TSA Response to Questions_00001.pdf

Question # Reference Question Category Question TSA Response

RFP, Part VI, Section 6.6 Qualification

Requirements, pg. 36 Contract

If the 31 October, 2021 QPL deadline remains, what is TSA's intended approach for allowing Offerors an opportunity to compete on future CPSS orders if they were unable to meet that deadline for this solicitation?

Although this particular RFP requires the offerors' proposed system to be qualified under the associated by October 31, 2021, this is not a closing date of the QPL. The QPL is "rolling" and the TSA intends to issue subsequent RFPs as part of the CPSS Program for the Full configuration. Even if an offeror's system is not qualified by October 31, 2021 for the subject RFP, offerors may still continue through the QPL process in order to be eligible for future procurements.

RFP, Part VI, Section 6.6 Qualification

Requirements, pg. 36 Contract

What is TSA's plan for releasing additional solicitations under increment 1 for contractors that are accepted onto the QPL after the 31 October, 2021 deadline?

Although this particular RFP requires the offerors' proposed system to be qualified under the associated by October 31, 2021, this is not a closing date of the QPL. The QPL is "rolling" and the TSA intends to issue subsequent RFPs as part of the CPSS Program for the Full configuration. Even if an offeror's system is not qualified by October 31, 2021 for the subject RFP, offerors may still continue through the QPL process in order to be eligible for future procurements.

SOW Table 1: Major Components, Section 4.1.1, Page 5 Contract

The current buffer/decision point configuration is designed per the original FRD (which only includes 1 decision point). TSA has added requirements (additional buffer/ decision points) included in this RFP

SOW. This change could impact the design that is being tested per the

QPL process. Will TSA accept the previously approved configuration per the original FRD?

Yes.

4 RFP, CLIN Schedule, Pages 5‐7 Contract

PM CLIN00002 provides for 3 base years with 8 optional ordering years, while the remaining warranty/maintenance CLINs provide for 2 base years with 8 optional ordering years. Is it the TSAs intent that PM pricing be provided for one year beyond any other service pricing?

No. The RFP anticipates PM services are provided the entire Period of

Performance eleven (11) years, with Warranty/ Maintenance provided for two

(2) years with eight (8) Optional years for a total of ten (10) years.

RFP, Table 1, ClIN Schedule, page 6/7, CLINs CLIN 00001a Contract should the first quantity breakout be 16‐100? Yes, see Amendment 00001.

RFP, Table 1, ClIN Schedule, page 6/7, CLINs CLINS 00003a‐80003a Contract Should the warranty quantity be 428?

No. This quantity includes of all system equipment under CLIN 00001 and additional ancillary equipment exercised under CLINs 00005‐00011 and 00014‐

00015, and donated items only in which the offeror is the prime contractor.

7 SOW Section 4.1.8, Page 7 Contract

The original FRD did not include any of these shielding requirements. TSA has added these new requirements in this SOW for the RFP. Will TSA accept the configuration, without shielding, as per the original FRD?

Yes for CLIN 00001. But, per section 4.1.8. SOW "The Contractor shall propose optional "add‐on" packages for the CPSS Full‐size systems to provide glass or clear acrylic shielding and ultraviolet technology…" Shielding is a new TSA requirement resulting from the recent COVID‐19 pandemic. This requirement shall be priced as a separate optional CLIN.

SOW, Section 4.4 CPSS Simulator, Subsection 4.4.10, Page 11 Contract

TSA is requesting OEM simulator software so that TSA can load the software on TSA training computers. How many licenses does TSA intend to require?

None. Per section 4.4.10. SOW, TSA requires "two (2) simulators (hardware and software) and two (2) simulator software in CD or USB media format that can be loaded on existing training computers (software only, not contractor hardware) for training purposes at no cost to the Government; this will be included as part of the Training Class Materials deliverable no later than ten

(10) calendar days after contract award."

9 SOW Section 4.6, Page 12 Contract

FRDv2.0 does not include any of these specifications. TSA has added these new specifications (30” inches x 48” inches standard or 30” inches x

72” inches) to the RFP SOW. Will TSA accept the previously approved configuration?

No. Per Section 4.6.2. SOW, "The search bench shall be 30” inches x 48” inches standard or 30” inches x 72” inches optional rectangular tables as required by the location."

RFP, Table 3 Invoice Guidance, page

15, CLIN 00001

Contract

CLIN 00001 equipment payment terms are tied to SAT, but installation and

SAT are not clearly defined. Since risk and title pass at delivery, will TSA update payment terms match with final payment for equipment at delivery?

No.

RFP, Table 3 Invoicing Guidance, page

15, CLIN 00004

Contract

Other than the invoice guidance stating "Contractor may invoice 100% of shipping and installation costs upon completion of each shipping/installation action.", installation of CLIN 00001 is not clearly defined. Should OEM price installation and SAT in CLIN 00001 or should installation and SAT be priced in CLIN 00004?

See Amendment 00001.

TSA intends to procure one (1) Shipping (CLIN 00004‐00004b) with each system

(CLINs 00001‐00001b). Both SAT and Installation are included as part of CLINs

00001, 00001a, and 00001b.

RFP, Table 3 Invoic Guidance, page

15, CLINs 000015‐00011 Contract

CLINs 00005‐00011 invoicing upon delivery and installation. Should OEM price installation hours in each of these CLINs? If installation of Optional

CLINs is to be priced elswhere, then will TSA update payment terms to

"The Contractor may invoice 100% of the CLIN value upon delivery of equipment."?

See Amendment 00001. CLINS 00005‐00011 for ancillary equipment must be inclusive of shipping and installation.

The Contractor may invoice 100% of the CLIN value upon delivery and installation of equipment.

13 SOW, Section 4.1.5.2, page 6, Technical Can TSA define the number of hours that is considered one day?

From the time a system is taken off‐line (not available for operation), the CPSS system shall be installed and operational within five (5) days of taking the intended checkpoint location down for installation.

14 SOW, Section 4.1.5.2, page 7 Technical

Can TSA confirm that the Base (1day) and Full (5 days) installation time does not include removal/decommission of the previous unit or the

SAT/iSAT testing?

Installation time does include removal/decomission time if the lane has an existing unit as well as SAT/iSAT testing.

15 SOW Section 4.1.11.2, Page 9 Technical

Should the sloped surface deployment/operational Requirement for all 3 configurations be 2%? The requirements called out in this SOW is:

• Base SOW specifies deployment/operation on a 2% sloped surface.

• Mid‐Sized SOW specifies deployment/operation on a 2.5% sloped surface.

• Full‐Sized SOW specifies deployment/operation on a 2% sloped surface.

All answers provided in this document are pertaining to the subject RFP for the

Full configuration. The sloped surface requirement for the Full configuration is

2%. Please see amendments to other configuration RFPs regarding this requirement.

16 SOW 4.1.8.2 Technical

What is the intended testing (e.g. certification standards, metrics, procedures, etc.) for this design enhancement (UVC and shielding), and how does TSA envision this interacting with the timeline for the QPL and a contract award?

TSA does not envision this interacting with the timeline for QPL and contract award. Shielding and UVC is considered an optional, "add‐on" package and will be tested as needed, prior to deployment.

17 SOW 4.1.8.2 Technical

As the vendor has already submitted a complete product description for the Full size configuration, does the inclusion of additional electrical and safety components impact substantiations provided in the QPL submission?

No.

18 SOW Section 4.4, Page 10 Technical

What number of Simulators are required for each CPSS configuration?

The requirements listed below are confusing:

• Base SOW specifies one (1) Simulators in the requirement section but two (2) in the deliverables table.

• Mid‐Size SOW specifies two (2) Simulators.

• Full‐Size SOW specifies one (1) Simulator.

All answers provided in this document are pertaining to the subject RFP for the

Full configuration.

Per Section 4.4.1, TSA requires one (1) simulator (HW and SW) per CPSS system.

Additionally, TSA requires two (2) simulators (HW and SW) and two (2) simulators SW to install on existing TSA training computers as part of the

Training Material Deliverables per Section 4.4.10.

Please see amendments to other configuration RFPs regarding this requirement.

Amendment 00001 TSA Responses to Questions

RFP 70T04021R7672N042

19 SOW Section 4.4.10, Page 11 Technical

Vendor simulator software is embedded in a Linux OS. Installation of this software package on a system will replace any existing Operating System.

Is it acceptable if the installation of the simulator software on TSA workstations replaces the existing Windows OS? If not, is TSA open to purchasing separate simulators if the government owned PCs are insufficient to run the application?

It is not acceptable for software installed on TSA workstations to replace the existing Windows OS. Per SOW Section 4.4.10, the Contractor shall provide TSA simulator software in CD or USB media format that can be loaded on existing training computers (software only, not contractor hardware).

TSA is not open to purchasing separate simulators if the Government‐owned

PCs are insufficient to run the application.

20 SOW Section 4.9.3, Page 14 Technical

This requirement differs from FRD v2.0, and required clarification. Is the

Contractor or the Government responsible for developing the SAT/iSAT documentation? Is there a test requirements matrix from TSA to specify iSAT?

Per SOW Section 4.9.2.1. "The Contractor shall provide support, as needed, for

TSA’s SAT/iSAT plan and procedures development. Once these procedures are developed, they will be provided to the Contractor. The Contractor shall review and provide their final recommendations to the COR within twenty (20) calendar days. "

21 SOW Section 4.9.2.3, Page 14 Technical

This requirement deviates from the SAT/iSAT Requirements in FRDv2.0, and required further clarification. The Requirements seems to indicate the

Contractor will be present at the SAT/iSAT events only in a supporting role and not responsible for the tests themselves Please clarify?

Per SOW Section 4.9.2.3., "TSA or its designated test agent will perform each

SAT/iSAT at every installation site in accordance with TSA’s approved SAT/iSAT plan and procedures and confirm the CPSS system is ready for operational use.", and SOW Section 4.9.2.3.1."The Contractor shall provide direct on‐site support during these tests to answer any questions, perform any required system maintenance, obtain system data, and assist with system testing. "

22 SOW, Section P. 1., Page 53 Technical Is a vendor defined approach consistent with the guidance documentation appropriate to satisfy this requirement?

Yes.

23 SOW Section Q.3, Page 53 Technical

For reasons of safety and security, vendor software utilizes a tight control on all service accounts at present requiring that the vendor be the party to provide access to these credentials. What is the acceptable timeframe for the provision of these credentials to the team responsible for vulnerability scanning?

TSA's expectation is the credentials shall be available prior to the start of the qualification process. TSA will generally require root/administrative access.

24 SOW Section T, Page 55 Technical

As there is no specification in the FRD 2.0 for PIV use for access to vendor systems, is it the intent of the customer that PIV cards be used as login credentials for the checkpoint CT systems and all associated computers?

No. Username and password is an acceptable method of authentication provided the minimum strength requirements for the password are met.

CPSS+SOW‐+FULL, Page 10, 4.4. CPSS

Simulator Technical

Document states in 4.4.1: "The Contractor shall provide one (1) simulator

(hardware and software) per CPSS system to train TSOs on the CPSS system."

Question: Is TSA requesting one simulator per CPSS system or per location? Example: If 8 lanes are deployed into one airport checkpoint, does TSA require 8 simulators or just one simulator for the site, regardless the number of lanes or checkpoints?

TSA requires one (1) simulator (HW and SW) per CPSS system.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 11, 2.12 SECURITY

CLEARANCES

Contract

Document states: "2.12 SECURITY CLEARANCES‐ No supplemental information is applicable to this solicitation." Question: Does TSA desire for Offeror to include the cost for badging and necessary travel costs to be included in the CLIN?

TSA does not anticipate the awardee will require badging. Physical access to facilities is granted by TSA Personnel Security (PERSEC) once the Contractor has been vetted through the TSA Personnel Security vetting process.

The price proposal must be inclusive of all proposed costs. The TSA will not compensate a contractor for costs not included in the price proposal.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 17 & 18, 5.3 LIMITATIONS

ON CONTRACTORS ACTING AS LEAD

SYSTEM INTEGRATORS

Contract

5.3 LIMITATIONS ON CONTRACTORS ACTING AS LEAD SYSTEM

INTEGRATORS‐ HSAR 3052.209‐74 Limitations on Contractors Acting as

Lead System Integrators (JUL 2010)‐ (a) Definitions. “Direct financial interest,” “lead system integrator,” “lead system integrator with system responsibility,” and “lead system integrator without system responsibility,” as used in this provision, have the meanings given in the clause of this solicitation entitled “Prohibited Financial Interests for Lead

System Integrators” ((HSAR) 48 CFR 3052.209‐75).

Question: Is System Integrator defined in the document, CPSS+SOW‐+FULL on Page 20 of 57‐ "6.2.2 The System Integrator will handle the site preparation, shipping from the Riggers Staging Facility to the airport (as needed), rigging, and coordination with OEMs." If not, can TSA define what a contractor performing lead system integrator functions in the acquisition of a major system by the Department of Homeland Security is?

What company has the TSA Lead System Integrator contract for CPSS Full‐ size with?

The Systems Integrator will provide shipping and rigging from the riggers staging facility (RSF) to the airport via separate TSA contract. This includes the rigging into the final location in the checkpoint and placing the system in the appropriate lane(s) per approved design. All aspects of the rigging will be covered by the System Integrator.

CPSS+SOW‐+FULL, Page 40, Appendix

C Technical

APPENDIX C – DHS AND TSA ENTEPRISE ARCHITECTURE COMPLIANCE‐

Question: Must the servers and all network architecture IT systems be fully redundant?

There are no redundancy requirements in Increment 1.

CPSS+SOW‐+FULL, Page 40, Appendix

C Technical

What are the specifications and requirements for Redundancy, UPS and

Backup?

There are no redundancy requirements in Increment 1. A Continuity of

Operations (COOP) Plan is required. The Contractor can decide how to implement the COOP requirement.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 40, 6.8 PROPOSAL

PREPARATION

Contract

B. iv. If any subcontractors or teaming partners are proposed, Offerors should clearly delineate the specific services and percentages to be performed by such subcontractors or teaming partners.

Question: Does this include suppliers as well or is that covered under other documentation such as MCIL and QDP documentation?

This requirement does not include suppliers.

31 General Contract

If there is a site specific requirement that is not covered under this RFP, will the additional cost be covered under a site specific change order at the approval of APM?

No. Per SOW Section 4.1.11., "All CPSS systems must meet all applicable federal, state, and local requirements based on the final installation location.

This includes, but is not limited to, required ancillary accessories such as seismic brackets. These ancillary accessories are subject to the final installation location, but must be provided." This covers any "site specific" requirements.

CPSS+SOW‐+FULL, Page 8 of 57,

4.1.8.2. Ultraviolet Technology

Technical

Ultraviolet Technology‐ The UV‐C light specification is written for mercury bulb solutions that need a UV Dosage of 75mj/cm2 to effectively kill bacteria and deactivate viruses.

Question: Will TSA provide specifications or allow substitutions for UV‐C solutions using LED bulb solutions that provide 99.9% effectiveness of disinfection while applying a lower UV dosage?

The minimum dosage irradiation for UVC is 75 mj/cm2 to deactivate the COVID‐

19 virus by 99% at a Log2 reduction.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 36, 6.5 PROPOSAL

ACCEPTANCE PERIOD

Contract

Document states, "The Government requires the proposal to be valid for a minimum period of one hundred eighty (180) calendar days from the date of submission." But Page 37, 6.7 INSTRUCTIONS TO OFFERORS‐

COMMERCIAL ITEMS, (c) states, "(c) Period for acceptance of offers. The offeror agrees to hold the prices in its offer firm for 30 calendar days from the date specified for receipt of offers, unless another time period is specified in an addendum to the solicitation."

Question: How long is the offer and price required to be valid?

See Amendment 00001. Per RFP Section 6.5, the Government requies the proposal to be valid for a minimum period of two hundred and thirty (230) calendar days from the date of submission.

Amendment 00001 TSA Responses to Questions

CPSS_RFP+70T04021R7672N042‐

FULL, Page 6, 2.2.1 CLIN STRUCTURE Contract

CPSS Computed Tomography Systems (CLINs 00001‐0001b) requests 428 total units but Warranty/ Maintenance and Logistics Support of CLINs

00001a Systems (CLINs 00003a‐80003a) requests pricing for 650 quantity.

Question: What is the correct number for the Warranty/Maintenance and

Logistics Support?

Question: If the quantity is 650, what is the difference between the 650 and 428 (222 quantity)?

The correct quantity for CLINs 00003a‐80003a is 650. This quantity includes of all system equipment under CLIN 00001a, additional ancillary equipment exercised under CLINs 00005‐00011 and 00014‐00015, and donated items only in which the offeror is the prime contractor.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 43, 6.10.4 VOLUME VI‐

FACTOR 3‐ PRICE

Contract

Document states, "The price proposal shall ensure all proposal assumptions and exceptions, if any, are clearly detailed."

Question: Where would TSA like (if required) these to be documented?

The CLIN does not have a space. Would TSA like a page inserted following the CLIN?

It is up to the Offeror to determine how to present assumptions and exceptions, if any, in a clearly detailed manor.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 6, 2.2.1 CLIN STRUCTURE and CPSS+SOW‐+FULL, Page 10, 4.4.

CPSS Simulator

Contract

CPSS Computed Tomography Systems (CLINs 00001‐0001b) requests 428 total units but Optional Ancillary Equipment (CLINs 00005‐00011) but

00005 CPSS System Simulators [OPTIONAL] requests pricing for 900 quantity. The document, CPSS+SOW‐+FULL, Page 10, 4.4. CPSS Simulator states in 4.4.1: "The Contractor shall provide one (1) simulator (hardware and software) per CPSS system to train TSOs on the CPSS system."

Question: What is the correct number of system simulators required for

CLIN 00005 System Simulators?

CLIN 00005 is an optional CLIN to procure additional CPSS system simulators, as needed. Each CLIN 00005 unit is defined as: one (1) simluator (HW and SW).

CPSS+SOW‐+FULL, Page 9, 4. CPSS

Increment 1 – Full‐size Systems and

Peripheral Equipment

Technical

Document states, "4.1.11.1. The Contractor shall provide systems with seismic anchoring brackets and hardware needed for installation as required based on applicable federal, state, and local codes for a deployed location (e.g. west‐coast). "

Question: Is TSA requesting that the inclusion of bracketing and the associated cost be included on all 428 units and included in the price on the CLINs 00001‐00001b?

The cost of seismic brackets is to be included in the cost for installation, which is included as part of the CPSS system. Seismic brackets will only be required in certain locations based on state and local requirements.

The number of systems requiring seismic brackets cannot be confirmed prior to award; quantities per site will vary.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 6, 2.2.1 CLIN STRUCTURE Contract

Does TSA want all taxes to be included in all pricing on the CLIN? Federal, State, and local taxes and duties?

The price proposal must be inclusive of all proposed costs. The TSA will not compensate a contractor for costs not included in the price proposal.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 13, 3.2.1 OPTION TO

EXTEND THE TERM OF THE

CONTRACT

and CPSS_BOA, Page 6, 2.9 PERIOD

OF PERFORMANCE

Contract

The RFP document states: (c)The total duration of this contract, including the exercise of any options under this clause, shall not exceed eleven (11) years." but the CPSS BOA states: "2.9.1‐The ordering period for all BOAs is ten (10) years from date of issuance." and "2.9.2‐ 2) Orders may continue five (5) years after the expiration of the BOA".

Question: Can TSA clarify the amount of time that the Offeror's submission is committed for?

The period of performance (PoP) of this order shall be a base period of three (3) years from date of award plus eight (8) option years for Warranty/Maintenance and Logistics Support for a total of eleven (11) years.

The BOA ordering term of ten (10) years is referring to term at which the TSA may award Orders under the BOA, not the Period of Performance of an Order.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 6, Warranty/ Maintenance and Logistics Support of CLINs 00001a

Systems (CLINs 00003a‐80003a)

Contract

Document States, "CLINs 00003a‐80003a must be inclusive of all system equipment under CLIN 00001a, additional ancillary equipment exercised under CLINs 00005‐00011, and donated items only in which the offeror is prime"

Question: What is TSA referring to in regards to "donated items"?

See Amendment 0001. "Donated Items" is referring to equipment the TSA has not itself procured and is donated to the TSA.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 5, 2.1 General Timeline

Given TSA has set a timeline for the QDP (submitted by June 1st) and QPL

(product on QPL by Oct 31), can TSA provide a schedule for qualification and operational testing? Will there be requisite resources to ensure qualification and operational testing will be completed in time for all

Offerors?

No, TSA will not provide a schedule for qualification and operational testing.

CPSS utilizes a "rolling" qualification process in which a QPL window is opened and vendors submit their systems for qualification when they are ready. June

1st is not the last day to submit a QDP. It is the last day to submit a QDP and receive an OTA upon QDP approval. QDPs may be submitted at any time while the QPL window is open.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 42, 6.10.1 VOLUME I –

RESPONSIBILITY AND

RESPONSIVENESS DETERMINATION,

C. Contractor Support Agreement

Contract

The Offeror shall provide the required contractor support agreements in accordance with section 5.1, Notification to Offerors of Contractor Support of the Selection Process.

Is TSA talking about the NDAs that are in place with RELI, Global Systems

Technology and SAIC?

Yes, NDAs with the contractors listed in Section 5.1 specific to this RFP.

43 General Deployment Can TSA provide an average number of lanes that will be deployed at each airport for fullsize?

No.

CPSS+SOW‐+FULL 4.1.5.2. The CPSS system shall be installed and operational within five (5) days of taking the intended checkpoint location down for installation.

Deployment Will installation time for OT & QT systems be measured to ensure Offerors can complete installation in 5 days?

No.

CPSS+SOW‐+FULL 4.2.1. The

Contractor shall provide one‐hundred and‐forty (140) TSA‐approved bins per system.

Bins Can Offeror include alternate options such as antimicrobial bins?

See Amendment 00001. Yes, however; proposed bins must be approved through the Transportation Security Laboratory (TSL) to ensure detection performance certification is not impacted by the new bin.

CPSS+SOW+Full, Page 43, Appendix D section A.5 Contract

Appendix D section A.5 states that The Contractor shall ensure all staff have the required level of security clearance commensurate with the sensitivity of the information being accessed, stored, processed, transmitted or otherwise handled by the System or required to perform the work stipulated by the contract.

Question: Can TSA please provide clarification on this requirement?

See BOA Section 4.3. TSA‐RQMTS; CONTRACTOR PERSONNEL ACCESS TO TSA

FACILITIES AND/OR SYSTEMS (SEP 2020)

CPSS+SOW+Full, Page 6, Section

4.1.4.1 Contract

Section 4.1.4.1 states The Contractor shall provide a two (2) year warranty for the FAT&E unit. Will the FAT&E unit remain at the Contractor's facility?

If so, what will be the required reporting for the two‐year Warranty?

The intent is for the FAT&E unit to remain at the Contractor's facility. All reporting requirements in the SOW are applicable to the FAT&E unit.

CPSS+SOW+Full, Page 7, Section

4.1.8.1.1 Contract

Section states 4.1.8.1.1. The Contractor shall provide cleaning and maintenance instructions that will preserve the integrity of the glass or clear acrylic and not cause scratching or discoloration. Is it expected that the contractor shall clean and maintain the glass or TSA?

The Contractor is not expected to clean the glass or clear acrylic shielding, however; if TSA opts to procure the additional "add‐on" package, the shielding is considered peripheral/ancillary equipment and, as such, shall be covered under warranty as per Section 7 of the SOW.

CPSS+SOW+Full, Page 8, 4.1.8.2.

Ultraviolet Technology Contract

Section 4.1.8.2, Will the UV‐C have a separate reliability calculation? If so, how will this be measured?

No.

50 CPSS+SOW+Full, Page 10, 4.2. Bins Contract

Section 4.2 states that the contractor shall provide 140 bins per system.

Are bins considered consumables and to be purchased by TSA upon request or to be included as part of two‐year Warranty?

See Amendment 00001.

All equipment (to include bins) under CLINs 00001, 00001a, and 00001b plus all optional equipment exercised under CLINs 00005‐00012, 00014‐00015 shall be included in the warranty of this subject contract.

CPSS+SOW+Full, Page 12, 4.5. Rerun

Cart and 4.6 Seach Bench Contract

Sections 4.5 and 4.6 the contractor is responsible for providing return carts and search benches. Are these items to be considered consumables and to be purchased by TSA upon request or to be included as part of two‐ year Warranty?

See Amendment 00001.

All equipment (to include carts and search benches) under CLINs 00001, 00001a, and 00001b plus all optional equipment exercised under CLINs

00005‐00012, 00014‐00015 shall be included in the warranty of this subject contract.

Amendment 00001 TSA Responses to Questions

CPSS+SOW+Full, Page 21, 8. Logistics

Support Services, 8.1 Contract

Section 8.1 says the The Contractor shall provide logistics support services

(maintenance and repair) for in‐warranty TSE and peripheral equipment

(to include bins and bin carts). What is expected for repair and maintenance for bins? Does that mean the contractor is responsible for paying for and replacing bins? How are maintenance and repair request of bins or carts gong to be requested and classified as a corrective maintenance request (P1 or P2)? How will these be included in the calculation of operational availability in section 8.3.2?

We expect the OEMs to keep the bins and bin carts in operational order per the

System Maintenance Manual, to include their replacement, as needed while under warranty. All bin repair tickets shall be placed in the TSA Service

Response Center (TSRC) as P2 tickets and will not be used in the calculation of operational availability.

CPSS+SOW+Full, Page 22, 8. Logistics

Support Services, 8.1.3 Contract

Section 8.1.3. states The Contractor shall include repair parts, training, and tools and test equipment with all labor for TSE preventive maintenance, corrective maintenance and associated logistics support resources. Is TSA

Headquarters responsible for training the TSOs at the airport or is the request for the Contractor to provide training on‐site?

No, the contractor is not responsible for training TSOs at each airport. The

Contractor is responsible for providing all relevant training material to include any updates to the COR.

CPSS+SOW+Full, Page 24, 8.3.

Logistics Support Service Level

Requirements, Section 8.3.2

Contract

Section 8.3.2 references the Operational Availability SLA . Will the Fielded

TSE have it own 98% availability requirement separate from the network systems? Multiple TSE can be tied to one network system or in some cases

TSEs can run with a failed network system. Therefore when a corrective maintenance is required for the network system, how will it be calculated in the RMA metrics?

The fielded TSE will not have its own 98% availability requirement regardless of network connectivity. If a network issue requires taking down all CPSS Full‐Size systems associated with that network, the downtime is captured for each individual CPSS Full‐Size system (until it is returned to operation). That downtime counts toward overall performance of that system for that month.

However, if system(s) is still able to perform their screening function while the network is down, those systems will still be considered in operation.

Page 24, 8.4.Disincentives and

CPSS+SOW+Full and

CPSS+SOW+Attachments‐FULL, Page

59 of PDF, Section 10.2.5 Contract

Disincentives, 10.2.6 Units Counted.

Contract

8.4.2. Operational Availability (Ao) Disincentive‐ Document states, "The following shows the amount (in percentage terms) of the downward adjustment of the CLIN X0001 unit price if the contractor is not able to meet the threshold set forth in 8.3.2 of this SOW." "Ao for all CPSS at each airport, monthly"

Question: Can TSA Confirm the pricing variable included in the

Disincentive? Is the Disincentive dollar value based on the CLIN line‐

00001 CPSS Full‐Size Systems or CLIN line‐ 00003 CLIN 00001 Systems:

Warranty / Maintenance and Logistics Support Period ‐ 2 Years? In other words, is the disincentive based on the equipment value or the warranty/maintenance value (as corresponding percentage of each peice of equipment at that airport (x/15))?

The disincentive is based on the monthly warranty maintenance value, and all subsequent option years, for all the CPSS under warranty at an airport.

CPSS+SOW+Full, Page 37 & 38, 8.7.

TSE Maintenance Database and

CPSS+SOW+Attachments‐FULL, Page

55, Attachment 9‐Transportation

Security Equipment Database

Technical

Section 8.7 refers to the TSE Maintenance Database. Attachment 9– Data

Item Description, TSE Database states that the The TSE Database may be in Contractor format. There are requirements listed in Appendix C‐ DHS

AND TSA ENTEPRISE ARCHITECTURE COMPLIANCE and Appendix D‐

INFORMATION ASSURANCE REQUIREMENTS FOR TSA GOVERNMENT

ACQUISITIONs. Is Appendix D and Appendix C applicable to the TSE maintenance database? If so, which specific IT or cybersecurity requirements in Appendix C and Appendix D are applicable to the TSE database platform (i.e. Maximo) that must be meet in order to use the TSE

Maintenance Database?

The answer will depend on how the solution is implemented. But in general it will be applicable to most of Appendix C. For Appendix D, Sections B and D would not be applicable‐ most others would be, including configuration management.

CPSS+SOW+Full, Page 31, 8.7. TSE

Maintenance Database Technical

Section 8.7.3 mentions that the contractor will provide Government access and data rights to all data collected. Does that mean user access to the TSE Maintenance Databse platform (i.e. Maximo) or does that mean receive image of database in compatible with Microsoft Office when requested?

Neither method is prescribed. Contractor must decide which method best meets the bulleted requirements. As per Attachment 9 TSE DID, the deliverable must be an image of the database and format must be changed if so requested by TSA.

CPSS+SOW+Full, Page 40‐42 Appendix

C and

Page 43‐57, Appendix D

Technical

APPENDIX C – DHS AND TSA ENTEPRISE ARCHITECTURE COMPLIANCE and

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS state many IT and cyber security requirements. Are there parts of Appendix C or Appendix D that are applicable to contractor employee (i.e. maintenance technicians and service engineers) mobile devices, laptops or any other contractor IT devices or IT platforms used for maintenance? If it includes these items, how does the contractor start certifying TSA enterprise achitecture compliance and Information Assurance Requirements are met and satisfies the governing body's requirements? When does that certification need to happen in relation to contract award?

In general, no, these requirements are not meant for maintenance/service technician’s IT devices, but rather the solution being proposed. Depending on the implemented solution, there may be specifications in the SLA as to the types of encryption required to physically connect to a TSE in the field. i.e.

thumb drive for updates, etc.

CPSS+SOW+Full, Page 44, Appendix D, B. Training Requirements Technical

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS section B states that All Contractor employees, requiring system access, shall receive initial Organizational

Security Fundamentals Training within 60 days of assignment to the contract via the Online Learning Center (OLC). Refresher training shall be completed annually thereafter. What system is referred to when saying system access? Is the contractor suppose to create and deliver the training or just ensure it happens?

System access is referred to as any TSA IT system or database. The Contractor is not responsible for creating or delivering the training. Organizational Security

Fundamentals Training is administered via the TSA Online Learning Center

(OLC).

CPSS+SOW+Full, Page 46, D. Risk

Management Framework, D.2.

Technical

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS section D in D.2 states A written

Authorization to Operate (ATO) granted by the TSA Authorizing Official

(AO) also known as TSA Chief Information Security Officer (CISO) is required prior to processing operational data or connecting to any TSA network. The contractor shall provide all necessary system information for the security authorization effort. Is section D.2 as well as all other sections in section D Risk Management Framework applicable for when a service engineeer or technician needs to connect their work laptop to the network to perform any software maintenance or corrective maintenance on a down network?

The Risk Management Framework applies to everything within the proposed security boundary. The security controls being assessed during an ATO process can be applied to the CT machine and peripherals only. This is inclusive of all parts of the TSE and for Increment 1 this is an internal network only.

CPSS+SOW+Full, Page 49, G. Federal

Risk and Authorization Management

Program (FedRAMP)

Technical

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS section G states If a vendor is to host a system with a Cloud Service Provider, the following shall apply:… Is that appplicable to a TSE Maintenance Database (i.e. Maximo)?

Yes, any system.

CPSS+SOW+Full, Page 50, I. Data

Stored/Processed at Contractor Site Technical

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS section I states Unless otherwise directed by TSA, any storage of data shall be contained within the resources allocated by the Contractor to support TSA and may not be on systems that are shared with other commercial or government clients. Does this include TSE Maintenance Database? Can TSE Maintenance Database (i.e.

Maximo) be used if the contractor also stores other customer maintenance work order data on the platform but the TSE maintenance data is seperated and user access is restricted?

Section I is speaking to locally stored data. A cloud‐hosted Maintenance database would not apply here.

Amendment 00001 TSA Responses to Questions

CPSS+SOW+Full, Page 55, T. Personal

Identifiable Verification (PIV) Technical

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS section T states The Contractor shall use

PIV as the primary means to access TSA resources to include IT applications and physical facility. Does this apply to CPSS TSE solution at airports? If so, how?

No. Username and password is an acceptable method of authentication provided the minimum strength requirements for the password are met.

CPSS+SOW+Full, Page 56, V.

Maintenance Technical

APPENDIX D‐ INFORMATION ASSURANCE REQUIREMENTS FOR TSA

GOVERNMENT ACQUISITIONS section V.2 states The contractor shall perform customer support twenty‐four (24) hours, seven (7) days a week within the continental United States only. What is customer support defined as? Is this in reference to acquiring remote support approval as in

Section J? All other maintenance would be done onsite at the airport?

Customer Support generally includes situations that range from critical issues to password lockouts. Section J is not specifically related to customer support but rather access granted to TSAnet offsite (i.e., connection via VPN). Maintenance will be completed on‐site in regular intervals.

CPSS BOA, Page 10, 3.1 CLAUSES

INCORPORATED BY REFERENCE‐ 3.1.1

FAR CLAUSES‐ 52.204‐21‐ Basic

Safeguarding of Covered Contractor

Information Systems (Jun 2016)

Contract

Section 3.1 Clauses Incorporated by Reference lists a number of FAR clauses. What does 52.204‐21 Basic Safeguarding of Covered Contractor

Informations Systems? Is the TSE maintenance database a contractor information system?

Yes, per FAR 52.204‐21, “Covered contractor information system means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information."

CPSS BOA, Page 16, 3.2.2 CONTRACT

TERMS AND CONDITIONS REQUIRED

TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS‐COMMERCIAL

ITEMS

Contract

Section 3.2.2 CONTRACT TERMS AND CONDITIONS REQUIRED TO

IMPLEMENT STATUTES OR EXECUTIVE ORDERS‐COMMERCIAL ITEMS FAR

clause (4) 52.204‐10, Reporting Executive Compensation and First‐Tier

Subcontract Awards (Jun 2020) (Pub. L. 109‐282) (31 U.S.C. 6101 note).

Does a subcontract with a company providing 3rd party logistics or parts warehousing apply?

Yes.

CPSS+SOW‐+FULL, Page 12, 4.7.1 Test

Readiness Notification Contract

Is it ok to submit the TRN before the lane has been completely installed, so that the iSAT can be scheduled appropriately the day after completion?

Normally, TRN submission occurs at the conclusion of installation.

See Amendment 00001. The Government revised the SOW SAT/iSAT milestones to offer clarity.

CPSS+SOW‐+FULL, Page 20, 6.0

Equipment Shipping, 6.2.2 Contract

What exactly is included in "site preparation" that's handled by the System

Integrator?

The site preparation completed by the Systems Integrator consists of ensuring all electrical requirements needed for the system to operate are in place.

CPSS+SOW‐+FULL, Page 20, 6.0

Equipment Shipping, 6.2.2 Contract

What exactly is included in "rigging" that's handled by the System

Integrator?

The Systems Integrator will provide shipping and rigging from the riggers staging facility (RSF) to the airport. This includes the rigging into the final location in the checkpoint and placing the system in the appropriate lane(s) per approved design.

CPSS+SOW‐+FULL, Page 20, 6.0

Equipment Shipping Contract Who has responsibility for shipping dunnage removal and disposal?

See Amendment 00001. The Contractor will be responsible for the disposal of any dunnage related to the delivery of new equipment for installation.

CPSS+SOW‐+FULL, Page 7, 4.1.5.2

Installation Contract When does the five day installation requirement begin?

The five (5) day installation requirement begins on the day the checkpoint lane is shutdown to begin installation of the new system.

CPSS_RFP+70T04021R7672N042‐

FULL, Page 11, 2.12 SECURITY

CLEARANCES

Contract Will individuals in the program with SSI clearance also be required to be cleared through a public trust clearance?

See BOA Section 4.3. TSA‐RQMTS; CONTRACTOR PERSONNEL ACCESS TO TSA

FACILITIES, INFORMATION AND/OR SYSTEMS (SEP 2020)

CPSS_RFP+70T04021R7672N042‐

FULL, Page 10, 2.9.2, Order Period of

Performance

Contract

2.9.2 indicates that the order period of performance is 3 Years plus 8 option years for warranty/maintenance and logistics support. However, p.

13 of the RFP, 3.2.1 , Option to Extend the Term of the Contract, indicates that FAR 52.217‐9 applies which could extend the duration of the contract up to 11 years. Further, 2.9, Period of Performance of the BOA states that orders may continue for 5 years after expiration of the BOA but order options may continue after expiration. What is the longest time for the period of performance for an order, including any options that may be exercised?

The period of performance (PoP) of this order shall be a base period of three (3) years from date of award plus eight (8) option years for Warranty/Maintenance and Logistics Support, or eleven (11) years total.

The BOA ordering term of ten (10) years is referring to term at which the TSA may award Orders under the BOA, not the Period of Performance of an Order.

The PoP of an Order, is determined at the Order level.

CPSS_RFP+70T04021R7672N042‐

FULL, 2.14, Accessibility

Requirements

Contract May the Contractor perform self‐testing or are we required to obtain testing and conformance reporting from a third party?

TSA uses the DHS 508 trusted tester process. Contractor has the option to self‐ test providing the ACR or Voluntary Product Accessibility Template (VPAT).

CPSS_RFP+70T04021R7672N042‐

FULL, 2.14, Accessibility

Requirements

Contract

Is there a standard format you are expecting Contractor to use to demonstrate compliance with 1.), 2.), and 3.) or will you be flexible in how results are presented?

Contractor shall provide industry standard reporting format called an

Accessibility Conformance Report (ACR). If the Contractor provides an ACR that indicated only some of the applicable Section 508 standards are met, and some are not, the Contracting Officer can use this information to determine whether the deliverable(s) should be accepted "as is", remediated by the Contractor prior to acceptance, or to utilize the penalties in the contract for non‐ performance. ACR template link:

https://www.itic.org/policy/accessibility/vpat

CPSS_RFP+70T04021R7672N042‐

FULL, 2.14, Accessibility

Requirements

Contract How will TSA evaluate conformance to the accessibility standards?

TSA uses the DHS 508 trusted tester process. Contractor has the option to self‐ test providing the ACR or Voluntary Product Accessibility Template (VPAT).

77 CPSS BOA, Page 18 Contract

X (ii) Alternate I (Jan 2017) of 52.224‐3.‐ (c) The contracting agency will provide initial privacy training, and annual privacy training thereafter, to

Contractor employees for the duration of this contract.

Question: Will TSA be responsible for the cost of providing this training or is this cost required to be incurred by the contractor and to be included in

CLIN 00001 CPSS Full‐Size Systems?

Privacy training is administered and provided via the TSA Online Learning

Center (OLC).

CPSS+BOA+Attachment+A‐

+BOA+SOW, Page 24, 4.11 TSA‐

RQMTS; CONTRACTOR EMPLOYEE

TRAINING REQUIREMENTS (SEP 2020)

Contract

All Contractor personnel with TSA IT accounts requiring unescorted access to TSA facilities, information systems, or information will be required to complete Workplace Violence Prevention training available through the

TSA Online Learning Center. The course, entitled “Preventing Workplace

Violence at TSA” shall be completed within 60 days of onboarding.

Question: Does TSA have a nationwide checkpoint security clearance badge for Contractors or is each airport responsible for the badging and access to each checkpoint at each individual airport?

No, TSA does not anticipate Offerors will require badging. Physical access to facilities is granted by TSA Personnel Security (PERSEC) once the Contractor has been vetted through the TSA Personnel Security vetting process.

3.2.2 Table 3 ‐ Invoice Guidance CLIN

00004 & 00004b, page 15 Contractual

Can CLINs 00004 and 00004b be invoiced upon shipment since they are separate CLINS not tied to installation? Is the "&" symbol meant to be a "‐

" symbol?

Yes, see Amendment 00001.

80 SOW 4.1.8.2, page 8 Technical Does UVC solution need to be in‐line with the TRS or can it be a stand alone system?

In‐line.

81 SOW 8.3.1.3, page 24 Technical

The Government will measure overall Contractor performance using

Operational Availability (Ao). Ao shall be measured by ‘airport‐equipment type’ monthly, at the airport level and any applicable disincentives shall be included in that month’s invoice in accordance with Section 8.4, Disincentives. Are all configurations (base, mid, and full) considered the same 'airport‐equipment type' or are they treated separately for RMA metrics and Ao development, and invoicing purposes?

They are treated and calculated separately, per contract. The disincentives will be for each contract.

SOW 8.10.2 &

SOW 8.10.1.3.2, page33 Technical

8.10.2 states that technology assets (including hard drives) deemed to be beyond repair are to be sent to the Contractor's TSA authorized facility for disposal. 8.10.1.3.2 that inoperable hard drives need to be shipped to the

TSA Springfield Warehouse.

Does 8.10.1.3.2 override 8.10.2?

See Amendment 0001. The TSA Springfield Warehouse is the Contractor’s TSA

Authorized facility for disposal.

Amendment 00001 TSA Responses to Questions

83 RFP 2.2.1, page 5 Contractual CLIN 00001 indicates a Qty of 15. The next QTY break on CLIN 00001a starts at 26. Should CLIN 00001A start at 16?

Yes, see Amendment 00001.

84 RFP 7.6.1, page 45 Technical

Paragraph 7.6.1 indicates that the Government will evaluate the highest level of detection capability achieved no later than October 31, 2021. If a system has achieved a level higher than 6.2 Level 0, will Throughout and

Reliability then be evaluated based upon TSA QPL test results at that higher level?

No. Per the FRD, the minimum requirement for CPSS Increment 1 is Accessible

Property Screening System (APSS) Detection Standard Version 6.2 Level 0, therefore that is the level that will be evaluated during qualification.

85 SOW 4.1.8.2, page 8 Technical Has the UV technology indicted as a requirement under the SOW 4.1.8.2.

been tested and approved by a QPL process?

No. The Department of Homeland Security (DHS) Science and Technology (S&T) commissioned a study to assess the efficacy of germicidal UV (UV‐C) light to decontaminate SARS‐CoV‐2 on passenger screening bins.

86 SOW 7.1.4, page 21 Contractual

Under SOW 7.1.4., warranty shall include hardware or software upgrades to support new algorithms. Is this specifically referring to APSS 6.2 Level 1 upgrade or some other?

This is referring to software upgrades that will be required. There is no maximum number of software upgrades that will be required of installed systems per year. Upgrades must be provided as needed.

Request for Proposal, Section 2.2.1,

pg. 5 Contract Will TSA be providing an Excel Spreadsheet for pricing purposes? No.

Request for Proposal, Section 2.2.1,

pg. 5 Contract

The CLIN Description column of the table as a number of Units listed. Is

TSA expecting ladder pricing to be added to that column?

Offerors may provide ladder pricing for systems.

Request for Proposal, Section 2.2.1,

pg. 5 Contract

CLINs 00001 and 00001A include Site Acceptance Testing (SAT) but SAT cannot occur until after shipping and installation which is ordered separately under CLIN 0004 and 000004A. Will TSA always order one

Installation / Shipping with each System?

TSA intends to procure one (1) Shipping (CLIN 00004‐00004b) with each system

(CLINs 00001‐00001b). Both SAT and Installation are included as part of CLINs

00001, 00001a, and 00001b.

Request for Proposal, Section 2.2.1,

pg. 5 Contract

Discounts in pricing is typically derived from efficiencies in manufacturing and quantity discounts through supply chain, therefore please confirm that CLIN 00001a systems will be awarded at one time.

The TSA reserves the right to exercise optional equipment, at any quantity, up to NTE quantity.

Request for Proposal, Section 2.2.1,

pg. 6 Contract

Please confirm that the CLIN 0003X quantity to be priced is 650 units, as the total CLIN 00001X system quantity is 410.

Confirmed.

This quantity includes all system equipment under CLIN 00001a, additional ancillary equipment exercised under CLINs 00005‐00011 and 00014‐00015, and donated items only in which the offeror is the prime contractor.

Request for Proposal, Section 2.2.1,

pg. 7 Contract

Please confirm that OCONUS only includes, Alaska, Hawaii and the United

States Territories and does not include other countries.

Confirmed.

93 Request for Proposal 2.2.1, pg. 9 Contract

In the notes section of the pricing matrix for CLIN 5, you request that the pricing be provided for the region with the highest proposed unit cost.

Typically that will be OCONUS. Based on the installation of majority of units will be CONUS, should the evaluation be based on CONUS only?

No.

94 Request for Proposal 2.2.1, pg. 7 Contract

For CLIN 00001 ‐ are items defined in CLIN 00007‐00012 priced in this CLIN or priced separately in CLIN 00007‐00012 to account for varied deployment options?

CLIN 00001, 00001a, and 00001b must be inclusive all of the requirements contained within SOW Section 4 and SOW Table 1. CLINs

00005‐00011 are priced separately as additional optional quantities.

Request for Proposal, Section 4.1, pg.

Contract Please confirm that attachments provided should be referenced herein.