QandR RFP 70Z07924RCYBR0001_AMENDMENT_4.pdf

8/9/2024 11 Is the Vendor supposed to book the venue or only to coordinate in selecting the venue?

Coordinating and/or booking a training venue is only applicable to live in-person training. See Attachment I, Requirement and Terms and Conditions, sections 4.2.1 and 4.2.2 for updated language.

8/9/2024 12 In the Pricing sheet only live and OnDemand pricing is asked so the vendor doesn't need to give Onsite pricing?

Correct, onsite pricing is not required to be provided.

8/12/2024 13 Has the head of the agency (i.e. Admiral Fagan or other) indicated that this training is critical to defending against Cyber Attack?

This training is integral to ensuring USCG personnel maintain technical readiness to perform their duties, to include Cyber missions. The head of agency has not specifically indicated that this training is "critical" to defending against cyber attack

8/12/2024 14 In Attachment III, SOW, section 2.1, it reads that "Trainings must include standard course material such as course book and practice exams.” As most vendors are authorized training providers and cannot use unauthorized materials, request this be written to read “Authorized courseware shall be provided for the following courses":

1. Any CompTIA Course, 2. Any ISC(2) Course, 3. Any ISACA Course, 4. Any PMI Course

The langauge has been updated. See Attachment III, Statement of Work Task Order 1 for revisions

8/12/2024 15 In Attachment 1, Requirements and TCs, Section 4.2.4, the government stipulates a fifteen day cancellation policy along with a name change up to one day prior to the start of the class. 1) Is this fifteen days calendar days or business days? 2) Some courses cannot support name changes up to one day prior to the class convening. I.E.

Cisco CCNA requires labs be distributed prior to class convening. Once accessed, the lab cannot be reassigned.

Updated Section 4.2.4 - Cancellation Policy of Attachment I - Requirement and TCs.

1. Calendar Days.

2. Updated to adhere to cancellation policy insofar as the student not having accessed course materials/labs.

8/12/2024 16

In Attachment 1, Requirements and TCs, Table 4.1, Please clarify what the government means by Splunk Education Units, Delivery Method: Only one unit of measure. Also, in the same table, what is meant by ISC(2) AMF Regardless of associate status and ISACA AMF regardless of membership status?

1. Splunk Education Credits, Delivery Method - Only one unit of measure:

The Government has determined that Splunk education credits only have one possible delivery method and cost/unit. Please see Attachments I, II, and III for delivery modality of Splunk Education Credits.

2. AMF Regardless of Membership status - The Government has determined tiered pricing based on association membership status for these types of maintenance fees exists. Please quote with the assumption that the vendor is uncertain of membership status for the Coast Guard employee.

See updated Attachment I for updates to language regarding both issues.

8/12/2024 17 In Attachment III, SOW, Section 2.4.1 reads in part "The contractor is responsible for maintaining an adequate supply of cyber training vouchers and/or relationships with training providers such that the Coast Guard has access to required training within 30 days of the COR submitting a Request for Class (RFC). This RFC identifies the course, required/preferred dates and number of students. After the Coast Guard submits an RFC, the contractor is responsible for working with the training provider to secure the class seats. The class does not have to be exclusively dedicated to training Coast Guard personnel. The vendor is expected to find innovative ways to partner with training providers in order to efficiently maximize use of open seats in existing scheduled training.” As this is an identified as a single award, if a virtual-live class is not available, for example, what are the repercussions?

If a virtual live class is not available for a particular requested course, the Coast Guard expects the vendor to communicate proactively with the contract COR/Training Officer and schedule a class as soon as practicable and agreeable. If another virtual live course cannot be identified, the vendor shall provide an on-demand course. The expectation is that requests for live-virtual classes will be met. Repeated failure to provide requested modality of training will be viewed negatively. See updated Attachment I, section 4.2.5.

8/12/2024 18 There are no course minimums listed in the out years which makes it difficult, at best, to provide a pricing structure for the government. Is there any way the government can estimate class usage for the out years?

No. The vendor has to provide pricing at the IDIQ level per student for each class. It is up ot the vendor to use their business judgement as to how to price the courses per student in the outyears. The first call reflects the first six months’ training requirement and is indicative of a typical six month training need.

8/12/2024 19 Referenced in Attachments I, II and III. OFFSEC Cert Prof Lab (includes OSCP): To confirm, the requirement is to provide an annual OffSec license that includes training and access to the OCSP exam voucher.

Correct.

8/12/2024 20 Referenced in Attachments I, II and III / Offensive Security SOC-200 & Exam Bundle: To confirm, the requirement is to provide an OffSec license that includes access to SOC-200 on-demand content and an exam voucher.

Correct.

Questions and Responses for RFP 70Z07924RCYBR0001 / A00004 - Cyber Training Event Coordination