RESPONSES TO QUESTIONS

BPM Project:
Design and implementation of a software solution
based on Oracle BPM
(2014-03-BPM-Integration)

DATE: October 17, 2014

CONFIDENTIAL
FOR OFFERORS’ USE ONLY

IICDOCS#439444_v3
 1. Which version of Oracle BPM does IIC expect to implement?
The IIC expects to implement the version 12c of the Oracle BPM.

2. In the process flows there is an activity with the symbol ‘’ what is this activity referring
to? Is this the comments section in the BPM or are you referring to something else?
Diagram P01 - BR002 - Debt Origination (Page 3) - This symbol was used just to
document the fact that there is an informal conversations and coordination done by the
Administrative Assistance (AA) to Legal and Investment Officers, since they are shared
resource. At this point, there’s no input from them done to the system, the goal was to
document the assistant’s “parallel” participation in the process, even though has not a
direct impact in the process, only when the resource is assigned and dedicated to the
project later in the process.

3. For documents uploaded to IICDOCS (mentioned in processes and in Annex B), is there
any existing service that can be used or is the expectation that it will be developed as
part of this implementation?
The IIC has a document management system called IICDocs that is based on eDocs. BPM
users should have the possibility to directly upload documents into IICDocs through the
BPM and to pull documents uploaded into IICDocs and show them as part of a specific
task (i.e. a loan operation) in the BPM. The BPM implementer will use native web
services that are available for integration.

4. The origination processes for all products (Debt, equity, SME Direct, FINPYME Credit
etc.) have the same flows except “FINPYME Credit”, is the expectation that we will use
the same BPM process for all of these or create separate processes for each one of
them?
Although we can reuse some processes for the different “instrument types” (because
they can be a specialized entity at the relational model level), we need to assess and
confirm this during prototyping of the UI and when defining the new ER model. It may
be better in a few cases to have them separated if business is to evolve with the
institutional realignment which is going to happen in the near future, some instrument
types may change alone, so separation of concerns needs to be assessed.

5. Please provide RAAG form details, for example variables and format.
The RAAG question is attached. RAAG is a basic survey that varies if the project is
corporate (SMEs) or financial institutions.

raag.pdf

6. Please provide any existing template details.

IICDOCS#439444_v3
 At this point there are not templates defined that will be used by the BPM. Email
communications are expected to have a HTML format as well as generated documents
will have similar branding and format following the IIC branding guidelines.

7. For third party approvals, does the application have to be exposed outside of the
network or will the IIC internal team take care of that?
The BPM will not allow an external approval outside the internal network in the current
scope.
System does not require third-party approval at this point. But we do file exchange with
client during project due diligence, which we will assess the integration via web services.
Provider is Accellion.

8. In Annex A, it is mentioned that IIC would like to have ability to export the contents, is
there an existing format for this export?
The BPM should be able to export and generate documents in PDF, MSWord, Excel/CSV
based on information contained in the system. The generation of these documents will
depend on the instance of the process and the business need. For example, the BPM
should be able to generate documentation that support the Board Approval document
for a loan or the BPM should be able to produce portions or the totality of the Annual
Supervision Report for a loan operation based on information reported and stored in
the system.

9. Regarding the requirement for SharePoint integration, what information will be shared
with the BPM flow and where it be displayed?
SharePoint has web parts that consolidate pending approvals from different systems for
our internal staff; we are expecting to generate links that will take user from SharePoint
to a specific human task in the BPM for review and approval.

10. If available, please provide task form mockups and field details.
The IIC is currently working on the mockups for the UIs, and this work will also continue
with the participation of the selected implementer. In addition, the implementer will
review existing mockups and Entity-Relationship Models during brainstorming sections
and is expected to make recommendations or adjustments if necessary. The
implementer, supported by internal staff, will conduct sessions with business working
groups to complete the mockups and the definition of the ER Model.
Attached are the core forms for the current system. We plan to enrich the forms with UI
and JavaScript frameworks (e.g. Bootstrap, JQuery, Angular etc.)

IICDOCS#439444_v3
 SUPERVISION-VISIT. REQUEST-DISBURSE REPORTING-COMPLI QUICK-SURVEY.pdf PIPELINE-COMMENT.
pdf MENT.pdf ANCE.pdf pdf

KEY-DATES.pdf IPS.pdf IPI.pdf INSURANCE-SUMMA INDICATORS.pdf

RY.pdf

DISBURSEMENT-LOG DIAS.pdf
.pdf

11. For SSO, is there a plan to use third party SSO tools like OAM/OID?
The implementer is to suggest SSO within WebLogic capabilities. The IIC does not hold
licenses for OAM/OID. SSO is a broader term, but the objective is to use a protocol that
recognizes Integrated Windows Authentication on WebLogic to identify and validate
current user session. SSO will not be used across applications or environments
(Windows, Linux, so on).

12. Does the BPM workspace and/or any other UI need to be turned into a portal to be
integrated with the IIC portal? If so will standard portal concepts be used?

The implementer will proposed this in conjunction with the IIC. We are aware that the
ADF front-end may be heavy but at the same time we want to apply Oracle BPM best
practices while using a light-weight UI framework for the front-end (e.g. Angular JS). We
are considering the scenario in which our business (Model) is provided via SOA and the
front-end is implemented from scratch leveraging those services.

This way we could use the same UI from our user portal (see attachment below) in order
to create the same user experience already familiar to our users.

iicportal.PNG

13. What are the scenarios that include the CRM system interacting with the BPM
engine/processes?

As a summary, customer information on both systems (CRM and BPM) must be

synchronized. The future CRM will hold prospective client and contact information that
are not necessarily related to an existing operation. When one of these contacts is

IICDOCS#439444_v3
 “promoted” to a client, the BPM should be able to read core contact/client information
into the BPM system.
Those are the main activities related to CRM contemplated at this time:
• The BPM will read CRM client information to initiate a new lead.
• CRM will pull project-related information from the BPM and/or Warehouse and
make reference to it (via links or display information). As an example, CRM will
show outstanding balance for all projects/loans under the client or breakdown
by client.
• CRM will have links to projects in the BPM. The CRM will consume web services
to pull this data.
• BPM will display last communications done with the client via web services and
make reference to it, e.g. it may list communications by project.

14. Does IIC have Oracle WebCenter Portal + UCM licenses?

The IIC does have both licenses, but we are not expecting to use UCM.

15. Are the services listed below are already existing services or new services to be
developed?
a. CRR Calculation.
Yes, formula exists and is being used by an .ASP (classic 3.0) form that needs to
be moved to the BPM. CRR calculation is done by a proprietary formula.
b. Service to send public disclosure content to IIC website.
Yes, we just need to continue to provide same data; this data is expected to be
available in the Warehouse. This is done via REST.
16. Can IIC provide any additional clarification on report generation for example the Field
visit report; any existing reporting tool/service is available.
Most of the reports will be done and provided via IBM Cognos. Consequently, all project
information needs to be available in the Warehouse. However critical business data will
be available in the BPM through human forms as charts or plain data to assist business
decisions (e.g. charts with number of approvals, outstanding pie by client/projects,
number of project by client, and so on).
In terms of reports generated through the BPM, the system will have the capability to
produce documents based on information input into it. For example, field visit report or
the Annual Supervision Report will be generated by the BPM using information
contained in the system.
17. The following assumptions are being made, can IIC validate?

IICDOCS#439444_v3
 a. Form layout and fields are the same for all languages.
Yes
b. Labels are populated in the corresponding language using resource bundles.
Yes, we are considering using I18N for forms in case we need to translate UI in
the future.
18. Should we consider the environment setup for high availability in one data center and
configure DR in another data center? This requires additional licensing from Oracle, so if
it is the plan could you share the license information.
IIC already discussed this and confirmed with Oracle our DR approach. We will see Site
Recovery Manager and Recovery Point to replicate images to our DR facility. This DR
facility will have the VMs on sleep mode, and it will only activate VMs in case failure in
the HQ site.

19. Should we setup a new Oracle database using Real Applications Cluster or we can use
your existing database for metadata.
IIC already has Oracle RAC with Data Guard for DR. IIC will use Oracle RAC to hold BPM
data.

20. We are assuming WebLogic authentication via integration with MS Active Directory will
be used for single sign on. The RFP doesn't mention single sign on using Oracle Access
Manager. Please advise if our assumption is correct.
Yes, we will use SSO, but we will not use Oracle Assess Manager. Please see answer for
question 11 for more details.

21. What ETL tools are in use in your environment? Does the scope of the RFP require a
recommendation for ETL tools and therefore we should assume those tools will be used
for installation?
No recommendations are necessary, IIC uses Oracle Warehouse Builder, and the
implementer will facilitate the identification of tables and/or create views to facilitate
data export via ETLs.
22. We assume Oracle will be the database for metadata. Is that the right assumption?
Yes

23. We assume Oracle Linux 64-bit will be the OS for the BPM suite and all other
components in this environment setup, can you confirm?
Yes, unless Windows has any substantial advantage in performance and security.

IICDOCS#439444_v3
 24. We typically recommend 3 environments, DEV, TEST and PROD with high availability for
Test and PROD only. DR is configured for PROD. Is this an acceptable instance strategy
for IIC?
Yes, implementer must deliver these 3 environments, but we need to define the
strategy for the development, if each developer will have a standalone box and then
commit to a central repository, and have maven or hooks consolidating to test and
moving to production. Bamboo CI or other Continuous Integration (CI) tool must be
considered by implementer. We use GIT with STASH and for CI, but IIC is currently
exploring Bamboo.

25. Have all the 'services' and the operations thereof have been identified? If yes, are those
services already implemented and at least tested to production quality?

Yes, all services have been identified and the processes are modeled. You may request
the annexes through the contact IICPROCURE@iadb.org if you haven’t done so far.

No service was implemented. The implementer is expected to build the SOA layer for all
business services. Default framework is ADF, but IIC would like recommendations, back
end may be done on ADF or similar framework. UI, we would like to consider light-
weight framework similar to AngularJS instead of ADF Faces.

26. What are the expected project start and end dates? If the dates are not available then
what is the expected project time length?

IIC will launch deliverable by modules, e.g. DIAS survey, Debt Loan process and TAS, and
so on. We are expecting to deploy first modules Q1 2015, and complete full
implementation by Q3 2015.

27. Any throughput (i.e. number of processes per day by process type) and process UI
response time requirements?

UI response is key, that’s why a light-weight framework should be considered. UI should

not take more than 4sec to load (current scenario today).

IIC needs to implement 100 new projects as its goal for the year, but this number will
likely change after institutional realignment (Private Sector of the IDB group will merge
out to IIC), but system concurrence is expected to be below 200 users at the same time
after realignment is completed.

28. Any specific security requirements?

IICDOCS#439444_v3
 Active Directory with SSO will be used; roles and permissions will be set for AD accounts
within the BPM.

29. Any specific training and/or knowledge transfer requirements?

Yes, Implementer is expected to train IT staff for knowledge transfer, and it may be
required to train staff on the BPM (to be decided).

Implementer must provide full documentation on the installation and setup of the BPM
suite. Model implementation (business layer) must include documentation equal or
similar to Javadoc with class and methods definitions. Static Code Analyzer tools are
another way to document the code and transfer knowledge that we would like to
suggest to be used by the implementer.

30. Are the current process models that exist correct and complete? If yes, are they
translatable to BPMN 2.0 and if yes does IIC have this translation tool that we could use?

The current processes are subject to change as we interact (Agile methodology). IIC has
recently remapped all process with an external partner, so the process are very updated
but due to overlaps (re-use) or due to the simplicity of the process it may be reduced or
changed.

Implementer is expected to complete prototyping and definition of the Entity Relational

Model with IIC IT staff. As we go over the process to define the UI forms with the
working groups and map metadata to be captured, we may adjust the processes.

Business Processes where mapped on Visio using BPMN notation.

31. Can you please indicate which specific Oracle products (and versions) are expected to be
used in this project (including but not limited to Oracle SOA Suite, Oracle BPM Suite,
Oracle WebCenter Portal?, Oracle Business Intelligence?)

Latest versions are expected to be installed by Implementer, unless advised otherwise

with a business justification.

• WebLogic Server Premium

• TopLink and Application Development Framework
• Oracle Web Tier
• Oracle Virtual Assembly Builder
• WebLogic Software Kit for Oracle Database Appliance
• Internet Application Server Enterprise Edition
• Coherence Enterprise Edition

IICDOCS#439444_v3
 • Business Activity Monitoring
• Web Services Manager
• BPEL Process Manager
• Enterprise Service Bus
• AquaLogic Service Bus
• Oracle Event Processing
• Entitlements Server Basic
• Java SE Suite
• Management Pack for Oracle Coherence
• BPM Studio
• BPM Composer
• BPMN Service Engine and Workflow Extensions
• BPM Process Spaces
• BPM Process Analytics
• Oracle Data Integrator Enterprise Edition
• WebCenter Portal
• WebCenter Content

32. There is no specific reference to service virtualization in the RFP. Virtualization and
mediation is imperative in a SOA solution (to avoid point-to-point connections, support
backwards version compatibility and location transparency). Can you please indicate
whether Oracle Service Bus is already included in your software portfolio?
Yes, Enterprise Service Bus is included. We are expecting the implementer to suggest
the virtualization strategy. For DR, IIC will leverage Site Recovery Manager and Recovery
Point to have VMs on sleep mode ready to act in case of an incident in the HQ site.

33. Will the analytical needs of your project be covered by your existing PeopleSoft Data
Warehouse or does the project require a dedicated warehouse?
IIC does not use PeopleSoft Data Warehouse, but we have our own warehouse which
covers all business areas from the institution, and the BPM Suite will replace the
Origination system currently in place that feeds part of this warehouse. Therefore,
origination project related information must be available to our ETLs to be integrated
with the other systems, once the project goes from origination to supervision stage.

Implementer is to assist IIC IT staff to identify tables or creating views holding project
instances data so it can be used by Oracle Warehouse Builder.

Also, implementer is expected to use/consume business data from the warehouse to be

displayed in human task forms or entity views (views used in the portal to display
summarized entity information, e.g. customer, loan etc.). This data may be in form of

IICDOCS#439444_v3
 chart or plan data, and we will be used to assist staff on client business making-
decisions.

34. We assume that all the 12 business process automation has to be enabled on mobile
platform. Please confirm whether Native App and/or browser support required for the
same or not.
Both, browser and mobile app supports. Mobile App will depend on the framework
adopted for the project. E.g. AngularJS instead of ADF.

35. The RFP does not specifically mention the intended Go Live date(s) for the project. Is a
set target date for Production deployment available or can the Offeror derive the date
with IIC's help based on the proposed plan and methodology being used?
IIC will launch deliverable by modules, e.g. DIAS survey, Debt Loan process and TAS, and
so on. We are expecting to deploy first modules Q1 2015, and complete full
implementation by Q3 2015.

IIC suggests the Implementer to use an Agile methodology for the implementation and
we will collaborate with the Offeror to elaborate a plan.

36. Is initial IT infrastructure setup and maintenance for BPM project the responsibily of the
Offeror?
Infrastructure setup is done by Offeror, maintenance will be carried out by IIC.
Knowledge transfer should be carried by the Offeror, including setup and code (e.g.
JavaDocs) documentation.

37. Are in-scope high level reporting requirements for BPM implementation available for
sharing with the Offeror? If so, can these requirements be made available?
Not at this point, high level reports will be addressed in the prototyping sections in the
first interactions with each working group.

38. Please share the version of Oracle SOA Suite/BPM Suite available with IIC.
Latest 12c

39. Does the following list represent the correct list of Oracle SOA/BPM Suite and related
components available with IIC? Please provide the version of the valid components that
is available with IIC. –
• Oracle SOA Suite/BPM Suite
• Weblogic Application Server
• Oracle Enterprise Monitoring
• Oracle Service Bus

IICDOCS#439444_v3
 • Web Center Portal (available in 11g version only)
• Oracle Business Rule Engine
Please share the list of Oracle SOA/BPM Suite and related components available with IIC
if the above mentioned list does not provide a correct representation.
• WebLogic Server Premium
• TopLink and Application Development Framework
• Oracle Web Tier
• Oracle Virtual Assembly Builder
• WebLogic Software Kit for Oracle Database Appliance
• Internet Application Server Enterprise Edition
• Coherence Enterprise Edition
• Business Activity Monitoring
• Web Services Manager
• BPEL Process Manager
• Enterprise Service Bus
• AquaLogic Service Bus
• Oracle Event Processing
• Entitlements Server Basic
• Java SE Suite
• Management Pack for Oracle Coherence
• BPM Studio
• BPM Composer
• BPMN Service Engine and Workflow Extensions
• BPM Process Spaces
• BPM Process Analytics
• Oracle Data Integrator Enterprise Edition
• WebCenter Portal
• WebCenter Content

40. How often do the business rules in the system change?

Business rules may change based on business needs and there is not an average time for
it. After the implementation, the IIC expects to have acquired knowledge to manage
changes in business rules with limited support of the implementer or a business partner.

41. RFP states: "Offeror is to provide a description of approach, roles and tools for data
cleansing, conversion and migration from other systems."
Does the scope also include cleansing and conversion of data which may be manually
maintained today? Example: Fiduciary fund data, Agency master, Consultant master
data

IICDOCS#439444_v3
 Data that is managed manually will be organized and provided by the IIC to the
implementer to be uploaded in the BPM based on the proposed data structure.
Nevertheless, the implementer should propose the approach to follow for cleansing and
migration of data.
Also the implementer will facilitate the migration of approximately 3000
projects/records that currently exists in IIC financial systems.

42. As per Requirement # P01.BR002.114, the capability to automate document generation

is needed in the new system in English and Spanish. Can it be assumed that multi lingual
interface is out of scope and the application would only support user interface in English
language?
Interface will be English, but we will determine if i18n bundle should be use in the
future in case multi-language interface support is required (in this case Spanish).

43. Can it be assumed that IIC would provide support for translation of relevant document
and user interface elements to Spanish and any other languages, if needed?
Yes

44. Is there any plan to replace current IIC dashboard with WebCenter Portal dashboard? If
yes, is there a preference used – collaboration/Enterprise 2.0, integration with content
management system etc.?
No, but core and high level charts are expected within the human tasks and record
views (views that represent all data within a specific entity, e.g. loan, customer, etc.)

45. As a part of this solution we will make the data available in Oracle BPM Schema for ETL
job. We assume that IIC will provide their ETL team to write the interface so that data
can be exported to Data Warehouse schema from Oracle BPM schema. Please confirm
and clarify
Yes, but implementer is to facilitate the identification of the tables to extract entities
data as well as data related to the process instance status (e.g. task approvals, stage,
due dates, SLA metrics, etc.)
46. Does IIC have a standard hardware platform they would like the BPM solution to follow?
Hardware is provided mainly for virtualization with the exception of Oracle RAC which
relies on physical dedicated boxes. For this initiative, IIC will acquire two additional
hosts to accommodate resources for the BPM.

47. What are the standard environments within IIC (Dev, Test, UAT, Pre-Prod, Prod, DR,
etc.)?
We are expecting the implementer to deploy a DEV, TEST and Production. DR will
leverage VMWare Site Recovery Manager and Recover Point solutions to replicate VMs

IICDOCS#439444_v3
 to our DR facility. These VMs will be on sleep/standby mode, and only be enabled in
case of an incident.

48. What versions of Oracle Linux are in use?

We are expecting the implementer to suggest version, today IIC has images for Oracle
5.6. Most recent Linux implementations we deployed version 6.

49. Can you supply the process diagrams?

As per instructions in the IIC web page, process diagrams are available upon request to
IICPROCURE@iadb.org

50. I am assuming that each business process is prefixed with a “P” e.g. P01. Is it correct to
assume that there are 12 total business processes, P01 – P12?
Yes

51. How many activities for each Business Process?

Process diagrams present a rough estimate, exact numbers will be defined once the
implementation starts

52. How many human workflows for each Business Process?

Process diagrams present a rough estimate, exact numbers will be defined once the
implementation starts

53. How many approvers in a workflow for each Business Process?

Process diagrams present a rough estimate, exact numbers will be defined once the
implementation starts

54. Is the approver hierarchy based on LDAP?

No.

55. How many roles/actors/lanes for each Business Process?

Process diagrams present a rough estimate, exact numbers will be defined once the
implementation starts

56. How many business rules for each Business Process?

Process diagrams present a rough estimate. Exact numbers will be defined once the
implementation starts

57. How many real time reports?

Hard to estimate at this stage, 35 real time reports is a safe to estimate based on our
current Cognos reports and charts dashboard.

IICDOCS#439444_v3
 58. Are there drill down requirements?
1 Level (Charts -> Plain Data)
59. How many BAM dashboards are anticipated for a collection of reports?
Hard to estimate, but probably two: Origination, Supervision with couple charts.
60. Is the user hierarchy based on LDAP?
No

IICDOCS#439444_v3