Sources Sought - Capability Questionnaire.xlsx
XLSX spreadsheet 25 KB Posted
- Attached to
- Data Access Program
- Solicitation number
- NIAID-SS-25-22653976
About this file
This Sources Sought - Capability Questionnaire is a pre-solicitation document from the National Institute on Aging (NIA) seeking information about potential contractors' capabilities for a Data Access Program. The comprehensive questionnaire explores vendors' expertise across multiple technical domains, including Privacy Preserving Record Linkage (PPRL), federal data linkages, cloud infrastructure management, multi-cloud ecosystem support, and research data processing capabilities.
The document focuses on assessing vendor qualifications in areas such as cloud services (AWS, Azure, GCP, OCI), data linkage methodologies, compliance with federal security standards, cloud migration, DevSecOps, and research-specific technologies. Key evaluation areas include experience with federal data sets, handling personally identifiable information (PII), obtaining Authority to Operate (ATO), managing multi-tenant cloud environments, implementing security protocols, and supporting advanced research technologies like artificial intelligence and machine learning. The sources sought notice encourages small businesses to respond and is designed to help the NIH determine the potential vendor landscape for a future solicitation related to data access and research support services.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
IDIQ Sources Sought
| [Name of Respondent] [UEI] [Date] | |
| Q# | Questions |
tc={576976CE-CB8C-4168-B5C8-0732A968A615}: [Threaded comment]
Your version of Excel allows you to read this threaded comment; however, any edits to it will get removed if the file is opened in a newer version of Excel. Learn more: https://go.microsoft.com/fwlink/?linkid=870924
Comment:
@Chiarenzelli, Joseph (NIH/NIA/ERP) [E] Reply:
| @Bhattacharyya, Partha (NIH/NIA/ERP) [E] | Response | ||||
| 1 | Describe and provide evidence (If you do not have the experaince please note) of prior experience with Privacy Preserving Record Linkage (PPRL). Include whether your Firm's experience is with open-source PPRL, propriety PPRL, or both. If you don't have the experience please note. | ||||
| 2 | Describe and provide evidence of prior experience linking data containing personally identifiable information (PII), include any relevant experience with consented data and/or waivers of consent. Describe how these linkages were conducted. If you don't have the experience please note. | ||||
| 3 | Describe your experience obtaining and linking Federal datasets with other datasets such as surveys with consent, EMR data with waivers of consent, health data (e.g., labs, claims). Provide specific examples of your Firm conducting Federal data linkages across other federal datasets, surveys, clinical studies, and clinical trials, as applicable. | ||||
| 4 | Describe your experience procuring real-world data sources. State the type of data, population coverage (unique N), and how you linked them from various RWD sources (e.g., EHR, claims, labs). | ||||
| 5 | If you acquired any federal ATOs in the past 3 year, please describe the agencies involved and the duration to aqcuire the ATO from start to finish. | ||||
| 6 | Based on your previous experience, state the expected ranges of costs associated with establishing a FISMA Moderate ATO Environment across three cloud providers. | ||||
| 7 | Describe and provide specific examples of minimizing costs/optimizing cloud resources (e.g., compute and storage) | ||||
| 8 | Describe your experience providing role-based access to users in a federated cloud enviroment. Include examples of minimizing costs/optimizing cloud resources (e.g., compute and storage) for a large user-base. | ||||
| 9 | Describe your experience optimizing compute for multimodal and 'big data' processing workflows. | ||||
| Q # | Questions | Yes/No | Average Years of Experience (measured how?) | Addition details your Firm would like to share | |
| General | |||||
| 1 | Do you have experience participating in IDIQ's | ||||
| 2 | Do you have expertise in adaptive (agile) project management? | ||||
| 3 | Do you have experience managing projects of this size, scope, and complexity? | ||||
| 4 | Do you have experience working within multi-vendor environments (i.e., working with numerous stakeholders—both client and third-party—to deliver a service)? | ||||
| 5 | Do you have experience coordinating travel, hotel meeting rooms, and AV? | ||||
| 6 | Do you have experience creating training videos? | ||||
| 7 | Do you have experience setting up booths at conferences? | ||||
| 8 | Do you have experience running trainings at conferences? | ||||
| 9 | Do you have experience writing white papers and meeting summaries? | ||||
| 10 | Do you have experience supporting and managing a multi-tenant, multi-cloud ecosystem (DaaS, IaaS, PaaS, SaaS, etc.) for federal systems in FedRAMP-compliant environments? | ||||
| 11 | Do you have experience administering (managing, reporting, provisioning, etc.) cloud infrastructure, platforms, software, and related services (DaaS, IaaS, PaaS, SaaS, storage, compute, etc.) for federal systems? | ||||
| 12 | Do you have experience in working with commercial Cloud Service Providers in securing and maintaining Authority to Operate (ATO) for federal systems? | ||||
| 13 | Do you have experience minimizing/optimizing cloud costs? | ||||
| 14 | Do you have experience with High Performance Computing in the cloud? | ||||
| 15 | Do you have experience administering enterprise security policy adherence, waivers, and mitigation strategies? | ||||
| 16 | Do you have experience adhering to enterprise network infrastructure policy and standards? | ||||
| 17 | Do you have experience implementing Trusted Internet Connection (TIC) 3.0 compliant systems? | ||||
| 18 | Do you have experience providing Tier 1 customer support? | ||||
| 19 | Do you have experience providing Tier 2 customer support? | ||||
| 20 | Do you have experience providing Tier 3 customer support? | ||||
| 21 | Do you have experience in offering after-hours, on-call support for troubleshooting cloud-related problems? | ||||
| AWS | |||||
| 22 | Do you have any partnerships with Amazon Web Services (AWS)? | ||||
| 23 | Do you have experience administering and maintaining AWS for multiple customers in one organization? | ||||
| 24 | Do you have experience with implementing/supporting Direct Connect? | ||||
| 25 | Do you have experience managing many accounts connected through Transit Gateway to the Direct Connect? | ||||
| 26 | Do you have experience with the AWS Security tools such as Security Center? | ||||
| 27 | Do you have certified AWS engineers and architects? If so, please list the certifications in column E. | ||||
| Azure | |||||
| 23 | Do you have any partnerships with Microsoft (specific to Azure)? | ||||
| 24 | Do you have experience administering and maintaining Microsoft Azure for multiple customers in one tenant? | ||||
| 25 | Do you have experience with Azure Site Recovery services? | ||||
| 26 | Do you have experience with ExpressRoute shared with multiple subscriptions? | ||||
| 27 | Do you have experience with Azure security tools such as Defender for Cloud? | ||||
| 28 | Do you have certified Azure engineers and architects? If so, please list the certifications in column E. | ||||
| GCP | |||||
| 29 | Do you have any partnerships with Google Cloud Platform (GCP)? | ||||
| 30 | Do you have experience administering and maintaining GCP for multiple customers in one Organization? | ||||
| 31 | Do you have experience with Interconnect shared with multiple projects? | ||||
| 32 | Do you have experience with GCP security tools such as Security Command Center? | ||||
| 33 | Do you have certified GCP engineers and architects? If so, please list the certifications in column E. | ||||
| OCI | |||||
| 34 | Do you have any partnerships with Oracle Cloud Infrastructure (OCI)? | ||||
| 35 | Do you have experience administering and maintaining OCI? | ||||
| 36 | Do you have experience with FastConnect? | ||||
| 37 | Do you have certified OCI engineers and architects? If so, please list the certifications in column E. | ||||
| Development and Application Migration | |||||
| 38 | Do you have experience migrating applications from on prem to cloud? | ||||
| 39 | Do you have experience building cloud-native applications? | ||||
| 40 | Do you have experience with DevOps/DevSecOps? | ||||
| 41 | Do you have experience with specific infrastructure as code and/or continuous integration / continuous delivery (CI/CD) toolsets? If so, please list in column E. | ||||
| 42 | Do you have experience with containerization? | ||||
| 43 | Do you have experience automating cloud deployments? | ||||
| 44 | Do you have experience with cloud-native databases? | ||||
| 45 | Do you have experience with archiving data to the cloud? | ||||
| 46 | Do you have experience supporting cross-cloud workloads (e.g., porting applications from one cloud environment to another)? | ||||
| 47 | Do you have experience with disaster recovery and continuity of operations (DR/COOP) in the cloud? | ||||
| Linkages | |||||
| 48 | Do you have experiance Performing 2 way Linkages with CMS, other federal data, and/or private data sources | ||||
| 49 | Do you have experiance Performing 3 way Linkages with CMS, other federal data, and private data sources | ||||
| 50 | Do you have experience performing linkages with private data? | ||||
| 51 | Do you have experience with PPRL methodology? | ||||
| 52 | Do you have experience with opensource PPRL solutions? | ||||
| 53 | Do you have experience conducting linkages with PII? | ||||
| 54 | Do you have experience with probabalistic linkages? | ||||
| 55 | Do you have experience with deterministic linkages? | ||||
| Other (Research-Specific) | |||||
| 56 | Do you have experience working with large datasets in the cloud (especially biomedical research data)? | ||||
| 57 | Do you have experience developing, deploying, and/or supporting data analysis pipelines/workflows within cloud environments (e.g., using Jupyter Notebooks or equivalent cloud services)? | ||||
| 58 | Do you have experience in supporting emerging technologies that are often associated with the cloud, including artificial intelligence, machine learning, quantum computing, etc.? | ||||
| 59 | Do you have experience licensing and/or procuring real-world data? | ||||
| 60 | Do you have experience reviewing research protocols involving CMS data and/or human subjects based on Minimum Necessary Requirement (45 CFR 164.502(b), 164.514(d)). |
@Chiarenzelli, Joseph (NIH/NIA/ERP) [E]
@Bhattacharyya, Partha (NIH/NIA/ERP) [E]
File details come from the government source that posted it. Updated .