Attachment 3- Response to Industry Questions.pdf

Attachment 3 Solicitation 86615424R00013

Oracle Java Licenses Questions and Answers

Q1 Does HUD currently own the licenses?

A1 Yes

Q2 Does HUD solely require the keys or renewal support for the original acquired license?

A2 Yes

Q3 If only keys are needed, does HUD require the terms in the original Statement of

Need, which state, "During the warranty period, without additional charge to the ordering agency, shall provide a hot line technical support number for the purpose of providing user assistance and guidance in the implementation of the software. During the warranty period, the contractor must repair the software and ensure it is in perfect operating condition within a maximum response time of 48 hours, at the site of the request."

A3 Yes. There should be reach back capability from the reseller to the OEM for tier three IT support.

Q4 Is HUD looking to extend the current manufacturer warranty with technical support or renew the license?

A4 No. However, if there is value to the government by transferred the existing warranty/ agreement to the government via the new reseller, it will likely be considered.

Q5 “The contract must be able to comply with HUD's established list of Oracle and Java

Licenses supply standards and inventory management timeframes to meet customer performance and security requirements.”

a. Can you please provide this list?

A5 Yes, but upon request post-award.

Additional information-follow-up to question #5

1.Software Licenses: Ensure all software used in the system is properly licensed and up to date.

2.Hardware Licenses: Verify that all hardware components have valid licenses and warranties.

3.Third-Party Licenses: Maintain a record of all third-party licenses and ensure compliance with their terms.

Supply Standards 1.Cybersecurity Supply Chain Risk Management (C-SCRM): Follow NIST SP 800-161 Rev.

1 guidelines to manage cybersecurity risks throughout the supply chain2.

2.Secure Software Development: Ensure software suppliers follow secure development practices as per NIST guidelines.

Attachment 3 Solicitation 86615424R00013

Oracle Java Licenses Questions and Answers

3.Product Quality Standards: Adhere to HUD'squality standards for materials and products used in projects.

Inventory Management Timeframes 1.Quarterly Inventory Reviews: Conduct inventory reviews every quarter to ensure accuracy and compliance2.

2.Annual License Audits: Perform annual audits of all software and hardware licenses to ensure compliance and renewals2.

3.Bi-Annual Risk Assessments: Conduct bi-annual risk assessments to identify and mitigate potential supply chain risks