EDS_PBL_RFP_Questions_7.25.18.pdf

Question # Part.Section Paragraph(s) Page Reference Text Question Answer

1 A.3.1 All 6

There are significant amounts of labor, parts, and travel associated with the maintenance for MUX’s / NEDs (including Preventative Maintenance, Corrective Maintenance, and Anti-Virus updates) and the associated peripherals. To which CLIN should these costs be included?

NEDS/MUX/MCC maintenance cost are included in the EDS unit price.

2 A.3.2 1 9 Please provide the quantity of Multiplexing and network servers fielded and their locations.

A spreadsheet is available upon request.

3 A.3.2 4 9

Can the Government define "enhanced maintenance support" required for NSSE?

Will all of the additional labor, travel, parts, and supplies be reimbursed by the Government?

The Contractor shall ensure that sufficient staffing and parts support are available and in place to support these events. The Contractor shall coordinate with local TSA, the COR, and the CO to establish and implement enhanced support for these locations for any event officially deemed an NSSE by the federal government; and is under FFP on the contract

4 A.4.3 10

Can the government provide more specific examples of emergent security requirements which may fall into this CLIN?

This is a NTE and the Contractor is not required to propose on this amount. If any new DHS IT related requirements are implemented this CLIN allows the govt to fund and pay for the contractor to meet the new requirement.

5 A.3.6.1 All 11

Is there a limit to the disincentives by airport?

Is there a limit to the disincentives by system if a bad actor causes sequential SLA misses?

No

6 A.3.6.1 All 11 Can a single system incur all four disincentives creating a 50% decrement to the full month billing?

No, airport level and machine level reduction are not additive (see B.3.4.7 (a))

7 B.1.4 52.217-9 All 18

The Base Period and Option Periods total 5 years.

Does the government include the base period (transition) in the maximum duration of five years? Will the Government renegotiate pricing for any extension to the contract?

Yes, the transition period is included in the 5 year period of performance. With the exception of the use of 52.217-8, Option to Extend, any extensions to the contract would be negotiated

8 B.1.6 52.246-11 All 19

When is a screening information request required? How will the Government use a "Screening Information Request" during the procurement?

The Screening Information Request is not required under this contract and the associated language will be removed from the RFP.

9 B.2.3 All 20

If Contractor’s approach is to have a subcontractor remove and dispose of hazardous substance(s), Is the subcontractors licenses & Permits acceptable to fulfill this requirement

Yes

10 B.1.6 52.246-11 (b) 3 20 Does TSA consider all TSE, multiplexing and network servers, and UPSs both critical and complex as defined by FAR 46.203 (b) and (c)?

Yes

11 B.3.1.1 and Attachment D-6 1 21

Attachment D-6, Quality Assurance Surveillance Plan, references the Contractors QSP. There is no QSP required in the PWS. Is the QMR adequate to meet the requirements of the QSP?

Yes, the QASP should indicate QMS as it is referred to in the PWS. The QASP will be updated and re-posted.

12 B.3.1.3 All 21

Will the Government define the state and local licenses and permits required?

Is the contractor responsible for any licenses and/or permits that not defined by the Government?

The contractor is responsible for confirming and obtaining any necessary licenses and permits, and for complying with any Federal, State, and municipal laws, codes, and regulations applicable to the performance of the work

13 B.3.2.3 All 22

The Government states that "Attributes of such responsibility are expected to involve the assessment, coordination, and management of the OEMs, suppliers, and subcontractors…" Can the Government define a scenario where the OEM need not be involved?

Can the Government provide specific guidance on the prime's management requirements of OEMs?

The prime contractor's management requirements of the OEMs are as defined in the contract and between the prime and the OEM. It is the responsibility of the prime contractor to obtain any necessary agreements with the OEM's.

14 B.3.4.6 All 30

How will Contractor be notified of equipment movements, decommissions or installations?

The contractor will be notified via the Government Property Management equipment movement process as defined in B3.3. In the event a unit is moved outside of the equipment movement process, the local TSA/COR/System integrator will notify the contractor.

15 B.4.2 5200.204.002 2 34

Does the Contractor have to pay for time and travel to both initiate and complete PIV issuance?

The Contractor will be responsible at their own expense for coordinating appointments and traveling to nearest location to be issued PIV card

16 B.4.14.2.(b) 45

Are these requirements limited to the processing and storage of PII incident to the execution of this contract and not inclusive of contractor systems/laptops/media maintaining PII related to company employees for the purposes of company administration (e.g., Human Resources)?

Yes

17 B.4.14.3.-6 45

Are these requirements inclusive of employee PII stored and processed on company systems for general company management activities (i.e., HR, payroll, benefits, etc.)?

Yes

18 B.4.22 All 54

A Start date of 60 days after award, plus a 6 month transition period changes the POP as laid out in section A.4? Please confirm the 60 day delay for the start of the

POP.

There will not be a 60 day delay after award.

Vetting will occur as part of the 6 month transition period. But vetting can begin as soon as award notification occurs and will have to be completed during transition.

19 B.4.21(b) 54 Is contractor IT established and operated under an approved ATO for this contract is included in the requirements of this section?

No

20 C.3.1.1.1 3 61

What is the nature, volume and aging of current backlog? Open work order tickets will be provided during transition.

21 C.3.1.1.1 3 61 Will open tickets from the incumbents be included in awardee's metrics and disincentives?

No

22 C.3.10.2 5 68

How often does the Government expect the 'periodic reviews to ensure compliance with all information security and privacy requirements'?

Scans are monthly and reviews are at the discretion of TSA IT, but normally IT Information Assurance Division conducts at most 1 a year.

23 C.3.10.3 All 68

Can the Government provide examples of contract employees who might have SSR? (e.g. CSL, Database Administrator) Does TSA provide the role based training? Is the Contractor responsible for time and travel to attend this training?

The ISSO; TSA has monthly ISSO meetings that include training. Yes

24 C.3.10.4 7 69

Are the monthly security scans that are required to be sent to the Government? Yes, during the ATO process IAD will inform the Contractor on how scans will be performed and who they are sent to in IT.

Subject RFP No: 70T04018R9CAP3024

25 C.3.10.5; C3.10.25. iv 69/70

Availability of CISO, IAD and TSA SELC have impact on base year progress towards establishing and reaching authorization of a contractor IT for contract execution. Please confirm the CISO, IAD and TSA SELC will be available for ISSO and IT engineering coordination at contract award to support system ATO requirement within the 6 mo base period.

Will TSA SELC consider combining gate reviews based on maturity of IT design at contract award?

Yes, and yes they will consider combining gate reviews.

26 C.3.10.5; C3.10.25. iv 69/70

Does the government intend to require contractor IT systems to undergo SELC review, recommendations and approvals commensurate with the EA and SELC system engineering involvement with a DHS acquisition program, or will it be tailored to ATO and IT functions which include government interactions and/or data exchanges?

Yes

27 C.3.10.5; C3.10.25. iv 69/70

Contractor IT is necessary to effect the delivery of EDS PBL Services and requires an ATO to support storing and processing TSA data. However, Contractor IT is not a deliverable, and may contain contractor-only processes and functionality used to execute and manage the program. The scope of SELC reviews, recommendations and approvals may impact Base Period schedule and contractor costs related to establishing the IT to enable program transition.

Will TSA SELC consider combining gate reviews based on maturity of IT design at contract award?

Yes, it will be considered

28 C.3.10.4 7 70 Are the monthly OS vulnerability scans that are required to be sent to the Government?

Yes

29 C.4.1 1 79

What is the out-of-warranty schedule for the remaining installed equipment? Pricing is based on CLIN unit numbers; warranty dates on in-warranty EDS will be provided upon award.

30 C.4.1 2 80

CDRL A019 states PMs are to be submitted monthly to the CO and COR, PWS says weekly to the airports. Please clarify.

Monthly; PWS will be updated upon award removing the word 'weekly' from the sentence:

'Completion of PMs shall be provided weekly to the airports in accordance with DID A019, Preventive Maintenance Compliance Report' in section C.4.1.1 Preventive Maintenance

31 C.4.1.2 4 83

Is the damage to TSE as the result of operator misuse and operator error and the risk and cost to the contractor associated with it only bound by the $10,000 ceiling?

Yes, the Contractor's responsible for any individual excepted maintenance incident under $10k and is included in FFP. Any incident over that amount the TSA is responsible for the total cost of repair.

32 C.4.1.2 4 83

Level 1 Corrective Maintenance is defined as “corrective maintenance that is performed…that do not require Field Service Technicians, e.g. some bag jams…” Since bag jams are often caused by the airlines inducting items outside the machine spec, or poor bag hygiene, can the government clarify which bag jams will be the responsibility for TSA personnel to clear?

TSA is responsible for clearing any bag jams that TSA personnel can safely and easily remove. Bag jams cleared by the contractor will be considered non-relevant.

33 C.4.1.6 All 86 How many training courses should be priced or is this requested separately under CLIN X0004 Ancillary

Under the Ancillary CLIN

34 C.4.1.6 All 86

Can the Government provide the current TSRC interface protocols to ensure the proposed solutions can be executed effectively and transitioned in a timely manner?

It is the position of the TSA that the interface protocol with the TSRC is via phone or email.

35 C.4.1.9.1 2 87

PWS states that Hard drives shall be sanitized of SSI data by TSA at the TSA Springfield Warehouse. Form 1412 indicates the Contractor is performing the sanitization. Please Clarify which is correct?

Hard drives utilized in EDS/MUX/NED/MCC require sanitization at warehouse. Anything that is within the Contractor's IT boundary is the responsibility of the contractor to sanitize utilizing utilize Form 1412.

36 C.4.4 All 88

How large are the files for FDRS so Offeror's can adequately determine storage capabilities required

The Offeror is responsible acquiring this information.

37 C.4.11 1 91

C.4.11 states that "An EOD suitability determination is required regardless of whether or not a Contractor….currently holds a security clearance." Will Contractor personnel that currently perform the maintenance of EDS equipment and/or perform maintenance on other TSA equipment that currently have a clearance be required to re-apply?

Current vetted contractor personnel can be transferred from any active TSA contracts to the new EDS maintenance contract.

38 C.4.11 All 91

The Government has provided clear guidance for the submission gates for a suitability determination. Can the Government provide timeframes on when responses can be expected for the various steps in the process (e.g. after compliant e-QIP submission, how long will the Government take to complete its records and credit checks)? Understanding these timelines will be critical to ensuring a fully executable transition timeline.

Timeline varies, TSA will assist in expediting vetting procedures. Previous contract experience resulted in the following average timeline 21 to 60 days.

39 CDRL A024 and E.2.5 All 117

CDRL A024 indicates the initial Parts Obsolescence Management Plan (POMP) is due with the proposal. The POMP is not included in section E.2.5 instructions.

Is the POMP due with the proposal? If so, in what section of the proposal should it be included and is the POMP page count?

CDRL A024 is not due with the proposal. Update CDRL will be posted to Fedbiz ops.

40 E.2.6 1 124

Attachment F-6 does not include the “Customer Service Representative” wage determination information

The wage determination for this labor category will be updated upon award once the location(s) of the call center is known

41 E.2.5.2.2 7 122 Are PPQs required for TSA contracts? Yes, PPQs are requested for any referenced contract

42 C3.10.26 (C) ii (draft PWS

The following was removed from the final PWS: “Independent Assessment.

Contractors shall have an independent third party validate the security and privacy controls in place for the system(s). The independent third party shall review and analyze the SA package, and report on technical, operational, and management level deficiencies as outlined in NIST Special Publication 800-53 Security and Privacy Controls for Federal Information Systems and Organizations. The Contractor shall address all deficiencies before submitting the SA package to the Government for acceptance.”

This requirement was removed from the final PWS. Is it the intent of the government to provide the independent, third party assessments as part of the ATO process?

Yes it is TSA provided; it is the IAD auditing team that acts as the 3rd party.

43 3 22

The Contractor shall report any loss, stolen, or damaged equipment within 24 hours of the incident, along with an incident report as described herein. In addition, if this contract is to acquire new Transportation Security Equipment (TSE) or provides qualifying peripherals (defined as those meeting the acquisition cost threshold of $5,000.00 or that have the ability to store Sensitive Security Information (SSI)) in support of a repair under a maintenance contract, the Contractor shall ensure a “TSA Form 251/251-1 – Vendor Shipping and Receiving Report” is processed and included in each shipment.

Existing equipment shall include a Department of Defense (DoD) “Requisition and Invoice/Shipping Document” Form 1149 in accordance to contract specifications.

Will the Government please clarify whether or not this requirement will apply to parts/replacements that are being shipped to an airport to repair a unit? We understand that parts become Government property only upon installation and that the Form 251 is required for property already acquired by the Government. Is this understanding correct?

Yes your understanding is correct.

44 1 88

The Contractor shall collect from each individual EDS all raw Field Data Reporting System (FDRS) data and all predefined FDRS reports which include the Bag Information Report, the Operator Summary Report, and the Threat Alarm Summary Report as required in the EDS Procurement Specifications. This data shall be collected as part of the monthly Level II PM or in conjunction with a maintenance activity so as to minimize cost. All data collected and all data rights are the property of the Government. The Contractor shall track and document each system data output to ensure accuracy of data submission. The Contractor shall notify the COR and the Contracting Officer prior to delivery date if there are any issues in which data cannot be delivered by the delivery date with a risk mitigation plan to deliver data by other methods.

Will the TSA confirm that FDRS data collection will fall under the Offeror’s ATO requirements as described in Section 3.10 and all applicable subsections and related requirements. As such, these requirements would apply to all elements of the data collection process (laptops, Apricorn thumb drives, data upload including encryption, and data storage).

Yes

45 1 124

Offerors shall include any other than cost and price information to substantiate its pricing methodology or better explain its proposed pricing in this Tab.

Offerors shall, at a minimum, include an explanation of the price information required for the Transition

CLIN 00001.

Will the government consider increasing the page limitation for Tab 5 of the Pricing and Other Proposal Information from 2 pages to 5 pages? The additional page count will permit Offeror to provide a more thorough cost narrative and provide explicit details of its price proposal.

Yes, this increase is granted

46 B.4.10 5200.222.001 All

Does the Government consider the predecessor OEM contracts as qualifying for non-displacement?

Yes

47 B.4.15 5200.228.001 All

Can the Government provide a list of the individual insurance requirements by airport? This will have a material effect on both the costs associated with the contract and the timeline to implement as many as 400+ insurance riders during transition.

No, the government will not provide a list of individual insruance requirements by airport. The contractor is responsible for confirming and obtaining insurance at airports as required.

48 B.4.19 5200.237.004 Section K

Who are the current associate contractors and what are their roles? The associate contractors for this contract would be Battelle, who is required to perform Operational Readiness Tests after bearing replacement or other major repairs that require moving the EDS. Associate contractor would also include the EDS OEMs, who have CBTD program contracts where many ECP and end of life parts issues are addressed.

49 C.2.5 All

Will the Government furnish a list of the state codes and regulations required to be followed?

It is the contractors responsibility to ensure that all work performed is in compliance with all applicable local, state, and federal standards, codes, and regulations; including obtaining any required licenses, permits, approvals, and/or authorizations.

50 C.3.1.1.1 paragraph 3

If the Contractor is unable to obtain a signed subcontract from one of the OEMs, will the Government help facilitate execution?

No, C.3.1.1.1 indicates that the Contractor shall provide definitized fully executed and signed subcontract agreements with OEMs and subcontractors no later than sixty days prior to the start of Option Year 1. The Government will not negotiate on behalf of any Offeror.

51 C.3.2.1 All

Are the OEM manuals kept current and updated for the most up to date of HW/SW? Is the Contractor subject to disincentives for failure to achieve the specified performance metrics if the result of unknown errors or omissions in the OEM Equipment Manuals?

The EDS OEMs are responsible for providing the TSA with up to date manuals. The contractor is subject to disincentives for failure to achieve the specified performance metrics and is responsible in obtaining sufficient agreements with EDS OEMS to ensure access to accurate OEM technical data.

52 C.3.10.2 paragraph 3

Can the Government provide more detail on the physical security requirements required by site?

No, the contractor is required to work with local airports to determine physical security requirements.

53 C.4.1.1 paragraph 4

Is a list of applicable state safety regulations available from the Government? If not, how will the contractor incorporate these by reference into their proposed solution for training and execution of the PWS requirements?

It is the requirement of the Contractor to determine and comply with State and Federal environmental and safety regulations.

54 C.4.1.2.1 All

Does the TSA have any particular expectations on standards that will be needed for testing for the Depot repair? The EDS repairs will require testing and outside contractors to complete this. Will these contractors need to be part of the depot?

The depot repair will be completed by the EDS OEM and they are responsible for completing a Factory Assessment Test to confirm repair. The EDS would also need to pass Site Assessment Test (also referred to as Operational Readiness Test) when it is redeployed and installed.

TF Questions_2018-07-02