Sources Sought AOUSC Judiciary Risk Management Q and As.pdf
PDF 109 KB Posted
- Attached to
- Request for Information/Sources Sought - Judiciary Security Personal Security Risk Reduction
- Solicitation number
- DAS-TMBXXX1
- Issued by
-
Administrative Office of the U.S. Courts
About this file
This is a Questions and Answers document for a Judiciary Risk Management federal contract opportunity. The primary requirement is for professional services supporting risk reduction, vulnerability management, geospatial services, training, and technical/data integration. The government requires vendor-provided IaaS, SaaS, and PaaS components to support delivery of professional services, as detailed in Section 6.0 of the Statement of Work. This is a new requirement with no incumbent contractor. The government has not set a specific award date.
The contractor must procure and manage all third-party tools and licenses, including ESRI ArcGIS, DeleteMe, OnSolve, and OutSystems, with all licensing required immediately upon award to maintain uninterrupted service of currently-in-place capabilities. Surge personnel must possess a minimum Secret clearance, which the government will not sponsor due to processing time constraints. Coverage includes approximately 850 judiciary facilities and up to three residences per judge, determined during PII reduction and redaction program enrollment. Vulnerability management is defined as a continuous monitoring process identifying, evaluating, prioritizing, and mitigating potential and actual judiciary physical security and emergency management programmatic weaknesses. Historical examples of surge event scale include the 2017 and 2020 hurricane seasons and the 2020 George Floyd protests. Case management processes and systems are already in place, with the contractor expected to evaluate and recommend potential refinements.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Judiciary Risk Management
Q# Document Question Response
1 RFI/SSN, Draft SOW
The draft SOW indicates the government's requirements are for professional services supporting the program elements of risk reduction, vulnerability management, geospatial services, training, and technical/data integration. However, the SSN contains multiple questions referencing SaaS architecture, licensing, integration, and associated commercial models. Could the Government please confirm whether the primary requirement is for professional services, as described in the draft SOW, or whether a specific SaaS solution is required for this procurement? If SaaS capabilities are sought, please clarify the program areas or deliverables for which a SaaS platform is mandatory versus those anticipated as professional/consulting services.
The primary requirement is for professional services. There are some IaaS, Saas, and PaaS components we require to be vendor provided to support the delivery of requested professional services. These are found in the table of derliverables, section 6.0 of the
SOW.
2 N/A Is there an incumbent contractor, or any current contractors, performing all or specific aspects of the work described in the draft SOW? If so, please identify the contractor(s) and specify which program areas or elements they currently support.
There is no incumbent - this is a new requirement.
3 N/A What is the total contract value of the incumbent contract(s)?
There is no incumbent - this is a new requirement.
4 N/A When does the incumbent contract(s) period of performance end?
There is no incumbent - this is a new requirement.
5 N/A Is there a set award date for this? No
6 Draft SOW
The SOW references “case management process” for Vulnerability Management and PII Redaction. Is there an incumbent system or tool already in use, or should the contractor propose, provide, or implement new tooling for these processes? Are there preferred technologies or integration requirements for these systems?
Yes, there are services in place, as stipulated in section 6.0, table of deliverables. There are also requirements to evaluate those services, and recommend, specific to case management, potential refinements.
7 Draft SOW
For named third-party tools (DeleteMe, ArcGIS, OnSolve, OutSystems), is the contractor expected to procure and manage all required licenses/subscriptions, or will these be furnished as government-furnished equipment/licensing? Please clarify expectations for all mandated user seat counts.
Contractor is expected to procure and manage third-party tools.
8 Draft SOW
Regarding surge events, what is the typical lead time for government notification, and what clearance or qualification requirements must surge staff possess at time of activation? Can you provide past examples of incident volume requiring surge support?
Vendor staff will need to possess a minimum of a Secret clearance.
In terms of incident scale, past examples would be 2017 hurricane season, 2020 hurricane season, 2020 George Floyd protests, etc.)
9 Draft SOW Will the government sponsor clearances for surge personnel?
No - would not get processed in time to meet the need.
10 Draft SOW
What are the amount of locations that you'd like to have coverage for (courts and judges/employees residences)?
The only fixed locations that we have total visibility on are judiciary facilities, which number approx. 850. The number of residences related to a singular judge is determined during the PII Reduction and Redaction program enrollment process with the judge, and we will cover up to three for each judge.
11 Draft SOW
In regards to the ESRI requirement. Is this compatibility needed as soon as possible or can this connectivity be added during the deployment and setup?
6.0 DELIVERABLES - Licensing
(ESRI ArcGIS, DeleteMe, OnSolve, and OutSystems) – Immediately Upon Award. These capabilities are currently in place and need to be maintained without interruption of service.
Questions
12 Draft SOW
Please clarify as to what you mean by vulnerability management for the personnel that will be protected and what all is to be expected?
Reference 3.0 Definitions - Vulnerability Management.
Continuous monitoring process by which potential and actual judiciary physical security and emergency management programmatic weaknesses are identified, evaluated, prioritized, and mitigated. Also, reference 4.1 Vulnerability Management Services and 5.2 Vulnerability Management Tasks.
Sheet1
File details come from the government source that posted it. Updated .