Amend_No._005_Qs_and_As_.docx

Solicitation D12PS00316 Questions and Answers Amendment No. 005 Foundation Cloud Hosting Services

Ref/Sentence

Do all task orders require physical separation?

The government desires the most cost effective, best value proposed solution for each service of the technical service lines defined within the RFP.

Therefore, it is up to the offeror to propose their solutions which best meet the requirements and to articulate the value of their offering. This would include identifying any specific assumptions, concerns, constraints, and recommendations related to the security architecture and specific approaches to security controls.

DOI is not aware of public or hybrid cloud solutions at this time that would meet the security requirements defined in this solicitation, federal policy, and individual task orders for “MODERATE” systems, but may become aware of these through the solicitation process or otherwise in the future. DOI does not wish to preclude potential interagency customers from implementing hosting in public or hybrid cloud solutions based upon their independent risk management processes, or to preclude hosting of moderate systems in public or hybrid clouds if, and when, the specific security requirements defined in the RFP and the individual Task Orders can be met.

Therefore, it is up the offeror to provide sufficient information in their proposed submission in order to demonstrate performance in accordance with the security requirements as it would relate to any offering of services for hosting FISMA Low and Moderate systems No

Is it based on type of application or security level?

The DOI is not proposing a strategy for defining when various cloud deployment models will be used at this time, because such a strategy would be dependent upon the technologies and underlying the proposed and awarded solutions.

The government desires the most cost effective, best value proposed solution for each service of the technical service lines defined within the RFP.

Therefore, it is up to the offeror to propose their solutions which best meet the requirements and to articulate the value of their offering. This would include identifying any specific assumptions, concerns, constraints, proposals and recommendations related to the cloud deployment model (Private, Community, Public or Hybrid).

The security level requirements (FISMA Low or Moderate) are determined based upon the application and data hosted.

DOI is not aware of public or hybrid cloud solutions at this time that would meet the security requirements defined in this solicitation, federal policy, and individual task orders for “MODERATE” systems, but may become aware of these through the solicitation process or otherwise in the future. DOI does not wish to preclude potential interagency customers from implementing hosting in public or hybrid cloud solutions based upon their independent risk management processes, or to preclude hosting of moderate systems in public or hybrid clouds if, and when, the specific security requirements defined in the RFP and the individual Task Orders can be met.

Therefore, it is up the offeror to provide sufficient information in their proposed submission in order to demonstrate performance in accordance with the security requirements as it would relate to any offering of services for hosting FISMA Low and Moderate systems No