AISS RFI - Consolidated List of Industry Questions and FAA Responses.pdf

Question FAA Response Is AISS a new requirement or a follow-on to an existing contract? If AISS is a follow-on requirement, could the FAA provide the incument contractor's name and contract number?

AISS is a new requirement that seeks to promote collaboration and achieve efficiencies across Tech Ops support requirements.

Would the FAA provide the opportunity for a conference call to discuss vendor capabilities and other potential FAA opportunities as well?

There are no plans at this time to meet with individual companies to discuss their capabilities or other FAA opportunities, however the FAA is tentatively planning for an AISS Industry Day following receipt of RFI responses if the responses indicate there is a desire for the FAA to conduct one.

The AISS RFI indicates there is a requirement for security clearances (up to 25 Top Secret and 75 Secret). Is it possible to team with another company to meet this requirement?

The FAA will not provide guidance to potential offerors on how to meet the requirements of any SIR that the FAA may issue in the future.

There doesn’t appear to be any reference in the cyber security section or elsewhere in the RFI that references FIPS 140-2, Data Protection Requirements. Will FIPS 140-2 be included in the AISS requirement?

FAA contractors must be compliant with applicable U.S. Government FISMA requirements – which includes FIPS 140-2. The FAA will ensure that that these requirements are specifically identified in the Final SIR. In addition, Task Order statements of work issued after contract award may provide additional details relative to the applicability of specific portions of Government-wide standards or policies.

Sheet1