B08.03 Answers to Questions for NNOMPEAS - W912HQ25R0022.docx

Q1: Oracle Migration - Is there a preferred target Oracle version (e.g., 21c) and APEX release, or should the contractor propose based on currently supported versions?

A1: The targeted version of Oracle is largely set by whatever is the standard for the most current version under enterprise license to the agency which is currently 19c. It is currently understood that 19c will be supported by Oracle through 2026 and likely 2027 lending to significant potential for remaining with the currently supported version over the defined period of the contract or PWS. However, more current information indicates the standing version is under enterprise review with general indication that should an upgrade be undertaken it would likely be toward 23c with the contractor providing capacity for migration to the updated version of Oracle\Apex should it be made available under enterprise licensing of the agency.

Q2: Data Sources - For the Vessel Movement Database and DDVOCs Database, will the Government provide updated raw datasets, or is the contractor expected to collect/verify new data sources?

A2: The primary or base data covering all coastal ports of the United States (to the extent it is gathered by the agency) will be provided by the Government but some independent verification may be required by other alternative sources of data as available on the internet from ports authorities, marine or port exchanges, and other applicable sources.

Q3: Value-to-the-Nation Reporting - Are there existing reporting templates or dashboards we should align with, or is the contractor expected to design new reporting structures?

A3: The are some limited templates available for VTN reporting as parts of the function are still being developed but the contractor will be required to adjust or design and complete new templates as needed for user query and tabulation or reporting functions.

Q4a: Cybersecurity / RMF Compliance - Is there an existing Authority to Operate (ATO) baseline for NNOMPEAS, or will the contractor be responsible for preparing a new RMF package?

A4a: NNOMPEAS has an existing authority to operate (ATO) but to clarify, the ATO for ongoing operation must nonetheless undergo periodic review and exercise of requirements for compliance each year requiring a new or (at least) updated submission generally expected at least once each year including code scans projected to be done as frequently as two or four times per year to as much as 6 times per year depending of variability or change in function and alert status for protection of cloud assets. For each instance of scan and security testing the contractor will be required to respond to any alerts and or failures for compliance and respond in writing with supporting corrections to source code until fully or acceptably compliant with requirements for continued authorization to operate within the provided IL4 environment.

Q4b: Does USACE require FedRAMP or other specific cloud security compliance if hosting any components?

A4b: Yes.

Q5: Deliverables - Should the contractor anticipate formal monthly progress reports and/or quarterly technical reviews, or will reporting requirements be specified post-award?

A5: The contractor should expect to provide monthly progress reports. These may be handled largely informally via teleconference or webmeeting unless significant issues arise which then may justify and require more formal and fully detailed documentation for reporting and update on a monthly basis.

Q6: Past Performance - For evaluation purposes, does USACE prefer past performance examples specifically in navigation systems/data analysis, or will general federal IT modernization examples be considered equally relevant

A6: The preference is for past performance associated with deep-draft coastal waterborne navigation data, information and systems analysis given this is the central emphasis and affiliated purpose of the work with reasonable logic and argument that familiarity and knowledge of which tends to provide for most efficient and cost-effective execution of described technical work. While an interested respondent is welcome to offer description or example of more generalized experience concerning endeavors related to general Federal IT modernization as an example, such experience may not necessarily be considered equally relevant subject to value and efficiency otherwise anticipated with specialized applicable knowledge, technical skills, and experience.

Q7: Submission Format - Can the Government confirm whether MS Excel tables for the Level of Effort (LOE) are required in addition to embedding the table in the Word/PDF technical proposal?

A7: LOE should be embedded in the technical proposal. The MS Excel table is required in addition to embedding.

Q8: Who is the incumbent, and what is the associated contract number?

A8: Alluvion Data Solutions, W912HQ24P0081

Q9: Is the scope of work outlined in the solicitation identical to the work currently being performed by the incumbent? If there are any differences, could you please clarify?

A9: In many ways, yes as the contract by its very title is largely for ongoing system maintenance and update, and update of underlying or incorporated data and information. Differences, depending on how one may define them, does include considerations for enhancements which typically entail new data tabulation views or underlying tabulations to present data and information in more useful or alternative formats based on application of experience over time. The latter efforts cross over into what may be termed enhancements and some enhancements entail measurably additive efforts such as adding or revision of capabilities for value-to-the nation calculation and reporting or incorporating or associating other models or applications over time (see response to question Q3 for additional information)

Q10: Will the Government provide the current source code and database structure, or should the contractor plan for reverse-engineering?

A10: Most of the source and database structure would\will be available as it is owned by (and therefore property of) the Government. However some of the core or base elements of the system using any commercially proprietary data schemas or the like thereof may need to be alternatively developed.

Q11: Will any Government-Furnished Equipment (GFE) be provided?

A11: The necessary environments of test and production\deployment environments in the cloud will be provided as will be a GFE laptop or desktop for authorized access to subject environments secured at the IL4 level.

Q12: Is there a defined transition period (transition-in/transition-out), and if so, what scope and deliverables are expected?

A12: Some measure of transition in\out is arguably to be expected depending on whether assigned to a new contractor though the general or overall compliance with deliverables and schedules as generally outlined in the PWS are still to be adhered to.

Q13a: Which code-scanning tool(s) are currently used (e.g., specific SAST/DAST platforms), and will access be provided?

A13a: Source code scanning is overseen and conducted by the cloud management technical support staff. In this regard, contractors will not be provided access to subject software tools or applications. As far as which code scanning platforms or applications are used, it is understood the applications available vary and are or may be alternated or rotated amongst use of differing (or all) applications at a given or different times with intent that one given scanning application does not become set in place and possibly targeted for measures of defeat or unauthorized circumvention.

Q13b: Please confirm target IL4 environment details, cloud provider(s), tenancy model, access path, and any inherited controls to be assumed by the contractor.

A13b: The present cloud provider is AWS (amazon web services which could change over time subject to contractual arrangement versus evolving needs) operating under applicable NIST (National Institute of Standards and Technology), DoD (Department of Defense) and DoA (Department of the Army) standards for IL4 environment security and protections for support of operating application and data or information safeguard and integrity. Regarding the applicable tenancy model (or how other users or clientele may share associated supporting cloud services or assets) and detail of inherited controls, much of this is largely transparent or simply not known at our level as this is managed by the cloud management support group with an effort to balance technical need for practical and efficient use versus and barriers for sufficient isolation to maintain IL4 security and integrity, all while managing costs or budgets against practical need for such technical requirements.

Q14: How many key personnel are required for this effort?

A14: It is for the Offeror to determine or propose the number of key personnel.

Q15: How many full-time equivalents (FTEs) are required?

A15: It is for the Offerors to propose the level of effort they think is needed to perform the required services. This solicitation includes a Performance Work Statement for performance-based work, thus is outcomes based. A PWS is distinctly different from a statement of work where the Government would instruct offerors how the work is to be completed. Offerors are being evaluated on their proposed mix of labor and level of effort per each task; thus the Government is not going to provide that information. That is business judgement of the offeror.

Q16: How many hours are expected for each FTE?

A16: See response A15 above.

Q17: What is the exact Period of Performance (POP), in terms of start and end dates?

A17: The POP is specified per each task in the PWS. The PWS was amended to better clarify and highlight the POP for each task.

Q18: Are there any specific formatting requirements for the technical volume, such as font size, font style, and guidelines for graphics or tables?

A18: Times New Roman, size 12, single spaced is preferred for the technical volume. For graphics and tables, font size no smaller than 9 may be used.

Q19: For the pricing submission, should vendors provide the cost proposal in Excel template, or is a separate narrative in Word/PDF also required?

A19: The price proposal must be submitted as a signed PDF which is binding, and the Excel spreadsheet must also be provided. This aids the price analysis.

Q20: Are representations and certifications required as part of the quote submission?

A20: A statement certifying your representations and certifications are up to date in SAM is sufficient. Note: offerors must provide their SAM UEI.

Q21: Will the contractor be required to use any specific commercial software, and if so, which ones?

A21: Applicable version(s) of Oracle\Apex and generally an office bundle suite of software employed under agency standards for application to word processing, spreadsheet, database, email, and webmeeting support such as (but under some or special circumstances not necessarily limited to) Microsoft Office (and the typical constituent programs supported under it such as Microsoft Word, Excel, Access, Outlook, etc.) and Microsoft Teams (or potentially other viable webmeeting software such as Webex, etc).

Q22: If specific licensed commercial software is required for this effort, will the contractor be expected to provide and maintain the licenses, or will USACE be responsible for them?

A22: Specific to software in the cloud environment, any licenses for software (such as Oracle\Apex, etc.) will be furnished or covered by the Government. Any software installed on any issued Government Furnished Equipment (GFE) will also be covered by the Government. Other or additional technical software and hardware systems or platforms brought to (any) effort by the contractor and its staff will be at the contractor’s expense (also reference response to question 11).

Q23: What are the locations where onsite technical meetings will take place?

A23: Any onsite meetings would take place at the main office building (the Casey Building) for the Institute for Water Resources (address: 7701 Telegraph Road, Alexandria,Virginia, 22315).

Q24: Which cloud environment is currently in use?

A24: Primarily AWS (Amazon Web Services; this may or is subject to change over time subject to contractual agreement and evolving need).