EVSS Sources Sought QA - 19AQMM21N0033v3 05052021.xlsx

XLSX spreadsheet 20 KB Posted May 5, 2021

Attached to: Vulnerability Scanning Solution Sources Sought
Solicitation number: 19AQMM21N0033
Issued by: Department of State Office of Acquisition Management

About this file

Written by GovTribe AI · Dec 28, 2023

This document contains questions and answers related to a sources sought notice issued by the Department of State for a vulnerability scanning solution. Key details include that the Department is seeking innovative solutions to integrate scanning capabilities with systems such as iPost, Splunk, and CyberArk. Monthly onsite system health checks will take place at the State Department Annex location provided. While help desk resources may be shared, dedicated resources are required for the subject matter expert and project management roles. Subscription-based licensing is preferred over perpetual licensing. Long term pricing for over a year should be addressed in any response. There is no single incumbent currently performing all required tasks. The requirement is for scanning 250,000 endpoints across various connected and isolated networks and environments.

View the file

Other files

File	Type	Posted
EVSS_PWS_Draftv21-2021-04-23 SS.pdf	PDF	Apr 23, 2021
Sources Sought Notice 19AQMM21N0033.docx	DOCX document	Apr 23, 2021

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

Q&A 05052021

EVSS Sources Sought Q&A - 19AQMM21N0033
#	Question	Answer
1	Can you share if there is an incumbent already on board and who?	There is not a single incumbent performing all of the tasks required in the Performance Work Statement.
2	For disparate environments that are air-gapped or isolated, how does State envision EVSS intelligence being integrated with iPost, Splunk, CyberArk and other processes that would consume scanning output?	DOS is leaving contractors the flexibility to describe an integrated management capability that allows for integration with defined systems in their response to the Sources Sought.
3	For disparate environments that are air-gapped or isolated, how does State envision the contractor performing onsite system health checks?	The monthly onsite system health checks identified in PWS Section 7.8.1 will be performed at State Department Annex 26, 3101 Odell Road, Beltsville, MD 20705. To provide scanning for air-gapped or isolated environments that are not connected to an enterprise network, the Department invites innovative solutions from vendors in their response to the Sources Sought.
4	Does the 4-hour RMA SLA mean that a replacement part has been issued and given to State or an authorized courier within 4-hours of receiving the RMA request?	A four-hour RMA that results in the part delivery of the part to a courier will suffice.
5	How can State elaborate on the protocols and methods required to integrate with tools like iPost and CyberArk?	The solution needs to incorporate native CyberArk integration per PWS 5.2. For iPost, providing the data in the data format described in PWS 5.1.1, that includes the 12 fields mentioned, should suffice for iPost integration.
6	Independent of location size or the number of endpoints, if the location is connected to a trusted network, does State have a preference for onsite or remote scanning of that location?	For any directly connected networks, DOS is looking to the contractor to provide their strategic approach. All solutions must ensure no impact to mission during local, core working hours.
7	Can the contractor use a shared services model to provide support to State or must those support resources be dedicated to State?	DOS recognizes that help desk personnel serve many customers. For the SME (PWS 6.1.1) and Project Management resource (PWS 6.1.2), however, DOS requires as close to a dedicated resource as possible. DOS understands that a contractor representative who serves one account (DOS) might also serve other Federal Civilian customers. The intent is to ensure the representative is available to respond to DOS when needed.
8	Does State have any additional online ticketing requirements, including the use of or integration with an existing ticketing system?	Although DOS presently uses Service Now to track internal actions, PWS Section 7.5.1.4 refers to the contractor's own internal ticketing system to ensure there is a reference number to allow DOS to reference specific past and pending requests.
9	Does contractor provided administration training mean that State will not require contractor assistance with system administration or maintaining the hardware and operating system software environment needed for the EVSS?	The DOS will maintain the solution post-implementation.
10	The previous RFI had a count of 180,000 IPs to be scanned. The draft PWS has a requirement for 250,000 endpoints. How many IPs need to be protected for this solution?	The requirement is for 250,000 endpoints.
11	The document asked for perpetual licensing. Will you also consider subscription licensing?	Subscription-based licensing is preferred.
12	When the final RFP is released, should vendors price for 1 year and next 10 years?	A RFP would address this detail, but the initial inclination would be for longer term pricing. It would be helpful if vendors could address the feasibility of long term pricing in the response to the Sources Sought.
13	What current scanning solutions is the department using? Who is the current incumbent?	There is not a single incumbent performing all of the tasks required in the Performance Work Statement.
14	What is the projected contract award and start date?	Ideally, there will be an award this fiscal year.
15	What is the projected value of this contract?	The Government is still finalizing the Independent Government Cost Estimate at this time.
16	Is this a new requirement or contract renewal?	There is not a single incumbent performing all of the tasks required in the Performance Work Statement.
17	If renewal, what is current contract number?	NA
18	When will the RFP be released?	We are expecting a quick tunaround, but please monitor BETA.SAM.gov for specific details.
19	Will there be a new Solicitation number?	A RFQ may have a different number than the Sources Sought.
20	Would the Government consider a set-aside or non-competitive procurement for this requirement?	Yes, the Government plans to consider all of the options available under Federal Regulations.

File details come from the government source that posted it. Updated May 5, 2021.