**[Background]{.underline}**

A shared service provider (SSP) is a separate and distinct organization
established to provide technology hosting and administration,
application management services, system implementation and where
appropriate, business process services to other entities. As the
Managing Partner for the FMLoB, the General Services Administration
(GSA) performs the project management role and is responsible for the
management oversight used to achieve the vision and goals of the FMLoB.

The Due Diligence Checklist (DDC) will be used by the Office of
Management and Budget (OMB), the Financial Systems Integration Office
(FSIO) within GSA, and customer agencies to assess the abilities of
potential and current SSP's in several areas, including but not limited
to past performance, overall capabilities, and experience in to
operating a customer-focused, modern financial operation .

The Due Diligence Checklist is divided into the following parts:

-   **Part I -- Screening Questions: Minimum Criteria**. These questions
    outline the minimum criteria for an SSP candidate to become
    qualified to offer SSP services and for an existing SSP to remain
    compliant. If an SSP candidate answers "no" to any of these Minimum
    Criteria Questions, the candidate is not ready to become an SSP. The
    SSP candidate must address each "no" Minimum Criteria question in
    order to receive further consideration.

-   **Part II -- Screening Questions: Demonstrated Criteria**. These
    questions are used to determine if an SSP candidate should have the
    authority to operate as an SSP, and if an existing SSP remains in
    compliance with the Due Diligence Checklist. If an SSP candidate
    answers "no" to any of the Demonstrated Criteria Questions, a
    Corrective Action Plan will be requested that demonstrates specific
    milestones towards meeting this criteria in a reasonable timeframe.
    During an annual review of the Due Diligence Checklist criteria, if
    an SSP answers "no" to any of these Demonstrated Criteria Questions,
    the SSP must demonstrate the issue will be resolved in a timely
    manner via a Corrective Action Plan.

-   **Part III -- Weighted Questions.** The weighted questions are used
    to determine which SSP candidate(s) are most qualified to serve as
    an SSP and to meet the goals and objectives of the FMLoB initiative.
    The weighted score along with the responses to the background
    questions in Part IV will be used in final decisions on selecting
    which SSP candidate(s) will be designated as FMLoB SSPs by OMB/FSIO.

-   **Part IV -- Menu of Services.** The Menu of Services is used to
    better understand the capabilities of the SSP and assist Agencies in
    choosing between multiple SSP candidates.

-   **Part V -- Background Questions.** The background questions are
    used to determine the stability and capability of SSP candidates.
    The responses to these questions also assist Agencies in choosing
    between multiple SSP candidates.

**[Instructions and Evaluation Process for SSP Candidates]{.underline}**

The SSP candidates are required to answer questions in all parts of the
Due Diligence Checklist. However, several questions in this document
include statements that are specifically designated only for Federal
SSPs due to the Federal rules and regulations applying only to them.

DDC responses from Federal agencies requesting to become a Federal SSP
are reviewed by OMB/FSIO to determine whether the candidates should
receive further consideration for designation as a Federal SSP.

After general suitability has been established by the DDC review, an
operational capability demonstration will be conducted by this team
prior to designation as a FMLoB Federal SSP. Due diligence checklist
responses for designated SSPs will be made available to customer
Agencies to determine if the candidate should be considered as part of
the agency's competition for a SSP.

**[Instructions and Evaluation Process for Existing FMLoB
SSPs]{.underline}**

Existing FMLoB SSPs are required to answer only Part I and II of the
checklist.

Responses from Federal SSPs should be submitted to OMB/FSIO annually
with the Exhibit 300.

***[Part I: Screening Questions -- Minimum Criteria]{.underline}***

*Please answer all questions below based on the [current]{.underline}
state of your organization. Please limit comments for each question to
100 words or less. If necessary, include reference or additional
materials in the form of an attachment.*

-   ***SSP Candidates:*** A response of "no" without supporting
    information to any of the following screening questions [will
    automatically disqualify]{.underline} candidates from becoming an
    SSP.

-   ***Existing SSPs:*** A response of "no" to any of the following
    screening questions [will signify that the SSP is no longer
    compliant]{.underline} with the Due Diligence Checklist. The SSP
    must establish a Corrective Action Plan and commit to meeting the
    requirement by the timeframe agreed upon (by the SSP, the Customer
    Agency, and for Federal SSPs by OMB). If a Federal SSP does not meet
    the requirement within the agreed-upon timeframe, its
    OMB-designation as an SSP may be removed, affecting its ability to
    compete for new customers and to continue supporting existing
    customers.

+-----+----------------------------+------+----------------------------+
| #   |                            |      |                            |
| ### |                            |      |                            |
|  Pr |                            |      |                            |
| oje |                            |      |                            |
| ct/ |                            |      |                            |
| Ser |                            |      |                            |
| vic |                            |      |                            |
| e N |                            |      |                            |
| ame |                            |      |                            |
+=====+============================+======+============================+
| ### |                            |      |                            |
| # U |                            |      |                            |
| niq |                            |      |                            |
| ue  |                            |      |                            |
| Pro |                            |      |                            |
| jec |                            |      |                            |
| t I |                            |      |                            |
| den |                            |      |                            |
| tif |                            |      |                            |
| ier |                            |      |                            |
|  (U |                            |      |                            |
| PI) |                            |      |                            |
|  (G |                            |      |                            |
| ove |                            |      |                            |
| rnm |                            |      |                            |
| ent |                            |      |                            |
|  on |                            |      |                            |
| ly) |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| ### |                            |      |                            |
| # A |                            |      |                            |
| gen |                            |      |                            |
| cy/ |                            |      |                            |
| Ven |                            |      |                            |
| dor |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| ##  |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **\ | **Evaluation Area I.**     | ##   | ## Commen                  |
| #** |                            | Rati | ts {#comments .selections} |
|     |                            | ng { |                            |
|     |                            | #rat |                            |
|     |                            | ing  |                            |
|     |                            | .sel |                            |
|     |                            | ecti |                            |
|     |                            | ons} |                            |
+-----+----------------------------+------+----------------------------+
| **P |                            |      |                            |
| ast |                            |      |                            |
| Pe  |                            |      |                            |
| rfo |                            |      |                            |
| rma |                            |      |                            |
| nce |                            |      |                            |
| I.  |                            |      |                            |
| 1** |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP have past     | Yes  |                            |
| .1. | experience hosting,        |      |                            |
| 1** | maintaining, and operating | No   |                            |
|     | financial management       |      |                            |
|     | systems?                   |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP's previous    | Yes  |                            |
| .1. | experience include data    |      |                            |
| 2** | migration to a Federal     | No   |                            |
|     | financial system?          |      |                            |
+-----+----------------------------+------+----------------------------+
| **  |                            |      |                            |
| Fin |                            |      |                            |
| anc |                            |      |                            |
| ial |                            |      |                            |
| M   |                            |      |                            |
| ana |                            |      |                            |
| gem |                            |      |                            |
| ent |                            |      |                            |
| Ex  |                            |      |                            |
| per |                            |      |                            |
| tis |                            |      |                            |
| e** |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Is (Are) the installed and | Yes  |                            |
| .1. | operational core financial |      |                            |
| 3** | system(s) being offered by | No   |                            |
|     | the SSP, FSIO compliant?   |      |                            |
|     |                            |      |                            |
|     | *In the Comments, please   |      |                            |
|     | list the names and         |      |                            |
|     | versions of the available  |      |                            |
|     | core financial system.*    |      |                            |
+-----+----------------------------+------+----------------------------+
| *   |                            |      |                            |
| *De |                            |      |                            |
| pth |                            |      |                            |
| and |                            |      |                            |
| B   |                            |      |                            |
| rea |                            |      |                            |
| dth |                            |      |                            |
| of  |                            |      |                            |
| S   |                            |      |                            |
| erv |                            |      |                            |
| ice |                            |      |                            |
| Off |                            |      |                            |
| eri |                            |      |                            |
| ngs |                            |      |                            |
| I.  |                            |      |                            |
| 2** |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP offer all     | Yes  | Federal Agencies --        |
| .2. | four major categories of   |      | \_\_\_\_\_\_\_\_\_\_\_\_   |
| 1** | SSP services: technology   | All  |                            |
|     | hosting and                | ex   | Other governments (state,  |
|     | administration,            | cept | local, international) --   |
|     | application management,    | Busi |                            |
|     | system implementation and  | ness | Fortune 500 companies --   |
|     | business processing        | pr   | \_\_\_\_\_\_\_\_           |
|     | services?                  | oces |                            |
|     |                            | sing |                            |
|     | *Please refer to the       | serv |                            |
|     | Migration Planning         | ices |                            |
|     | Guidance Menu of services  |      |                            |
|     | for a description of these | No   |                            |
|     | offerings. If a            |      |                            |
|     | partnership is used to     |      |                            |
|     | deliver business           |      |                            |
|     | processing services,       |      |                            |
|     | please list the partner.*  |      |                            |
|     |                            |      |                            |
|     | *Please provide the number |      |                            |
|     | and names of Federal       |      |                            |
|     | agencies, other            |      |                            |
|     | governments and number of  |      |                            |
|     | Fortune 500 companies the  |      |                            |
|     | SSP provides services to.* |      |                            |
+-----+----------------------------+------+----------------------------+
| *   |                            |      |                            |
| *In |                            |      |                            |
| ter |                            |      |                            |
| nal |                            |      |                            |
| Co  |                            |      |                            |
| ntr |                            |      |                            |
| ols |                            |      |                            |
| I.  |                            |      |                            |
| 3** |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Have the systems managed   | Yes  |                            |
| .3. | by the SSP undergone a     |      |                            |
| 1** | SAS-70 Type II audit       | No   |                            |
|     | within the past year that  |      |                            |
|     | resulted in either an      |      |                            |
|     | unqualified opinion or     |      |                            |
|     | with findings that are not |      |                            |
|     | significant enough to      |      |                            |
|     | impact the organization's  |      |                            |
|     | ability to serve as an     |      |                            |
|     | SSP?                       |      |                            |
|     |                            |      |                            |
|     | *In the Comments, please   |      |                            |
|     | provide information on any |      |                            |
|     | SAS-70 findings and        |      |                            |
|     | specify if the finding     |      |                            |
|     | impacted the services to a |      |                            |
|     | Federal Agency. If it is   |      |                            |
|     | deemed that any finding is |      |                            |
|     | due to the SSP's controls, |      |                            |
|     | the SSP will be deemed     |      |                            |
|     | ineligible or in           |      |                            |
|     | non-compliance.*           |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Have the systems managed   | Yes  |                            |
| .3. | by the SSP undergone a     |      |                            |
| 2** | financial audit within the | No   |                            |
|     | past year that resulted in |      |                            |
|     | a clean opinion or a       |      |                            |
|     | qualified opinion with     |      |                            |
|     | findings that do not       |      |                            |
|     | impact the organization's  |      |                            |
|     | ability to serve as an     |      |                            |
|     | SSP?                       |      |                            |
|     |                            |      |                            |
|     | *If yes, In the Comments,  |      |                            |
|     | please provide information |      |                            |
|     | on any findings. If it is  |      |                            |
|     | deemed that any finding is |      |                            |
|     | due to the SSP's proposed  |      |                            |
|     | financial system, the SSP  |      |                            |
|     | will be deemed ineligible  |      |                            |
|     | or in non-compliance.*     |      |                            |
+-----+----------------------------+------+----------------------------+
| **S |                            |      |                            |
| erv |                            |      |                            |
| ice |                            |      |                            |
| De  |                            |      |                            |
| liv |                            |      |                            |
| ery |                            |      |                            |
| Mo  |                            |      |                            |
| del |                            |      |                            |
| I.  |                            |      |                            |
| 4** |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP offer a       | Yes  |                            |
| .4. | repeatable set of best     |      |                            |
| 1** | practices, for delivering  | No   |                            |
|     | standardized services?     |      |                            |
|     |                            |      |                            |
|     | *In the Comments, please   |      |                            |
|     | describe what flexibility  |      |                            |
|     | is supported to            |      |                            |
|     | accommodate unique         |      |                            |
|     | business processes         |      |                            |
|     | required by an agency to   |      |                            |
|     | conduct its business.*     |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP Service Level | Yes  |                            |
| .4. | Agreement have a           |      |                            |
| 2** | performance measurement    | No   |                            |
|     | methodology in place with  |      |                            |
|     | metrics that address       |      |                            |
|     | system availability,       |      |                            |
|     | performance and costs? At  |      |                            |
|     | some point i*n the near    |      |                            |
|     | future, this question will |      |                            |
|     | indicate the requirement   |      |                            |
|     | to meet the Service        |      |                            |
|     | Assessment Guide           |      |                            |
|     | performance measures.*     |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP account for   | Yes  |                            |
| .4. | its full costs or have a   |      |                            |
| 3** | cost accounting            | No   |                            |
|     | methodology or other       |      |                            |
|     | methodology that complies  | N/A  |                            |
|     | with the Federal           |      |                            |
|     | Acquisition Regulations    |      |                            |
|     | (FAR) and fairly allocates |      |                            |
|     | costs, including fixed and |      |                            |
|     | variable costs, to         |      |                            |
|     | internal and external      |      |                            |
|     | customers.                 |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP provide a     | Yes  |                            |
| .4. | help desk staffed with     |      |                            |
| 4** | personnel trained in the   | No   |                            |
|     | use of the specific FM     |      |                            |
|     | systems, with regular      |      |                            |
|     | hours of operation? List   |      |                            |
|     | the hours of operation and |      |                            |
|     | any expanded hours         |      |                            |
|     | available at a premium in  |      |                            |
|     | the comments.              |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP provide       | Yes  |                            |
| .4. | formal procedures for      |      |                            |
| 5** | communication, escalation  | No   |                            |
|     | and resolution of issues   |      |                            |
|     | (this includes, critical   |      |                            |
|     | issues, non-critical       |      |                            |
|     | issues, incidents and      |      |                            |
|     | problems)?                 |      |                            |
+-----+----------------------------+------+----------------------------+
| *   |                            |      |                            |
| *Se |                            |      |                            |
| cur |                            |      |                            |
| ity |                            |      |                            |
| and |                            |      |                            |
| In  |                            |      |                            |
| cid |                            |      |                            |
| ent |                            |      |                            |
| Re  |                            |      |                            |
| spo |                            |      |                            |
| nse |                            |      |                            |
| I.  |                            |      |                            |
| 5** |                            |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP have          | Yes  |                            |
| .5. | Continuity of Operations   |      |                            |
| 1** | Plans (COOP) for each      | No   |                            |
|     | agency it services and for |      |                            |
|     | which successful Disaster  |      |                            |
|     | Recovery Testing has been  |      |                            |
|     | performed within the last  |      |                            |
|     | 12 months?                 |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Are the SSP's              | Yes  |                            |
| .5. | customer-relevant          |      |                            |
| 2** | financial systems          | No   |                            |
|     | implemented with the       |      |                            |
|     | appropriate security       |      |                            |
|     | controls consistent with   |      |                            |
|     | the Federal Information    |      |                            |
|     | Security Management Act    |      |                            |
|     | (FISMA) and NIST Special   |      |                            |
|     | Publication 800-53?        |      |                            |
|     |                            |      |                            |
|     | *In the Comments, please   |      |                            |
|     | provide information on the |      |                            |
|     | type of industry security  |      |                            |
|     | standard(s) met if you     |      |                            |
|     | currently lack a Federal   |      |                            |
|     | customer to designate that |      |                            |
|     | you have achieved full     |      |                            |
|     | FISMA compliance.*         |      |                            |
+-----+----------------------------+------+----------------------------+
| **I | Does the SSP have a        | Yes  |                            |
| .5. | process for performing     |      |                            |
| 3** | periodic testing and       | No   |                            |
|     | evaluation of information  |      |                            |
|     | security controls in       |      |                            |
|     | accordance with the FISMA  |      |                            |
|     | and NIST Special           |      |                            |
|     | Publication 800-37 and     |      |                            |
|     | 800-53A?                   |      |                            |
|     |                            |      |                            |
|     | *If yes, in the Comments,  |      |                            |
|     | please indicate frequency  |      |                            |
|     | of testing* *and           |      |                            |
|     | evaluation and address any |      |                            |
|     | instances of               |      |                            |
|     | non-compliance within the  |      |                            |
|     | last 3 years*.             |      |                            |
+-----+----------------------------+------+----------------------------+

***[Part II: Screening Questions -- Demonstrated
Criteria]{.underline}***

*Please answer all questions below based on the current state of your
organization. Please limit comments for each question to 100 words or
less. If necessary, include reference or additional materials in the
form of an attachment.*

-   ***SSP Candidates:*** A response of "no" to any of the following
    screening questions will not automatically disqualify the candidate
    from being approved as an SSP as long as the candidate commits to
    completing the requirement prior to the milestone indicated in the
    screening question. The candidate must describe any plans in the
    Comments section next to the question or attach additional
    materials.

-   ***Existing SSPs:*** A response of "no" to any of the following
    screening questions [will signify that the SSP is
    non-compliant]{.underline} with the Due Diligence Checklist. The SSP
    must establish a Corrective Action Plan and commit to meeting the
    requirement by the timeframe agreed upon (by the SSP and the
    Customer Agency, and for Federal SSPs by OMB). If a Federal SSP does
    not meet the requirement in the agreed-upon timeframe, its
    OMB-designation may be removed, effectively suspending the SSP from
    competing for new customers and renewing existing customers.

+-----+------------------------------+-----+--------------------------+
| #   |                              |     |                          |
| ### |                              |     |                          |
|  Pr |                              |     |                          |
| oje |                              |     |                          |
| ct/ |                              |     |                          |
| Ser |                              |     |                          |
| vic |                              |     |                          |
| e N |                              |     |                          |
| ame |                              |     |                          |
+=====+==============================+=====+==========================+
| ### |                              |     |                          |
| # U |                              |     |                          |
| niq |                              |     |                          |
| ue  |                              |     |                          |
| Pro |                              |     |                          |
| jec |                              |     |                          |
| t I |                              |     |                          |
| den |                              |     |                          |
| tif |                              |     |                          |
| ier |                              |     |                          |
|  (U |                              |     |                          |
| PI) |                              |     |                          |
|  (G |                              |     |                          |
| ove |                              |     |                          |
| rnm |                              |     |                          |
| ent |                              |     |                          |
|  on |                              |     |                          |
| ly) |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| ### |                              |     |                          |
| # A |                              |     |                          |
| gen |                              |     |                          |
| cy/ |                              |     |                          |
| Ven |                              |     |                          |
| dor |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| ##  |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| **\ | **Evaluation Area II.**      | ##  | ## Comments {            |
| #** |                              | Rat | #comments-1 .selections} |
|     |                              | ing |                          |
|     |                              |  {# |                          |
|     |                              | rat |                          |
|     |                              | ing |                          |
|     |                              | -1  |                          |
|     |                              | .se |                          |
|     |                              | lec |                          |
|     |                              | tio |                          |
|     |                              | ns} |                          |
+-----+------------------------------+-----+--------------------------+
| **  |                              |     |                          |
| Fin |                              |     |                          |
| anc |                              |     |                          |
| ial |                              |     |                          |
| M   |                              |     |                          |
| ana |                              |     |                          |
| gem |                              |     |                          |
| ent |                              |     |                          |
| II. |                              |     |                          |
| 1** |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| *   | For Federal SSPs, does the   |     |                          |
| *II | target Enterprise            | Yes |                          |
| .1. | Architecture align with the  |     |                          |
| 1** | Federal Enterprise           | No  |                          |
|     | Architecture (FEA) business  |     |                          |
|     | and data Reference Models?   |     |                          |
|     |                              |     |                          |
|     | *If Yes, in the Comments,    |     |                          |
|     | please demonstrate this      |     |                          |
|     | alignment via appropriate    |     |                          |
|     | artifacts (e.g., reference   |     |                          |
|     | models, FEA annual           |     |                          |
|     | assessments).*               |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please provide a timeline    |     |                          |
|     | describing the candidate's   |     |                          |
|     | commitment to aligning with  |     |                          |
|     | the FEA prior to signing     |     |                          |
|     | contracts with federal       |     |                          |
|     | customers.*                  |     |                          |
+-----+------------------------------+-----+--------------------------+
| *   | Are the SSP's                |     |                          |
| *II | customer-relevant financial  | Yes |                          |
| .1. | management systems           |     |                          |
| 2** | substantially compliant with | No  |                          |
|     | FFMIA system requirements    |     |                          |
|     | including USSGL and          |     |                          |
|     | accounting standards?        |     |                          |
|     |                              |     |                          |
|     | *In the Comments, please     |     |                          |
|     | list the all financial       |     |                          |
|     | systems available for        |     |                          |
|     | customer use. List any       |     |                          |
|     | material weakness and        |     |                          |
|     | include supporting evidence  |     |                          |
|     | if it is not applicable to   |     |                          |
|     | the SSP offering.*           |     |                          |
+-----+------------------------------+-----+--------------------------+
| *   |                              |     |                          |
| *De |                              |     |                          |
| pth |                              |     |                          |
| and |                              |     |                          |
| B   |                              |     |                          |
| rea |                              |     |                          |
| dth |                              |     |                          |
| of  |                              |     |                          |
| S   |                              |     |                          |
| erv |                              |     |                          |
| ice |                              |     |                          |
| Off |                              |     |                          |
| eri |                              |     |                          |
| ngs |                              |     |                          |
| II. |                              |     |                          |
| 2** |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Does the SSP provide an      |     |                          |
| *II | interface to the FM-related  | Yes |                          |
| .2. | E-Gov Initiatives including  |     |                          |
| 1** | E-Travel, Central Contractor | No  |                          |
|     | Registration (CCR), and      |     |                          |
|     | E-Payroll? Support is        |     |                          |
|     | defined as being capable of  |     |                          |
|     | interfacing or integrating   |     |                          |
|     | with one or more of the      |     |                          |
|     | solutions provided by these  |     |                          |
|     | initiatives.                 |     |                          |
|     |                              |     |                          |
|     | *In the Comments, please     |     |                          |
|     | list the integration         |     |                          |
|     | supported and interfaces     |     |                          |
|     | supported.*                  |     |                          |
+-----+------------------------------+-----+--------------------------+
| *   |                              |     |                          |
| *In |                              |     |                          |
| ter |                              |     |                          |
| nal |                              |     |                          |
| C   |                              |     |                          |
| ont |                              |     |                          |
| rol |                              |     |                          |
| s** |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | If the SSP is providing      |     |                          |
| *II | business process services to | Yes |                          |
| .2. | customer agencies, has the   |     |                          |
| 3** | SSP undergone the necessary  | No  |                          |
|     | reviews to determine if it   |     |                          |
|     | meets Federal (A-123         |     |                          |
|     | reviews)?                    |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please identify weaknesses   |     |                          |
|     | Identified and actions taken |     |                          |
|     | to correct each weakness.*   |     |                          |
+-----+------------------------------+-----+--------------------------+
| **S |                              |     |                          |
| erv |                              |     |                          |
| ice |                              |     |                          |
| De  |                              |     |                          |
| liv |                              |     |                          |
| ery |                              |     |                          |
| Mo  |                              |     |                          |
| del |                              |     |                          |
| II. |                              |     |                          |
| 3** |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Does the SSP currently have  |     |                          |
| *II | in place, standards and      | Yes |                          |
| .3. | templates for systems        |     |                          |
| 1** | implementation, interface    | No  |                          |
|     | configuration, operations,   |     |                          |
|     | and ongoing support?         |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please describe the SSP's    |     |                          |
|     | commitment to a timeframe    |     |                          |
|     | for completing them prior to |     |                          |
|     | the solution signing an      |     |                          |
|     | agreement with a customer    |     |                          |
|     | agency?*                     |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Does the SSP currently have  |     |                          |
| *II | in place, a formal           | Yes |                          |
| .3. | governance model for         |     |                          |
| 2** | configuration management     | No  |                          |
|     | that communicates changes    |     |                          |
|     | and impacts to the customer? |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please describe the SSP's    |     |                          |
|     | commitment or timeframe to   |     |                          |
|     | establishing a model prior   |     |                          |
|     | to the solution provider     |     |                          |
|     | signing an agreement with a  |     |                          |
|     | customer agency?*            |     |                          |
+-----+------------------------------+-----+--------------------------+
| *   |                              |     |                          |
| *Se |                              |     |                          |
| cur |                              |     |                          |
| ity |                              |     |                          |
| and |                              |     |                          |
| In  |                              |     |                          |
| cid |                              |     |                          |
| ent |                              |     |                          |
| Re  |                              |     |                          |
| spo |                              |     |                          |
| nse |                              |     |                          |
| II. |                              |     |                          |
| 4** |                              |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Have all environments and    |     |                          |
| *II | applications being used to   | Yes |                          |
| .4. | provide Federal SSPs         |     |                          |
| 1** | services been FISMA          | No  |                          |
|     | Certified and Accredited     |     |                          |
|     | (C&A) within the last three  |     |                          |
|     | years?                       |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please provide a timeline    |     |                          |
|     | describing the SSP           |     |                          |
|     | candidate's commitment to    |     |                          |
|     | conducting such an           |     |                          |
|     | assessment in becoming a     |     |                          |
|     | system of record for an      |     |                          |
|     | agency.*                     |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Was the most recent FISMA    |     |                          |
| *II | risk assessment review       | Yes |                          |
| .4. | completed for any Federal    |     |                          |
| 2** | SSPs service without         | No  |                          |
|     | identification of            |     |                          |
|     | significant deficiencies?    |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please provide a timeline    |     |                          |
|     | describing the SSP's         |     |                          |
|     | commitment to correcting the |     |                          |
|     | deficiencies prior to        |     |                          |
|     | signing contracts with       |     |                          |
|     | customers.*                  |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Has the SSP undergone a      |     |                          |
| *Il | Federal Information Security | Yes |                          |
| .4. | Management Act (FISMA) risk  |     |                          |
| 3** | assessment within the last   | No  |                          |
|     | 36 months in accordance with |     |                          |
|     | NIST Special Publication     |     |                          |
|     | 800-30?                      |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please provide a timeline    |     |                          |
|     | that indicates the SSP's     |     |                          |
|     | commitment to completing     |     |                          |
|     | such an assessment prior to  |     |                          |
|     | the solution being the       |     |                          |
|     | system of record for the     |     |                          |
|     | agency.*                     |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Does the SSP have experience |     |                          |
| *II | implementing agreements      | Yes |                          |
| .4. | similar to the               |     |                          |
| 4** | interconnection security     | No  |                          |
|     | agreement and Memoranda of   |     |                          |
|     | Understanding outlined in    |     |                          |
|     | NIST Special Publication     |     |                          |
|     | 800-47 for agency feeder     |     |                          |
|     | systems such as Federal      |     |                          |
|     | ePayroll, eTravel, SmartPay  |     |                          |
|     | credit card systems, etc ?   |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please describe how the SSP  |     |                          |
|     | will delineate processes,    |     |                          |
|     | roles and responsibilities   |     |                          |
|     | for interconnecting a        |     |                          |
|     | customer's agency's systems  |     |                          |
|     | to the core financial system |     |                          |
|     | prior to the solution being  |     |                          |
|     | the system of record*        |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Does the staff at each data  |     |                          |
| *II | center providing Federal SSP | Yes |                          |
| .4. | services have the            |     |                          |
| 5** | appropriate security         | No  |                          |
|     | clearances as required by    |     |                          |
|     | NIST Federal Information     |     |                          |
|     | Processing Standard 201, PIV |     |                          |
|     | Part1?                       |     |                          |
|     |                              |     |                          |
|     | *If No, in the Comments,     |     |                          |
|     | please describe the SSP's    |     |                          |
|     | commitment to completing     |     |                          |
|     | such a certification upon    |     |                          |
|     | signing a contract with      |     |                          |
|     | customers.*                  |     |                          |
+-----+------------------------------+-----+--------------------------+
| > * | Does the SSP have an         |     |                          |
| *II | appointed information        | Yes |                          |
| .4. | systems security officer as  |     |                          |
| 6** | required under FISMA?        | No  |                          |
+-----+------------------------------+-----+--------------------------+

***[Part III: Weighted Questions]{.underline}***

*Please answer all questions below based on the current state of your
organization. Please limit comments for each question to 100 words or
less. If necessary, include reference or additional materials in the
form of an attachment. Based on the evidence provided in the comments,
self declared ratings may be adjusted by the reviewer.*

*Questions are organized by category and are further separated into two
tiers ("A" and "B") based on their importance in assessing an SSP
candidate's viability. Responses are weighted so that Tier A questions,
in the aggregate, will comprise two-thirds of the total weighted score.
Tier B questions will comprise one-third of the total weighted score.*

*[Additional clarification or evidence of capability may be asked for to
substantiate the rating during the review process.]{.underline}*

+---+-----------+----------------------------+---+---+----+------------+
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| P |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| j |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| / |           |                            |   |   |    |            |
| S |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| v |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| N |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| m |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
+===+===========+============================+===+===+====+============+
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| U |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| q |           |                            |   |   |    |            |
| u |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| P |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| j |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| d |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| f |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| ( |           |                            |   |   |    |            |
| U |           |                            |   |   |    |            |
| P |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| ) |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| ( |           |                            |   |   |    |            |
| G |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| v |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| m |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| l |           |                            |   |   |    |            |
| y |           |                            |   |   |    |            |
| ) |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
| A |           |                            |   |   |    |            |
| g |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| y |           |                            |   |   |    |            |
| / |           |                            |   |   |    |            |
| V |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| d |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| # |           |                            |   |   |    |            |
| # |           |                            |   |   |    |            |
|   |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| N | **C       | ## Rati                    | # | # | #  | ## Comm    |
| o | riteria** | ng {#rating-2 .selections} | # | # | #  | ents {#com |
| . |           |                            |   |   | We | ments-2 .s |
|   |           |                            | R | T | ig | elections} |
|   |           |                            | a | i | ht |            |
|   |           |                            | w | e | ed |            |
|   |           |                            |   | r |  S |            |
|   |           |                            | S |   | co |            |
|   |           |                            | c | { | re |            |
|   |           |                            | o | # |  { |            |
|   |           |                            | r | t | #w |            |
|   |           |                            | e | i | ei |            |
|   |           |                            |   | e | gh |            |
|   |           |                            | { | r | te |            |
|   |           |                            | # |   | d- |            |
|   |           |                            | r | . | sc |            |
|   |           |                            | a | s | or |            |
|   |           |                            | w | e | e  |            |
|   |           |                            | - | l | .s |            |
|   |           |                            | s | e | el |            |
|   |           |                            | c | c | ec |            |
|   |           |                            | o | t | ti |            |
|   |           |                            | r | i | on |            |
|   |           |                            | e | o | s} |            |
|   |           |                            |   | n |    |            |
|   |           |                            | . | s |    |            |
|   |           |                            | s | } |    |            |
|   |           |                            | e |   |    |            |
|   |           |                            | l |   |    |            |
|   |           |                            | e |   |    |            |
|   |           |                            | c |   |    |            |
|   |           |                            | t |   |    |            |
|   |           |                            | i |   |    |            |
|   |           |                            | o |   |    |            |
|   |           |                            | n |   |    |            |
|   |           |                            | s |   |    |            |
|   |           |                            | } |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| P |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| s |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| P |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| f |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| m |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| . |           |                            |   |   |    |            |
| 1 |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Services  | **High (5):** Three or     |   | A |    |            |
| * | Provision | more years of experience   |   |   |    |            |
| I | E         | providing service\* to 3   |   |   |    |            |
| I | xperience | or more customers.         |   |   |    |            |
| I |           |                            |   |   |    |            |
| . |           | **Med (3):** Limited       |   |   |    |            |
| 1 |           | experience providing       |   |   |    |            |
| . |           | service\* to at least one  |   |   |    |            |
| 1 |           | external customer          |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           | **Low (1):** Experience    |   |   |    |            |
|   |           | providing service\* to     |   |   |    |            |
|   |           | internal customers         |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No           |   |   |    |            |
|   |           | experience                 |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | \*Service means hosting,   |   |   |    |            |
|   |           | maintaining, and           |   |   |    |            |
|   |           | operational support for    |   |   |    |            |
|   |           | financial management       |   |   |    |            |
|   |           | systems. *In the Comments, |   |   |    |            |
|   |           | describe the diversity     |   |   |    |            |
|   |           | (i.e. size, complexity,    |   |   |    |            |
|   |           | etc.) of federal agencies  |   |   |    |            |
|   |           | or bureaus currently       |   |   |    |            |
|   |           | serviced with this         |   |   |    |            |
|   |           | solution.*                 |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Service   | **High (5):** Demonstrates |   | A |    |            |
| * | Level     | past success in            |   |   |    |            |
| I | A         | establishing and           |   |   |    |            |
| I | greements | maintaining SLA            |   |   |    |            |
| I | (SLA)     |                            |   |   |    |            |
| . | Past      | **Med (3):** Outlines      |   |   |    |            |
| 1 | Pe        | detailed SLA strategy      |   |   |    |            |
| . | rformance |                            |   |   |    |            |
| 2 |           | **Low (1):** Indicates a   |   |   |    |            |
| * |           | commitment to implement an |   |   |    |            |
| * |           | SLA strategy               |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Migration | **High (5):** SSP has      |   | A |    |            |
| * | E         | experience migrating three |   |   |    |            |
| I | xperience | or more federal agencies   |   |   |    |            |
| I |           | or bureaus to its FM       |   |   |    |            |
| I |           | solution and underlying    |   |   |    |            |
| . |           | technology                 |   |   |    |            |
| 1 |           |                            |   |   |    |            |
| . |           | **Med (3):** SSP has       |   |   |    |            |
| 3 |           | experience migrating three |   |   |    |            |
| * |           | or more non-federal        |   |   |    |            |
| * |           | customers to an FM         |   |   |    |            |
|   |           | solution and underlying    |   |   |    |            |
|   |           | technology                 |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No           |   |   |    |            |
|   |           | experience migrating       |   |   |    |            |
|   |           | multiple customers to an   |   |   |    |            |
|   |           | FM solution                |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | []{.mark}                  |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, describe |   |   |    |            |
|   |           | the diversity (i.e. size,  |   |   |    |            |
|   |           | complexity, etc.) of       |   |   |    |            |
|   |           | federal agencies, bureaus  |   |   |    |            |
|   |           | or customers currently     |   |   |    |            |
|   |           | serviced with this         |   |   |    |            |
|   |           | solution.*                 |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Data      | **High (5):** Performed    |   | A |    |            |
| * | Migration | three or more data         |   |   |    |            |
| I | E         | migrations and has         |   |   |    |            |
| I | xperience | repeatable processes       |   |   |    |            |
| I |           |                            |   |   |    |            |
| . |           | **Med (3):** Performed     |   |   |    |            |
| 1 |           | three or more data         |   |   |    |            |
| . |           | migrations with no         |   |   |    |            |
| 4 |           | repeatable processes       |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           | **Low (1):** Performed a   |   |   |    |            |
|   |           | single data migration      |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** Has no       |   |   |    |            |
|   |           | migration experience.      |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, describe |   |   |    |            |
|   |           | the diversity (i.e. size,  |   |   |    |            |
|   |           | complexity, etc.) of       |   |   |    |            |
|   |           | federal agencies, bureaus  |   |   |    |            |
|   |           | or customers currently     |   |   |    |            |
|   |           | serviced with this         |   |   |    |            |
|   |           | solution.*                 |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Data      | **Yes (5):** Demonstrates  |   | A |    |            |
| * | Cleansing | experience successfully    |   |   |    |            |
| I | E         | conducting data cleansing  |   |   |    |            |
| I | xperience |                            |   |   |    |            |
| I |           | **No (0):** No             |   |   |    |            |
| . |           | demonstrated experience    |   |   |    |            |
| 1 |           | conducting data cleansing  |   |   |    |            |
| . |           |                            |   |   |    |            |
| 5 |           | *In the Comments, describe |   |   |    |            |
| * |           | the diversity (i.e. size,  |   |   |    |            |
| * |           | complexity, etc.) of       |   |   |    |            |
|   |           | federal agencies, bureaus  |   |   |    |            |
|   |           | or customers currently     |   |   |    |            |
|   |           | serviced with this         |   |   |    |            |
|   |           | solution.*                 |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Project   | **High (5):** Past         |   | B |    |            |
| * | M         | performance within 10% of  |   |   |    |            |
| I | anagement | cost/schedule/performance  |   |   |    |            |
| I | Ca        |                            |   |   |    |            |
| I | pability, | **Med (3):** Past          |   |   |    |            |
| . | Earned    | performance within 20% of  |   |   |    |            |
| 1 | Value     | cost/schedule/performance  |   |   |    |            |
| . | M         |                            |   |   |    |            |
| 6 | anagement | **Low (1):** Past          |   |   |    |            |
| * | System    | performance within 30% of  |   |   |    |            |
| * | (EVMS)    | cost/schedule/performance  |   |   |    |            |
|   | used for  |                            |   |   |    |            |
|   | better    | **None (0):** No variance  |   |   |    |            |
|   | system    | information (re:           |   |   |    |            |
|   | imple     | cost/schedule/performance) |   |   |    |            |
|   | mentation | submitted, no established  |   |   |    |            |
|   | planning  | project management method  |   |   |    |            |
|   | and       | in place or past           |   |   |    |            |
|   | control   | performance variance \>    |   |   |    |            |
|   |           | 30%                        |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, describe |   |   |    |            |
|   |           | the diversity (i.e. size,  |   |   |    |            |
|   |           | complexity, etc.) of       |   |   |    |            |
|   |           | federal agencies, bureaus  |   |   |    |            |
|   |           | or customers currently     |   |   |    |            |
|   |           | serviced with this         |   |   |    |            |
|   |           | solution.*                 |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | T         | **High (5):** Demonstrates |   | A |    |            |
| * | ransition | past success in providing  |   |   |    |            |
| I | M         | transition management      |   |   |    |            |
| I | anagement | services (e.g., training,  |   |   |    |            |
| I | E         | migration planning, change |   |   |    |            |
| . | xperience | management, sequencing)    |   |   |    |            |
| 1 |           |                            |   |   |    |            |
| . |           | **Med (3):** Demonstrates  |   |   |    |            |
| 7 |           | a detailed plan to provide |   |   |    |            |
| * |           | transition management      |   |   |    |            |
| * |           | services                   |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No           |   |   |    |            |
|   |           | demonstration of planned   |   |   |    |            |
|   |           | transition management      |   |   |    |            |
|   |           | services                   |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, please   |   |   |    |            |
|   |           | detail successes or plan.  |   |   |    |            |
|   |           | Attachments are            |   |   |    |            |
|   |           | acceptable.*               |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| F |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| l |           |                            |   |   |    |            |
| m |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| g |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| m |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| . |           |                            |   |   |    |            |
| 2 |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Has the   | **Yes (5):** The SSP has   |   | A |    |            |
| * | SSP       | implemented the current    |   |   |    |            |
| I | im        | FSIO-certified COTS        |   |   |    |            |
| I | plemented | solution in a production   |   |   |    |            |
| I | a         | environment                |   |   |    |            |
| . | FSIO-     |                            |   |   |    |            |
| 2 | certified | **Yes (3):** The SSP has   |   |   |    |            |
| . | c         | implemented the prior      |   |   |    |            |
| 1 | ommercial | version of a               |   |   |    |            |
| * | off-      | FSIO-certified COTS        |   |   |    |            |
| * | the-shelf | solution in a production   |   |   |    |            |
|   | (COTS)    | environment                |   |   |    |            |
|   | solution  |                            |   |   |    |            |
|   | in a      | **No (0):** The SSP has    |   |   |    |            |
|   | p         | not implemented a          |   |   |    |            |
|   | roduction | FSIO-certified COTS        |   |   |    |            |
|   | env       | solution in a production   |   |   |    |            |
|   | ironment? | environment                |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, please   |   |   |    |            |
|   |           | detail successes or plan.  |   |   |    |            |
|   |           | Attachments are            |   |   |    |            |
|   |           | acceptable.*               |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Finance   | []{.mark}                  | [ | A |    |            |
| * | Personnel |                            | ] |   |    |            |
| I | Certi     | **Yes (5):** Key personnel | { |   |    |            |
| I | fications | have financial personnel   | . |   |    |            |
| I |           | certifications (see        | m |   |    |            |
| . | []{.mark} | below).                    | a |   |    |            |
| 2 |           |                            | r |   |    |            |
| . |           | **No (0):** Has no key     | k |   |    |            |
| 2 |           | personnel who hold         | } |   |    |            |
| * |           | recognized certifications. |   |   |    |            |
| * |           |                            |   |   |    |            |
|   |           | []{.mark}                  |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *Recognized                |   |   |    |            |
|   |           | Certifications: Certified  |   |   |    |            |
|   |           | Public Accountant - CPA;   |   |   |    |            |
|   |           | Certified Government       |   |   |    |            |
|   |           | Financial Manager - CGFM;  |   |   |    |            |
|   |           | Certified Internal         |   |   |    |            |
|   |           | Auditor - CIA; Certified   |   |   |    |            |
|   |           | Management Accountant -    |   |   |    |            |
|   |           | CMA; Certified Information |   |   |    |            |
|   |           | Systems Auditor - CISA;    |   |   |    |            |
|   |           | and Certified Information  |   |   |    |            |
|   |           | Security Manager - CISM.*  |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, please   |   |   |    |            |
|   |           | list key personnel with    |   |   |    |            |
|   |           | these certifications.*     |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | []{.mark}                  |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | Are there no workforce     |   |   |    |            |
|   |           | qualifications expected of |   |   |    |            |
|   |           | key personnel?             |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | I         | **High (5):** Core FM      |   | B |    |            |
| * | ntegrated | functions available AND    |   |   |    |            |
| I | FM        | have more than one common  |   |   |    |            |
| I | En        | FM related functions       |   |   |    |            |
| I | vironment | (i.e., travel, credit      |   |   |    |            |
| . |           | card, etc., available in a |   |   |    |            |
| 2 |           | single existing FM         |   |   |    |            |
| . |           | operating environment.     |   |   |    |            |
| 3 |           |                            |   |   |    |            |
| * |           | **Med (3):** Core FM       |   |   |    |            |
| * |           | functions available in a   |   |   |    |            |
|   |           | single existing FM         |   |   |    |            |
|   |           | operating environment with |   |   |    |            |
|   |           | an interface to at least   |   |   |    |            |
|   |           | one value-added FM         |   |   |    |            |
|   |           | function.                  |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (1):** Core FM       |   |   |    |            |
|   |           | functions available        |   |   |    |            |
|   |           | through the use of         |   |   |    |            |
|   |           | multiple existing systems  |   |   |    |            |
|   |           | but not in a single        |   |   |    |            |
|   |           | operating environment.     |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, please   |   |   |    |            |
|   |           | describe integration at FM |   |   |    |            |
|   |           | operating environment(s).* |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| D |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| p |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| h |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| d |           |                            |   |   |    |            |
| B |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| a |           |                            |   |   |    |            |
| d |           |                            |   |   |    |            |
| t |           |                            |   |   |    |            |
| h |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| f |           |                            |   |   |    |            |
| O |           |                            |   |   |    |            |
| f |           |                            |   |   |    |            |
| f |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| n |           |                            |   |   |    |            |
| g |           |                            |   |   |    |            |
| s |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| . |           |                            |   |   |    |            |
| 3 |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Va        | *(where multiple products  |   | B |    |            |
| * | lue-Added | used -- address for each   |   |   |    |            |
| I | Modules   | module/product)*           |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           | **High (5):** Currently    |   |   |    |            |
| . |           | offers two or more         |   |   |    |            |
| 3 |           | existing value-added       |   |   |    |            |
| . |           | modules (functions aligned |   |   |    |            |
| 1 |           | with the Lines of Business |   |   |    |            |
| * |           | (LoB) beyond core          |   |   |    |            |
| * |           | functions identified in    |   |   |    |            |
|   |           | the screening section      |   |   |    |            |
|   |           | (e.g., payroll, travel,    |   |   |    |            |
|   |           | asset management,          |   |   |    |            |
|   |           | acquisition, budget        |   |   |    |            |
|   |           | formulation, data          |   |   |    |            |
|   |           | warehousing/analytics))    |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Med (3):** Currently     |   |   |    |            |
|   |           | offers a single existing   |   |   |    |            |
|   |           | value-added module         |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (1):** Planning to   |   |   |    |            |
|   |           | offer additional           |   |   |    |            |
|   |           | value-added modules        |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No plans for |   |   |    |            |
|   |           | value-added modules        |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Cross-LoB | **High (5):** Demonstrates |   | B |    |            |
| * | Support   | existing integration with  |   |   |    |            |
| I | to        | other LoB service centers  |   |   |    |            |
| I | interface |                            |   |   |    |            |
| I | with      | **Med (3):** Detailed      |   |   |    |            |
| . | ePayroll, | strategy for integrating   |   |   |    |            |
| 3 | eTravel,  | with other LoB service     |   |   |    |            |
| . | SmartPay  | centers                    |   |   |    |            |
| 2 | and other |                            |   |   |    |            |
| * | Federal   | **None (0):** No cross LoB |   |   |    |            |
| * | Gov't     | support indicated          |   |   |    |            |
|   | wide      |                            |   |   |    |            |
|   | systems   |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Conf      | **High (5):** SSP          |   | B |    |            |
| * | iguration | demonstrates ability to    |   |   |    |            |
| I | M         | provide separate physical  |   |   |    |            |
| I | anagement | instances of the FM        |   |   |    |            |
| I |           | solution for customers     |   |   |    |            |
| . |           |                            |   |   |    |            |
| 3 |           | **Med (3):** SSP has a     |   |   |    |            |
| . |           | detailed plan to provide   |   |   |    |            |
| 3 |           | separate physical          |   |   |    |            |
| * |           | instances of the solution  |   |   |    |            |
| * |           | for customers              |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (0):** SSP does not  |   |   |    |            |
|   |           | have ability or plan to    |   |   |    |            |
|   |           | provide separate physical  |   |   |    |            |
|   |           | instances of the solution  |   |   |    |            |
|   |           | for customers              |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, please   |   |   |    |            |
|   |           | describe demonstrated or   |   |   |    |            |
|   |           | planned ability.*          |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Unique    | **High (5):** Demonstrates |   | B |    |            |
| * | Customer  | ability to provide         |   |   |    |            |
| I | Needs for | software enhancements and  |   |   |    |            |
| I | meeting   | change requests to         |   |   |    |            |
| I | unique    | customer unique            |   |   |    |            |
| . | reporting | requirements in such a way |   |   |    |            |
| 3 | and       | that will not impact the   |   |   |    |            |
| . | feeder    | core FM COTS product.      |   |   |    |            |
| 4 | system    |                            |   |   |    |            |
| * | int       | **Med (3):** Demonstrates  |   |   |    |            |
| * | erface/re | approach to provide        |   |   |    |            |
|   | placement | software enhancements and  |   |   |    |            |
|   | needs     | change requests to         |   |   |    |            |
|   |           | customer unique            |   |   |    |            |
|   |           | requirements in such a way |   |   |    |            |
|   |           | that will not impact the   |   |   |    |            |
|   |           | core FM COTS product.      |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (0):** No plan for   |   |   |    |            |
|   |           | to accommodate unique      |   |   |    |            |
|   |           | customer needs.            |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, please   |   |   |    |            |
|   |           | describe demonstrated or   |   |   |    |            |
|   |           | planned ability.*          |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| S |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| v |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| c |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| D |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| l |           |                            |   |   |    |            |
| i |           |                            |   |   |    |            |
| v |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| r |           |                            |   |   |    |            |
| y |           |                            |   |   |    |            |
| M |           |                            |   |   |    |            |
| o |           |                            |   |   |    |            |
| d |           |                            |   |   |    |            |
| e |           |                            |   |   |    |            |
| l |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           |                            |   |   |    |            |
| . |           |                            |   |   |    |            |
| 4 |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           |                            |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Conf      | **High (5):** Demonstrates |   | A |    |            |
| * | iguration | a CCB model which protects |   |   |    |            |
| I | Control   | the interests of its       |   |   |    |            |
| I | Board     | customers, and is          |   |   |    |            |
| I | (CCB)     | responsive to their        |   |   |    |            |
| . |           | operation and budgetary    |   |   |    |            |
| 4 |           | constraints.               |   |   |    |            |
| . |           |                            |   |   |    |            |
| 1 |           | **Low (2):** Can provide a |   |   |    |            |
| * |           | proposed CCB model, which  |   |   |    |            |
| * |           | protects the interests of  |   |   |    |            |
|   |           | its customers, and is      |   |   |    |            |
|   |           | responsive to their        |   |   |    |            |
|   |           | operation and budgetary    |   |   |    |            |
|   |           | constraints.               |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No CCB model |   |   |    |            |
|   |           | and process which          |   |   |    |            |
|   |           | considers the interests of |   |   |    |            |
|   |           | its customers and is       |   |   |    |            |
|   |           | responsive to their        |   |   |    |            |
|   |           | operation and budgetary    |   |   |    |            |
|   |           | constraints.               |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Cost      | **High (5):** Services are |   | A |    |            |
| * | A         | fully costed and           |   |   |    |            |
| I | llocation | transparent to the         |   |   |    |            |
| I |           | customers. Costs are       |   |   |    |            |
| I | This      | proactively used to        |   |   |    |            |
| . | question  | identify areas of cost and |   |   |    |            |
| 4 | applies   | service optimization.      |   |   |    |            |
| . | only to   | Customers are provided a   |   |   |    |            |
| 2 | Federal   | timely opportunity to      |   |   |    |            |
| * | SSPs      | comment on proposed        |   |   |    |            |
| * |           | changes in costs or their  |   |   |    |            |
|   |           | allocation.                |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (2):** Costs are     |   |   |    |            |
|   |           | identified and reported in |   |   |    |            |
|   |           | a timely and automated     |   |   |    |            |
|   |           | manner to the customers.   |   |   |    |            |
|   |           | Monitoring exists to       |   |   |    |            |
|   |           | address deviations from    |   |   |    |            |
|   |           | plan.                      |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** Costs are    |   |   |    |            |
|   |           | not clearly identified and |   |   |    |            |
|   |           | reported in a timely       |   |   |    |            |
|   |           | manner to the customers.   |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Sc        | **High (5):** Demonstrates |   | A |    |            |
| * | alability | ability to support         |   |   |    |            |
| I | in        | increasing transaction     |   |   |    |            |
| I | tr        | volumes consistent with    |   |   |    |            |
| I | ansaction | expanding services to meet |   |   |    |            |
| . | volume    | customer needs, without    |   |   |    |            |
| 4 |           | adversely impacting        |   |   |    |            |
| . |           | current support levels.    |   |   |    |            |
| 3 |           |                            |   |   |    |            |
| * |           | **Low (3):** Provides a    |   |   |    |            |
| * |           | high level strategy for    |   |   |    |            |
|   |           | supporting increased       |   |   |    |            |
|   |           | transaction volumes        |   |   |    |            |
|   |           | consistent with a formal   |   |   |    |            |
|   |           | business model             |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No provision |   |   |    |            |
|   |           | for increased transaction  |   |   |    |            |
|   |           | volumes                    |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the comments, please   |   |   |    |            |
|   |           | detail specifics on system |   |   |    |            |
|   |           | limits determined from     |   |   |    |            |
|   |           | capacity testing and       |   |   |    |            |
|   |           | approach to capability     |   |   |    |            |
|   |           | planning to support usage  |   |   |    |            |
|   |           | increases.*                |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Sc        | **High (5):** Demonstrates |   | A |    |            |
| * | alability | ability to manage systems  |   |   |    |            |
| I | in User   | with at least 3000 named   |   |   |    |            |
| I | Base      | users and 60000            |   |   |    |            |
| I |           | self-service users         |   |   |    |            |
| . |           |                            |   |   |    |            |
| 4 |           | **Med (3):** Demonstrates  |   |   |    |            |
| . |           | ability to manage systems  |   |   |    |            |
| 4 |           | with at least 1500 named   |   |   |    |            |
| * |           | users and 30000            |   |   |    |            |
| * |           | self-service users         |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (1):** Demonstrates  |   |   |    |            |
|   |           | ability to manage systems  |   |   |    |            |
|   |           | with 600 named users and   |   |   |    |            |
|   |           | 10000 self-service users   |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** Business     |   |   |    |            |
|   |           | case does not address the  |   |   |    |            |
|   |           | size and complexity of the |   |   |    |            |
|   |           | user base                  |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the comments, please   |   |   |    |            |
|   |           | detail customer support    |   |   |    |            |
|   |           | approach for handling      |   |   |    |            |
|   |           | increases in system        |   |   |    |            |
|   |           | users.*                    |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Pe        | **High (5):** Demonstrates |   | A |    |            |
| * | rformance | performance metrics with   |   |   |    |            |
| I | Measures  | actual measures            |   |   |    |            |
| I |           |                            |   |   |    |            |
| I |           | **Med (3):** Demonstrates  |   |   |    |            |
| . |           | plan to implement          |   |   |    |            |
| 4 |           | performance metrics, but   |   |   |    |            |
| . |           | cannot demonstrate actual  |   |   |    |            |
| 5 |           | measures                   |   |   |    |            |
| * |           |                            |   |   |    |            |
| * |           | **Low (0):** None of the   |   |   |    |            |
|   |           | above                      |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | Customer  | **High (5):** Demonstrates |   | A |    | []{.mark}  |
| * | Service   | high level of customer     |   |   |    |            |
| I | Sat       | service satisfaction with  |   |   |    |            |
| I | isfaction | written performance        |   |   |    |            |
| I |           | history documentation that |   |   |    |            |
| . |           | has concurrence by the     |   |   |    |            |
| 4 |           | customers.                 |   |   |    |            |
| . |           |                            |   |   |    |            |
| 6 |           | **Med (3):** Demonstrates  |   |   |    |            |
| * |           | formal measurement of      |   |   |    |            |
| * |           | customer satisfaction      |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **Low (0):** No formal     |   |   |    |            |
|   |           | measurements of customer   |   |   |    |            |
|   |           | satisfaction               |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the comments, please   |   |   |    |            |
|   |           | detail specifics on how    |   |   |    |            |
|   |           | customer satisfaction is   |   |   |    |            |
|   |           | determined.*               |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | I         | **High (5):** Demonstrates | [ | A |    |            |
| * | nnovation | ability to routinely apply | ] |   |    |            |
| I |           | innovative solutions to    | { |   |    |            |
| I |           | operations through         | . |   |    |            |
| I |           | investments in new         | m |   |    |            |
| . |           | technology                 | a |   |    |            |
| 4 |           |                            | r |   |    |            |
| . |           | **Med (3):** Has strategy  | k |   |    |            |
| 7 |           | to routinely apply         | } |   |    |            |
| * |           | innovation to operations   |   |   |    |            |
| * |           | through investments in new |   |   |    |            |
|   |           | technology                 |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** No ability   |   |   |    |            |
|   |           | or strategy to routinely   |   |   |    |            |
|   |           | apply innovation to        |   |   |    |            |
|   |           | operations through         |   |   |    |            |
|   |           | investments in new         |   |   |    |            |
|   |           | technology                 |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *In the Comments, detail   |   |   |    |            |
|   |           | specific investments that  |   |   |    |            |
|   |           | resulted in innovative     |   |   |    |            |
|   |           | improvements in            |   |   |    |            |
|   |           | operations.*               |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | PMP       | **Yes (5):** Key personnel | [ | A |    |            |
| * | Cert      | are Project Management     | ] |   |    |            |
| I | ification | Program (PMP) certified.   | { |   |    |            |
| I |           |                            | . |   |    |            |
| I |           | **No (0):** Has no key     | m |   |    |            |
| . |           | personnel who are PMP      | a |   |    |            |
| 4 |           | certified.                 | r |   |    |            |
| . |           |                            | k |   |    |            |
| 8 |           | *In the Comments, please   | } |   |    |            |
| * |           | list key* personnel with   |   |   |    |            |
| * |           | PMP certifications or      |   |   |    |            |
|   |           | equivalent *(e.g., Defense |   |   |    |            |
|   |           | Acquisition University and |   |   |    |            |
|   |           | CIO Workforce Committee    |   |   |    |            |
|   |           | recognize equivalents to   |   |   |    |            |
|   |           | master PMP                 |   |   |    |            |
|   |           | certification).*           |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+
| * | CMMI      | **High (5):** Organization | [ | B |    |            |
| * | Cert      | is CMMI-certified Level 3  | ] |   |    |            |
| I | ification | or above.                  | { |   |    |            |
| I |           |                            | . |   |    |            |
| I |           | **Med (3):** Organization  | m |   |    |            |
| . |           | is CMMI-certified Level 1  | a |   |    |            |
| 4 |           | or 2.                      | r |   |    |            |
| . |           |                            | k |   |    |            |
| 9 |           | **Low (1):** Organization  | } |   |    |            |
| * |           | is in process of being     |   |   |    |            |
| * |           | CMMI-certified.            |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | **None (0):** Organization |   |   |    |            |
|   |           | is not CMMI-certified nor  |   |   |    |            |
|   |           | is engaged in the          |   |   |    |            |
|   |           | certification process.     |   |   |    |            |
|   |           |                            |   |   |    |            |
|   |           | *Please provide evidence   |   |   |    |            |
|   |           | of certification.*         |   |   |    |            |
+---+-----------+----------------------------+---+---+----+------------+

+---+-----------+----------------+----------+---+---+----+---+--------+
| * |           |                |          |   |   |    |   |        |
| * |           |                |          |   |   |    |   |        |
| S |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| u |           |                |          |   |   |    |   |        |
| r |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| y |           |                |          |   |   |    |   |        |
| a |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| d |           |                |          |   |   |    |   |        |
| I |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| d |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| R |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| p |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| I |           |                |          |   |   |    |   |        |
| I |           |                |          |   |   |    |   |        |
| I |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| 5 |           |                |          |   |   |    |   |        |
| * |           |                |          |   |   |    |   |        |
| * |           |                |          |   |   |    |   |        |
+---+-----------+----------------+----------+---+---+----+---+--------+
| * | Security  | **Yes (5):**   |          |   | A |    | H |        |
| * | and       | Demonstrates a |          |   |   |    | o |        |
| I | Privacy   | history of     |          |   |   |    | w |        |
| I | Standards | compliance;    |          |   |   |    | d |        |
| I |           | up-to-date     |          |   |   |    | o |        |
| . |           | security plan  |          |   |   |    | w |        |
| 5 |           | in place that  |          |   |   |    | e |        |
| . |           | meets          |          |   |   |    | a |        |
| 1 |           | requirements   |          |   |   |    | s |        |
| * |           | of FISMA, OMB  |          |   |   |    | k |        |
| * |           | policy, and    |          |   |   |    | t |        |
|   |           | NIST Guidance; |          |   |   |    | h |        |
|   |           | and privacy    |          |   |   |    | e |        |
|   |           | impact         |          |   |   |    | m |        |
|   |           | assessments    |          |   |   |    | t |        |
|   |           | (PIA)          |          |   |   |    | o |        |
|   |           | completed      |          |   |   |    | p |        |
|   |           |                |          |   |   |    | r |        |
|   |           | **No (0):**    |          |   |   |    | o |        |
|   |           | Outlines plan  |          |   |   |    | v |        |
|   |           | to develop     |          |   |   |    | i |        |
|   |           | security plan  |          |   |   |    | d |        |
|   |           | and conduct    |          |   |   |    | e |        |
|   |           | PIAs, as well  |          |   |   |    | e |        |
|   |           | as provides    |          |   |   |    | v |        |
|   |           | dates for      |          |   |   |    | i |        |
|   |           | completion     |          |   |   |    | d |        |
|   |           |                |          |   |   |    | e |        |
|   |           |                |          |   |   |    | n |        |
|   |           |                |          |   |   |    | c |        |
|   |           |                |          |   |   |    | e |        |
|   |           |                |          |   |   |    | t |        |
|   |           |                |          |   |   |    | o |        |
|   |           |                |          |   |   |    | s |        |
|   |           |                |          |   |   |    | u |        |
|   |           |                |          |   |   |    | p |        |
|   |           |                |          |   |   |    | p |        |
|   |           |                |          |   |   |    | o |        |
|   |           |                |          |   |   |    | r |        |
|   |           |                |          |   |   |    | t |        |
|   |           |                |          |   |   |    | t |        |
|   |           |                |          |   |   |    | h |        |
|   |           |                |          |   |   |    | i |        |
|   |           |                |          |   |   |    | s |        |
|   |           |                |          |   |   |    | r |        |
|   |           |                |          |   |   |    | a |        |
|   |           |                |          |   |   |    | n |        |
|   |           |                |          |   |   |    | k |        |
|   |           |                |          |   |   |    | i |        |
|   |           |                |          |   |   |    | n |        |
|   |           |                |          |   |   |    | g |        |
|   |           |                |          |   |   |    | ? |        |
+---+-----------+----------------+----------+---+---+----+---+--------+
| # |           |                | #### Ra  | # |   | #  |   | ####   |
| # |           |                | w Score  | # |   | ## |   |   {#se |
| # |           |                | {#raw-sc | # |   | #  |   | ction- |
| # |           |                | ore-1 .C | # |   | We |   | 4 .Com |
|   |           |                | omments} |   |   | ig |   | ments} |
| T |           |                |          |   |   | ht |   |        |
| o |           |                | ####     | { |   | ed |   |        |
| t |           |                |   (xx Po | # |   |  S |   |        |
| a |           |                | tential  | s |   | co |   |        |
| l |           |                | Points)  | e |   | re |   |        |
| s |           |                | {#xx-pot | c |   |  { |   |        |
| : |           |                | ential-p | t |   | #w |   |        |
|   |           |                | oints .C | i |   | ei |   |        |
|   |           |                | omments} | o |   | gh |   |        |
| { |           |                |          | n |   | te |   |        |
| # |           |                |          | - |   | d- |   |        |
| t |           |                |          | 3 |   | sc |   |        |
| o |           |                |          |   |   | or |   |        |
| t |           |                |          | . |   | e- |   |        |
| a |           |                |          | C |   | 1  |   |        |
| l |           |                |          | o |   | .C |   |        |
| s |           |                |          | m |   | om |   |        |
|   |           |                |          | m |   | me |   |        |
| . |           |                |          | e |   | nt |   |        |
| C |           |                |          | n |   | s} |   |        |
| o |           |                |          | t |   |    |   |        |
| m |           |                |          | s |   |    |   |        |
| m |           |                |          | } |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
+---+-----------+----------------+----------+---+---+----+---+--------+
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| A |           |                |          |   |   |    |   |        |
| d |           |                |          |   |   |    |   |        |
| d |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| a |           |                |          |   |   |    |   |        |
| l |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| : |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| a |           |                |          |   |   |    |   |        |
| d |           |                |          |   |   |    |   |        |
| d |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| a |           |                |          |   |   |    |   |        |
| l |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 5 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 6 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 7 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 8 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 9 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 1 |           |                |          |   |   |    |   |        |
| 0 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 1 |           |                |          |   |   |    |   |        |
| 1 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 1 |           |                |          |   |   |    |   |        |
| 2 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| { |           |                |          |   |   |    |   |        |
| # |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| c |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| i |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| - |           |                |          |   |   |    |   |        |
| 1 |           |                |          |   |   |    |   |        |
| 3 |           |                |          |   |   |    |   |        |
|   |           |                |          |   |   |    |   |        |
| . |           |                |          |   |   |    |   |        |
| C |           |                |          |   |   |    |   |        |
| o |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| m |           |                |          |   |   |    |   |        |
| e |           |                |          |   |   |    |   |        |
| n |           |                |          |   |   |    |   |        |
| t |           |                |          |   |   |    |   |        |
| s |           |                |          |   |   |    |   |        |
| } |           |                |          |   |   |    |   |        |
+---+-----------+----------------+----------+---+---+----+---+--------+

***[Part IV: Service Offerings]{.underline}***

*The purpose of the Menu of Service is to help determine the breadth and
depth of services offered by the SSP. Please provide the Menu of
Services available to your clients.*

***[Part V: Background]{.underline}***

*The purpose of the background questions is to help determine the
"corporate" health and stability of the SSP and its long-term prospects
for providing reliable service to Federal agencies. Please limit
responses to each question to 100 words or less. If necessary, include
reference or additional materials in the form of an attachment.*

*[**Section 1.** Additional Background Information about Federal Agency
candidate providers.]{.underline}*

+-------------+-----+-------------------+-----------------------------+
| **Proj      |     |                   |                             |
| ect/Service |     |                   |                             |
| Name**      |     |                   |                             |
+=============+=====+===================+=============================+
| **Unique    |     |                   |                             |
| Project     |     |                   |                             |
| Identifier  |     |                   |                             |
| (UPI)       |     |                   |                             |
| (Government |     |                   |                             |
| only)**     |     |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| **Agen      |     |                   |                             |
| cy/Vendor** |     |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| ##          |     |                   |                             |
+-------------+-----+-------------------+-----------------------------+
|             | ##  |                   | ## Comment                  |
|             | Req |                   | s {#comments-3 .selections} |
|             | uir |                   |                             |
|             | ed  |                   |                             |
|             | Inf |                   |                             |
|             | orm |                   |                             |
|             | ati |                   |                             |
|             | on  |                   |                             |
|             | / I |                   |                             |
|             | nst |                   |                             |
|             | ruc |                   |                             |
|             | tio |                   |                             |
|             | ns  |                   |                             |
|             | {#r |                   |                             |
|             | equ |                   |                             |
|             | ire |                   |                             |
|             | d-i |                   |                             |
|             | nfo |                   |                             |
|             | rma |                   |                             |
|             | tio |                   |                             |
|             | n-i |                   |                             |
|             | nst |                   |                             |
|             | ruc |                   |                             |
|             | tio |                   |                             |
|             | ns  |                   |                             |
|             | .se |                   |                             |
|             | lec |                   |                             |
|             | tio |                   |                             |
|             | ns} |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Internal    | De  |                   |                             |
| Customers   | scr |                   |                             |
|             | ibe |                   |                             |
|             | the |                   |                             |
|             | se  |                   |                             |
|             | rvi |                   |                             |
|             | ces |                   |                             |
|             | you |                   |                             |
|             | p   |                   |                             |
|             | rov |                   |                             |
|             | ide |                   |                             |
|             | to  |                   |                             |
|             | in  |                   |                             |
|             | ter |                   |                             |
|             | nal |                   |                             |
|             | cus |                   |                             |
|             | tom |                   |                             |
|             | ers |                   |                             |
|             | w   |                   |                             |
|             | ith |                   |                             |
|             | ap  |                   |                             |
|             | pro |                   |                             |
|             | pri |                   |                             |
|             | ate |                   |                             |
|             | m   |                   |                             |
|             | etr |                   |                             |
|             | ics |                   |                             |
|             | (e. |                   |                             |
|             | g., |                   |                             |
|             | bu  |                   |                             |
|             | rea |                   |                             |
|             | us, |                   |                             |
|             | bu  |                   |                             |
|             | dge |                   |                             |
|             | ts, |                   |                             |
|             | u   |                   |                             |
|             | ser |                   |                             |
|             | s). |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Current FY  | P   |                   |                             |
| D           | rov |                   |                             |
| evelopment, | ide |                   |                             |
| Mo          | the |                   |                             |
| dernization | c   |                   |                             |
| &           | urr |                   |                             |
| Enhancement | ent |                   |                             |
| (DME) Cost  | FY  |                   |                             |
|             | DME |                   |                             |
|             | co  |                   |                             |
|             | sts |                   |                             |
|             | for |                   |                             |
|             | t   |                   |                             |
|             | his |                   |                             |
|             | in  |                   |                             |
|             | iti |                   |                             |
|             | ati |                   |                             |
|             | ve. |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Current FY  | P   |                   |                             |
| Steady      | rov |                   |                             |
| State (SS)  | ide |                   |                             |
| Cost        | the |                   |                             |
|             | c   |                   |                             |
|             | urr |                   |                             |
|             | ent |                   |                             |
|             | FY  |                   |                             |
|             | co  |                   |                             |
|             | sts |                   |                             |
|             | for |                   |                             |
|             | t   |                   |                             |
|             | his |                   |                             |
|             | in  |                   |                             |
|             | iti |                   |                             |
|             | ati |                   |                             |
|             | ve, |                   |                             |
|             | ca  |                   |                             |
|             | teg |                   |                             |
|             | ori |                   |                             |
|             | zed |                   |                             |
|             | if  |                   |                             |
|             | app |                   |                             |
|             | rop |                   |                             |
|             | ria |                   |                             |
|             | te. |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Future FY   | P   |                   |                             |
| DME Cost    | rov |                   |                             |
|             | ide |                   |                             |
|             | f   |                   |                             |
|             | ive |                   |                             |
|             | (5  |                   |                             |
|             | )-y |                   |                             |
|             | ear |                   |                             |
|             | fo  |                   |                             |
|             | rec |                   |                             |
|             | ast |                   |                             |
|             | of  |                   |                             |
|             | DME |                   |                             |
|             | co  |                   |                             |
|             | sts |                   |                             |
|             | for |                   |                             |
|             | t   |                   |                             |
|             | his |                   |                             |
|             | in  |                   |                             |
|             | iti |                   |                             |
|             | ati |                   |                             |
|             | ve, |                   |                             |
|             | by  |                   |                             |
|             | ye  |                   |                             |
|             | ar. |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Future FY   | P   |                   |                             |
| SS Cost     | rov |                   |                             |
|             | ide |                   |                             |
|             | f   |                   |                             |
|             | ive |                   |                             |
|             | (5  |                   |                             |
|             | )-y |                   |                             |
|             | ear |                   |                             |
|             | fo  |                   |                             |
|             | rec |                   |                             |
|             | ast |                   |                             |
|             | of  |                   |                             |
|             | SS  |                   |                             |
|             | co  |                   |                             |
|             | sts |                   |                             |
|             | for |                   |                             |
|             | t   |                   |                             |
|             | his |                   |                             |
|             | in  |                   |                             |
|             | iti |                   |                             |
|             | ati |                   |                             |
|             | ve, |                   |                             |
|             | by  |                   |                             |
|             | ye  |                   |                             |
|             | ar. |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Business    | B   |                   |                             |
| Operating   | rie |                   |                             |
| Model       | fly |                   |                             |
| (Customer   | de  |                   |                             |
| p           | scr |                   |                             |
| erspective) | ibe |                   |                             |
|             | y   |                   |                             |
|             | our |                   |                             |
|             | bu  |                   |                             |
|             | sin |                   |                             |
|             | ess |                   |                             |
|             | mo  |                   |                             |
|             | del |                   |                             |
|             | f   |                   |                             |
|             | rom |                   |                             |
|             | the |                   |                             |
|             | c   |                   |                             |
|             | ust |                   |                             |
|             | ome |                   |                             |
|             | rs' |                   |                             |
|             | pe  |                   |                             |
|             | rsp |                   |                             |
|             | ect |                   |                             |
|             | ive |                   |                             |
|             | (   |                   |                             |
|             | fra |                   |                             |
|             | nch |                   |                             |
|             | ise |                   |                             |
|             | f   |                   |                             |
|             | und |                   |                             |
|             | vs. |                   |                             |
|             | w   |                   |                             |
|             | ork |                   |                             |
|             | ing |                   |                             |
|             | c   |                   |                             |
|             | api |                   |                             |
|             | tal |                   |                             |
|             | fu  |                   |                             |
|             | nd, |                   |                             |
|             | p   |                   |                             |
|             | art |                   |                             |
|             | ner |                   |                             |
|             | vs. |                   |                             |
|             | sel |                   |                             |
|             | ler |                   |                             |
|             | /bu |                   |                             |
|             | yer |                   |                             |
|             | r   |                   |                             |
|             | ela |                   |                             |
|             | tio |                   |                             |
|             | nsh |                   |                             |
|             | ip, |                   |                             |
|             | etc |                   |                             |
|             | .). |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Transaction | P   |                   |                             |
| Costs       | rov |                   |                             |
|             | ide |                   |                             |
|             | cur |                   |                             |
|             | ren |                   |                             |
|             | tly |                   |                             |
|             | ava |                   |                             |
|             | ila |                   |                             |
|             | ble |                   |                             |
|             | c   |                   |                             |
|             | ost |                   |                             |
|             | m   |                   |                             |
|             | etr |                   |                             |
|             | ics |                   |                             |
|             | (   |                   |                             |
|             | OMB |                   |                             |
|             | is  |                   |                             |
|             | l   |                   |                             |
|             | ead |                   |                             |
|             | ing |                   |                             |
|             | an  |                   |                             |
|             | eff |                   |                             |
|             | ort |                   |                             |
|             | to  |                   |                             |
|             | d   |                   |                             |
|             | eve |                   |                             |
|             | lop |                   |                             |
|             | st  |                   |                             |
|             | and |                   |                             |
|             | ard |                   |                             |
|             | met |                   |                             |
|             | ric |                   |                             |
|             | s). |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Service     | De  |                   |                             |
| Provision   | scr |                   |                             |
| Model       | ibe |                   |                             |
| (Supplier   | y   |                   |                             |
| p           | our |                   |                             |
| erspective) | me  |                   |                             |
|             | ans |                   |                             |
|             | of  |                   |                             |
|             | pro |                   |                             |
|             | vid |                   |                             |
|             | ing |                   |                             |
|             | and |                   |                             |
|             | ma  |                   |                             |
|             | nag |                   |                             |
|             | ing |                   |                             |
|             | the |                   |                             |
|             | pro |                   |                             |
|             | vis |                   |                             |
|             | ion |                   |                             |
|             | of  |                   |                             |
|             | ser |                   |                             |
|             | vic |                   |                             |
|             | es, |                   |                             |
|             | inc |                   |                             |
|             | lud |                   |                             |
|             | ing |                   |                             |
|             | se  |                   |                             |
|             | rvi |                   |                             |
|             | ces |                   |                             |
|             | pr  |                   |                             |
|             | ovi |                   |                             |
|             | ded |                   |                             |
|             | by  |                   |                             |
|             | g   |                   |                             |
|             | ove |                   |                             |
|             | rnm |                   |                             |
|             | ent |                   |                             |
|             | st  |                   |                             |
|             | aff |                   |                             |
|             | vs. |                   |                             |
|             | th  |                   |                             |
|             | ose |                   |                             |
|             | c   |                   |                             |
|             | ont |                   |                             |
|             | rac |                   |                             |
|             | ted |                   |                             |
|             | o   |                   |                             |
|             | ut, |                   |                             |
|             | co  |                   |                             |
|             | ntr |                   |                             |
|             | act |                   |                             |
|             | ing |                   |                             |
|             | met |                   |                             |
|             | hod |                   |                             |
|             | (f  |                   |                             |
|             | irm |                   |                             |
|             | fix |                   |                             |
|             | ed- |                   |                             |
|             | pri |                   |                             |
|             | ce, |                   |                             |
|             | t   |                   |                             |
|             | ime |                   |                             |
|             | and |                   |                             |
|             | m   |                   |                             |
|             | ate |                   |                             |
|             | ria |                   |                             |
|             | ls, |                   |                             |
|             | or  |                   |                             |
|             | c   |                   |                             |
|             | ost |                   |                             |
|             | p   |                   |                             |
|             | lus |                   |                             |
|             | t   |                   |                             |
|             | ype |                   |                             |
|             | co  |                   |                             |
|             | ntr |                   |                             |
|             | act |                   |                             |
|             | s), |                   |                             |
|             | co  |                   |                             |
|             | ntr |                   |                             |
|             | act |                   |                             |
|             | in  |                   |                             |
|             | cen |                   |                             |
|             | tiv |                   |                             |
|             | es, |                   |                             |
|             | g   |                   |                             |
|             | ove |                   |                             |
|             | rnm |                   |                             |
|             | ent |                   |                             |
|             | vs. |                   |                             |
|             | c   |                   |                             |
|             | omm |                   |                             |
|             | erc |                   |                             |
|             | ial |                   |                             |
|             | ho  |                   |                             |
|             | sti |                   |                             |
|             | ng, |                   |                             |
|             | use |                   |                             |
|             | and |                   |                             |
|             | sc  |                   |                             |
|             | ope |                   |                             |
|             | of  |                   |                             |
|             | In  |                   |                             |
|             | dep |                   |                             |
|             | end |                   |                             |
|             | ent |                   |                             |
|             | Ver |                   |                             |
|             | ifi |                   |                             |
|             | cat |                   |                             |
|             | ion |                   |                             |
|             | and |                   |                             |
|             | V   |                   |                             |
|             | ali |                   |                             |
|             | dat |                   |                             |
|             | ion |                   |                             |
|             | (   |                   |                             |
|             | IV& |                   |                             |
|             | V), |                   |                             |
|             | p   |                   |                             |
|             | rog |                   |                             |
|             | ram |                   |                             |
|             | m   |                   |                             |
|             | ana |                   |                             |
|             | gem |                   |                             |
|             | ent |                   |                             |
|             | s   |                   |                             |
|             | tru |                   |                             |
|             | ctu |                   |                             |
|             | re, |                   |                             |
|             | e   |                   |                             |
|             | tc. |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Pricing     | De  |                   |                             |
| Model       | scr |                   |                             |
|             | ibe |                   |                             |
|             | p   |                   |                             |
|             | ric |                   |                             |
|             | ing |                   |                             |
|             | mod |                   |                             |
|             | els |                   |                             |
|             | o   |                   |                             |
|             | ffe |                   |                             |
|             | red |                   |                             |
|             | (e. |                   |                             |
|             | g., |                   |                             |
|             | p   |                   |                             |
|             | ric |                   |                             |
|             | ing |                   |                             |
|             | per |                   |                             |
|             | us  |                   |                             |
|             | er, |                   |                             |
|             | per |                   |                             |
|             | tra |                   |                             |
|             | nsa |                   |                             |
|             | cti |                   |                             |
|             | on, |                   |                             |
|             | on  |                   |                             |
|             | a   |                   |                             |
|             | sub |                   |                             |
|             | scr |                   |                             |
|             | ipt |                   |                             |
|             | ion |                   |                             |
|             | bas |                   |                             |
|             | is, |                   |                             |
|             | et  |                   |                             |
|             | a   |                   |                             |
|             | l). |                   |                             |
|             | W   |                   |                             |
|             | hat |                   |                             |
|             | is  |                   |                             |
|             | the |                   |                             |
|             | m   |                   |                             |
|             | ini |                   |                             |
|             | mum |                   |                             |
|             | ter |                   |                             |
|             | m-o |                   |                             |
|             | f-s |                   |                             |
|             | erv |                   |                             |
|             | ice |                   |                             |
|             | re  |                   |                             |
|             | qui |                   |                             |
|             | red |                   |                             |
|             | for |                   |                             |
|             | sha |                   |                             |
|             | red |                   |                             |
|             | s   |                   |                             |
|             | erv |                   |                             |
|             | ice |                   |                             |
|             | pr  |                   |                             |
|             | ovi |                   |                             |
|             | der |                   |                             |
|             | c   |                   |                             |
|             | ust |                   |                             |
|             | ome |                   |                             |
|             | rs? |                   |                             |
+-------------+-----+-------------------+-----------------------------+
| Service     | P   |                   |                             |
| Support     | rov |                   |                             |
| Structure   | ide |                   |                             |
|             | d   |                   |                             |
|             | eta |                   |                             |
|             | ils |                   |                             |
|             | on  |                   |                             |
|             | the |                   |                             |
|             | or  |                   |                             |
|             | gan |                   |                             |
|             | iza |                   |                             |
|             | tio |                   |                             |
|             | n's |                   |                             |
|             | s   |                   |                             |
|             | erv |                   |                             |
|             | ice |                   |                             |
|             | s   |                   |                             |
|             | tru |                   |                             |
|             | ctu |                   |                             |
|             | re, |                   |                             |
|             | inc |                   |                             |
|             | lud |                   |                             |
|             | ing |                   |                             |
|             | all |                   |                             |
|             | pa  |                   |                             |
|             | rtn |                   |                             |
|             | ers |                   |                             |
|             | in  |                   |                             |
|             | vol |                   |                             |
|             | ved |                   |                             |
|             | in  |                   |                             |
|             | the |                   |                             |
|             | so  |                   |                             |
|             | lut |                   |                             |
|             | ion |                   |                             |
|             | (e. |                   |                             |
|             | g., |                   |                             |
|             | h   |                   |                             |
|             | ost |                   |                             |
|             | ing |                   |                             |
|             | p   |                   |                             |
|             | rov |                   |                             |
|             | ide |                   |                             |
|             | rs, |                   |                             |
|             | m   |                   |                             |
|             | ana |                   |                             |
|             | ged |                   |                             |
|             | s   |                   |                             |
|             | erv |                   |                             |
|             | ice |                   |                             |
|             | p   |                   |                             |
|             | rov |                   |                             |
|             | ide |                   |                             |
|             | rs, |                   |                             |
|             | so  |                   |                             |
|             | ftw |                   |                             |
|             | are |                   |                             |
|             | ap  |                   |                             |
|             | pli |                   |                             |
|             | cat |                   |                             |
|             | ion |                   |                             |
|             | ve  |                   |                             |
|             | ndo |                   |                             |
|             | rs, |                   |                             |
|             | and |                   |                             |
|             | sys |                   |                             |
|             | tem |                   |                             |
|             | i   |                   |                             |
|             | nte |                   |                             |
|             | gra |                   |                             |
|             | tor |                   |                             |
|             | s). |                   |                             |
+-------------+-----+-------------------+-----------------------------+