Standard Procurement SystemPresented by: Ms. J ackie Bostic, DLA

Agenda Items• SPS Today

• State Of Technology• SPS Versions / SR18 Contents• Technology Risks

• Upcoming Efforts• PDS Mandatory Punchout• Technology Upgrades

• Future of SPS• Program Sunset status• Customer CWS Migration

• Customer’s New CWS• Data Quality / Contract Close out

• Preparation for Sunset

SPS Today - State Of Technology

SPS Today - SPS Versions

• SR16: Unsupported 12/31/2020• SR17 / 17A: Unsupported 12/31/2021• SR17B: End of Support - October 31, 2022 • SR18 w/ Technical Patch: Current Service Release

• Future updates will be based on SR18 with Technical Patch applied

SPS Today – SR18 Contents• Technology Upgrades/Certifications - Office 2016 certification, Sybase ASE & Open Client 16.0 SP03

PL09, Windows 2016 server certification, Solaris 11.4, webMethods 10.5, Sybase IAVA Fix• Functional Updates - Navy Audit Logging (Part 2), Automated Contract Closeout (from WAWF & MOCAS

-DD1594s), Grants Reporting to FPDS-NG, SAM UEI in EDA .idx file• Maintenance Fixes –

• Award Closeout Check for Unreleased Mods • DD Form 1155 Block 8 Delivery Checkbox Selection Corrected • Numeric ACRN Assignment No Longer Causes PD² to Hang • Option CLINs Exercised on a Modification Included when Validating Warrant • Partial Funding Clause and IUID Clause Validations no Longer Applied to Assistance Agreements• External Transfer Utility Populates Block 4 Date of Contract• Other Transaction Report Type radio button selection enabled when creating an OT CAR

• All Future Updates for SR18 will be based on SR18 w/Technical Patch applied• Technical Patch released on 12/14/2021 includes the following updates:

• PDS CAU with the Schema v2.6.1 updates• SAM UEI PD2 Adapter Update• Security Update: Last User Login

SPS Today - Technology Risks• Log4j Vulnerability

• Log4j 2.x vs 1.x• Third Party Vendor Updates

• Internet Explorer 11 Sunset• webMethods 10.11• Sybase

• ASE 16.0 SP03 vs SP04• Cloud licensing

SPS Today - Technology Risks• Log4j Vulnerability (Both CAT-1 Security Vulnerabilities)

• Log4j 2.x (“Operation Spartan Jewel”)• Must be upgraded to v2.17.1

• SR17B webMethods 10.1 Unaffected• SR17B Sybase Unaffected• SR18 webMethods 10.5 Impacted

• Core 13 Fix Impacts PD2 Archiving Utility & PD2 Document Transfer• Awaiting updates (SAT ~Late May 2022)

• SR18 Sybase Unaffected• Log4j 1.x (Unsupported - 2015)

• Exists across SPS supported versions• Remediated webMethods 10.1 exploitable content (Vendor will not provide update to old version)• Requested Sybase & webMethods log4j 1.x jar file update/removal for supported versions

• Note: Changes may impact software functionality for non-DoD customers

SPS Today - Technology Risks• Internet Explorer 11 Sunset

• Support Ends: J une 2022• MS Edge Browser Support: Pending

• webMethods Support• SR17B wM10.1 Extended Support Ended October 2021• SR18 wM10.5 Extended Support Ends October 2023

• Log4j vulnerability updates will be forthcoming in a pending update; estimated delivery early J une

• webMethods 10.11 Update Pending

SPS Today - Technology Risks• Sybase

• Log4j Fix (1.x files)• Current Sybase Versions (unaffected by log4j 2.x issue)

• SR17b ASE 16.0 SP03 PL04 • SR18 ASE 16.0 SP03 PL09

• Current Target Update: ASE 16.0 SP03 PL11 HF1 • Includes the 2.17.1 log4j files• Old log4j 1.x files will have to be manually deleted (upgrade instructions)

• Cloud Licensing• To migrate to Cloud hosting solution, sites require two things:

• CP Licenses• Currently provided by SPS J PMO; no additional cost to customer

• Requires licensing entire server cores• Cloud “Extension” Rights (for CP licenses)

• Allows CP license to be extended for use in a Cloud environment• Includes “Sub-Capacity Rights” (allocated core use vs. entire server cores)

• Customer to fund extension rights and annual software maintenance• Impact of not securing Cloud Extension Rights

• Contract Violation –Sybase licenses may be revoked; Mission impact

Upcoming Efforts -PDS Mandatory Punchout• In Development• SAT (~Summer 2022)• Capabilit ies Include:

• Ability to enable or disable Mandatory PDS Punch-Out for awards and modifications to prevent release if documents do not pass PDS validations

• Configurable tables can be used to specify award error and warning messages and modification error and warning messages to be included or excluded from PDS validation checks upon document release

• Benefits: Higher overall pass rates and less warnings on released documents

• Prerequisite:• SR18 w/Technical Patch

Upcoming Efforts – Technology Upgrades• webMethods 10.11• Sybase ASE 16.0 • Windows Edge Browser Support• Windows Server 2019/2022• Office 2019 Certification• Other Efforts (Pending)

• Standard Form Updates

Future Of SPS -Program Sunset Status

• OUSD Memo Dated April 26, 2020• No contracts, agreements, orders or

solicitations be awarded after Sept 30, 2023

• Final Sunset NLT Sept 30, 2026• Memo requires customer funding for

support beyond the sunset date

Currently, no future memorandums expected to be released

Future of SPS –Customer CWS Migration Support• Army: Update Pending • Navy: FY2026 SPS Sunset Target still in focus• Other Defense Agencies (ODAs)

• DLA is designated as the technical Lead for the 4th Estate Solution• USAF transitioned to CON-IT solution in Oct 2019

• Site Copenhagen*(in transition) For More Details: Windemere W-X

• Data Quality• Tools available to get the highest quality contracts that

pass PDS with little to no warnings• PDS Pre-Val on solicitations• PDS Pre-Val on awards and mods• PDS Pre-Val Funds Validation (HS-2) with compliant accounting

systems• New “PDS Mandatory Punchout” (available this summer)

• Benefit: Higher compliant contracts will assist in migrating contracts to new contract writing systems

Future of SPS –Customer CWS Migration

Future of SPS – Customer CWS Migration• Contract Closeout

• In SR18, Closeout Notifications from WAWF and MOCAS can be utilized to automatically close contracts in PD2

• Benefit : Time savings if manually closing contracts in PD2

• If closing contracts manually in PD2, • DD 1594s may fail at GEX if unsupported characters found in the Invoice or Voucher Number fields. Failed

files are not sent to EDA or FPDS-NG. “Errant Closeout” emails from GEX being updated this summer with details on why they failed.

• Benefit : These can be fixed and resent so they post to EDA and FPDS-NG• DD 1594s for newer contracts that contain the UEI will fail until mid-May. Files from late March to mid-May

can be retransmitted .• Help Desk diagnostic detects “bad data” in Invoice or Voucher Number fields.

• Benefit : Determine trends in older closeout notifications to drive training and or fix and resend previously failed closeout notifications.

Future of SPS – Preparation for Sunset

• Maintain technical system viability

• Sustain testing support/resources to support mandatory updates

• Reduce timeframe for multiple Service Release (SR)/Patch support

• Shorter t imeline for SR de-support dates

Contact Us

SPSJPMO@DLA.MIL

What improvements can we make to these presentations?

Please share your thoughts, suggestions and comments

with us.

All Audit Inquiries/Requests must go through our DLA Audit Liaison Office:ITaudit@dla.mil

QUESTIONS?

Reality!