBMS and Management packs maintenance

● BIRT Reporting Utility

● Pentaho Reporting software

● Jackrabbit document repository

● Java

● Jenkins automation

● Jboss

● Prisma container scan

● Nessus scan

● Windows/Linux support Operating Systems

● UiPath

● Atlassian Jira, Confluence, and BitBucket

● SSH

Pegasys RFI (2024-06-03) 11

● SSL/SSH Web Certificates for application access (e.g. phdc-pub.gsa.gov)

● Quest Shareplex

4. ATTACHMENTS

The following files are attached to this RFI:

● Attachment A - PFS Pegasys/MSA Interfaces

● Attachment B - PFS Pegasys/MSA Momentum Subsystems

● Attachment C – PFS Architecture Document

● Attachment D – PFS Current/Future Hosting Decisions

● Attachment E – PFS Pegasys and MSA Hosting and O&M Requirements Matrix

5. CAPABILITY STATEMENT & PAST PERFORMANCE

GSA is interested in vendor knowledge, capability, and experience in the following areas:

A. Momentum Financials® Hosting and/or O&M support experience and past performance;

and

B. Implementation and operation of cloud computing services, as defined by National Institute of Standards and Technology (NIST).

The GSA OCFO requires a capability statement from all responders that addresses the following (in order):

(1) Statement to demonstrate your firm’s (including teammates or subcontractors) methodology, capability, and past experience for each of the requirements (1-3) listed in Section 3. Contracting Strategy above. Respondents need only provide responses for the requirements for which they have a methodology, capability, and past experience.

(2) Experience working with cloud computing services similar in size, scope and complexity to the GSA OCFO’s needs as described in this RFI and Attachment D - Current/Future Hosting Decisions .

(3) Knowledge, capabilities, and past performance in providing Momentum Financials® hosting and data center services and O&M support.

Please limit your capability statement response to ten (10) pages.

https://docs.google.com/spreadsheets/d/1vKWgYSvMXZeUW-0ApjXMrM6yJ0rJPW6IJXSwELgnd7Q/edit#gid=1330491954 https://docs.google.com/spreadsheets/d/1UkAM6F4CzfdFvkV0DOHoX-Z1_ce0sDcrJcbNJnix3bc/edit#gid=0 https://docs.google.com/document/d/1N6CGnahYpL65ktTyrt4Y2ulRrpj37onK/edit?usp=drive_link&ouid=108205338670498950159&rtpof=true&sd=true https://docs.google.com/document/d/1v2xqErTxnTyvOD8xmpb-szKDKrE4TuhHbenwwA-rvqQ/edit?usp=sharing https://docs.google.com/spreadsheets/d/1dVeL0kvQRXzYYXobR-bSt08JP5U3YNtY/edit#gid=210486073 https://docs.google.com/spreadsheets/d/1dVeL0kvQRXzYYXobR-bSt08JP5U3YNtY/edit#gid=210486073 https://docs.google.com/document/d/1v2xqErTxnTyvOD8xmpb-szKDKrE4TuhHbenwwA-rvqQ/edit?usp=sharing https://docs.google.com/document/d/1v2xqErTxnTyvOD8xmpb-szKDKrE4TuhHbenwwA-rvqQ/edit?usp=sharing

Pegasys RFI (2024-06-03) 12

6. APPROACH

The GSA OCFO requests that respondents describe a potential approach to providing the Pegasys and MSA hosting and O&M support that is consistent with the description above (including O&M, middleware, and hosting), Attachment C – Pegasys and MSA O&M Technical Architecture, and Attachment D – Current/Future Hosting Decisions. Respondents should include information about how the GSA OCFO should structure the requirements. Respondents should emphasize which aspects of their potential approach would result in cost savings for the Government.

Please limit the approach response to twelve (12) pages.

7. QUESTIONS

The GSA OCFO requests responses to the following questions. A complete response to all questions listed is appreciated, but not required. Please limit responses to the questions to a total of five (5) pages.

1) Using Attachment E – Pegasys and MSA Hosting and O&M Requirements Matrix, rate the proficiency of your firm and its potential partners in executing each of the listed requirements. Additionally, describe how, if awarded a contract containing all of these requirements, you would integrate and manage each requirement concurrently to promote effective end-to-end process management and control and service level management, as well as meeting functional requirements. Note: Responses to Attachment E are not subject to the page limitations.

2) Given that the Momentum Financials® software is proprietary to CGI Federal, describe how you would address the system O&M and hosting requirements that are directly tied to any proprietary software and services.

3) Describe how you would help GSA save, if practicable, on its O&M and hosting costs by consolidating or separating out different aspects of the work described in Section 3.

Contracting Strategy. Indicate if unit service costs can be reduced through the use of virtualization or other cloud-related technologies and include discussion of risks/constraints.

4) Describe how the requirements (1-3) listed in Section 3. Contracting Strategy should be grouped or otherwise organized to provide more efficient, lower cost, and higher quality services to GSA.

5) Describe how you would add value, if possible, to GSA’s Pegasys middleware contracts by taking ownership of the software license renewal process or consolidating.

Pegasys RFI (2024-06-03) 13

8. RESPONSE INFORMATION

Interested large and small businesses are required to provide an electronic copy in Microsoft Word or Portable Document Format (PDF) of their response to the Contracting Officer by June 28, 2024 at 5:00PM EST. Responses should address relevant experience, business size and NAIC code, capability statement, approach, and questions. Responses must also indicate business capability to perform the proposed services identified above. Capability Statements are limited to 10 pages. Approaches are limited to 12 pages. Questions responses are limited to 5 pages. All responses should be at a Times Roman, 12-point font minimum font size single spaced, one sided, letter size,, with 1 [one] inch margins, in “.docx”, or “.pdf” file formats.

Respondents are not to submit brochures and marketing materials. Any such materials will be discarded.

The Respondent is requested to submit a response that includes the following (subject to the page limits):

● Business name.

● Point of Contact (POC) name, email, phone number, and web address

● Business size classification (Large, Small, SDVOSB, WOSB, etc.)

● Possible NAICS codes associated with this action

● Capability Statement & Past Performance information

● Approach to the Requirements

● Responses to the Questions

Send written responses to Ms. Bonnie Impastato, Contracting Officer, at the email address listed below. No collect calls or telephone inquiries will be accepted.

Point of Contact Ms. Bonnie Impastato, Contracting Officer Acquisition Liaison Services Office 1800 F Street, NW, Room 6307 Washington, DC 20405 Phone: (202) 208-4959 Email: bonnie.impastato@gsa.gov

RESPONSE STRUCTURE:

No Classified information shall be included anywhere in your responses.

All proprietary information must be clearly marked in accordance with the instructions set forth below in “Marking Requirements.” Any information submitted in response to the RFI may be disclosed to GSA and other Government personnel. All information marked as proprietary information will be safeguarded by GSA to prevent unauthorized disclosures to non-government mailto:bonnie.impastator@gsa.gov

Pegasys RFI (2024-06-03) 14 personnel and entities in accordance with applicable laws and regulations. The GSA reserves the right to challenge proprietary information markings.

Notwithstanding any proprietary information marking, GSA shall be able to include any information provided by interested sources, in a subsequent Request for Quote (RFQ), should one be issued.

Marking Requirements: The header and footer of each page containing interested source proprietary information shall be marked with the legend “PROPRIETARY INFORMATION.”

Further, the particular paragraph(s) section(s), etc. containing the actual proprietary information shall be clearly high-lighted or otherwise marked by the Respondent.

QUESTIONS: Questions regarding this RFI shall be submitted to the Contracting Officer, Bonnie Impastato, bonnie.impastato@gsa.gov with the email subject header “RFI (No.

47HAA024N0010) QUESTIONS - Pegasys Hosting and Operations & Maintenance Services

– (your company name}” by June 11, 2024, by 12:00 PM. EST. Questions and feedback shall be limited to one (1) page. No questions will be accepted after the specified time and due date to submit questions. Each question submitted must cite the RFI section title/RFI question number for which the question pertains, unless the question is general in nature and not specific to a particular portion(s) of the RFI.

Response Due Date: Responses are due no later than June 28, 2024 at 5:00 PM EST. Submit your responses via email only in “.docx”, or “.pdf” file formats to Bonnie Impastato, Contracting Officer at bonnie.impastato@gsa.gov with the email subject header “RFI (No. 47HAA024N0010) RESPONSE - Pegasys Hosting and Operations & Maintenance Services – (your company name}.” Include: RFI No. 47HAA024N0010, company name, email address and phone number of the appropriate representative of your company on the cover page. All responses received after the due date will not be considered. The Government is not obligated to review responses to the RFI received after the deadline specified above. Please be advised that all submissions become Government property and will not be returned. Only electronic submissions in “.docx”, or “.pdf” file formats will be accepted.

Do not include the following in your response:

● Proposals or offers

● Requests to be considered for award or to be notified of a future solicitation

● Requests to be added to a mailing or distribution list

● Questions or comments not related to this RFI

● Classified information

PUBLIC RECORDS AND REQUESTS FOR CONFIDENTIALITY:

mailto:bonnie.impastato@gsa.gov mailto:bonnie.impastato@gsa.gov

Pegasys RFI (2024-06-03) 15

Any document submitted that contains confidential information must be watermarked as containing confidential information, and each page upon which confidential information appears must be marked as containing confidential information. The confidential information must be clearly identifiable to the reader wherever it appears.

FINAL COMMENTS

This is an opportunity to provide meaningful feedback in the early stages of the market research and the pre-solicitation “need definition” for GSA’s marketing automation tool solution. Your thoughtful participation is encouraged. It is an opportunity for good corporate citizenship and to show your best interest in a more effective and efficient government. As a major conduit to many of your goods and services for federal agencies, states, and local/tribal governments, GSA’s improvement can also be realized in an improved marketplace for your company.