SBIR 23.1 QA FINAL.pdf

Department of Homeland Security (DHS) Small Business Innovation Research (SBIR)

Program SOLICITATION NO. 70RSAT23R00000006 Questions & Answers

POTENTIAL/COMMON PROPOSAL SUBMISSIONS ISSUES:

Please read the solicitation carefully as mistakes or failure to comply with the requirements could result in your proposal being NON-RESPONSIVE and not evaluated. It is also recommended not to wait until the last minute. Proposal submission must be submitted by the deadline. The offeror is responsible for ensuring the uploaded documents comply with the requirements. If you need assistance with the portal contact, the Portal Help Desk at (571) 446-4869, or via email at OIPPortalHelpDesk@hq.dhs.gov.

The following three examples (potential issues) could impact the determination of whether a submission is considered responsive.

POTENTIAL ISSUE 1:

Proposal submission exceeds the cost and period of performance thresholds.

MITIGATION:

For Phase I, the cost must not exceed $150,000 ($156,500 if requesting discretionary technical and business assistance), and the period of performance of 5 months. See the solicitation section

3.4 on cost and period of performance thresholds.

POTENTIAL ISSUE 2:

SBA Registration upload is the incorrect document upload.

MITIGATION:

Offerors must upload a copy of the SBA Company Registration form as part of the proposal submission. See the solicitation section 2.1 on instructions for mandatory registrations.

POTENTIAL ISSUE 3:

New requirements. Foreign Relationship Disclosure is not submitted using the 5-page required format found in attachment 3 of the solicitation.

MITIGATION: Offerors must upload a completed copy of Disclosure of Foreign Relationships (Attachment 3) as part of the proposal submission. The attachment 3 form: DISCLOSURE OF FOREIGN RELATIONSHIPS, starts on page 55 of the solicitation. See the solicitation section

2.4 on Disclosure of Foreign Relationships.

mailto:OIPPortalHelpDesk@hq.dhs.gov

DHS SBIR TOPIC NUMBER DHS231-001

QUESTION 1:

Is this solicitation for one site or multiple sites?

RESPONSE:

No.

QUESTION 2:

Are you able to share a ball park figure on the number of endpoints.

RESPONSE:

No.

QUESTION 3:

Will this solicitation require remote access or VPN access?

RESPONSE:

No.

QUESTION 4:

Will this solicitation require encryption of emails or archiving?

RESPONSE:

No.

QUESTION 5:

When does the bidding start and what is the deadline for submitting a bid?

RESPONSE:

The solicitation opened for submission on December 15, 2022. Details on the requirements, including the deadline for submission are contained in the solicitation.

DHS SBIR TOPIC NUMBER DHS231-002

Can you provide the Manufacturers names of the CT devices and/ the file output types generated by the CT scanners (i.e., raster or vector)?

RESPONSE:

Manufacturer name is irrelevant. The images will be in .bmp and/or DICOS image format.

QUESTION 2:

Can you provide the resolution parameters of the scan output (X by Y by Z) so we can determine if the output resolution is detailed enough to properly make the necessary comparisons.

RESPONSE:

There is no specific answer needed in Phase 1. You will need to provide a design outline that discusses tradeoffs based on whatever criteria you decide to use.

QUESTION 3:

What is the level of accuracy (percentile) you are seeking?

RESPONSE:

We are not looking for any specific accuracy. This is an R&D program at TRL 3 max and we expect the submitter to provide a discussion of what is possible based on a tradeoff matrix developed by the submitter.

QUESTION 4:

You state that our solution may reside on separate yet interconnected hardware and provide a list of except-able connection types. Are those the only except-able connections you will entertain, or may we suggest addition connection types?(example: bus- interconnect)?

RESPONSE:

You can assume that the images will be available as files on an arbitrary pc and your phase 1 submission needs to provide your approach, including possible pseudo code.

QUESTION 5:

Please Provide the format and resolution of the CT Scan.

RESPONSE:

Format for X-Ray images. BMP; the contractor has to provide tradeoff analysis of accuracy possible with different resolutions. CT is not envisaged at this stage but if used DICOS format is applicable. Regarding resolution same comment as that for X-Ray.

QUESTION 6:

If we believe that the CT Scan resolution is not sufficient to allow for comparison to Manifest objects, Would DHS entertain better Hardware Scanning Technology as Part of our solution for this topic?

RESPONSE:

No.

QUESTION 7:

Will sample images of skids be provided?

RESPONSE:

Yes.

QUESTION 8:

Will sample images contain multiple angles?

Phase 1 does not require any software to be written. The images will be either single view or dual view. It may be possible to provide CT type images in .bmp format.

QUESTION 9:

What will be the resolution of the images provided?

RESPONSE:

In phase 1, part of the task is to provide a trade off between image resolution and potential error in mapping waybill contents to image.

QUESTION 10:

Will the images be in color or greyscale?

Greyscale.

QUESTION 11:

Is there any expectation of a preferred coding language? (Python, Java)

RESPONSE:

No expectation.

QUESTION 12:

How detailed are the manifests?

RESPONSE:

There is no TSA specified format.

QUESTION 13:

What minimum information?

RESPONSE:

Contents of the skid will be described.

QUESTION 14:

Does the manifest contain an image or images?

Text only is required for phase 1.

QUESTION 15:

What standards do these adhere to? (Harmonized System (HS) Codes)

RESPONSE:

No standards - a few sample manifests that relate to the images provided will be given to a contract awardees.

QUESTION 16:

What other data/metadata pertaining to skids will be available? (Weight, origin, destination, temperature, humidity)

None.

QUESTION 17:

How raw is the data that we will be able to analyze?

RESPONSE:

You only get a bmp image.

QUESTION 18:

Do we have any information on the observed x-ray energies? (Wavelength, power)

No; typical cargo scanners operate at 220KV.

QUESTION 19:

Does EDS in the context of this proposal stand for Energy Dispersive Spectroscopy?

RESPONSE:

EDS stands for Explosive Detection System.

QUESTION 20:

What standards, if any pertain to the imaging data?

Currently none; but in future the images will have to conform to DICOS.

DHS SBIR TOPIC NUMBER DHS231-003

What field applications and platforms are in use today?

Some agencies have internal ID management cards. See the topic description for additional information on what is currently being used today.

a. Are these universal or different for each first responder organization?

RESPONSE: Most are separate and different.

b. If we could create a new, universal Identity Management application that integrated directly with agency/organization smartphones would that be of interest?

RESPONSE: YES - that is the goal. Many software programs are proprietary and different even between regional and neighboring partner agencies.

QUESTION 2:

Is ID management currently centralized or are identities verified on an organization by organization basis?

The latter by most agencies.

a. If we could centralize that process, is there an agency/organization that would be the central node or would we need to create that process and workflow over the course of this scope of work?

RESPONSE: See the topic description for context and key requirements.

QUESTION 3:

Beyond the ID cards are any digital devices used for ID authentication today?

RESPONSE:

PIV or Secure Cards are used but on closed systems.

QUESTION 4:

Would this ID management system need to be deployed on classified devices?

See the topic description for key requirements.

QUESTION 5: Why is this specific to first responders?

RESPONSE:

Due to the increased number of large scale critical incidents - wind storms, floods, hurricanes, earthquakes, building collapse, chemical spills and active shooter with mass casualties. They do not have this capability at this time and delays in checking and deployment could have a negative impact on response and mitigation efforts.

a. The topic brief mentions future applications for other agencies and organizations in Phase 3 and beyond. Would it be possible to begin integrating with those sooner?

RESPONSE: Based on level of capability other federal agencies MAY be interested but it will be up to the awardee to determine that commercialization path.

QUESTION 6:

During the Phase I project’s R&D, it may be found necessary and/or beneficial to include other additional “identity” data elements considered to be Personally Identifiable Information (PII), such as sex, age, address, etc. Are there policies or other limitations that may exclude any PII data in a First Responder Digital Badge credential that may be deemed otherwise applicable to authenticate an individual during an incident?

RESPONSE:

Basic information is allowable, Male/Female, Agency, Agency Address, contact numbers etc.

Normally PII is not needed for First Responder response - confirmation of position and authorities within their agency is required.

QUESTION 7:

The NIMS RTLT does not have any matches when searching for RTLT types “Electric”, “Electrical”, or similar keywords. Is that intentional or is there another RTLT type keyword that is equivalent?

For credentialling they may want to check under Utilities or Public Works. Please note: MOST power systems are owned privately within the U.S.; it may not be listed. The electric companies can still be called to support an incident however, it is under a contract not under an agency authority. It will be known they are responding by the requesting agency.

QUESTION 8:

In the context of limited or no network connectivity conditions, it seems that a mobile-based First Responder Digital Badge credential would have to contain both identity and qualification attribute data elements that can be authenticated/validated under local/offline circumstances.

However, there may be some forms of credentials that would be beneficial that could only be validated with online access. Does DHS/FEMA foresee/desire more than one type of credential, or a single credential data model that works within a connected and non-connected environment?

RESPONSE:

A publicly known credentialling card, issued broadly, can be accepted for InProgress emergency situations and verified later as necessary. Often there is an agency/jurisdiction/personnel request list from the requesting agency. It is sent to a check in location, and it can be compared with the responder’s agency prior to allowing access. Otherwise, they are sent to a holding location.

Yes, the Credentials should have both identity with Image, Agency, and qualifying Credentials or Positions.

If the proposer could develop a system that works while on an active network(s) or while not on a network – it could be accepted. i.e. local responders to their area could verify locally, wider area responses would require on-line or calling verification.

States may want to host the proposed solution at the state level, Most responders receive authority or certifications at the state level and it makes sense that they have a statewide access.

Interstate responses go through FEMA and receives the information from the States as what agencies and disciplines are responding to the event.

QUESTION 9:

If research idea would leverage existing technology would that prevent inclusion into the program?

RESPONSE:

The proposed work must be for Research and Development activities.

The research idea must be innovative: something new or improved, having marketable potential, that includes the development of new technology, the refinement of existing technology, or the development of new applications for existing technology.

DHS SBIR TOPIC NUMBER DHS231-004

The topic seems to request the functionality to characterize and categorize objects, then to recommend the proper AR detector. If this is accurate, can you please clarify the third requested sub-component "3) Upon user confirmation, actuate the AR detector to detect and identify explosives." Can you please confirm that the requested prototype system itself is not intended to actuate existing detectors or identify explosives?

RESPONSE:

As developed in Phases I and II, the requested prototype system itself is not intended to actuate existing detectors or identify explosives. In Phase III, the Offeror will further incorporate Alarm Resolution sensors into the two prototypes. AR sensors consist of ETD sensors, vapor detector, Raman Spectroscopy-based detectors, and standoff detectors. In order to incorporate AR sensors successfully, the Government assumes that some levels of collaboration exist between the Offeror and ETD/AR sensor manufacturers. A timeline for commencing such collaborations is up to the Offeror.

QUESTION 2:

Is there a defined size range for objects to be placed in the system?

RESPONSE:

No larger than 14 in x 14 in x 14 in.

QUESTION 3:

Would it be possible/appropriate to propose interfaces with existing upstream sensor outputs which provide portions of required characterization (i.e. detection of organics in a container).

RESPONSE:

Upstream sensors may include X-ray/CT Explosive Detection Systems.

QUESTION 4: Can any documentation/further information regarding the AR decision tree be made available?

RESPONSE:

Since information about the AR decision tree is at Sensitive Security Info, it can only be made available when a contract is in place.

DHS SBIR TOPIC NUMBER DHS231-005

QUESTION:

Can the test scenarios be executed on any suitable test platform and using any conformance test language or is it limited to only one specific language? For 3GPP TS 36.579-3, this specification defines conformance test cases to test an MCX server and so the test cases in that document test MCPTT Client Configuration (MCPTT Server-MCPTT Client), MCPTT Server-MCPTT Client operation, and MCPTT Server-MCPTT Server operation. When coming up with the Requirements Matrix in Phase 1, should we be considering also the Server-Client tests, though it seems for this topic, the focus is on MCX server-to-server communications? Is that correct? I am referring to the text in the Topic description on page A-12 which says “A requirements matrix should be established to define a conformance test suite from the available test cases in 3GPP TS 36-579-3 to conduct the performance, conformance, and interoperability testing including MCX server-to-server communication.”

RESPONSE:

Ideally it would be both server-to-server and server to client. The intent is to take the next logical step from the work done with NIST which was the client MCPTT standards conformance.

DHS SBIR TOPIC NUMBER DHS231-006

Should the proposed system cover the entire process of the model generation, including data collection? Or focus on the reduction aspects?

RESPONSE:

The end goal is a process for model reduction. That would include the tools and rules for making a reduced model.

QUESTION 2:

Should we consider the entire “stack” of the system, or only the functional/logical properties which might be exploited?

RESPONSE:

Reduction to functional and logical is permitted, as long as vulnerabilities are still present in the reduced model.

QUESTION 3:

Should we consider HMI issues, e.g. distraction of operators?

Insider issues should be considered covert, overt, or accidental.

SBIR SUBMISSION QUESTIONS

Where do we submit our proposal for DHS SBIR 23.1?

RESPONSE:

The information for submission is in the solicitation. Please be sure to read all of the requirements included in the solicitation, as failure to comply could result in proposal submissions being deemed non-responsive and therefore ineligible for consideration for award. You can find the solicitation at: SAM.gov The details for the portal, where proposals need to be submitted, is in section 6.0 of the solicitation. First time users of the portal will be asked to create an account using your company information.

QUESTION 2:

Who should be added to the "participant list"? employees? subcontractors?

RESPONSE:

The participant page allows you to add any other entities outside your company involved in the proposal, which can include subcontractors. Employees can be under key individuals.

QUESTION 3:

Disclosure of Foreign Relationships document is missing from the solicitation document and needs to be filled out and uploaded with the submission, where can we find this document?

RESPONSE:

Per the solicitation, section 2.4, offerors must upload a completed copy of the 4 page Disclosure of Foreign Relationships (Attachment 3) as part of the proposal submission. The form, DISCLOSURE OF FOREIGN RELATIONSHIPS, starts on page 55 of the solicitation.

QUESTION 4:

Is it required that a company have a DCAA compliant accounting system to receive SBIR funds?

https://sam.gov/opp/efc54d6e4db84ee8a1b3acc31ecad173/view

DHS utilizes Firm Fixed Price contracts for Phase I and CPFF contracts for Phase II. A DCAA reviewed accounting system is not required for a DHS SBIR PH II; however, the DHS Office of Procurement Operations (OPO) will do an internal audit with the company to ensure their accounting system meets the requirements and is able to segregate costs.

QUESTION 5:

“The Summary of Results section is limited to 500 words, must not contain proprietary information, and is for Government use only. The Offeror should provide the anticipated results and implications of the approach (both Phases I and II) and the potential commercial applications of the research.” For a Phase I proposal, should we provide the anticipated results of both Phase I and Phase II here? Or does this mean that the Phase I proposal should provide only the anticipated results of Phase I, while a Phase II proposal would provide the anticipated results of Phase II?

RESPONSE:

The summary of results section should provide the anticipated results for both the Phase I and Phase II.