Checkpoint_ILS_Q&A_final.rev3.xls
XLS spreadsheet 111 KB Posted
- Attached to
- TSA Checkpoint Integrated Logistics Support
- Solicitation number
- 70T04019R9DAP3003
View the file
Other files
Show all 26
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Questions_Clarifications
| Subject: RFP No.: 70T04019R9DAP3003 | ||||||||
| Question # | Part | Section | Section Title | Par Ref. | Page # | Reference Text | Comment/Question for the Government | Government Response |
| 1 | A | A.2.5 | A.2.5 Labor Categories for Services (CLINs X0003AA and X0003AB) | 19 | There is an inconsistency between RFP Section A.2.5 and Attachment F4 Price Template. |
The Excel Price Template, “Labor Rates...” sheet does not include a labor category for the Field Service Technician Manager.
| Will the Government update Attachment F4 to add a labor category for the Field Service Technician Manager?. This will allow the bidder to differentiate labor rates between the labor categories. | Yes | ||||||||
| 2 | c | C.7.13.12 | C.7.13.12 Mandatory Public Key Infrastructure Solution | 2 | 90 | The current approved Government Furnished Equipment (GFE) solution for Privileged User is Xceedium. Unless otherwise directed by the Contracting Officer, the Contractor shall for the term of the contract require all Privileged Users to utilize the GFE Xceedium solution when accessing systems that process or store TSA data. If Xceedium solution is not currently in place or available upon contract award the Contractor shall ensure their IT system access has applied the following countermeasures, until such time as the Xceedium solution is operational within the system. | Xceedium has two different models. A physical model and a virtual appliance for the cloud. Will the Government please specify which model will be required? | Physical | |
| 3 | C | C.7.13.26 C.7.13.26 Sensitive Information Required Special Contract Terms (Mar 2015), Safeguarding of Sensitive Information (Mar 2015) | 3 | 99 | 1. Authority to Operate. The Contractor shall not input, store, process, output, and/or transmit sensitive information within a Contractor IT system without an Authority to Operate (ATO) signed by the Headquarters or Component CIO, or designee, in consultation with the Headquarters or Component Privacy Officer. Unless otherwise specified in the ATO letter, the ATO is valid for three (3) years. The Contractor shall adhere to current Government policies, procedures, and guidance for the Security Authorization (SA) process as defined below and in Section C.7.13.5, Risk Management Framework, of this PWS. |
a. Complete the Security Authorization process. The SA process shall proceed according to the DHS Sensitive Systems Policy Directive 4300A, or any successor publication, DHS 4300A Sensitive Systems Handbook or any successor publication, and the Security Authorization Process Guide including templates.
i. Security Authorization Process Documentation. SA documentation shall be developed using the Government provided Requirements Traceability Matrix and Government security documentation templates. SA documentation consists of the following: Security Plan, Contingency Plan, Contingency Plan Test Results, Configuration Management Plan, Security Assessment Plan, Security Assessment Report, System Security Design and Authorization to Operate Letter. Additional documents that may be required include a Plan(s) of Action and Milestones and Interconnection Security Agreement(s). During the development of SA documentation, the Contractor shall submit a signed SA package, validated by an independent third party, to the COR for acceptance by the Headquarters or Component CIO, or designee, at least thirty (30) days prior to the date of operation of the IT system. The Government is the final authority on the compliance of the SA package and may limit the number of resubmissions of a modified SA package. Once the ATO has been accepted by the Headquarters or Component CIO, or designee, the Contracting Officer shall incorporate the ATO into the contract as a compliance document. The Government’s acceptance of the ATO does not alleviate the Contractor’s responsibility to ensure the IT system controls are implemented and operating effectively.
| ii. Independent Assessment. Contractors shall have an independent third party validate the security and privacy controls in place for the system(s). The independent third party shall review and analyze the SA package, and report on technical, operational, and management level deficiencies as outlined in NIST Special Publication 800-53 Security and Privacy Controls for Federal Information Systems and Organizations. The Contractor shall address all deficiencies before submitting the SA package to the Government for acceptance. | The Government references a “third party” which will validate the Offeror’s Security Authorization Package (SAP) prior to Authority to Operatate (ATO) being issued. It is the Offeror’s understanding that TSA will provide the independent third party review team and that this is not a requirement for a Contractor to provide a Third Party Assessement Organization (3PAO). Will the Government please provide confirmation that the third party assessment is performed by TSA’s Information Assurance Directorate and/or their designees? | Confirmed | |||||||
| 4 | E | E.1.3.a | E.1.3 52.212-2 Evaluation—Commercial Items (Oct 2014) | a. | 127 | “Non-price factors are listed in descending order of importance. Factors 1 and 2, when combined, are significantly more important than Factors 3 and 4. The non-price factors (Factors 1, 2, 3, and 4), when combined, are significantly more important than Price. Factor 5, Price is evaluated but not assigned an adjectival rating, however, this factor is an important part of the overall best value decision. “ | Please confirm the adjectival ratings for the non-Price factors are Outstanding, Good, Acceptable, and Unacceptable, with an additional Neutral for Factor 4 Past Performance. | TSA will not be providing the adjectival ratings at this time. | |
| 5 | E | E.2.6 |
| E.2.6.1.2 | E.2.6 General Proposal Requirements |
| E.2.6.1.2 Tab 2: Management Approach (Factor 2) | Para 1- 1st Table |
Tab 2 153
154 The proposal shall consist of the following volumes: <RFP has Table with page limits inserted here>
| E.2.6.1.2 c. The Offeror shall provide sufficient information to demonstrate their experience in successfully filling management requirements similar in size, scope, and complexity. The management approach must contain concrete examples when available or describe plans for how the requirement will be met. Resumes are expected to demonstrate the capabilities of, at a minimum, key personnel. | Please confirm that resumes are excluded from the page count. | Yes, resumes are excluded from the page count | x |
| 6 | E | E.2.6 |
| E.2.6.1.3 | E.2.6 General Proposal Requirements |
| E.2.6.1.3 Tab 3 – Transition Plan (Factor 3) | Para 1- 1st Table |
d. 153
155 The proposal shall consist of the following volumes: <RFP has Table with page limits inserted here>
| The Offeror shall provide preliminary copies of their signed subcontract agreements with OEMs and subcontractors. The agreements shall demonstrate a firm commitment by both the prime contractor and the OEM/subcontractor, even if all the specifics of terms and final pricing agreements are not finalized. | Subcontract agreements with the OEMs often contain between 50-100 pages each. With the required number of OEMs, this will exceed the total allowable page count for Volume 1. Will the Governement exclude the various contractual documents from the page count? | Yes | x |
| 7 | E | E.2.6.1.3 |
E.2.5.1 E.2.6.1.3 Tab 3 – Transition Plan (Factor 3)
E.2.5.1 General d.
Paragraph 5 155
151 The Offeror shall provide preliminary copies of their signed subcontract agreements with OEMs and subcontractors. The agreements shall demonstrate a firm commitment by both the prime contractor and the OEM/subcontractor, even if all the specifics of terms and final pricing agreements are not finalized.
| Do not include any cost or pricing specific data in Volume 1 of the proposal. | Subcontract agreements with the OEMs contain pricing data. Does the Government wish us to provide a price redacted version of the OEM agreements in Volume 1 and an unredacted version in Volume 2? | Yes | |||||||
| 8 | E | E.2.7.2.5 | Tab 5 – Price Proposal | b.1 | 158 | “ The Offeror shall propose fixed unit prices on subCLINs X0001AA – X0001AO by inputting the appropriate price components (Labor, Parts, Training/Certification, Travel, and Depot) for each Source (OEM, Prime, Other) in the yellow cells of the columns titled “Source (OEM/Prime/Other) and “Unit Price (Daily)” under the “CLINs X0001 – X0003 Buildup” tab of the Price Evaluation Template” | Please confirm that the FUP price components are for information purposes only and will not be incorporated in the resulting contract. The FUP price components fluctuate based on location, number of units deployed and passenger volume and should only be considered an estimate for informational purposes. | Correct, only the total FUP price will be incorporated into the contract | |
| 9 | E | E.2.7.2.2 | E.2.7.2.2 Tab 2 – Past Performance (Factor 4) | Paragraphs 1, 5 and 6 | 159 | The Offeror shall provide Contract Summaries of at least three, but not more than five, contracts either ongoing or completed within the past three years that demonstrate performance relevant to the solicitation performance requirements. |
Offerors may also submit past performance information regarding key personnel who have performed under relevant contracts, and subcontractors that will perform major or critical aspects of the requirement as a past performance submission.
| No more than two (2) of the (5) past performance questionnaires may be from subcontractors or key personnel. | Please confirm that the 3-5 past performance citations provided must be for separate contracts. In other words, if two past performances are for subcontractors or key personnel, those two must be for different contracts and different from the contracts cited for the prime. | The Government requires 3 of the 5 requested past performance citations be from separate contracts. Vendors should submit no more than 2 subcontractors or key personnel past performance citations from the same contract. | ||||||||
| 10 | E | E.2.7.2.5 | Tab 5 - Price Proposal (Factor 5) (pages limited to Attachment D) | section title | 160 | E.2.7.2.5 Tab 5 - Price Proposal (Factor 5) (pages limited to Attachment D) | ||||
| Offerors shall complete Attachment F-4 (Price Evaluation Template). The Price Evaluation Template will be used to evaluate the Offeror’s proposed prices. Proposed prices will be incorporated into the resultant contract. The Sections to be completed and evaluated are as follows: | Please confirm the parenthetical reference to Attachment D should be to Attachment F-4 Price Template. | Confirmed and updated to Attachment 4 - Price Template | ||||||||
| 11 | Attach-ments | Attachments | Attachment D4 – TSA Form 1412, Media Sanitization.doc and Attachment F-4 – TSA Form 1412, Media Sanitization.doc. | n/a | n/a | Attachment D4 – TSA Form 1412, Media Sanitization.doc and an Attachment F-4 – TSA Form 1412, Media Sanitization.doc. | The RFP contains Attachment D4 – TSA Form 1412, Media Sanitization.doc and Attachment F-4 – TSA Form 1412, Media Sanitization.doc. These documents appear to be duplicative. Please confirm that Attachment F4 - TSA Form 1412, Media Sanitization.doc is not applicable. | Confirmed | x | |
| 12 | Part E | E.2.5.2 | Paper Copies | Due to the complexity of the response and volume of acronyms, would the Government consider excluding the Acronym List from Page count? | Yes, the Acnonym List is excluded from the page count | x | ||||
| 13 | Part E | E.2.5.2 | Paper Copies | 15 | Are resumes for key personnel included in the page limitation? | See question 5 | ||||
| 14 | Part E | E.2.6.1.2 | Tab 2: Management Approach (Factor 2), Section 3 | 154 | This Section will be used to assess the organizational merit of the Offeror’s response and describe in detail the approach to performing management functions needed to meet the requirements of the PWS, including Program Management, Program Control, and Transition Planning. 3rd line – Should “Transition Planning” be deleted since there is now a separate Transition Plan in Tab 3? | Yes | ||||
| 15 | Part E | E.2.6.1.3 | Tab 3 Transition Plan (Factor 3), d | 155 | Since the OEM Subcontract Agreements can be in excess of 100 pages, we recommend the subcontract agreements with the OEMs & subcontractors be an attachment outside of page count. | See question 6 | ||||
| 16 | Data Item Descriptions (DIDs) | Attachment D-2 - | CDRL APM-ILS-029 Transition Plan, Block 14, 1st sentence | Should the paragraph which begins “Block 13 The ISP shall be reviewed” be removed as it pertains to ISP within the Transition CDRL? | Yes, see revised CDRL | |||||
| 17 | Data Item Descriptions (DIDs) | Attachment D-2 | Program Management Plan DID APM-ILS-001 Paragraph 10.2.5 Resource Planning and Control, 4th line | Recommend changing “January 31, 2018” to “January 31, 2020” | Yes, see revised CDRL | |||||
| 18 | Part E | E.3.2 | Evaluation Factors and Relative Order of Importance | How will Tab 3 - Socio-Economic Considerations be evaluated? | In accordance with the RFP, the Government will evaluate the extent to which the Offeror’s approach demonstrates that the Offeror has identified and committed to provide for participation by small businesses through participation in the DHS mentor protégée program and meeting the small business subcontracting goal. The Government will look favorably upon any offeror that exceeds the Small Business goals. | |||||
| 19 | Part E | E.2.6.1.3 | Tab 3 – Transition Plan (Factor 3) | The Offeror shall provide preliminary copies of their signed subcontract agreements with OEMs and subcontractors. The agreements shall demonstrate a firm commitment by both the prime contractor and the OEM/subcontractor, even if all the specifics of terms and final pricing are not finalized. | ||||||
| Can the Government remove the word “signed” subcontract agreements from this statement as the Offeror will only have agreements in draft format until Award? | The Government has removed the word "signed"; however, it added that Offerors must submit a letter or some form of documentation confirming commitment between the Offeror and OEM/subcontract that states the parties will finalize the agreement once the Government makes a final award. | |||||||||
| 20 | Data Item Descriptions (DIDs) | DID 29 Transition - 10.2.2.1 | Incoming Contractor Transition | Please clarify about the 3 separate incumbent contracts from the statement: “Include a discussion of the orderly transition of duties from existing personnel on three separate incumbent contracts to new personnel.” | Reference removed. See revised DID | |||||
| 21 | Part E | E.2.7.2.4 | Tab 4 – Representations and Certification | The RFP states “…The Offeror must complete all fill-ins in these provisions as part of their submission, The provisions are also provided as Attachment F-7.” Can the Government clarify the provisions, as Attachment F-7 is listed as Wage Determination Information? | The Government deleted this sentence. | |||||
| 22 | Part C | PWS C.7.13.20 | Software Guidance | In addition to providing a copy of, or access to, the documentation itemized below in the table, please also provide the Homeland Security Enterprise Architecture (HLS EA) as referenced on page 96 of the RFP. REFERENCE TITLE |
IAD SOP 1402 TSA Information Assurance and Cyber Security Division (IAD) SOP 1402 Department of Homeland Security (DHS) Management Directive (MD) 11000-6 Form (08- 04) Sensitive but Unclassified Information Non- Disclosure Agreement (NDA) DHS 4300A Sensitive Systems Handbook DHS 4300B Policy Directive DHS National Security System Policy Directive DHS IT Security Architecture Guidance Volumes 1, 2 and 3 TSA MD 1400.3 TSA Information Security Policy DHS MD 11042.1 Safeguarding Sensitive But Unclassified (For Official Use Only) Information DHS MD 11044 Protection of Classified National Security Information Classification Management DHS MD 11050.2 Personnel Security and Suitability Program DHS MD 11056 Sensitive Security Information (SSI) Policy & Procedures Guide DHS MD 4300A DHS Sensitive System Policy Directive DHS Performance Plan DHS Performance Plan TSA Management Directive (MD) 1400.3 TSA Information Assurance Handbook TSA MD 3700.4 Handling Sensitive Personally Identifiable Information TSA MD 1100.73-5 Employee Responsibilities and Code of Conduct
| TSA MD 2810.1 SSI Program | https://www.dhs.gov/dhs-security-and-training-requirements-contractors | ||||||||
| 23 | Part C | C.5.1 | Contractor Furnished Items and Equipment | Provide copies of current OEM operational and maintenance equipment manuals to the COR during transition and provide revised manuals throughout the contract when updated by the OEMs. OEMs deem these manuals as proprietary and have traditionally not released these documents to the Prime. Offeror recommends TSA update this requirement to an “as received” basis. Where if the Prime receives the manuals then in turn the documents will be provided to TSA. | The last bullet will be updated to add the words "as received" | ||||
| 24 | Data Item Descriptions (DIDs) | DID APM-ILS-020 10.2.2 | TSRC Processes | Can the government provide historic contact volume for the TSRC in terms of monthly for the immediately previous 12-month period inbound phone calls and emails for this effort? | This information is in attachment F-1, which is available upon requirement. | ||||
| 25 | Part C | C.5.2 | Contractor Furnished Equipment | Can the government please tell us who currently owns the TSRC number 1-800-820-8535, e.g. carrier or the incumbent ILS provider; | The number is owned by the incumbent and will be transferred to the awardee free of charge. | ||||
| 26 | Part C | C.5.2 | Contractor Furnished Equipment | Can the government describe what guidance/direction has been given to the incumbent for transferring the TSRC number to a potential new awardee of ILS? | See question 25 | ||||
| 27 | Part E | Email Copy | E.2.5.3 | The maximum size permitted for e-mail attachments is 5 MB.’ For proposal submission, can the size of the emails be increased due to the size of this proposal response? If not, will multiple emails be acceptable? | Multiple emails will be accepted. | ||||
| 28 | Data Item Descriptions (DIDs) | DID APM-ILS-020 | |||||||
| 10.2.2 | TSRC Processes | Can the government provide the volume of critical and non-critical (P1/P2) tickets for a the immediately previous 12-month period? | This information is in attachment F, which is available upon requirement. | ||||||
| 29 | PART A– SCHEDULE OF SUPPLIES/SERVICES | A.2.1.2 | Please consider two separate SubCLINs for the Provision AIT1 and AIT2; Combining these two technologies puts pricing constraints on the offeror and doesn't allow for cost savings to TSA. Each model requires separate price elements for labor, spare parts, and especially travel as the AIT2s are predominately located at remote airports. The offeror would have no choice but to bid all quantities at the highest price when taking all elements into consideration. | The government will not be separating these two technologies | |||||
| 30 | Attachment F-4 | Tab “CLINS X0001 – X0003 Buildup | For CLINs X0003AG, the RFP template requests a quantity to be inserted by the offeror; is the Government’s intent that the offeror provide a sample pricing for one Radioactive Leak Test and then divide the each year’s NTE amount by that sample price to get to the proposed quantity? | Pricing directions for CLINs X0003AG are provided in E.2.7.2.5.g. The updated Attachment requests that offerors fill in the unit price. The NTE value for each year will then be divided by that unit price to provide the quantity. | x | ||||
| 31 | RFP Final & Attachment F-4 | RFP A.2.4.4 & Attachment F-4 | Tab “CLINS X0001 – X0003 Buildup | RFP Final section A.2.4.4 states “The hourly rate proposed by the Contractor in these cases shall be fully burdened and include materials and travel costs in accordance with FAR 31.2, Contracts with Commercial Organizations and Section B.3.4.9, Travel and Per Diem, of Part B.” and the Attachment F-4 requests an amount of hours to be inserted for CLINs X0003AE in the Buildup tab. Can the Government confirm that the offeror is not bound to the LCATs requested for CLINs X0003AA and X0003AB? | It is the governments intent that any work under CLINx X0003AA and X0003AB will be utilizing the labor category rates requested and will be filled in Section A.2.5. For CLIN X0003AE, a fully burdened rate shall be provided, which the NTE amount provided for that CLIN will then be divided by to calculate the number of hours available under those CLINs. | ||||
| 32 | RFP Final & Attachment F-4 | RFP A.2.4.4 & Attachment F-4 Tab | “CLINS X0001 – X0003 Buildup | RFP Final section A.2.4.4 states “The hourly rate proposed by the Contractor in these cases shall be fully burdened and include materials and travel costs in accordance with FAR 31.2, Contracts with Commercial Organizations and Section B.3.4.9, Travel and Per Diem, of Part B.” and the Attachment F-4 requests an amount of hours to be inserted for CLINs X0003AE in the Buildup tab. Can the Government confirm what level of detail the Offeror is requested to provide to justify the hours proposed for this CLIN and that we are not required to propose a single hourly unit price rate inclusive of labor, travel, and ODCs as specific requirements cannot be forecast at this time? The Offeror requests that this requirement be adjusted to only require the NTE amount be included in our proposal as specific support would be proposed in execution under an FFP/T&M modification as required. | Offerors are requested to bid one fully burdened labor rate, as detailed in Section A.2.4.4. The NTE amount for each CLIN will then be divided by that rate to calculate the number of hours available under those CLINs (X0003AE). | ||||
| 33 | Part E | Tab 6- | Security Authorization Package | Since DHS System Security Plans must be entered into the IACS tool, can TSA provide an IACS compliant template for System Security Plan creation? | Yes | ||||
| 34 | Part E | Tab 6- | Security Authorization Package | Please advise on how TSA will treat any family of controls which are dependent on TSA/DHS-specific policies and procedures. Can “planned” controls be acceptable? | For purposes of the RFP, planned controls can be accepted. However, for the final Security Plan submitted after award, planned controls are not acceptable. | ||||
| 35 | Part F | F4- Price Template F4- TSA Form 1412. Media Sanitization | Can the Government correct the listing of duplication of Attachment 4? | See Question 11 | |||||
| 36 | Part E | E.2.7.2.2 and E.3.3.1. | Factor 4 Tab 2 – Past Performance | States: Tab 2 – Past Performance (Factor 4) (limit 10 pages). Can the F-2 Attachment (Past Performance Data) be modified to include an introduction and the requirements from Addendum to Instructions to Offerors and Addendum to Evaluation? | no | ||||
| 37 | Part A | ||||||||
| Part C | A.2.4.1 |
A.2.4.2 A.2.4.4 C.8.5 Ancillary Logistics Service (CLIN X0003AA) Catastrophic Response and Additional Support (CLIN X0003AB) Supplemental Support (CLIN X0003AE)
| Supplemental Support | We have discovered that the following Sections all make reference to a “Section B.3.4.9, Travel and Per Diem, of Part B” however the RFP contains no Section B.3.4.9 | The section was referenced in error. The Government will delete references to Section B.3.4.9 | |||
| 38 | Given the length of the subcontract agreements and the benefit to the Government in knowing that both parties signed the subcontract agreement as delivered to the Government, will the Government accept PDF submittals for the required Subcontract Agreements? | Yes, the subcontract agreements may be submitted as PDFs. |
&C&"Calibri,Regular"&11
Sheet1
| Section Title | Reference Text | Comment/Question for the Government | Government Response |
| C.7.13.12 Mandatory Public Key Infrastructure Solution | The current approved Government Furnished Equipment (GFE) solution for Privileged User is Xceedium. Unless otherwise directed by the Contracting Officer, the Contractor shall for the term of the contract require all Privileged Users to utilize the GFE Xceedium solution when accessing systems that process or store TSA data. If Xceedium solution is not currently in place or available upon contract award the Contractor shall ensure their IT system access has applied the following countermeasures, until such time as the Xceedium solution is operational within the system. | Xceedium has two different models. A physical model and a virtual appliance for the cloud. Will the Government please specify which model will be required? | |
| Section Title | Reference Text | Comment/Question for the Government | Government Response |
| C.7.13.26 C.7.13.26 Sensitive Information Required Special Contract Terms (Mar 2015), Safeguarding of Sensitive Information (Mar 2015) | 1. Authority to Operate. The Contractor shall not input, store, process, output, and/or transmit sensitive information within a Contractor IT system without an Authority to Operate (ATO) signed by the Headquarters or Component CIO, or designee, in consultation with the Headquarters or Component Privacy Officer. Unless otherwise specified in the ATO letter, the ATO is valid for three (3) years. The Contractor shall adhere to current Government policies, procedures, and guidance for the Security Authorization (SA) process as defined below and in Section C.7.13.5, Risk Management Framework, of this PWS. |
a. Complete the Security Authorization process. The SA process shall proceed according to the DHS Sensitive Systems Policy Directive 4300A, or any successor publication, DHS 4300A Sensitive Systems Handbook or any successor publication, and the Security Authorization Process Guide including templates.
i. Security Authorization Process Documentation. SA documentation shall be developed using the Government provided Requirements Traceability Matrix and Government security documentation templates. SA documentation consists of the following: Security Plan, Contingency Plan, Contingency Plan Test Results, Configuration Management Plan, Security Assessment Plan, Security Assessment Report, System Security Design and Authorization to Operate Letter. Additional documents that may be required include a Plan(s) of Action and Milestones and Interconnection Security Agreement(s). During the development of SA documentation, the Contractor shall submit a signed SA package, validated by an independent third party, to the COR for acceptance by the Headquarters or Component CIO, or designee, at least thirty (30) days prior to the date of operation of the IT system. The Government is the final authority on the compliance of the SA package and may limit the number of resubmissions of a modified SA package. Once the ATO has been accepted by the Headquarters or Component CIO, or designee, the Contracting Officer shall incorporate the ATO into the contract as a compliance document. The Government’s acceptance of the ATO does not alleviate the Contractor’s responsibility to ensure the IT system controls are implemented and operating effectively.
ii. Independent Assessment. Contractors shall have an independent third party validate the security and privacy controls in place for the system(s). The independent third party shall review and analyze the SA package, and report on technical, operational, and management level deficiencies as outlined in NIST Special Publication 800-53 Security and Privacy Controls for Federal Information Systems and Organizations. The Contractor shall address all deficiencies before submitting the SA package to the Government for acceptance. The Government references a “third party” which will validate the Offeror’s Security Authorization Package (SAP) prior to Authority to Operatate (ATO) being issued. It is the Offeror’s understanding that TSA will provide the independent third party review team and that this is not a requirement for a Contractor to provide a Third Party Assessement Organization (3PAO). Will the Government please provide confirmation that the third party assessment is performed by TSA’s Information Assurance Directorate and/or their designees?
File details come from the government source that posted it.