CMSII_RFI_v1.0.docx

UNCLASSIFIED//FOUO

CMS II

CMS II

REQUEST FOR INFORMATION

GEOINT Professional Certification (GPC) Candidate Management System (CMS II)

1.0 DESCRIPTION & PURPOSE

NGA has a mission-critical need to implement, operate, maintain, and sustain an established Candidate Management System (CMS) (built on the LearningBuilder COTS credentialing system) to support the full end-to-end lifecycle of GPC candidates and credentialed GEOINT professionals, capable of scaling up to an estimated population of 55,000 active/inactive records over the life of the contract.

Option Year 1: September 2028 – August 2029 Option Year 2: September 2029 – August 2030 Option Year 3: September 2030 – August 2031 Option Year 4: September 2031 – August 2032

· The Contractor shall have the capability to implement the proposed CMS by September 2027. It is expected that if a new CMS is implemented by replacing LearningBuilder, that all records will be migrated over.

2.4 SECURITY REQUIREMENTS: The following security requirements are anticipated to apply to this acquisition: (Note that all of the personnel the responder anticipates would perform the needed services would need possess the appropriate security clearance at the time of proposal or quotation submission.)

2.4.1 Security Compliance Standards

· The Contractor shall ensure the CMS operates in alignment with DoDI 1322.26 (implementing xAPI protocols where applicable), DoD Directive 5400.11 ("DoD Privacy Program"), and DoDM 5200.01 ("Information Security Program") concerning the handling of Controlled Unclassified Information (CUI) and Personally Identifiable Information (PII).

· The Contractor shall ensure adherence to National Institute of Science and Technology (NIST) SP 800-53 security controls, to include receiving and maintaining the Authority to Operate (ATO) from NGA Security (CDRL A0009).

2.4.2 Infrastructure Security Protocols

· The Contractor shall manage and execute the following security operations:

· Restrict all application traffic via Hypertext Transfer Protocol Secure (HTTPS), ensuring data-in-transit is fully encrypted.

· Manage authentication using secure, hardened server images that comply with DoD standards.

· Support secure user authentication via multi-factor credentials, digital identity certificates, or strong usernames/passwords.

· Conduct routine system Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG) scans.

· Promptly remediate security vulnerabilities and apply software patches.

· Maintain a shared security stack including network firewalls, Web Application Firewalls (WAF), Intrusion Detection Systems (IDS), and Network Address Translation (NAT).

· Maintain and submit required system security documentation (e.g., SSP, CONOPS, SCTM, ConMon, STP) in compliance with NGA authorizations.

2.5 ORGANIZATIONAL CONFLICT OF INTEREST: This acquisition is for a commercial item. In accordance with FAR Part 9.5, please discuss any performance which may lead to an OCI and how the Offeror would mitigate, avoid, or neutralize the conflict.

3.0 REQUESTED INFORMATION

Responses must only contain UNCLASSIFIED information and be marked “UNCLASSIFIED” on all pages in both the header and footer. No classified information may be included in your response.

Neither proprietary or classified concepts, nor classified information should be included in the submittal. Input on the information contained in the responses may be solicited and reviewed by NGA non-Government consultants or experts who are bound by appropriate non-disclosure agreements.

3.1 ADMINISTRATIVE

Information to include the following as a minimum:

Based upon North American Industry Classification System (NAICS) code 518210 applicable to this acquisition, the responder is to provide answers to the following questions:

3.1.10 Do you hold a GSA Federal Supply Schedule (FSS) contract applicable to the NAICS code (s) identified above? If yes, provide contract number(s).

3.1.11 Are you registered in SAM?

3.1.12 Are you interested in: Prime contract? Teaming to include Joint Venture? Subcontractor opportunities?

Provide relevant details on the responder providing the same or similar services offered or made to the general public or to non-governmental entities for purposes other than governmental purposes in the last three (3) years. Relevant details to NGA’s proposed acquisition should include, but not be limited to, information regarding the contract value, size and length of the effort, responder performing as a prime or subcontractor, customary practices (warranty, financing, discounts, contract types, etc.) under which the sales of the service(s) are made, security details, the customary practices regarding customizing, modifying, or tailoring of a service(s) to meet customer needs and associated costs, the kinds of factors that are used to evaluate performance; the kinds of performance incentives used; the kinds of performance assessment methods commonly used; the common qualifications of the people performing the services; and requirements of law and/or regulations unique to these service(s), that can demonstrate the responder’s abilities and capacity to meet NGA’s statement of objectives.

3.2.2 GOVERNMENT.

Provide relevant details on the responder providing the same or similar services offered or made to Government agencies other than NGA in the last three (3) years. Relevant details to NGA’s proposed acquisition should include, but not be limited to contract value, information regarding the contract number, agency, responder performing as a prime or subcontractor, size and length of the effort, type of pricing and/or cost, security details, the kinds of factors used to evaluate performance; the kinds of performance incentives; the kinds of performance assessment methods; the qualifications of the people performing the services; and any unique terms and conditions, that can demonstrate the responder’s abilities and capacity to meet NGA’s statement of objectives.

3.2.3 NGA.

Provide relevant details on the responder providing the same or similar services offered or made to NGA in the last three (3) years. Relevant details to NGA’s proposed acquisition should include, but not be limited to contract value, information regarding the contract number, program name, size and length of the effort, responder performing as a prime or subcontractor, type of pricing and/or cost, security details, the kinds of factors used to evaluate performance; the kinds of performance incentives; the kinds of performance assessment methods; the qualifications of the people performing the services; and any unique terms and conditions, that can demonstrate the responder’s abilities and capacity to meet NGA’s statement of objectives.

3.3 CAPABILITIES

The following is the responder’s capabilities to meet the proposed acquisition set forth in section 2 of this RFI including the Performance Work Statement.

3.3.1 Detail the service capabilities that the responder currently does not possess in order to meet the PWS.

The responder is invited to provide information and recommendations for fashioning this proposed acquisition. Recommendation areas may include the type of contract, anticipated contract terms & conditions, incentives, variations in delivery schedule, price and/or cost proposal support, and data requirements, contract pricing, and any other areas that the responder believes is relevant for the Government to achieve its stated objectives. The responder may opine regarding what portion of the work could be set-aside for small businesses if all the required work cannot be provided by a small business. Details to support any recommendations for partial small business set-asides should be included.

The Government representatives may or may not choose to meet with potential RFI service provider. Such meetings and discussions would only be intended to get further clarification of potential capability, especially any development and certification risks.

6.0 QUESTIONS

Questions and the whitepaper regarding this RFI should be submitted in writing by e-mail to Haydee.L.SotoCarreras@nga.mil, Collin.M.Larson@nga.mil, and Tracie.N.Hardy.ctr@nga.mil

7.0 SUMMARY

This RFI is only intended for the Government to identify sources that can provide the needed services to fulfill the Government’s statement of objectives. The information provided in this RFI is subject to change and is not binding to the Government. The Government has not made a commitment to procure any of the RFI requirements discussed, and release of this RFI should not be construed as such a commitment or as authorization to incur cost for which reimbursement would be required or sought. All submissions become Government property and will not be returned.

PERFORMANCE WORK STATEMENT (PWS)

COMMENT MATRIX FOR THE CMS II

REQUEST FOR INFORMATION

AFD://LOCAL//FAS TEMPLATES_RFI TEMPLATE_V1.0 PAGE 2 OF 6

image1.jpeg