Early QA Response.pdf

Office of Inspector General Legal Services Corporation

3333 K Street, NW, 3rd Floor Washington, DC 20007-3558

202.295.1660 (p) www.oig.lsc.gov 2/14/2022

IT Managed Services RFP Questions and Answers

1. Who is the vendor of the 6 on-premises switches? The current vendors are Cisco and Linksys.

2. Who is the vendor of the firewall? The current vendor is Fortinet.

3. The RFP mentions virus, spam, and malware protection. In the RACI, it's listed as an OIG IT responsibility. Who is the vendor of the solution? The current vendor is Trend Micro.

4. What security/compliance frameworks does the OIG follow at the OS level? (For example, CIS Benchmarks, DISA STIGS, etc.) Currently there is no formal framework as the LSC-OIG has traditionally adhered to many of the NIST standards. The LSC-OIG is seeking to implement the appropriate IT controls and compliances as the assessments described in the RFP are completed.

5. Does the OIG cloud infrastructure follow FedRAMP guidelines? The cloud infrastructure does not follow FedRAMP guidelines. The Legal Services Corporation is a District of Columbia 503.c non-profit and the OIG is not on a federal government computing platform.

6. What is the current patching solution (WSUS, SCCM, etc.)? The current solution is the Windows Server Update Services.

7. Is there a system monitoring solution in place, or can the IT contractor propose/implement their own solution? Currently, there is not a system monitoring solution in place and the OIG will be seeking proposed implementation of a monitoring solution for review/approval once the assessments are completed.

8. Who is responsible for vulnerability and compliance scanning? The scanning responsibility is currently designated to the LSC-OIG Senior Information Technology Cybersecurity Specialist.

9. Who is the incumbent contractor? ECS Federal.

http://www.oig.lsc.gov/

10. Please mention exact names and count of existing Microsoft Licenses you are currently using. 30 Microsoft 365 Audio Conferencing, 36 Microsoft 365 E3, 15 Microsoft Visio, 31 Enterprise Mobility + Security, 6 Microsoft Server Standard 2012 r2 , 1 Microsoft 2016 SQL Standard, 1 Microsoft SQL Standard 2017, 5 Microsoft Server 2016 Standard.

11. What are the Total Number of users who need Managed Services? 50, as mentioned in current environment of the company, or 30 as mentioned in Appendix B point no. 5? The current technical environment refers to the 50 licensed user email accounts combined with shared mailboxes. The LSC-OIG currently has approximately 30 users.

12. As Communication Square operates remotely, can you tell how often do you need on-site visits? There could be the occasional need for onsite visits when new server and network equipment is being put into production and old equipment removed.