RFP 19GT5025R0004 Main internet circuit service - Questions and Answers.pdf

SENSITIVE BUT UNCLASSIFIED

RFP 19GT5025R0004 – Main internet circuit service Ques�ons and Answers

1. Please advise how the cyber security ques�onnaire and the atesta�on form should be approached to ensure responses are compliant with the RFP.

Poten�al vendors shall document the security set up they can provide to avoid any breaches in the service and how they are able to respond should a threat to their company systems materialize and jeopardize their customers connec�ons and informa�on.

2. Please confirm which solu�ons are required for the second circuit. Should it have symmetric width for upload and download?

a. Yes, a symmetric connec�on is expected.

b. It should be a mirror from the primary circuit.

c. The idea of this is that the poten�al offeror guarantees that the link will be opera�ve in case of failure of their primary path (ISP internally should evaluate the most op�mum path and select it as the primary path).

d. The failover to secondary path in case of failure must be automa�c.

e. To clarify, we do not need two services for the same amount of Mbps; what we expect is mechanisms and physical paths that will deliver con�nuous service is a case of malfunc�on at the ISP side; for example, this can be achieved with 2 fiber installa�ons that are in different nodes and routes outside the DEMARC. In case that route A is down because the fiber is damaged, then failover will occur and route B will be ac�ve, note that route B should provide the same amount of Mbps stablished the contract, but it should not be treated as a separate service.

3. What are the requirements to comply with bandwidth consump�on and traffic reports?

a. We expect a tool from the ISP where we can check the bandwidth consump�on at any given �me.

b. This informa�on should not be public, we would need a crea�on of a username and password for the United States Embassy in Guatemala to access the monitoring pla�orm.

c. This tool can be web based and with a refresh rate not higher than 1 hour.

4. Can you provide details on the rou�ng path back to the United States?

No, informa�on cannot be disclosed.

5. Can you provide confirma�on on the requirement for circuit resiliency?

Yes, below are some key points that we would like to see in the proposals:

i. Redundancy

ii. Failover Mechanisms

iii. Disaster Recovery

iv. Security Measures

6. How deep is the NIST? What cases would be in viola�on?

a. Inadequate Network Bandwidth and Reliability; If an ISP fails to provide reliable network bandwidth to support a mul�tude of applica�ons and services, it would be in viola�on of NIST guidelines. This is cri�cal for ensuring consistent and dependable network performance.

b. Lack of Stateful Protocol Support; If an ISP does not support stateful protocols, which forward subsequent requests from the same client to the same server, it would be in viola�on of NIST guidelines. This is essen�al for maintaining session con�nuity and security

c. Failure to Implement QoS Mechanisms; Failing to comply with QoS requirements as outlined by NIST can lead to performance degrada�on, security vulnerabili�es, and overall network unreliability. It is essen�al for organiza�ons to implement the recommended QoS mechanisms to adhere to NIST guidelines and maintain a robust and secure network infrastructure.

7. What is the equipment that should be provided for the service?

a. ISP needs to provide all the equipment needed for the service; this will depend on the technology they are going to include in the proposal.

b. For example, if ISP is going to include network resilience, then equipment for handling the circuit should be included in the proposal, maybe a secondary router pre-configured with all the failover mechanisms. Or if ISP propose to install a router and switch to deliver the service; or only a router; or a layer 3 switch, it al depends on how the ISP plan to deliver the last mile to our

DEMARC.

c. The only restric�on we have now is not to implement any equipment as detailed in Sec�on 5 under FAR Clause 52.204-24.

8. Does the CISCO hardware need to be replaced?

No, Cisco equipment does not need to be replaced.

9. What equipment is the current vendor providing for the internet service?

a. Current ISP is providing a mirror configura�on for main and secondary path, addi�onally they implemented equipment to handle the failover automa�cally.

b. The service is delivered via RJ45 connec�on that we use to route the link internally.

c. At DEMARC, we can support the delivery of the service with CAT6A RJ45 or MM fiber 50/125

OM3 with LC connector.

10. Will service delivery handoff require a physical site survey? Will a technician need to be present?

Yes, service handoff will require a physical site survey. A technician will need to be present for service delivery and func�onality compliance confirma�on.

11. Who is the current incumbent?

Current incumbent is Navega.com, S. A.

12. Can you recommend an insurance company to quote the DBA with? Which amount shall the coverage be for?

Please refer to link htp://www.dol.gov/owcp/dlhwc/lscarrier.htm for the Defense Base Act requirements. Quota�on can be requested through any insurance company that can comply with the required coverage. Poten�al Offeror shall request a quota�on per person per day and for the following amounts:

(1) Bodily Injury, On or Off the Site, in U.S. Dollars

Per Occurrence US$5,000.00

Cumula�ve US$15,000.00

(2) Property Damage, On or Off the Site, in U.S. Dollars

Per Occurrence US$5,000.00

Cumula�ve US$15,000.00

13. In sec�on 3, number 4, what type of documenta�on shall be provided to atest the company’s capability regarding personnel, equipment and financial resources?

Please issue a leter ates�ng the poten�al offeror capabili�es as indicated in Sec�on 3, number 4.

14. Can you provide an editable file for the Cybersecurity ques�onnaire and the atesta�on form?

Please find editable files atached in separate documents.

15. What kind of documents need to be provided to comply with sec�on 3, numbers 5 and 6?

Please note as stated in the statement of work Sec�on 3, number 5, you will need to reference Sec�on 2, Clause 652.242-73 which stipulates which documents each potential offeror shall include in their proposal.

Regarding number 6, please note you the potential offeror shall provide a strategic plan as described therein.

16. Can you please indicate how Form W-14, part II and III is applicable to a local Guatemalan company?

Yes, Form W-14 is completed by foreign contrac�ng par�es and is used to claim an exemp�on from withholding, in whole or in part, from the 2% tax imposed by sec�on 5000C. Sec�on 5000C imposes a 2% tax on the gross amount of specified federal procurement payments that foreign persons receive pursuant to certain contracts with the U.S. government. Form W-14 is completed by foreign contrac�ng par�es and is used to claim an exemp�on from withholding, in whole or in part, from the 2% tax. Form W-14 is provided to the government department or agency that is a party to the contract. Addi�onal http://www.dol.gov/owcp/dlhwc/lscarrier.htm informa�on can be found at www.irs.gov/w14

Part II is applicable as you are claiming relief as there is a Central America-Dominican Republic Free Trade Agreement (CAFTA-DR).

Part III is not applicable to local Guatemalan companies.

Part IV shall state the following:

The Central America-Dominican Republic Free Trade Agreement (CAFTA-DR) is composed of the United States and Costa Rica, the Dominican Republic, El Salvador, Guatemala, Honduras and Nicaragua.

Presiden�al Proclama�on 8034 posted on the White House website on June 30, 2006, implements the U.S.-Dominican Republic-Central America Free Trade Agreement (CAFTA-DR) for goods of Guatemala entered, or withdrawn from warehouse for consump�on, on or a�er July 1, 2006.

17. Please confirm which reques�ng office shall be indicated in Form W-14?

Reques�ng office shall be stated as Diploma�c Technology.

----- End of Ques�ons and Answers ---http://www.irs.gov/w14