Accessibility Information

Users of assistive technologies such as screen readers should use the following link to activate Accessibility Mode before continuing: Learn more and Activate accessibility mode.


Solicitation Number: DOL099RI20788
Agency: Department of Labor
Office: Office of the Assistant Secretary for Administration and Management
Location: Office of Procurement Services
  • Print
Sources Sought
Added: Aug 27, 2009 2:22 pm
Sources Sought Notice for Request for Information (RFI) No. DOL099RI20788


The United States Department of Labor’s (DOL) Program is conducting market research to identify potential service providers who could host its web sites (,, and their core components. Services from the hosting provider will use cloud computing to reduce costs, scale capacity, and provide dynamic allocation of computing resources.

For the purpose of this RFI, DOL has adopted the definition of Cloud Computing found in Draft National Institute of Standards and Technology (NIST) Working Definition of Cloud Computing, dated 1 June 2009. Cloud computing is a model for enabling available, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services). The idea is that these resources can be rapidly provisioned and released with minimal management effort or service provider interaction. Additional information can be found at

Managed by DOL in partnership with 16 other federal government agencies, is an E-Gov initiative that provides citizens the ability to identify benefit programs and determine their potential eligibility from a single online location. There are currently more than 1,000 federal and federally funded state administered benefit and assistance programs listed on the site. has been available on the Internet since April 29, 2002 and is available in both English and Spanish.

This is a Request for Information only. A solicitation does not exist and will not be made available. All contractors doing business with the Federal Government shall be registered in the Central Contractor Registration (CCR) database. The website for registration is

Interested Contractors responding to this Request for Information (RFI No. DOL099RI20788) are requested to indicate their capability to fulfill all the requirements that are stipulated below:

1) Provide a detailed price schedule of hosting services described in proposed solution.

2) Provide detailed documentation and pricing schedule for an optional coupled Content Distribution Network (CDN).

3) Enable implementation of internal applications and tools, including but not limited to a Web Content Management System, Defect Tracking System, Code Repository System, and Web Analytics System.

4) Service the Government solution 24 x 7 x 365 days a year, to include help desk support/service center functions. Provide detailed service level agreements for review.

5) Place no restrictions on the Government’s integration of Software as a Service functionality from external providers via web services.

6) Affirm DOL retains ownership of all virtual machines, templates, clones, and scripts/applications, as well as maintaining the right to request full copies of these virtual machines at any time.

7) Affirm that DOL retains ownership of all software installed on virtual machines and any application or product that is developed.

8) Provide a cost effective virtualized hosting solution that utilizes proven and stable virtualization technologies, which encompass the following criteria:

a) Provides centralized management of virtual resources.

b) Provides the capability to report real-time usage metrics to include CPU, memory, disk, and network.

c) Provides the capability to dynamically reallocate virtual machines based on load, with no service interruption.

d) Provides multiple virtual hosts to allow for hardware fault tolerance.

e) Provides multiple network switches to allow for network fault tolerance.

f) Provides the ability to failover, load balance and minimize downtime.

g) Provides the ability to project capacity growth based on forecasting and trending.

9) Describe the bandwidth/data capacity and ability to support high traffic load.

a) Include the facility’s attachment to the Internet, ISP presence (and diversity), internal data communications infrastructure, etc.

b) Include bandwidth monitoring tools, if applicable

10) Provide detailed documentation and pricing schedule for adding additional capacity for the hosted solution. Include:

a) Information for adding additional virtual servers

b) Information for adding additional physical resources to increase capacity and the amount of capacity they provide

c) Information for adding additional network bandwidth

d) Information for adding additional network storage

11) Provide a robust, fault tolerant infrastructure that allows for high availability of 99.99%. If this target is not achievable, please specify the guaranteed availability.

12) Describe the system security and ability to meet all Government and GSA security requirements, provide the necessary documentation and support to assist DOL in meeting security requirements including:

a) Firewall/Virtual Private Network, Intrusion Detection System (IDS)/Intrusion Prevention System (IPS), vulnerability assessments plans, antivirus management, etc.

b) Certification & Accreditation (C&A) Process

c) Plan of Action and Milestones (POAM) Risk Mitigation Plan

d) Security Test and Evaluation Plan

e) Risk Assessment

f) Server and network device patching schedules and compliance

13) Describe the facility’s security architecture.

14) Describe the facility’s physical security.

a) Include access controls (internal and visitors), access lists, etc.

15) Provide a secure, dual factor method of remote access to allow DOL designated personnel the ability to perform duties on the hosted infrastructure. This access should allow for clientless (web-based) access.

16) Describe how systems/applications are segregated from other systems/applications in hosting environment.

17) Describe the levels of managed services provided, covering as many aspects of hosting as possible:

a) Examples of managed services include physical hardware, virtual infrastructure, operating systems, databases, and application servers.

b) Include a listing of software (OS/application servers/web servers/databases etc.) for which the hosting Contractor provides support.

c) Include description of any propriety software or programming interface required to develop and deploy applications.

d) Is the hosting Contractor responsible for configuring and deploying virtual servers?

e) Is the hosting Contractor responsible for software upgrades and patches?

18) Provide detailed documentation and pricing schedule in support of hosting a development and test environment at the hosting facility.

19) Describe hosting Contractor’s monitoring capabilities and methods.

20) Describe hosting Contractor’s reporting capabilities and methods:

a) Include capability for providing daily, weekly, monthly, and yearly reports.

b) Include a sample reporting documents.

21) Describe the facility’s power management architecture.

a) Include power diversity into the facility, power diversity to the racks, UPS systems, backup power sources, etc.

22) Describe the environmental components of the facility such as air handling systems.

23) Describe the fire protection/suppression systems.

24) Describe the hosting Contractor’s geographically diverse locations of data centers/hosting environments.

25) Describe the proposed facility’s backup systems and Continuity Plans.

a) Include backup and recovery processes and all processes related to storing and maintaining backups.

b) Include software, software agents, rotation schedule, backup media, offsite storage, recovery mechanisms, etc.

c) Include recovery processes for restoring virtual machines to an alternate facility should a localized disaster render the primary hosting facility unavailable.

d) Include high level details of the facility’s continuity of operations such as site recovery plans, estimated time frames for a recovery, etc.

26) Provide detailed documentation and pricing schedule for providing internet-facing DNS services.

27) Demonstrate with historical data the reliability of your proposed solution.

28) All electronic and information technology (EIT) procured through this Contract must meet the applicable accessibility standards at 36 CFR 1194, unless an agency exception to this requirement exists. The 36 CFR 1194 implements Section 508 of the Rehabilitation Act of 1973, as amended. All deliverables will be Section 508 compliant.

All interested parties who believe they can provide the above mentioned requirements are invited to respond to this RFI (which must include the Contractor’s indication of their ability to fulfill requirements 1-28 specifically stated above). The Statement of Qualifications / Capabilities Statement package must be transmitted under a Cover Letter. The Cover Letter must cite the following information at a minimum:

1) Response to RFI No. DOL099RI20788;

2) Vendor’s Company Name, Address, Contact Person Information;

3) Vendor’s DUNS Number;

4) Business Size Standard/Classification

5) GSA Schedule Number (if the vendor holds a GSA Schedule contract for these services are available)

The closing date for the receipt of responses is September 11, 2009, at 3:00 p.m. Eastern Standard Time. Responses to this RFI must be submitted electronically via email in a single .pdf document to The Department of Labor reserves the right to compete any acquisition resulting from this survey among small businesses or to make award to an 8 (a) firm, based on the responses received. This sources sought notice is for planning purposes only and does not commit the Department of Labor to pay for the information requested, issue a solicitation, or award a contract. No solicitation document exists at this time. Telephone calls regarding this RFI will not be accepted.

S-4306 200 Constitution Avenue, NW
Washington, District of Columbia 20210-0001
United States
WASHINGTON, District of Columbia 20210
United States
Ronald J Jordan
Phone: 202-693-4595