About this file
From the source
Questions & Answers
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
The file's text, extracted by GovTribe without its formatting.
2031JW18Q00085
Questions & Answers
| 1 |
| Our analysis of FEDRAMP.GOV reveals that there is only one small business concern – certified as small under NAICS code 518210 – that is capable of providing the hosted eDiscovery platform solution. Given this circumstance, it would not be reasonable to expect receipt of offers from at least two responsible small business concerns. Therefore, would the Government considering removing the Total Small Business set-aside to allow for more competition (including receipt of offers from at least two responsible small business concerns) – and therefore greater value – to the Government? |
| Market research identified at least two (2) additional small businesses that through a partner relationship can provide the hosted eDiscovery platform solution that is FedRAMP Authorized. The Prime contractor does not have to be the holder of the FedRAMP Authorized Cloud Service Offering (CSO). |
| 2 |
| Does hosting a solution in the AWS Govcloud meet your requirement for FedRAMP certification? In the litigation support arena there aren’t many, if any, options for providers that have pre-built FedRAMP certified environments. We would use the AWS cloud FedRAMP environment to build a specific solution for this case, but wanted to make sure that would cover your requirements. |
| If a Software as a Service (SaaS) is hosted on a FedRamp Authorized Infrastructure as a Service (IaaS)/Platform as a Service (PaaS), then the SaaS would need to have a separate FedRAMP authorization. The total solution would need to be already FedRAMP Authorized to meet the OCC's requirement. |
| 3 |
| As it relates to the data deliverables for loading and review, do you currently have the 60 volumes of preprocessed data and 500GB of raw data ready to release all at the same time? We’re asking this as it relates to coordination of custody of the data, whether it can be done all at one time, or if multiple visits would need to be made. The answer to this question will also help us in building a workflow best suited for the possibility of deployment and workflow for analytics and TAR. |
| All of the preprocessed data that we have received from an external party in Summation Pro ready format (native, images, texts, and metadata) is housed on multiple hard drives ready to be released to the contractor once the system becomes operational. The 500GBs of raw data is an estimate for the in-house collection in the future. |
| 4 |
| Any additional information available regarding the organization of the collection effort and data as it currently resides would also be helpful for building the most efficient workflow for this project. This isn’t something that absolutely needs to be addressed for a response, but would certainly help us understand things like permission tiers for users, if we can generate review batches based on custodians or locations, and other workflow related responses that we could include to make the review more efficient. |
| The electronically stored information (ESI) was produced to the OCC from an external party in response to numbered document requests. Most of the ESI produced to the OCC includes metadata, such as metadata related to custodian or OCC request number. Some of this metadata can potentially be used to create review batches, etc. Internal collections have not yet commenced. |
| 5 |
| Is there a specific FedRAMP Authorization level that the OCC is requesting at this time (High, Moderate, Low, etc.)? |
| The FIPS 199 for the system is Moderate and thus solutions must support FedRAMP Moderate Control Baseline. |
| 6 |
| There are currently only two ediscovery service providers that are FedRAMP authorized and on the FedRAMP marketplace. Can the FedRAMP authorization requirement be lifted and instead open this solicitation to all FedRAMP compliant solutions to enable fair competition according to the FAR? |
| There are at least three (3) eDiscovery service providers that provide a solution that is FedRAMP Authorized. Additionally, market research identified one (1) small business that is FedRAMP Authorized and at least two (2) additional small businesses that through a partner relationship can provide the hosted eDiscovery platform solution that is FedRAMP Authorized. The Prime contractor does not have to be the holder of the FedRAMP Authorized CSO. |
| 7 |
| Attachment 2031JW18Q00085, PART I - SUPPLIES OR SERVICES AND PRICES/COSTS, 4.0 ADDITIONAL INSTRUCTIONS TO OFFERORS, Volume I FedRAMP ID requirement (pg. 25): Would Treasury OCC allow eDiscovery hosting to be done in Current FISMA Moderate is approved NIST 800-53 Security Controls, with Category I and II Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) for CM-6 - Configuration Settings, RA-5 - Vulnerability Scanning comprehensive and complete, CA-7 – Continuous Monitoring analysis, IA-3 – Device Identification and Authentication through collecting and analyzing all authentication logs for centralized monitoring and operational visibility, and reporting capabilities that provide continuous monitoring of specific controls, and with ATOs from several Federal Agencies? If OCC would accept this, what kind of documentation would be required to include in the response? |
| The solution must be cloud. If a SaaS is hosted on a FedRamp Authorized IaaS/PaaS, then the SaaS would also need to have a separate FedRAMP authorization. The total solution would need to be already FedRAMP Authorized to meet the OCC's requirement. The FedRAMP ATO packages for the IaaS/PaaS and SaaS, including the System Security Plan (SSP) and appendices, Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M), would need to be provided at a minimum after award. |
| 8 |
| Attachment 1, Statement of Work, Scope (pg. 1) and Task 8 (pg. 5): The RFQ states that Treasury OCC estimates approximately 3 TBs of data will need to be processed and hosted. Can OCC confirm if the 3 TBs of data has already been processed or is the 3 TB raw (unprocessed data)? |
| See the answer to question 3. The 3 TBs is a high estimate for the total amount of data. |
| 9 |
| Please clarify if a small business qualifies for the set-aside if they have at least 50% of the proposed revenue under a team bid? |
| Small business status is based on the assigned NAICS code of 518210 which has a size standard of $32.5 million. Consistent with FAR clause 52.219-14, at least 50 percent of the cost of contract performance incurred for personnel shall be expended for employees of the concern. |
| 10 |
| Are prime or sub-contractors limited to particular tasks (i.e. can a subcontractor manage the day to day process in Tasks 1 and 5)? |
| No. However, the Contractor should explain in their Corporate Experience section how a subcontractor who will be performing any task under the SOW has requisite experience to complete that task. |
| 11 |
| Is the estimated 500 GB of OCC ESI on Exchange, Network Shares, and/or other Cloud systems? Can the names/types of these systems be shared? |
| Yes, however the locations of data will not be available until the scope of discovery has been initiated in any future litigation (which has not yet been filed). |
| 12 |
| Will the OCC want to connect to HR or Matter Management Software? |
| No. |
| 13 |
| Does the OCC have Asset Management software? |
| No. |
| 14 |
| How many collections/projects do you run in an average year? |
| This is a project specific litigation support solution, so we do not believe the response to this question is applicable to the current contract under consideration. |
| 15 |
| SOW 2 - Objectives, Paragraph 1. The SOW states that “The platform and related services will be used to support a single OCC case for a limited time.” We wish to confirm that this project will consist of a single case for the duration of the award. |
| This requirement is for a single case for the duration of the award. |
| 16 |
| What is the volume of data and number of cases to be migrated from Summation Pro? |
| Two cases consisting of approximately 1.5 million records of coded data to match the volumes of raw data to be loaded. This metadata overlay will occur after the volumes are loaded. |
File details come from the government source that posted it.
