Attachment 04 A0001- Solicitation Question Template_Responses.xlsx

Sheet1 Attachment 4- Solicitation Questions Detention Facilities: Northwest, Denver/Aurora, Moshannon, and Broward

Can contractors continue to comply with governmental standards for log retention and comply with the requirements set forth in OMB 21-31, which details specific timelines for different classifications of logs? No, OMB 21-31 was rescinded by OMB M26-14 as of May 22, 2026

M-26-14 requires:

Logs must be actively searchable for at least 6 months. Logs must be retrievable for at least 12 months.

2 70CDCR26R00000026

Attachment 08 Attachment 12 RFP Sections H.5 p. 15, H.10(1) p. 17, H.10(8) p. 20, H.10(9) p. 21, H.12 p. 25, and I.4 p. 54 Attachment 8 Sections G p. 15 and I p. 25 Attachment 12 Section 14.0 p. 28 This section states that "The Contractor shall not collect, process, store, or transmit CUI within a Federal information system until an ATO has been granted…".

Will the government provide a Provisional ATO upon award so work can be performed under the contract while in parallel the vendor pursues the FedRAMP ATO consistent with the requirement in section H.12 that an ATO be achieved within 6 months of contract award? The contractor shall obtain full authority to operate (ATO) in accordance with DHS Policy Directive 4300A, current revision and in accordance with 3052.204-72 Safeguarding of Controlled Unclassified Information of this document. Security deliverables must be submitted at time of award in support of ATO. If unable to meet the requirements, the contractor shall provide with the proposal a Cybersecurity Compliance Plan (CCP) to obtain ATO within six (6) months of the contract effective date, which includes incremental delivery of deliverables and supporting artifacts, as requested. The CCP shall include a completed Authorization Readiness Report, with artifacts, to provide overview of the system’s cybersecurity posture and current readiness of each deliverable. The Authorization Readiness Report, with artifacts, will be reviewed to support an interim ATO recommendation. The contractor shall notify the Contracting Officer (CO) immediately, or as soon as reasonably possible, should the contractor encounter any delay that would necessitate the need to revise the compliance plan. Cybersecurity deliverables and the Authorization Readiness Report are provided in Attachment: “Cybersecurity Deliverables Sensitive Information Systems_HIGH_MOD 05.08.24."

Third-party cloud hosting environments/services (i.e. AWS, Azure) must be FedRAMP'd.

3 Attachment 01 Section 14 On-Call Guard Services, p.16 Section 14 of the PWS states one guard shall be authorized for off-site duty posts unless the COR specifies additional guards." Industry best practices require two guards to mitigate potential escape risk.

Will the government consider revising this requirement to permit the use of multi-purpose space for religion services? ICE's intent is to ensure that there is sufficient space for religious services for detainees of mutliple faiths and to take into consideration different classification levels and gender.

ICE defers to the to the vendor to ensure that they can adequately meet the religious services need of a variety of faiths represented in the detainee populations as well as the different classification levels.

If the vendor can meet the goal of providing religious services for all the faiths and classifications through a multi space model, then ICE concurs.

The vendor can propose how they will meet the intent of the requirement for ICE consideration.

Will the Government define the target camera-to-subject distance or the maximum scene width against which the 40 pixels-per-foot requirement will be measured and accepted, for each of perimeter, detention and high-security coverage? All cameras (VSS) for each room throughout the facility are recommended to be full 360-degree coverage, high definition to monitor the entire room without blind spots, with bult-in IR for low lighted room, with continuous recording 24/7. Also, recommend for each room audio integration (holding rooms/interview rooms) two-way audio modules to monitor verbal altercations and or duress signals for immediate action.

The facility video surveillance system is typically a standalone system (with server, switches, etc.). The target camera-to-subject distance depends upon camera purpose, placement, and field of view, as well as the camera make/model contractor specifies/proposes. The cameras and camera control system can be inventoried, assessed, and authorized as part of the greater facility system boundary or separately.

tc={7990CC5B-402C-440F-A4DD-ECE5AE1E76AD}: [Threaded comment]

Your version of Excel allows you to read this threaded comment; however, any edits to it will get removed if the file is opened in a newer version of Excel. Learn more: https://go.microsoft.com/fwlink/?linkid=870924

Comment:

@Cianci, Keith @Birdsong, Corey B

Can you all assist?

Reply:

I believe this is in OPRs AOR Reply:

@Bittle, Jessica H @Ingwersen, Steven T Reply:

@Bittle, Jessica H is this response ok now?

Reply:

@Baldauf, Jessica looks good to me.

Subsection 33.11 Basic Life Support (BLS) Certification, Medical Emergency Response, and Suicide Prevention, p. 38 The PWS requires completion of eight (8) hours of Suicide Prevention and Intervention training annually, including training on emergency use of cut-down tools and CPI (or equivalent) Nonviolent Crisis Intervention training.

Subsection 33.1 Facility Care Levels, pp 27-28 The PWS states that facility care levels will be determined based on the level of care required by ICE and that ICE/ERO/IHSC will define the applicable care level and baseline clinical capabilities. The contractor is required to provide staffing, facilities, equipment, and services consistent with the assigned care level.

Subsection 33.4 Health Services Overview (part a3), p. 30 The PWS requires pregnancy testing for female detainees ages 10 through 56.This requirement does not align with the National Detention Standards (NDS) 2026, which identifies the applicable age range as 18-56. Additionally, the facility does not anticipate housing 10-year-old female detainees.

Subsection 33.7 Key Personnel (Medical), p. 36 The PWS requires Licensed Clinical Social Workers to possess a minimum of three years of post-independent licensure clinical experience, including independent assessment, DSM-V-TR diagnosis, and treatment plan

Will the government consider deleting the requirement for "peer-support groups" given staffing and space constraints? Alternatively, will the government considering amending the language to " peer-support groups based on the needs of the population and existing staffing resources". Government agrees to amend the language related to peer support groups, as follows: The facility mental health program shall also include peer-support groups based on the needs of the population and existing staffing resources.

If the facility has a behavioral health unit, the peer support groups are required.

Can the government provide clear guidelines about what AI usage will constitute government-ownership and also what uses for AI are allowed in support of this contract? The Government clarifies that any AI-based deliverable, including custom-developed models, algorithms, and associated source code/artifacts created specifically under this contract, is subject to the Government data ownership and rights clauses stipulated in Section 2.3.

AI may be used in support of this contract so long as it complies with all applicable federal, Department of Homeland Security (DHS), and U.S. Immigration and Customs Enforcement (ICE) AI Policies, Directives, and Memos, as well as ICE AI governance requirements. All use of AI must be submitted to ICE's Chief Innovation and Artificial Intelligence Office (CAIO) as an AI use case. Use of AI that meet's OMB's definition of "high-impact" must undergo CAIO review and approval before deployment and must meet minimum risk management processes set in OMB M-25-21.

Regarding prohibited uses, the following uses of AI at DHS and uses of associated data are prohibited:

a) Relying on outputs of AI as the sole basis for a law enforcement action (which, for purposes of this Directive, include an arrest, search, seizure, or issuing a citation but does not include a referral to secondary screening), a civil enforcement action (including issuing a fine, injunction, or similar legal penalty), or denial of government benefits. Relying on AI for a support function for agency personnel, such as language translation or transcription, is not relying on AI output as a sole basis for agency action;

b) Using data associated with the use of AI at DHS, or deploying AI, to make or support decisions based on the unlawful or improper consideration of characteristics protected by Federal law, regulation, or government-wide or DHS policies, including this Directive;

c) Improperly profiling, targeting, or discriminating against any individual or entity based on the characteristics identified above or in retaliation for exercising Constitutional rights;

d) Using AI for improper (including unlawful or indiscriminate) systemic or large-scale monitoring, surveillance, or tracking of individuals, or predictions of emotional state or future behavior;

e) Providing DHS data, or outputs from the use of AI at DHS to third parties for uses of AI that are prohibited by applicable laws and government-wide and DHS policies, including this Directive; and

f) Other uses of AI or associated data that are prohibited by applicable laws and government-wide and DHS policies.

Attachment 01B - Facility Specific Requirements for Miami Attachment 01A - Facility Specific Requirements for Philadelphia

@Cianci, Keith @Birdsong, Corey B

Can you all assist?

I believe this is in OPRs AOR

@Bittle, Jessica H @Ingwersen, Steven T

@Bittle, Jessica H is this response ok now?

@Baldauf, Jessica looks good to me.