SOLICITATION NOTICE
R -- RECOVERY: Transition to Healthier Financial Management - Oracle Governance, Risk and Compliance Implementation
- Notice Date
- 9/16/2009
- Notice Type
- Presolicitation
- NAICS
- 541512
— Computer Systems Design Services
- Contracting Office
- Department of Health and Human Services, National Institutes of Health, National Library of Medicine, 6707 Democracy Blvd., Suite 105, Bethesda, Maryland, 20894, United States
- ZIP Code
- 20894
- Solicitation Number
- NLM-09-0202-RSH
- Archive Date
- 10/8/2009
- Point of Contact
- Raymond P Hawkins, Phone: 301-496-6546
- E-Mail Address
-
rh375u@nih.gov
(rh375u@nih.gov)
- Small Business Set-Aside
- N/A
- Description
- RECOVERY - THIS NOTICE IS PROVIDED FOR INFORMATION PURPOSES ONLY. THIS OPPORTUNITY IS ONLY AVAILABLE TO CONTRACTORS UNDER THE GOVERNMENT SERVICES ADMINISTRATION (GSA) Schedule 70, SIN 132 34. This requirement is for commercial services in accordance with Federal Acquisition Regulations Part 12, utilizing procedures prescribed in FAR 8.4, Federal Supply Schedule Procedures and FAR Part 13.5. Competition is limited to business holders under SIN No. 132 34, Maintenance of Software as a Services for Category 70, General Purpose Commercial Information Technology Equipment, Software and Services. Only holders of contracts under this schedule will be eligible to compete for this requirement. This project will be funded by the American Recovery Reinvestment Act of 2009 (ARRA) and is subject to the ARRA reporting requirements prescribed in in FAR Part. Full text of clauses and provisions are available at Federal Acquisition Regulations (FAR): htm://www.amet.gov/far/. The intended procurement will be classified under the North American Industry Classification System (NAICS) code of 541512, Computer System Design Services, and the small business size standard is $25M. This notification is NOT a request for quotation. The National Institutes of Health (NIH), NIH Business System (NBS) is seeking to acquire commercial consulting support services to assist in the implementation of the Oracle Governance Risk and Compliance (GRC) Controls Suite of Applications. Tasks for the required services are as follows: Task 1: The Contractor shall provide a detailed project plan describing all processes with key major milestones and specific deadlines to be met: • Prepare a functional and technical Design Document Task 2: The Contractor shall provide resources to assist in the installation and implementation of the Oracle GRC Application Access Controls Governor (AACG) Release 8.2 or higher. • Assist with three product installations and associated documentation • Configuration of Segregation of Duties (SOD) rules within the AACG software. • Define reporting schedule and standards. • Assist in the remediation of SOD conflicts in the Oracle EBS instance. • Assist with Production Migration and Transition to Preventive User Provisioning Task 3: The Contractor shall provide resources to assist in the installation and implementation of the Oracle GRC Configuration Controls Governor (CCG) Release 5.5 or higher. • Assist with three product installations and associated documentation • Document and configure snapshots for comparisons. • Develop change tracking for selected Oracle setups. • Produce snapshot, comparison, and change tracking reports. • Assist with migration to Production. Task 4: The Contractor shall provide resources to assist in the installation and implementation of the Oracle GRC Preventive Controls Governor (PCG) Release 7.3 or higher. • Assist with three product installations and associated documentation • Implement Change Controls and Form Controls within the Oracle EBS environment. • Assist in the UAT testing of the GRC application. • Assist with Production Migration. Task 5: The Contractor shall provide resources to assist in the installation and implementation of the Oracle GRC Manager and GRC Intelligence in order for the NIH Office of Management Assessment to manage NIH enterprise financial and programmatic risks in two phases as noted below. Phase 1: Oracle GRC Manager and GRC Intelligence Implementation • Installation of standard GRC-Manager and GRC-Intelligence applications in two (2) environment. • Installation of assessment/survey and compare report components in two (2) environments. • Analysis of business requirements o Perform on site scoping session with the NIH NBS and OMA teams and conduct follow-up web conferences. The following application functionality will be reviewed and all proposed modifications will be documented. • Organization, Audit, Accounting and Optional mapping • User Interface and Metadata review and gap analysis • Workflow process review and gap analysis • Review requirements and design security model. • Security will be determined for access to GRCM and GRCI • Review reporting and dashboarding requirements • Prepare Solution Design Document • Prepare project plan and necessary change orders for Development - Deployment stage • Conduct full project milestone review with customer Phase 2: Oracle GRC Manager and GRC Intelligence Implementation • Set User Interface data values to meet customer nomenclature where configuration ability is available in the GRC-Manager system • Configure GRCI to reflect client-specific changes to GRCM configuration • Extend metadata model up to 16 additional fields • Extend/Modify up to 6 workflows • Modify up to 4 existing security roles • Configure up to 4 reminder emails based on due dates and document status. • Create up to 5 assessment/survey templates • Data Migration • Creation of up to 15 new GRCI dashboard reports similar in complexity to existing dashboard reports. • Implementation of Customer configuration and customizations in test and production instances (2 environments). • Provide 3 day functional/train-the-trainer workshop on standard GRC Manager functionality. • Provide 1 day functional/train-the-trainer workshop on standard GRC Intelligence functionality Task 7: Testing, Documentation and Training. The Contractor shall test all required configurations of the GRC Applications Suite Product. The Contractor shall provide resources and provide support for: A.) The functionality of the GRC Controls Product. B.) User Acceptance Testing C.) Testing the accuracy and functionality of the various standard reports D.) Go-Live support coverage The Contractor shall provide systems documentation for the entire process. The documentation must be acceptable to the Project Officer. The contractor shall provide training to up to 100 users of the Oracle GRC software, including NIH executive level officials, Office of Management Risk Management Analysts, OD/IC Risk Management Officers, Risk Managers, and other NIH Management Analysts. Concurrent to deployment to the production environment, the contractor will deliver one 2-day class for system administrators and six 1-day classes for system users, at an NIH training facility. The contactor shall provide all training materials, including but not limited to briefing slides, guides and notebooks. The Government anticipates that there will be one (1) delivery order awarded for this requirement. The proposed period of performance is one base year period of 12 months plus four (4) additional 12-month option periods. ARRA funding will be used for the base year and the first option year only. The three subsequent option years will be implemented using non-ARRA funds. Vendor shall comply with all applicable Federal, State and Local laws, executive orders, rules and regulations applicable to its performance under this order.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/HHS/NIH/OAM/NLM-09-0202-RSH/listing.html)
- Record
- SN01957913-W 20090918/090917001528-790383ebc159261d1cb587b96cdaaccf (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |