Attachment J.2 Requirements Questionnaire Amend 0003.xlsx
XLSX spreadsheet 41 KB Posted
- Attached to
- Enterprise Training Software BPA
- Solicitation number
- USCA25Q0045
- Issued by
-
Administrative Office of the U.S. Courts
About this file
This is a Requirements Questionnaire for an online learning platform that vendors must complete to demonstrate their capabilities against specified criteria for the Administrative Office of the U.S. Courts' Enterprise Training Software BPA solicitation (USCA25Q0045). Vendors are instructed to provide yes/no responses with detailed comments addressing customizations, third-party integrations, and timeline expectations for features in development.
The questionnaire is organized into six primary evaluation categories. Platform Overview requirements include student management with multi-level manager hierarchies, intuitive interfaces, 24/7 U.S. business hours customer support with designated points of contact, scalable architecture, business continuity planning, role-based administration with unlimited configurable roles, white-label customization, and mobile-friendly interfaces. Courses and Content requirements mandate a comprehensive library covering 22 specific technical topics including CompTIA certifications (Security+, Network+, CASP/SecurityX, CISSP), cloud computing environments (AWS, Google, Oracle), Infrastructure as Code, DevSecOps, secure coding, Zero Trust, AI/ML, and business topics such as leadership and project management, with varying difficulty levels, hands-on labs, bookmarked content, and customizable learning paths. Assessments and Reporting capabilities must include NICE Framework alignment with searchable content by work role/task/knowledge/skill, gap analysis tools, adaptive skill assessments, AI-assisted course recommendations, dashboards at individual/manager/administrator levels, custom reporting, time-to-proficiency metrics, LMS integration via API (preferably with Cornerstone On Demand), and badges/gamification functionality. Security, Compliance, and Architecture requirements specify integration with corporate identity providers, table/field-level administrative security, standards-based modern authentication, RBAC support, encryption in transit and at rest, configurable password policies, support for Firefox 52.x, Chrome 63.x, Microsoft Edge 108.0.1462.54, and Safari 10.x or higher, Cloud VPN support (Zscaler), zero-footprint browser access, documented maintenance windows, data privacy documentation, data retrieval capabilities upon contract termination, multi-tenant data separation and protection, limited access controls, documented security and operational incident response procedures with SLA notification requirements, post-incident root cause analysis, data destruction upon termination, information security policies, third-party vendor assessments, and willingness to share external audit results from the past two years. Integration and Platform Capabilities requirements reference detailed IDAM checklist requirements addressing SSO/SAML integration, LDAP integration, portal integration, open APIs, federated identity and SSO support with standards-based protocols, modern FIPS-compliant cryptography, and audit trails for login and product usage. Implementation and Configuration support must include administrator training and setup, configuration, and deployment assistance during the base year only.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| USCA25Q0045 0004.pdf | ||
| Attachment J.2a Judiciary IDAM Requirements Checklist Amend 0003.pdf | ||
| USCA25Q0045 Amend 0003.pdf | ||
| Attachment J.1 SOW Amend 0003.pdf | ||
| USCA25Q0045 Enterprise Training BPA Q and A Updated 10-3.xlsx | XLSX spreadsheet | |
| USCA25Q0045 Enterprise Training BPA Q and A Updated.xlsx | XLSX spreadsheet | |
| Attachment J.2 Requirements Questionnaire Amd 0002.xlsx | XLSX spreadsheet | |
| Attachment J.1 SOW Amd 0002.pdf | ||
| USCA25Q0045 Enterprise Training BPA Q and A.xlsx | XLSX spreadsheet | |
| Attachment J.3 Training Platform Price Workbook Amd 0002.xlsx | XLSX spreadsheet | |
| USCA25Q0045 Amd 0002.pdf | ||
| USCA25Q0045 0001 Due Date Extension.pdf | ||
| Attachment J.2a Judiciary IDAM Requirements Checklist.pdf | ||
| RFQ USCA25Q0045.pdf | ||
| Attachment J.3 Training Platform Price Workbook.xlsx | XLSX spreadsheet | |
| Attachment J.1 SOW.pdf | ||
| Attachment J.2 Requirements Questionnaire.xlsx | XLSX spreadsheet |
Show all 17
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Instructions to the Vendor
| Instructions for Completion of the Questionnaire |
| Vendors should complete the following capabilities worksheet by answering each question with a yes or no answer. |
Notes to the Vendor:
When providing responses, the guide below should be followed. The comments column is provided for clarification when necessary.
For functionality that requires a customization or work around, please provide details on the customization/work around to include if it is a technical or busniess customization/workaround.
For functionality that is priovided by a third-party vendor, please include a copy of the agreement language you have with the third-party.
Vendors are cautioned not to indicate functionality as "included in standard offering" when, in fact, that particular function is in development. If this is the case, then vendors should note this fact in the comments column and indicate the expected date such features will be made available.
Questionnaire
| Online Learning Platform Questionnaire | |||
| Platform Overview | |||
| Criterion | Description | Vendor Response | Comments |
| Student management | Ability to assign multiple levels of managers for each student, such as national, divisional and local managers. These managers must be able to view student progress for only the students assigned at their level. They should be able to view dashboards and run reports for their assigned students. | ||
| Intuitive interface | Supports ease of use features for both end users, content curators and administrators of the platform. | ||
| Customer support | Support is provided during business hours (all US timezones) and is included in the subscription costs. A designated POC is provided. | ||
| Scalable architecture | The proposed solution architecture scales (users,roles, business units, geographies, etc.). | ||
| Business continuity | Business continuity plans and policies are provided. | ||
| Solution is role based | Solution provides different administrative and end user roles and there is no limit to the number of roles that can be configured. List role access. | ||
| White labeled | User interface is white labled for customization with judiciary logo | ||
| Mobile friendly interface | User interface and course content is available on mobile devices | ||
| Courses and Content | |||
| Criterion | Description | Vendor Response | Comments |
| Course Topics | A wide variety of content is available for technical professionals, including, at minimum, courses on the following topics: | ||
| · CompTia Security+ | |||
| · CompTia Network+ | |||
| · CompTia CASP/SecurityX | |||
| · CompTia CISSP | |||
| · Cloud Computing (List specific cloud environments covered in comments, such as AWS, Google, Oracle, etc) | |||
| · Infrastructure as Code | |||
| · DevSecOps | |||
| · Microservices architecture and APIs | |||
| · Secure Coding | |||
| · Zero Trust | |||
| · UI Design | |||
| · Agile | |||
| · Cloud Native Applications | |||
| · Architect SaaS applications | |||
| · Data Structures | |||
| · Automated Testing | |||
| · Jira/Confluence | |||
| · Artificial Intelligence and Machine Learning | |||
| · PowerBI | |||
| · Project Management | |||
| · Business Analytics | |||
| Additional topics | Content provided in a variety of business related topics such as leadership, project management, business analytics, etc. | ||
| Course difficulty | Varying levels of content to satisfy learners at beginning, intermediate and advanced levels of learning. | ||
| Hands-on labs | Provides ability for students to directly interact with content or participate in a hands-on lab environment. | ||
| Bookmarked course content | Course content is bookmarked by topic and offers the ability to skip chapters or fast forward and rewind. | ||
| Learning Paths | Course content can be arranged into learning paths for students based on topic or skill set. | ||
| Assessments & Reporting | |||
| Criterion | Description | Vendor Response | Comments |
| NICE Framework | Alignment of courses and assessments to the NICE framework and the ability to search for course content by NICE work role, task, knowledge or skill. Please provide detail or separate document showing how the product aligns. | ||
| Gap analysis | Ability to objectively verify individual skill proficiency and show progress toward closing skill gaps | ||
| Adaptive Skill Assessments | Skills assessments are available for a variety of learning paths and the assessments are iteritive and adaptive | ||
| AI assisted assessments | Use of AI or other automation to recommend courses for participants and/or build and recommend learning paths. | ||
| Dashboards | Dashboards available to show usage statistics, progress through gaps at individual, manager, and administrator levels. | ||
| Reporting | Built in and custom reporting cabalities | ||
| Time to proficiency | Reporting that reflects students time to proficiency on topics via assessments | ||
| LMS Integration | Ability to sync student records into a third party LMS, such as Cornerstone On Demand, preferably automated via an API. (Explain methodology in comments) | ||
| Badges/Gamification | Ability for students to earn/display badges for completion of content or demonstrated knowledge | ||
| Certification or Degree Programs | Ability for students to earn industry certifications and/or degrees. | ||
| Instructors and Content Creation | |||
| Criterion | Description | Vendor Response | Comments |
| Instructor Vetting | Rigorous vetting process for both instructors and course content to ensure quality, up-to-date material. | ||
| Instructor Type | Describe the types of instructors used for content (ie college professors, community instructors, subject matter experts, etc) | ||
| User feedback | Ability for users to post feedback on content/materials for internal viewing. | ||
| Course Refresh | Course content is refreshed regularly (describe refresh frequency/process in comments) |
| Security, Compliance, Architecture | |||
| Criterion | Description | Vendor Response | Comments |
| User access security management | Security is managed via integration with the corporate identity provider and automated as much as possible. Role based configuration is used for aggregation and anonymization. | ||
| Security level | The administrative security is provided down to a table/field level. | ||
| User authentication | The vendors product must support standards based modern authentication to the Judiciary's IDP. | ||
| Role-based security | Role-based access control (RBAC)for admins and end user roles is supported. | ||
| Data transmission and storage | Data is secured during transmission | ||
| Data encryption | Encryption is provided both in transit and at rest. | ||
| Password encryption | Passwords are encrypted. Please describe the password policy. | ||
| Password policy | User password change requirements are supported and are configurable by compensation administrators. | ||
| Ability to support Firefox 52.x or higher | Firefox is supported. | ||
| Ability to support Chrome 63.x or higher | Chrome is supported. | ||
| Ability to support Microsoft Edge Version 108.0.1462.54 or higher | Microsoft Edge is supported. | ||
| Ability to support Safari 10.x or higher | Safari is supported. | ||
| Cloud VPN Support | Cloud VPN is supported. The current implementation is through Zscaler. | ||
| Zero footprint (excluding browser plug in) | No software or data requirements for client access beyond a browser. | ||
| Maintenance windows | A standard maintenance window and schedule are provided. | ||
| Data privacy | Data privacy is ensured. Provide documentation explaining how the vendor handles data. | ||
| Data rights | In the event that the judiciary decides to transition to a different solution, it is able to retrieve its data (ie course records). | ||
| Data separation | Judiciary user data is separated and secured from other tenants. | ||
| Data protection | Judiciary user data is protected from other users on the same (cloud) server (if shared). | ||
| Data access | Access to the judiciary's data is limited. | ||
| Incident procedures | There are security and operational incident response procedures. | ||
| Incident notification | Vendor will notify us of security incidents. Please describe the response time and notification procedure in the Comments section. | ||
| Incident reports | Post-incident/root cause analysis reports will be provided. | ||
| Incident SLA | Vendor provides an SLA on incident handling notifications. | ||
| Data destruction on termination | Data will be destroyed if agreement is terminated. | ||
| Information security policy | Vendor has an information security policy. | ||
| Vendor assessments | Vendor assessments are performed by a third party. | ||
| Vendor assessment reports | Reports produced as part of such assessments can be reviewed by our organization. | ||
| Security audit | Our organization is able to periodically audit the vendor's security practices. | ||
| Audit results for the past two years | Vendor is willing to share the external audit results for the last two years. | ||
| Backups and encryption | Backups are encrypted and routinely tested. |
| Integration and Platform Capabilities | |||
| Criterion | Description | Vendor Response | Comments |
| SSO/SAML integration | See Details in Judiciary IDAM Checklist (Attachment) | ||
| LDAP integration | See Details in Judiciary IDAM Checklist (Attachment) | ||
| Integration to portals | See Details in Judiciary IDAM Checklist (Attachment) | ||
| Integrations and APIs | Supports open API integration to other systems. Please list any that are provided out of the box in the comments column | ||
| SaaS solution supporting federated identity, user account provisioning and Single Sign-On (SSO), using standards-based identity protocols (IdP) | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall identify in their response which of the three enterprise identity providers (IdPs) provided in the IDAM checklist that their solution is able to integrate with. If the proposed solution can integrate with multiple IdPs then identify a recommended IdP for integration and note all the IdPs the solution is capable of integrating with. | ||
| industry-standard identity and access management protocols | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall affirm they can meet the requirement in #2 in the IDAM checklist. | ||
| Configurable identity attribute mapping and synchronization | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall affirm they can meet the requirement in #3 in the IDAM checklist. | ||
| Selection, mapping, and customization of unique user identifiers, including User Principal Name (UPN | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall affirm they can meet the requirement in #4 in the IDAM checklist. | ||
| Group-based and/or role-based access control (RBAC/ABAC | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall affirm they can meet the requirement in #5 in the IDAM checklist. | ||
| Modern, FIPS-compliant cryptographic mechanisms | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall affirm they can meet the requirement in #6 in the IDAM checklist. | ||
| Audit trails of login activity or product usage | See Details in Judiciary IDAM Checklist (Attachment). Vendor shall affirm they can meet the requirement in #7 in the IDAM checklist. |
| Implementation, Configuration, Kick-off support | |||
| Criterion | Description | Vendor Response | Comments |
| Training | Vendor provides training for system administrators | ||
| Set-up, configuration, and deployment | Vendor must include setup, configuration, and deployment support to assist with training and rapid deployment of the product during the base year only. |
File details come from the government source that posted it. Updated .