A31 Questions and Answers 06-21-23.docx

Question: When it comes to working on specifically the website, are there any specific clearance or access requirements? We noted the portion requiring up to Public Trust in the solicitation. However, we're confused as to whether this applies to all work (anything done on the website or Kiosk) or just on-site work (Kiosk).

Answer: The security requirements apply to all work done on this project.

Question: Do the references required need to come from the offeror directly, or if it is a subsidiary of another company, can the references be with respect to the parent company?

Answer: References can be with respect to the parent company. However, the response to the solicitation should also clearly demonstrate the factual basis for how the parent company will be directly involved in performance.

Question: Who will provide utilities for the Kiosk (e.g. electricity, internet, etc.)?

Answer: The Kiosk will use the utilities of the Drug Enforcement Administration Headquarters located at 600 Army Navy Drive, Arlington, VA, 22202. These utilities will be provided by the Government.

Question: Are there specific timelines by which the website development must be completed?

Answer: At this point, there are no firm timelines in place. However, the offeror should be prepared to commence work on the project immediately upon contract award.

Question: Are there restrictions on the security level of the cloud service hosting the website (e.g. FedRAMP)?

Answer: Please see the DEA Provision & Clause Matrix for specific security level requirements. In particular, the DOJ-05 clause provides specific security requirements, including FedRAMP.