Attachment 5 - Q and A (Amendment 1).xlsx
XLSX spreadsheet 11 KB Posted
- Solicitation number
- 75FCMC26R0057
About this file
This is a Questions and Answers (Q&A) document for Amendment 1 to the solicitation for Data Analysis for Quality, Safety & Oversight of the ESRD, Transplant, and OPO Programs (Solicitation No. 75FCMC26R0057) issued by the Centers for Medicare and Medicaid Services (CMS). The document addresses three substantive clarifications to the original RFP.
The first clarification confirms the corrected proposal due date of August 13 at 1:00 p.m., resolving a discrepancy where SAM.gov and initial emails indicated August 10. The second addresses the security requirements classification, confirming that the contract's impact level has been elevated to "Moderate" under updated CISO rules due to the handling of personally identifiable information (PII) that could identify patients when combined with AI data points, representing a higher security requirement than the previous contract period. The third clarification confirms that a small business subcontracting plan is required for business proposal submission in accordance with FAR 52.219-9 (RFO DEVIATION NOV 2025), with submission instructions added to Section L.10 of Attachment 4 - RFP Sections K-M (Amendment 1).
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| # | Document | Section | Section title | Page | Question | Answers |
| 1 | RFP cover letter | N/A | N/A | 1 | Please confirm the due date of August 13 as stated in the cover letter. SAM.gov as well as the email we recieved with the RFP documents stated the response was due on August 10. | The correct due date is August 13 by 1:00pm. SAM.gov is updated accordingly. |
| 2 | CCSQ Security Contract Language | 1 | Baseline Security Requirements | 2 | We note the designation of Moderate impact level for this contract, which is higher than the previous contract period. Please confirm this change. | Correct. The new assessment under updated CISO rules is higher, at the moderate rate. Based on the types of data gathered, it is found that with AI and data points that this PII could identify a patient. |
| 3 | Attachement 4 - RFP Solicitation Sections K - M | L.9 | Volume II - Business Proposal Instructions | 9 | Please confirm whether the HHS subcontracting plan is required for the business proposal submission | Yes. In accordance with FAR 52.219-9 (RFO DEVIATION NOV 2025) a small business subcontracting plan is required. The soliciation has been amended to include subcontracting plan submission instructions. See section L.10 of Attachment 4 - RFP Sections K-M (Amendment 1) |
File details come from the government source that posted it. Updated .