Attachment 6 - QA.xlsx
XLSX spreadsheet 25 KB Posted
- Solicitation number
- HM047626R0055
About this file
This file is a Questions and Answers (Q&A) document associated with solicitation HM047626R0055 for Terminal Instrument Procedures (TERPS) software development. The Q&A clarifies key requirements and expectations across multiple proposal volumes and solicitation sections.
Regarding software and licensing, offerors must price all commercial software licenses, development tools, security scanning utilities, CI/CD tooling, and compliance tools not provided as Government-Furnished Equipment or Enterprise Services (GFE/GFI). The government will not supply specific commercial licenses but will provide access on an as-needed basis to NGA enterprise systems such as GitLab, CI/CD pipelines, and SWAP/SPOCC compliance systems for contractor personnel working at contractor facilities. All applications, software, and dependencies must receive SWAP (Software Assurance and Patched) approval before implementation within NGA's unclassified network. The TERPS solution must be deployed on NGA's unclassified production environment, and CI/CD and security compliance requirements apply to all custom-developed components and COTS products. Regarding proposal structure, offerors may submit up to three Past Performance Questionnaires (PPQs) with references consolidated onto a single page total across all contracts. Large business offerors must submit their existing approved GSA Schedule subcontracting plan without task-order-specific small business targets. Subcontracting is permitted, with all subcontractor pricing included within the prime offeror's cost proposal rather than submitted separately. The government has no current or prior contracts for this effort and will evaluate all proposed technical approaches and toolchains for price realism relative to each offeror's specific architecture and proposed solution.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Attachment 1 - TERPS PWS - AMD 001.pdf | ||
| Attachment 2 - TERPS Pricing Template - AMD 001.xlsx | XLSX spreadsheet | |
| Combined_Synopsis_Solicitation__TERPS_Software_(HM047626R0055) AMD 001.pdf | ||
| Attachment 8 - TERPS SAM.GOV Q_A.xlsx | XLSX spreadsheet | |
| Attachment 5 - Bidders Library TERPS - AMD 001.xlsx | XLSX spreadsheet | |
| Attachment 2 - TERPS Pricing Template.xlsx | XLSX spreadsheet | |
| Attachment 7 - Past Performance Questionnaire.docx | DOCX document | |
| Attachment 1 - TERPS PWS.pdf | ||
| Combined_Synopsis_Solicitation__TERPS_Software_(HM047626R0055).pdf | ||
| Attachment 4 - QASP TERPS.pdf | ||
| Attachment 5 - Bidders Library TERPS.xlsx | XLSX spreadsheet | |
| Attachment 3 - CDRLs.docx | DOCX document |
Show all 12
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| Terminal Instrument Procedures (TERPS) Questions | Solicitation Number: | HM047626R0055 | |||||
| Question # | Document | Section # | Comment/Question/Suggestion | Note | Attachment Number | 0006 | |
| 1 | Instructions to Offerors and TERPS Pricing Template | 4.4.2 | How many commercial software licenses are required or is this an enterprise license? | Currently there are 25 certified Analyst's within the organization that would utilize the software. Would not be at the enterprise level. | |||
| 2 | PWS | 1.0 Introduction | Is NGA looking for a commercial provider to develop existing Terminal Instrument Procedures (TERPS) production software (COTS) or NGA owned terminal procedure software? | NGA does not have any software that can provide TERPS capabilities. NGA is looking for a contractor to develop /update/deliver/maintain a software package that meets the requirements of the RFP. | |||
| 3 | Instructions to Offerors | Table 4.1 | Is there a template for the PPQ's? Are the 3 PPQ's limited to 2 pages each? Is there specific information required for the references? | Template Added | |||
| 4 | PWS | 4.1 | Are the requirements in 4.1 of the PWS to be met at start of contract or is there a schedule for when each of the requirements are due? | The proposer should be indicating a general time frame for requirement completion in their proposal. | |||
| 5 | Instructions to Offerors | Table 4.1 | Table calls for a Volume 5 "Subcontracting Plan (Master, Comprehensive, or FSS) (Large Business Offeror only)" There is no description or page limitation given for this volume. | No Page Limit required, please provide whichever of the documents you have. | |||
| 6 | PWS | 3.1 and 4.2 | Is it envisioned that the Instrument Procedure Design (TERPS) Software is intended to be deployed on a classified or unclassified production environment? | The TERPS software will be deployed in/on the NGA UNCLASSIFIED network. | |||
| 7 | PWS | p.7 – Section 4.2 | Does this requirement apply to the entire design system capability or only to integration, deployment, and enterprise-facing components? | ||||
| Would a solution be compliant if the core TERPS engine is a desktop COTS application and all integrations are provided as independent microservices? Would a complete desktop solution be acceptable? | Requirement applies to entire system design. All solutions and approaches proposed in the contractors proposal will be evaluated . | ||||||
| 8 | PWS | p.7 – Section 4.2 | Is a desktop-based COTS application eligible for SWAP, provided it is patchable and supports required security scanning for custom extensions? | All applications, software and dependecies must be SWAP approved before being installed/implemented within NGA. | |||
| 9 | PWS | p.7 – Section 4.2 | Is it acceptable for a desktop-based TERPS solution to integrate exclusively via APIs without maintaining a local embedded database? | All solutions and approaches proposed in the contractor's proposal will be considered and evaluated. | |||
| 10 | PWS | p.7 – Section 4.2 | Does this requirement apply only to custom software developed under this contract and not to the proprietary source code of existing COTS products? | All applications, software and dependecies must be SWAP approved before being installed/implemented within NGA. | |||
| 11 | PWS | p.9 – Section 5.0 Agile Methodology | Do CI/CD requirements apply to the full source code of a commercial COTS product or only to custom-developed components delivered under this contract? | CI/CD requirements apply to all applications, software and dependecies. | |||
| 12 | RFP | HM047626R0019.1777912968692.PDF. Please identify any current or prior contractors, government organizations, or commercial vendors that are performing, supporting, sustaining, or have previously performed any portion of the requirements described in this PWS. For each such effort, please identify the contract vehicle(s) and the associated contract number(s), and if allowed include a high‑level description of which PWS sections or functional areas are currently or were previously covered. | The government does not have any current or past contracts for this effort. | ||||
| 13 | Instruction to Offerors | Attachment 3, Section 4 – I, Volume 2 – COST/PRICE PROPOSAL, page 4; and HM047626R0019.1777912968692.PDF, Section 1 Supplies or Services and Prices, page 3. For CLIN X003AA, given contractor‑site performance and the use of NGA enterprise processes (SWAP, RMF, and “The NGA Software Way”), which software licenses (including versions)—by category—does the Government require Offerors to price as Contractor‑Furnished versus those considered Government‑Furnished Enterprise Services necessary to perform and maintain the solution? | The government requires pricing for everything not supplied as GFE/GFI. | ||||
| 14 | Instruction to Offerors | Attachment 3, Section 4 – Instructions to Offerors, Volume 2 – COST/PRICE PROPOSAL, page 4; and HM047626R0019.1777912968692.PDF, Section 1 Supplies or Services and Prices, page 3. For purposes of CLIN X003AA (Software Licenses), should Offerors assume that NGA enterprise‑managed DevSecOps tools (e.g., Fortify SCA, Fortify Audit Workbench, OWASP ZAProxy, SonarQube, Threadfix) are Government‑furnished and available for use by contractor personnel performing work at contractor facilities (via NGA GitLab / CI/CD), or must Offerors price contractor‑provided commercial licenses for these tools to generate required security artifacts (e.g., Fortify .fpr files and OWASP reports)? | The government requires pricing for everything not supplied as GFE/GFI. | ||||
| 15 | Instruction to Offerors | Attachment 3, Section 4 – Instructions to Offerors, Volume 2 – COST/PRICE PROPOSAL, page 4; and HM047626R0019.1777912968692.PDF, Section 1 Supplies or Services and Prices, page 3. For CLIN X003AA, does “commercial software licenses required to operate and maintain the proposed solution” include only software embedded in or required at runtime in the delivered TERPS solution, or does it also include development‑time, testing, security scanning, CI/CD, and compliance tooling used by the contractor to produce required deliverables? | The government requires pricing for everything not supplied as GFE/GFI. | ||||
| 16 | Attachment 1 - TERPS PWS.1777643164617, and Attachment 3, Section 4 – Instructions to Offerors, Volume 2 – COST/PRICE PROPOSAL, page 4. Does NGA require the use of specific commercial container vulnerability or SBOM tools for SWAP compliance, or may Offerors use open‑source tools (e.g., Trivy, Grype) without pricing commercial licenses under CLIN X003AA? | Offerors are not limited in their technical approach to any specific development tools provided they are SWAP approved. | |||||
| 17 | Attachment 3, Section 4 – Instructions to Offerors, Volume 2 – COST/PRICE PROPOSAL, page 4. Will the Government evaluate proposals for price realism or completeness under CLIN X003AA based on a specific required set of software licenses, or will pricing be evaluated relative to each Offeror’s proposed architecture and toolchain? | The government requires pricing for software license on CLIN X003AA and any proposed maintenance or development costs to be identified in CLIN X0001 CLINS. | |||||
| 18 | Attachment 1 - TERPS PWS.1777643164617. If contractor personnel perform all development and testing at contractor facilities, but source code is delivered to and managed within NGA enterprise GitLab, does NGA consider execution of required security scans within the NGA enterprise CI/CD pipeline to satisfy PWS and SWAP requirements without contractor‑purchased licenses? | We require the vendor to provide scans using the NGA securiity approved scanning utility. | |||||
| 19 | Attachment 1 - TERPS PWS.1777643164617, Given that all work will be performed at the contractor site, please clarify what network connectivity, system access, and Government‑furnished IT assets (if any) the Government will provide to enable compliance with PWS requirements, including use of NGA enterprise services (e.g., source code repositories, CI/CD pipelines, SWAP/SPOCC, and security scanning) | We require the vendor to provide scans using the NGA securiity approved scanning utility. | |||||
| 20 | Attachment 3, Section 4 – Instructions to Offerors, Volume 2 – COST/PRICE PROPOSAL, page3. Will contractor personnel performing work at contractor facilities be provided access (e.g., accounts, credentials, VPN or approved remote access) to NGA enterprise systems such as GitLab, enterprise CI/CD pipelines, SWAP/SPOCC, and other required compliance systems, or is the contractor expected to provide equivalent capabilities on contractor infrastructure? | Accesses will be provided on an as-needed basis, it is anticipated that developer will coordinate with the integrator for deployment to NGA environment and required accesses. | |||||
| 21 | Attachment 3, Section 4 – Instructions to Offerors, Volume 2 – COST/PRICE PROPOSAL, page 4. For CLIN X003AA, does the Government intend the price to include only commercial software licenses required to operate and sustain the delivered TERPS solution in production, or also licenses for development, testing, security scanning, CI/CD, and compliance tooling used by the contractor to meet PWS, SWAP, and RMF requirements? | The government requires pricing (e.g. COTS license and any required development tools) for everything not supplied as GFE/GFI. | |||||
| 22 | Attachment 3, Section 4 – Instructions to Offerors, Volume 4 – PAST PERFORMANCE, page 4. For Factor 3 – Past Performance, may offerors submit PPQs for contracts that were performed by a proposed first tier subcontractor, and, if so, will that performance be attributed to and evaluated as part of the offeror’s past performance record for purposes of the Factor 3 confidence assessment? | Yes, the Government will evaluate the past performance of proposed first-tier subcontractors, provided the proposal clearly demonstrates the subcontractor will perform major or critical aspects of the requirement. | |||||
| 23 | Attachment 3, Section 4 – Instructions to Offerors, Volume 4 – PAST PERFORMANCE, page 4. For Factor 3 – Past Performance, may offerors submit PPQs for contracts that were performed by a parent company, affiliate, business unit, or division that is under common ownership or control with the offeror, and, if so, under what conditions (e.g., shared management, shared resources, integrated systems) will that performance be attributed to and evaluated as part of the offeror’s past performance record for purposes of the Factor 3 confidence assessment? | Yes, the Government will consider the past performance of affiliated companies or business units, provided the offeror's proposal clearly details how the affiliate will have meaningful involvement in contract performance (e.g., shared workforce, management, or resources). | |||||
| 24 | Attachment 3, Section 4 – Instructions to Offerors, Table 4-1, page 2 lists a Volume 5 Subcontracting Plan (Master, Comprehensive, or FSS) (Large Business Offeror only). Please clarify if the Government has established any order‑specific small business subcontracting participation targets for this TERPS task order, or should large business offerors submit their existing approved GSA Schedule subcontracting plan (Master, Comprehensive, or FSS) with its underlying statutory/agency goals and no additional task‑order‑unique goals are required? | No specific small business subcontracting participation targets. Large Businesses are required to submit existing approved GSA schedule subcontracting plan as stated in instructions to offerors. | |||||
| 25 | Attachment 3, Section 4 – Instructions to Offerors, Volume 2 Cost/Price Proposal, page 3. Please confirm whether offerors are allowed to propose subcontractors for performance of this TERPS task order. If subcontractors are allowed, please clarify whether any separate cost/price proposals from subcontractors are required to be submitted directly to the Government, or whether all subcontractor pricing should be included solely within the prime offeror’s Volume 2 Price Proposal (Attachment 2). | Subcontracting is allowed. Price proposal submitted by offeror should include subcontracting pricing. | |||||
| 26 | Attachment 3, Section 4 – Instructions to Offerors, Volume 4 – PAST PERFORMANCE, page 5 states “Past Performance Questionnaires (PPQ) shall be completed using the prescribed form in Attachment 4 of this solicitation” and further refers to “Attachment 4 – Past Performance Questionnaire Template”. Solicitation, Section 3, Paragraph 3.1, page 17 identifies Attachment 4 as “CDRLs” which corresponds to the existing Attachment 4 document (CDRLS). There does not appear to be an Attachment 4 – Past Performance Questionnaire Template included with the solicitation files. Please provide the PPQ template. | Provided | |||||
| 26 | Attachment 3, Section 4 – Instructions to Offerors, Table 4‑1, Page 2 limits Past Performance Information to “PPQs + 1 Page of references”; however, Volume 4 – PAST PERFORMANCE, page 4-5 indicates that offerors shall “provide details of performance on contracts…” and “provide examples of activities” for each relevant effort. Please clarify whether the details of performance and examples of activities are to be provided within the 1 Page of references. | Details are to be on the PPQ. | |||||
| 26 | Attachment 3, Section 4 – Instructions to Offerors, Table 4‑1, Page 2 limits Past Performance Information to “PPQs + 1 Page of references”. Is the 1 Page of references limitation per contract (up to 3 pages total if the Offeror is referencing the maximum of three contracts), or is the 1 Page of references inclusive of all contracts. | Inclusive, one page for all contracts. |
&"Courier"&12UNCLASSIFIED
&"Courier"&12UNCLASSIFIED
File details come from the government source that posted it. Updated .