RFI_005_EMCS_20190619_P1_of_1.pdf

REQUEST FOR INFORMATION REPORT (RFI)

RFI NO.

PAGE NO.

SOLICITATION NO. SOLICITATION TITLE

Upgrade EMCS Basewide (WARB) YTPM 17-0009

PRIME CONTRACTOR

Contractor's Request for Information

REQUESTED BY: DATE REQUESTED:

19 June 2019

Potential Cost Impact

[No] Potential Schedule

Impact [No]SUBCONTRACTOR

RFI

SUBJECT:

DRAWINGS

INFORMATION REQUESTED:

ATTACHMENTS FROM CONTRACTOR: (1 attachment)

NOTE: THE RFI SYSTEM IS INTENDED TO PROVIDE AN EFFICIENT MECHANISM FOR RESPONDING TO CONTRACTOR'S REQUESTS FOR

INFORMATION. IT DOES NOT PROVIDE AUTHORITY TO PROCEED WITH ADDITIONAL WORK. IF THE CONTRACTOR CONSIDERS

THE RFI RESPONSE A CHANGED CONDITION, PROVIDE WRITTEN NOTICE TO THE CONTRACTING OFFICER'S REPRESENTATIVE

IN ACCORDANCE WITH CONTRACT PROVISIONS.

QA REVIEWER'S SIGNATURE DATE

RFI FORM

FA6606-19-R-A001

1. Section 3.9.1.1 makes a very broad statement “Provide Cybersecurity for any and all active systems”. Will the vendor be required to follow Risk Management Framework (RMF) and the NIST SP 800-53 cybersecurity baseline?

Response:

2. The “Typical Sequence of FRCS Design and Construction Activities” guide outlines the steps and timeframe for cybersecurity activities. It seems the timeline, for just cybersecurity, could take up to 61 weeks to complete. Is this a typical timeframe for completing the cybersecurity requirement?

Response:

Vendor/Contractor will be required to follow RMF regarding eMASS inputs for new hardware/software (i.e. new JACEs, JACE version numbers, software versions, etc.) and base ISSO will manage inputs into eMASS.

We do not anticipate the 'typical timeframe' to be 61 weeks, but that timing is beyond our control - Contractor will provide data required for eMASS inputs, and base ISSO will manage inputs.