RFQ - 26Q0077 - Question Answer.pdf
PDF 310 KB Posted
- Attached to
- Microsoft 365 GCC Migration, Implementation, Configuration, Training and Support Services
- Solicitation number
- 19TH2026Q0077
- Issued by
-
Department of State US Embassy Bangkok
About this file
This file is a Questions and Answers document for Solicitation No. 19TH2026Q0077 issued by the Embassy of the United States of America in Bangkok, Thailand on September 4, 2026, regarding Microsoft 365 GCC High migration, implementation, configuration, training, and support services.
The Government requires migration of approximately 460 Microsoft 365 users from an existing Windows 2016 Server with Exchange 2016 environment (966.75 GB total mailbox data: 372 user mailboxes, 186 groups, 2 resource mailboxes, 195 contacts, and 27 shared mailboxes) to Microsoft 365 GCC High on a Defense Health Agency (DHA) tenant, with the contractor creating a designated area within the existing tenant. The contractor must provide Microsoft Entra Connect deployment, migrate public folders (363 MB) and SMTP printer connectors, and configure 150 corporate-owned iPhones currently managed through AirWatch with DISA STIG policies and Apple Business Manager. The Government will procure its own licensing as a .org network entity and will exclude subscription costs from the contract price. Implementation and support will operate under a hybrid model with remote vendor delivery while AFRIMS staff works onsite in Bangkok. Security requirements mandate compliance with NIST 800-53, Risk Management Framework (RMF), and DISA DODI 8500.01, with personnel requiring U.S. citizenship and Top Secret-level security clearance for GCC High administrative access. Training must cover 9 administrator and end-user participants, and the contractor must provide 24x7 remote technical support for twelve months. The submission deadline is September 8, 2026 at 3:00 PM Bangkok time. The Government confirmed 300 MB available internet bandwidth and noted that internal firewalls and DHA tenant firewalls exist but will permit required Microsoft 365 endpoints and URLs.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| RFQ - 26Q0077 - MS 365 Impl Migration (Signed).pdf | ||
| Attachment 1 - C-SCRM Questionnaire.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Embassy of the United States of America
Bangkok, Thailand
September 4, 2026
Solicitation No. 19TH2026Q0077 – Microsoft 365 GCC Migration, Implementation, Configuration, Training and Support Service
Questions and Answers
Q1. Anticipated Microsoft 365 user/license count
Answer: 460
Q2. Number and approximate size of Exchange Server 2016 mailboxes.
Answer: ** MailDB1.edb 214.5 GB, MailDB2.edb 203.12 GB, MailDB3.edb 301.25 GB and VIPDB1.edb 247.88 GB (Total EDB Size: 966.75 GB)
Q3. Number of AirWatch-managed endpoints by Windows, macOS, iOS/iPadOS, and Android, including ownership and current enrollment methods where available
Answer: **100 devices running iOS
Q4. Current Microsoft tenant, licensing, identity, and directory environment
Answer: Windows 2016 Server with Exchange 2016, Active directory is running 2019 windows server.
Q5. Whether implementation and support may be delivered remotely or in a hybrid model, and what is expected for locally available support in Bangkok
Answer: This will be a hybrid deployment. The vendor may deliver services remotely while the AFRIMS staff works onsite in Bangkok.
MICROSOFT 365 GCC ENVIRONMENT
Q6. Does the Government require Microsoft 365 GCC (Government Community Cloud) or GCC High?
Answer GCC HIGH
Q7. Has the target tenant already been provisioned, or is tenant creation part of the contractor's scope of work?
Answer Both. We will be on the DHA tenant but the contractor will create an area for us within the existing tenant.
Q8. Could the Government confirm the license plans to be used and the quantity of each (for example, Office 365 G3, Microsoft Entra ID Governance, Microsoft Intune), and confirm that all subscription licenses are Government-furnished and are to be excluded from the quoted price?
Answer Being on a .org network we must purchase our own licensing as stated in the quote.
EXISTING MICROSOFT EXCHANGE SERVER 2016 ENVIRONMENT
Q9. What is the total number of mailboxes to be migrated, and what is the total mailbox data volume (in gigabytes)? Please distinguish user mailboxes, shared mailboxes and resource mailboxes if possible.
Answer 372 users, 186 groups, 2 resource, 195 contacts, 27 shared, Total size 966.75
GB
Q10. How many Exchange servers are currently in use, and what is the current version and cumulative update (CU) level of each?
Answer 2 x windows 2016 standard edition with the August cumulative patch
Q11. Are there any public folders, archive mailboxes, or SMTP relay connectors and line-of-business applications currently relaying mail through the Exchange environment? If so, please provide approximate numbers and sizes.
Answer We have public folders (363 MB), SMTP connectors to our printers
Q12. Is Microsoft Entra Connect (formerly Azure AD Connect) currently deployed, and if so, in what configuration?
Answer No
VMWARE AIRWATCH / WORKSPACE ONE ENVIRONMENT
Q13 What is the total number of enrolled devices, broken down by Windows, macOS, iOS/iPadOS and Android? Please also indicate which are corporate-owned and which are personally owned.
Answer 150 iPhones corporate-owned
Q14 How many policies and configuration profiles are currently in place, and how many applications are currently deployed through the platform?
Answer We use the DISA stig policies via Air Watch MDM
Q15 Are Apple Business Manager and/or Android Enterprise currently in use and enrolled?
Answer Apple business manager is currently in use.
SECURITY AND COMPLIANCE REQUIREMENTS
Q16 Statement of Work paragraph C.8 requires support of applicable Security Technical Implementation Guides (STIGs) where technically applicable. Could the Government identify the specific security baselines and standards to be applied — for example NIST, CIS Benchmarks, CMMC, or an internal organizational standard — including the specific STIG identifiers and versions?
Answer NIST 800-53 and risk management framework (RMF) and DISA DODI 8500.01
Q17 If a written security requirements document, cybersecurity policy or configuration baseline exists, could it be provided so that our team may review it and reflect it accurately in the proposed approach?
Answer https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
NETWORK AND INFRASTRUCTURE
Q18 Could the Government provide the current network diagram and confirm the available internet bandwidth at the performance site?
Answer We cannot provide a network diagram to vendors at this time. This can be provided after award to the one vendor. We can say that our ISP offers 300MB of bandwidth.
Q19 Are there any firewalls, proxy servers, or other network restrictions that would affect connectivity to Microsoft cloud services, and will the required Microsoft 365 endpoints and URLs be permitted?
Answer Yes. Internal firewall as well as firewalls on the DHA tenant
TRAINING AND SUPPORT
Q20 What is the approximate number of participants for administrator training and for end-user training respectively?
Answer 9
Q21 For the twelve-month technical support period, what support model does the Government require — for example 8x5 or 24x7 coverage, and on-site or remote delivery? Could the Government also state the expected response times and severity definitions, as no service levels are specified in the solicitation?
Answer 24x7 coverage remote delivery
SUBMISSION DEADLINE
Q22 The solicitation cover letter and SF-1449 Block 8 both state that quotations are due on 8 September 2026 at 03:00 PM Bangkok time, and the SAM.gov "Date Offers Due" field also shows 8 September 2026. However, the SAM.gov narrative description states that quotations are due by 10 September 2026 at 03:00 PM Bangkok time.
Could the Contracting Officer please confirm in writing which date and time govern?
Answer We confirm that the deadline to submit quotations is September 8, 2026 before 3:00 PM (Bangkok time).
PARTNER ELIGIBILITY FOR THE GCC TENANT
Q23 Microsoft Government Community Cloud tenants are subject to eligibility validation for partners granted delegated administrative access. Could the Contracting Officer confirm whether a non-U.S. contractor and non-U.S. delivery personnel are permitted to receive administrative access to the AFRIMS GCC tenant, and whether any U.S.-person staffing requirement applies to this effort?
Answer They must be U.S. personnel with a clearance at the Top Secret level.
= End of Questions =
Embassy of the United States of America
File details come from the government source that posted it. Updated .