Q and A_ B00624F00002_Amendment 2.pdf

Questions and Answers B006-24-P-00002

Q

Page/Ref Question Answer

1 Will Government please clarify what information/data the Offeror shall remove in the redacted copy?

Anything that would identify your company, such as logos, name, abbreviations, watermarks, etc.

names shall be visible in the redacted copy

2 Will the Government please allow Appendices to be excluded from the page limit?

No

3 Will the Government please clarify that Volume I in total is 40 digital pages, (20 digital pages for Management Approach and Experience and 20 digital pages for Technical Approach)?

No, 20 pages total. 10 for Management Approach and Experience and 10 pages for Technical Approach

4 Will the government confirm the systems installed at its sites, worldwide? We understand that Software House CCure is in place at HQ in Washington, D.C. Are there other systems installed? Which Video Surveillance Systems are installed, and where? Intrusion Detection? Intercoms?

Access control is only installed at our CONUS locations.

See SOW Page 3 Paragraph 2

5 In addition to submitting a completed Excel Pricing Schedule, would the Government please clarify what written content is to be included in Volume III - Price?

Nothing more is required

6 Amendment 1, page 7, paragraph 1 & page 7, paragraph 4

Question: Attachment A appears to be Locations, and not an excel price sheet/ Schedule. And Attachment B appears to be the excel pricing sheet/Schedule. Will the Government please clarify this discrepancy and confirm that Offerors are to submit a completed Attachment B- Pricing Schedule and Offerors are not to submit Attachment A Locations?

Attachment A- Locations Attachment B- Pricing Schedule

7 Section C.2 Does the current system have an ATO?

If so, will the contractor have access to current documentation?

What is the categorization of the system?

Current system has ATO-C. Yes, contractor will have access to documentation.

NIST SP 800.53

8 What NIST guidance is required for the ATO (NIST SP 800-53, NIST SP 800-82, etc.)?

NIST SP 800.53

9 Who is the approving authority for the ATO?

Office of the Chief Information Officer

10 What guidance is required for the Cloud-based Solution (FEDRamp, etc.)?

The cloud based solu on used should be federal approved along with any accompanying so ware that u lizes it

11 Is the contractor responsible for the GRC requirements (eMASS, etc.)?

If so, what are those responsibilities (entries, artifact upload, security control association, etc.)?

Yes – responsible for GRC requirements.

GOV is responsible for uploading all aritifacts, control associations into eMASS.

12 Section C.4.4 What is the current ATO status/categorization of the USAGM domain?

ATO-C

13 Will the access control system inherit security controls from the USAGM domain? If so, what controls?

No

14 Section C4.6 Will there be remote access to scan the system or are personnel required to be onsite to perform scans each month?

For now No. However, we are looking to open the network in the future.

15 If there isn't a current ATO, are the monthly vulnerability reports required before the system achieves an ATO?

No – Yes.

16 We kindly request a 10-day extension of the due date to submit proposals to be from the time the Government responds to questions, so that Offerors have sufficient time to incorporate the answers

The Government will not grant an extension at this time

17 Instructions_ Evaluations, Factor 1

Will the Government please clarify if Offeror shall submit a letter of commitment for both a company employee and a resource being recruited or just the later?

Both

18 Is the requirement for a letter of commitment only for Key Personnel?

Yes.

SOW C.3

Scope (pg 3- 4) and Attachment B Pricing Schedule CWSS Final

Reference: Section C.3 states: “The Contractor must also provide and maintain a full-time, onsite Physical Security Specialist within USAGM’s Office of Security headquarters office who will be responsible for installation, preventative maintenance, emergency repair, and life-cycle replacement of security equipment and systems in USAGM’s headquarters facility. The Contractor must also provide two additional Physical Security Specialists as needed to support the USAGM headquarters facility and to perform temporary duty travel to USAGM facilities to perform and document security equipment and system installations, preventative maintenance, emergency repair, and emergency and lifecycle replacements on an as-requested, planned, and unplanned, basis.

Question a: Attachment B does not provide a CLIN for the 2 additional Physical Security Specialist. Will the Government please direct offerors to the correct CLIN and provide estimated hours for each?

2 additional PhySec specialists fall under CLINS 8- 11.

Offeror must provide labor rate.

20 SOW C.3

Scope (pg 3- 4)

Reference: Section C.3 states: “The Contractor must also provide and maintain a full-time, onsite Physical Security Specialist

Just 1 onsite – resume required for just CLIN 2-4

And Key Personnel within USAGM’s Office of Security headquarters office who will be responsible for installation, preventative maintenance, emergency repair, and life-cycle replacement of security equipment and systems in USAGM’s headquarters facility. The Contractor must also provide two additional Physical Security Specialists as needed to support the USAGM headquarters facility and to perform temporary duty travel to USAGM facilities to perform and document security equipment and system installations, preventative maintenance, emergency repair, and emergency and lifecycle replacements on an as-requested, planned, and unplanned, basis.

Question a: This indicates that there will be 3 Physical Security Specialists. Does the government intend for offerors to present resumes for 3 Physical Security Specialist or only one, the On-Site Physical Security Specialists.

21 Attachment B Pricing Schedule CWSS Final

Cell D9 – Please confirm that this should total the costs in rows 10 thru 20. If not, please provide a revised Attachment B with formulas or instructions on how to complete.

D9 is the total of rows 10-15

22 Attachment B Pricing Schedule CWSS Final

Cells D16 and D18 – Please confirm that Offerors are NOT to populate these cells.

Do not populate D16 and D18

23 Attachment B Pricing Schedule CWSS Final

Cell D21 –Please confirm that Offerors are NOT to populate this line. If this is not correct, please provide a description of the costs to show in this cell.

Do not populate

24 Attachment B Pricing Schedule CWSS Final

Row 22 – please confirm that Offerors are to provide a total for all periods in this row, with a grand total in Cell I22

Yes –same ad D22 (one-time cost)

25 Attachment B Pricing Schedule CWSS Final

Row 37 – please confirm that Offerors are to provide a total of rows 22, 34 and 36.

Provide total for rows 22, 34

ODC NTE total is $40k each year

26 Attachment B Pricing Schedule CWSS Final

Please confirm that CLINs X006, X012 and X013 are Cost Reimbursable. Please provide a NTE value for CLIN X013.

Yes – not to exceed. CLIN 13 is $40k

Attachment B Pricing Schedule CWSS Final

Please provide workload data for the entirety of CLIN 0005 so that offerors can properly price all elements of the projected FFP ONE TIME cost.

SoftwareHouse High Assuarance software Suite SoftwareHouse Innometriks enrollment Software Indentive Enrollment Reader Softwarehouse Profession Migration Services(3) Linus Servcer with IDServer SQL and Windows Server Software

28 Attachment B Pricing

Please provide ample workload data for CLIN 007 to accurately estimate the amount of end

Gov will request 100 hour of training Requesting labor cost for training

Schedule CWSS Final user and technical/hardware /maintenance training required.

Past Performance References

Reference: Historically, bidding entities operating within a tribally owned or Alaskan-native corporate structure that includes Parent Company/Affiliate/Subsidiary may submit relevant corporate experience of an affiliate/subsidiary and have it attributed as the Prime Offeror's experience and considered in evaluations. As Supported by GAO decision File B-418486; B-418486.2; B-418486.3 which concluded "An agency properly may attribute the experience or past performance of a parent or affiliated company to an offeror where the firm’s proposal demonstrates that the resources of the parent or affiliate will affect the performance of the offeror.”

Question a: Would the Government please confirm that the tribally owned or Alaskan-native Prime Offeror may cite the prime contract experience of an affiliate/subsidiary company if the offeror demonstrates a meaningful relationship”?

Question b: If question a is confirmed, will the Government please allow for 2 additional pages in Volume II Past Performance to discuss Meaningful Involvement?

YES

YES

Section K

52.204-14 Service Contract Reporting Requirements is marked as applicable. Should 52.204-15 Service Contract Reporting Requirements for Indefinite-Delivery Contracts be marked?

As this is not a IDIQ, 52.204-14 is sufficient

Section K

52.222-41 Service Contract Labor Standards is marked as applicable, but 52.222-43 Fair Labor Standards Act and Service Contract Labor Standards – Price Adjustment (Multiple Year and Option Contracts) is not. Will 52.222-43 be applicable?

Yes, under 52.212-5

Section K

Will the Government consider marking 52.222- 62 Paid Sick Leave as applicable?

Yes, under 52.212 -5

33 Attachment B Pricing Schedule CWSS Final

Please provide ample workload data to accurately estimate the amount of end user and technical/hardware /maintenance training required.

Gov will request 100 hour of training Requesting labor cost for training

Instructions to Offerors

To allow space for a more thorough response, will the government consider allowing Times New Roman 11pt font for text and 10 pt for tables and graphics?

YES

Shall Offerors place the cover letter in all volumes or please specify which volume to place the cover letter?

One cover letter is sufficient in Volume 1

We kindly request that the cover letter is excluded from page count.

Cover letter is not included in the page count

Is the intention of the government to award the BPA to a single vendor?

Yes, however the government encourages teaming

Regarding the cloud migration task, is it limited to specific locations or is the intention for a global enterprise cloud migration?

Yes – Specific

39 Are there existing support contracts in place for the current PACS system?

NO

40 If there are existing support contracts in place for the current PACS system who is the current support contract vendor?

N/A

41 Is there a current inventory of existing PACS/security equipment, and if so, will this be maintained by the USAGM Office of Security or by the contractor?

YES – current inventory.

Vendor will maintain

42 Could you confirm if all PACS licenses and warranties are current and up to date?

Expired

43 If there is a current inventory of existing PACS/security equipment, will USAGM Office of Security provide to vendor prior to proposal submission?

Yes – will provide

44 Does an existing strategy document exist for integrating security operations between USAGM components from the Office of Security?

No

45 Concerning emergency repair work coordination in non-HQ locations, how will it be managed given that all travel must be approved by the COR?

Coordinate with COR

46 Is it the intent of USAGM to standardize to an enterprise PACS solution?

YES

47 Is there currently an Authority to Operate (ATO) in place for the PACS system?

NO

48 Regarding Section C.4.7 of the Statement of Work, does the Government intend for the contractor to also support

Active Directory at USAGM?

YES

49 Apart from PACS, are there any other systems the new vendor would need to support, such as Active Directory?

YES

50 What is the current database used for the Physical Access Control system?

SQL

51 Are all service software agreements (SSAs) currently up to date for the identified systems?

NO

52 In terms of vulnerability findings, should the contractor perform all assessment and remediation work in coordination with the Office of Security and IT stakeholders?

YES

53 Will all site assessments/work identified in the Performance Work Statement (PWS) be performed in the initial base year, or throughout the contract period?

NO

54 Which FedRAMP approved cloud provider does USAGM currently use for PACS migration?

N/A

55 Could you provide details on the current cloud provider?

N/A

56 Will USAGM share the current preventative maintenance schedule for remote locations with vendors?

YES

57 How many SSAs for security software under the scope of this solicitation does USAGM currently maintain?

58 What is the current version of CCURE 9000 running at the identified USAGM facilities/locations?

Version 2.17

59 Regarding the CCURE Series License, is USAGM presently running based on the total amount of card readers in the system?

NO

60 Is the intent to expand the system enterprise-wide or deploy sites on a standalone basis?

Enterprise-wide

61 What video management system is currently in place, and is it integrated into the CCURE9000 system? If not, does

USAGM desire integration into one unified platform?

Nothing in place

YES

62 What iStar controllers are currently deployed, including version, model, and year of installation? What is the total deployed panel count?

iSTAR iSTAR Pro iSTAR Ultra

APC

Panel count - 16

63 Will USAGM run the PACS database on a virtual server?

In the Future

64 What is the identified environment currently in place (on-prem, hybrid, virtual, etc.)?

On-premise

65 Is CLIN0005 (One Time Cost) intended to be performed on a one-time enterprise level or a site-by-site basis?

One-time enterprise level

66 Regarding CLINs 1-4, should we include assumptions that a change request will be made if the government goes over the allocated hours?

YES

67 Contractor is assuming C&A work is included in CLIN 5, could you confirm this?

Compliance and Assurance – YES

68 For CLIN 5, which has a Total 5-year ordering period but only requests pricing in year 1, where will license and product costs be for years 2-5?

FISMA compliance for the 1st year and then just maintenance – which should be completed by

CLIN 2-4

69 Where is the cloud USAGM wants to migrate to, and will USAGM provide the Cloud environment as Government- Furnished Equipment (GFE)?

Agency specific cloud services. Yes, we will provide as GFE

70 Do we need to validate that the panels are up to speed?

Panels are currently operational/functional

71 Will USAGM be providing the PACS software as Government-Furnished Equipment (GFE)?

To maintain existence, Yes. However, vendor is expected to provide new CFE which will convert to GFE when accepted by the GOV

72 Are all panels and readers in working order and up to date, or should the vendor propose a complete refresh of panels and readers?

All panels are in working order. Vendor should be prepared to offer recommendation.

73 Regarding CLIN 12 - Site security project, are these new build-outs? Will this be IDIQ-based?

Could you provide details on the Statement of Work (SOW) for CLIN 12?

Yes – new build outs.

No-however the projects will be rolled out periodically throughout the life of the BPA based on site visits complete and recommendations Vendor would be expected to go TDY to sites and then provide recommendation

74 Would the Government consider a plug number for Other Direct Costs (ODCs) for evaluation purposes?

Yes - $40k