Questions_and_Responses_to_Draft_RFP_(MASTER).pdf

FA7037‐19‐R‐A001 Responses to Draft RFP

# Document Reference Question Response 20 Attachment 01 Past Performance, Attachment 1 Past Perf: Attachment 1 has table requiring list of POCs to which PPQ was sent. Q: How many are required? It references “less than 5”. What is the minimum number of past performances?

There is no minimum number. As noted in Addendum to 52.212‐2, lack of past performance will give the contactor a "neutral" rating in the past performance section. With this said, if the offeror has submitted less than five (5) entries, it shall so indicate by placing N/A in each row up to five (5) rows for which no past performance questionnaire has been sent out.

36 Attachment 01 Attachment 01 – Past Performance Information.

Paragraph 1

There is a reference to "Solicitation No. FA7037‐19‐R‐A0001", but the published sonication number is FA7037‐19‐R‐A001. Please clarify solicitation number.

This is a spelling error which will be corrected.

37 Attachment 01 Attachment 01 – Past Performance Information.

Paragraph 1

"By competing and signing this attachment…" has a typo. Should this be "By completing and signing…"?

This is a spelling error which will be corrected.

38 Attachment 03 Attachment 03 ‐ Professional Comp Plan Model

There is a broken link in this workbook pointing to "\\comfort\stflansb$\Users\1388070788A\Desktop\Instructions.xlsx"

Revised prior to receipt of question

39 Attachment 03 Attachment 03 ‐ Professional Comp Plan Model . Instructions Tab

Cell C8 states "Input in cells C7 ‐ C70 all the fringe rates for every listed proposed job category." However, cells C6 and C7 refer to A7‐A60 and B7‐B60 respectively. Row 7‐ 60 are currently populated on the Comp Plan Model Tab. Please clarify all instructions to clear up whether the offeror should be populating to Row 60 or Row 70. This same issue applies to instructions in Cells C9 and C10.

Revised prior to receipt of question

40 Attachment 03 Attachment 03 ‐ Professional Comp Plan Model and Draft 52.212‐1.

Instructions Tab

Cell C9 states "Input in cells E7 ‐ E70 all the corresponding Salary.com job category titles." We subscribe to the Economic Research Institute's Salary Assessor tool. Can we use that instead of Salary.com for justification for base salaries?

Revised prior to receipt of question

41 Attachment 03 Attachment 03 ‐ Professional Comp Plan Model. Comp Plan Model tab

Column D for Total Compensation Rate appears to include the base salary plus the value of the fringe benefits offered by the Offeror. In what way will this information be used for evaluation purposes?

The data from this cell will be used to satisfy the requirements IAW FAR 52.222‐46 Professional Employees. 52.222‐46 (a) states in part, " The professional compensation proposed will be considered in terms of its impact upon recruiting and retention, its realism, and its consistency with a total plan for compensation "

42 Attachment 03 Attachment 03 ‐ Professional Comp Plan Model. Floor salaries Tab

The government has preloaded an escalation of 3.6% for each option year of the IDIQ. Is this going to be the awarded escalation to the winning bidder? Should offerors use 3.6% when

The rate reference has now been moved to Attachment 10 ‐ Floor Rate Worksheet to prevent confusion. The 3.6% will be utilized in the document to help establish a consistent "floor" on professional rates for all offerors.

The 3.6% is fixed for all offerors on this spreadsheet and may not be altered.

The offeror may propose any rate of inflation for their actual rates (Exhibit 2 ‐ Fully Burdened Rates by Region) as long as none of those rates fall below the established floor in any year of the contract.

79 Attachment 03 General How does the government intend to incorporate or consolidate attachments 3 and 4 (Professional Compensation Model and Total Evaluated Price) in the final solicitation? It would seem that doing this would be beneficial for both government and the contractors for price evaluation purposes

Both Attachments will be required as part of the RFQ submittal package.

They will be listed as attachments and placed within the Volume IV ‐ pricing volume.

1 5/10/2019

81 Attachment 04 General Can we assume that the government is expecting the contractors to use 1,880 hours as an Full‐time Equivalent (FTE) and will use this factor when evaluating Total Proposed Price?

Yes

21 Attachment 06 Attachment 6 Q: What is the purpose of the sample salary.com page, and how are we to submit/provide this information?

The purpose of the sample salary.com page is to illustrate what the page looks like. If the offeror proposes X number of job categories as part of their unique solution, then they will also provide as part of their proposal a corresponding number (X) of salary.com pages which show the basis of their floor calculations

43 Attachment 07 Attachment 07 ‐ Scenario

PWS. P 14.

10.0 APPENDICES lists APPENDIX A, B, and C. However, there is no APPENDIX C. Is there supposed to be a GOVERNMENT WORKLOAD ESTIMATE for the Scenario?

The reference to Appendix C will be removed from the scenario and will not be provided.

80 Attachment 07 General Will the government be providing additional Level of Effort (LOE) information in the final solicitation with regard to the sample PWS?

Currently, there is not enough information in the sample PWS for the contractor to effectively and realistically price out the work as it is described. A table similar to the one offered on page 48 of Exhibit 1 – Performance Work Statement is suggested.

The Government will not place a table similar to the one offered on page 48 of Exhibit 1 ‐ Performance Work Statement. Offerors will note that the Government has requested that the offeror's assumptions be listed along with their technical solution. For the purposes of this exercise, the assumptions made may give as much insight into the offeror's abilities as the actual proposal. Note that the Government recognizes that when an actual task order is released, the offeror will have the ability to discuss with the Government all considerations associated with successful completion of the work based on the awarded IDIQ.

1 Attachment 08 Addendum to 52.212‐1 Instructions and Notices to Offers. Page 7. (k)(3)(i)

"A critical subcontractor is defined as an entity (subcontractor and/or teaming contractor), other than the offeror itself that will perform 25 percent or more of the proposed effort based on the total proposed price/cost;" Comment: As this procurement is an 8(a) set‐aside with the prime required to do more than 50% of the cost of the contract, this would imply that past performance from only one subcontractor could be used.

Recommend the government reduce the requirement to 20%.

There is no need to change the requirement from 25% for the final sentence of the paragraph allows the offeror to submit a sub‐contractor who is doing only 20% of the work. The sentence reads in part, "or that will perform aspects of the effort the offeror considers critical to overall successful performance."

2 Attachment 08 Addendum to 52.212‐1 Instructions and Notices to Offers. Page 7. (k)(3)(i)

"For each action identified in Addendum to 52.212‐ 1(k)(3)(iii)(B), the offeror shall present no more than a one (1) page summary of the requirement….The summary at a minimum must include the contract number, the period of performance, as well as a description of the work done under the contract. The final paragraph will state why the offeror believes the work completed is relevant to the work described in RFP

The Government has reviewed this request and determined that one well written page per contract will be sufficient to give the Government the information required to determine if the contract is relevant.

13 Attachment 08 Addendum 52.212‐1. P 2.

52.212‐1 (1)(e), Page Format.

Page Format states that “each page of the proposal will use Times New Roman, 12 pt. font.” Q: Will the Government consider allowing a 10‐pt.

font for all tables and figures?

The Government has reviewed this request and determined that Times New Roman, 12 pt. foot should be utilized throughout the document, including tables and figures.

14 Attachment 08 Addendum 52.212‐1. P 2.

52.212‐1(1) Submittal Table

Will the Government consider allowing cover pages, table of contents, and acronym lists to be excluded from the page limits for all volumes?

Approved

15 Attachment 08 Addendum 52.212‐1. P 2.

52.212‐1(1) Submittal Table

Would the Government confirm whether the maximum number of pages for Volume III Past Performance includes the 1‐page Subcontractor/Teaming Member Consent Form(s)?

The Government will change the language within the table to include an additional page for the consent forms

2 5/10/2019

16 Attachment 08 Addendum 52.212‐1. P 7.

52.212‐1(3)(iii)(B), Past Performance Content RFP Attachment 1‐ Past Performance Information.

Will the Government allow the attachment to be altered to align with the offeror's style of the Past Performance Volume if the content and format remain the same as the attachment provided?

No alterations apart from the filling in of the cells and cell will be allowed to provide continuity for the reviews of past performance.

17 Attachment 08 Addendum 52.212‐1. P 7.

52.212‐1(3)(iii)(B), Past Performance Content. RFP Attachment 1‐ Past Performance Information.

Would the Government please confirm the point of contact name and email address for the recipient of the PPQs?

Please see instructions to the "Responder" in the PPQ document.

18 Attachment 08 Addendum 52.212‐1. P 7.

52.212‐1(3)(iii)(B), Past Performance Content

Are PPQs due on the same day and time as proposal submission? Yes, when the final release date is determined, the PPQs will be due directly from those who receive the PPQ no later than the same day and time as the proposal. Currently Attachment 02 has a placeholder for that information.

44 Attachment 08 Draft 52.212‐1, Attachment 03 ‐ Professional Comp Plan Model and Exhibit 02 ‐ Fully Burdened Rates by Region

The instructions in Draft 52.212‐1 for Attachment 03 state "All data should be national (i.e. no regions selected in Salary.com) and no other delimiters should be selected." However, Exhibit 02 Fully Burdened Rates by Regions requires offerors to provide pricing for six different regions. If regional pricing is going to be used for the evaluation, should offerors also use regional pricing for San Antonio, TX for the Professional Comp Plan?

Yes, Region 1 pricing should be used. The contracting office will modify the instructions to clarify.

45 Attachment 08 Draft 52.212‐1 & Exhibit 1 ‐ PWS. p 9.

A) Evaluation of Compensation for Professional Employees, sixth bullet RFP Attachment 03 ‐ Professional Compensation Plan Model: second sub‐bullet, states "Labor category qualifications and level definitions are provided at RFP Exhibit 01 – Performance Work Statement of the solicitation." However, Exhibit 1 does not appear to provide the "labor category qualifications and level definitions" as stated. Please provide the labor category qualifications and level definitions that map to the historical data: level of effort required information in Appendix C of Exhibit 1.

Attachment 03 ‐ Professional Compensation has been modified since the release of the Draft RFP and no longer speaks to labor category qualifications and level definitions.

46 Attachment 08 Draft 52.212‐1 & Exhibit 1 ‐ (A) Evaluation of Compensation for Professional Employees, sixth bullet RFP Attachment 03 ‐ Professional Compensation Plan Model: third sub‐bullet, states "Map all Offeror's labor categories to Offeror’s salary support data. All data should be national (i.e. no regions selected in Salary.com) and no other delimiters should be selected." If the government wishes to ensure employees on this IDIQ are paid at market competitive salaries, then shouldn't the specific location (e.g. San Antonio, TX) and factors such as education, years of experience and required clearance/certifications also be factored into the Professional Compensation Model? Using salary.com with "no regions selected" only provides a national average salary range and does not accurately reflect what someone in a specific position with clearance, certification, and unique skills should make in San Antonio, TX.

Prior to the receipt of questions, the Government has revised the worksheet to separate the "floor" values and the "professional compensation". Offerors should follow the instructions as found on the revised Attachment 03 when released with the solicitation to reflect the actual salary/fringe that they will be using.

3 5/10/2019

47 Attachment 08 Draft 52.212‐1_Addendum and Attachment 04 ‐ Total Evaluated Price Worksheet.

P 4 of 10.

item (j) Post‐Award Conference states "The minimum guarantee for this contract is the post‐award conference and is not separately priced at three thousand dollars ($3,000.00)." CLIN 0004 in Attachment 04 shows a separately priced $3,000 in year 1 for the Post‐Award Meeting. Please clarify if this is or is not separately priced as a minimum guarantee of $3 000

We will correct this to indicate that it is priced at $3,000.

48 Attachment 08 Draft 52.212‐1_Addendum.

P 9.

D) refers to RFP Exhibit 8 ‐ "Floor Base Hourly Rate Worksheet". However, the solicitation package did not include an Exhibit 8. Nor was there an Attachment 8. Was there a file missing from the Draft?

There was a file which was added after the Draft RFP which addressed this issue.

82 Attachment 08 Attachment 09

General When does the government intend to issue the DRAFT solicitation Sections L and M so that industry can review the response requirements and anticipated evaluation criteria?

As this is a commercial contract, these sections have been released as part of the Draft RFP under Attachment 08 ‐ and Attachment 09 (52.212‐1 and 52.212‐2).

4 Attachment 09 Addendum to 52.212‐2 Evaluation ‐ Commercial Items. Page 5. (b)(4)(i)

"The Government shall consider the entire ISSS IDIQ size and magnitude when considering each offeror’s demonstrated recent and relevant record of performance, as well as the quality of that performance." As this will be an IDIQ contract with an unknown number of task orders, please provide the government's definition of "size and magnitude".

The Government will revise this explanation.

49 Attachment 09 Draft 52.212‐2 Addendum.

P 4.

Subfactor 4 ‐ Experience, (A) Prime Contract's Experience states "Absence of relevant work experience by the Prime contract will result in an “Unacceptable” rating for this Subfactor." If the prime offeror is a recently formed Joint Venture, does this apply? Can one or more member companies of the Joint Venture provide the past performance if the JV doesn't have it?

Yes, that is acceptable.

33 Draft 1449 FA703719RA001_Draft. P 3 of 37

Item 0004 Post Award Conference states "This CLIN includes all costs associated with travel to the Post Award Conference (e.g. flights, hotel, car rental, food, etc.) and actual costs towards this meeting may not be charged again CLIN 0003." If kickoff meeting costs are not to be charged against this CLIN, where should they be charged?

The Post award conference will be charged at the rate of $3,000.00 against CLIN 0004. Travel for other travel events during the contract will be charged against CLIN 0003.

34 Draft 1449 FA703719RA001_Draft. P 4 of 37

The Requirements paragraph states "Initially, the contract will cover these tasks Langley AFB, Warner‐Robins AFB, Tyndall AFB, and Davis‐Monthan AFB but may change as the mission grows." Should this say locations instead of tasks? If locations, how many FTEs and which labor categories will be required at each location? Also, if locations, San Antonio, TX is not listed, but seems to be the main location.

This will be rewritten to include tasks

35 Draft 1449 FA703719RA001_Draft. P 25 of 37.

List of Attachments #03 Evaluation of Compensation for Professional Employees states there are 5 pages in an Excel document. All of the other excel documents listed have no page count. Should this also be blank since there are actually 3 tabs, but an in determinant number of pages?

This will be changed to reflect the revised Attachment #03

69 Draft 1449 Draft solicitation, CLIN 0003

pp. 3/37

Please confirm contractor’s allowable burden rates are allowable under the cost‐reimbursable CLIN.

Travel and per diem under this CLIN shall be reimbursed at cost with applicable burdens as limited by FAR 31.205‐46 and the Joint Travel Regulations (JTR) guidelines. The contractor shall use per diem allowance in lieu of actual subsistence expense for all persons in travel status.

4 5/10/2019

78 Draft 1449 Are you able to share if the USAF ISSS solicitation will be an 8a set aside competitive on a specific contract vehicle (e.g. 8a STARS II) or will be out as 8a competitive with the NAICS revenue restriction only (e.g. allowing all vendors with or without a vehicle to bid)? I understand from time to time Contracting Offices may list pre‐solicitation announcements as 8a competitive but may use also require a contract vehicle in the final solicitation

The USAF ISSS solicitation will be set‐aside for 8(a) firms. It will be an 8a competitive with the NAICS revenue restriction only. All 8(a) vendors who meet the criteria may submit an offer.

5 Exhibit 01 PWS I read that the various work should fall under cybersecurity improvement initiatives and cybersecurity support tasks. Could you please clarify if you would be interested in seeing various cybersecurity solutions as well?

We aren’t receiving any information or briefings prior to if/when a solicitation is released. Due to the number of interested parties, we don’t have the bandwidth to review all those who are interested. So to keep the playing field level, we aren’t accepting any information. 2. I will tell you that a responsive firm will respond to all requirements as found in Addendum 52.212‐1. I would recommend going to the draft documents to see what the Government is currently anticipating as the required information. It will then be a business decision as to whether to include “various cybersecurity solutions” as part of the proposal. The technical team will evaluate all proposals based on the Addendum to 52.212‐1. 2. Without knowing the complete scope of your response, I can’t say whether it would be helpful or not, but I can say that the Government is interested in your approach to meeting its requirement.

7 Exhibit 01 Exhibit 1 – Performance Work Statement, pp 6 & 21.

1.3.4 Scope & 2.6.2.28

Integrated Defense Security Operations Support

In reference to supporting the transition to and integration of the IC ITE. Q:

What type of enterprise is this, i.e., JWICS, Unix, etc.? Q; What systems or system of systems does the integration tie together in the IC?

Intelligence Community Information Technology Enterprise (IC ITE). AF Intelligence, Surveillance, Reconnaissance (AF ISR) systems tie into the Intelligence Community (IC).

8 Exhibit 01 Exhibit 1 – Performance Work Statement, pp 6 & 21.

1.3.4 Scope & 2.6.2.28

Integrated Defense Security Operations Support

Q: Would the Government describe the extent of this support? Q: Does the government envision full time daily support to track equipment across the organization? Q: Or will the support be in the form of providing answers to equipment questions?

The support covers the ACC/A2 mission ‐ which is full time. The scope of this work is at the mission support level. "Tracking equipment across the organization" and "providing answers to equipment questions" would be contingent upon the vendor's understanding and approach to meeting the PWS requirement.

9 Exhibit 01 Exhibit 1 – Performance Work Statement, pp 6 & 21.

1.3.4 Scope & 2.6.2.28

Integrated Defense Security Operations Support Management (CPM):

Q: How many Project Managers does the government expect…and in what areas? For example, 1 overall contract PM and 1 to support Authorization Support, and any others specifically?

How many project/program managers will depend on the unique solution offered in response to the solicitation. It will be up to the offeror to determine how many and in what areas to propose project managers.

10 Exhibit 01 Exhibit 1 – Performance Work Statement. P. 17. 2.6 Integrated Defense Security Operations Support

Services shall include: exercise planning (see also para 2.4), continuous network monitoring, intrusion detection, intrusion prevention, continuous improvement recommendations, and incident response services for the network, systems, applications, and infrastructure. Q: How many exercises does the Government expect to run annually?

The annual number of exercises will vary depending upon mission need.

Twelve annual exercises would serve as a good target based on historical trends.

5 5/10/2019

11 Exhibit 01 Exhibit 1 – Performance Work Statement. P 22. 2.7 Task Summary

Task Summary indicates Table 2.7.1 is not a manning matrix. Q: Will the Government consider providing a manning matrix?

The Government understands this question to ask whether the Government would provide the number of personnel and perhaps the job categories in each of the six areas. Due to a number of factors, including skill sets of workers and innovation approaches, the Government will let the offeror propose a unique solution and will not provide a manning matrix.

12 Exhibit 01 Exhibit 1 – Performance Work Statement. P 25. SS #3 ‐ Provide Cybersecurity Process Improvement Roadmap and Technical Solutions (CPIR/TS)

Q: Would the Government clarify who will have responsibility for the SCA POA&M, the ISSM or the A26 Contractor? Q: Or, does the performance threshold indicated in the results of the SCA support provide information for the POA&M workflow rather than the entire POA&M?

The contractor is responsible for providing the data used in the development of the POA&M.

19 Exhibit 01 PWS, Appendix C On the last page (Appendix C) there are a few labor categories that show [et 0‐1], [et‐1‐2], i.e. Security Control Assessor [et 3‐4]. Just curious if that designation is in relation to skill level? If so is 0=lower experience level (Junior) and is 4=senior level?

The current version of the PWS (Exhibit 1 ‐ PWS) has already been corrected, i.e. [et 0‐1], etc. are no longer shown in this version. These designations have no relevance for this document.

22 Exhibit 01 PWS Section 2.3 Q: What scanning tools are approved by AF IC, and will AF IC provide these, or are they to be contractor‐provided?

Scanning tools, such as ACAS, will be provided by the government. For further details regarding additional tools, refer to the AF IC website.

23 Exhibit 01 PWS Section 2.4‐2.11. Q: What does the marking of “reserved” mean for these areas? Are they options to be added later?

They represent areas which were removed after internal Government review.

By placing reserved in the text, the integrity of the PWS numbering system could be maintained so that all tables and references throughout all documents would not have to be changed.

25 Exhibit 01 Description/Specifications/S tatement of Work

Initially, the contract will cover these tasks Langley AFB, Warner‐Robins AFB, Tyndall AFB, and Davis‐Monthan AFB but may change as the mission grows. Q: What is the personnel count for each location? What is the minimum clearance required for staff to start? If it will vary based on location or job title, is it possible to create a matrix?

All personnel shall be TS/SCI cleared throughout the duration of the contract ‐ no exceptions. Personnel count for each location will depend upon the solution provided by each offeror. Because of this, no matrix prior to award of contract is possible. .

27 Exhibit 01 Reference PWS 2.2.1.1 Can the government provide the number/volume of Major Weapon Systems (MWS), networks, and ancillary systems the contractor is responsible for developing/managing a cybersecurity process consistent with RMF?

No, this is classified information which would only be shared at the time of task order award.

28 Exhibit 01 Reference PWS 2.2.1.4 Is there an existing process for assigning authorizing officials a portfolio of systems? What is the total amount of systems and how many are unassigned?

Existing processes will be made available to the vendor upon contract award for optimization and improvements. System information will be made available upon contract award ‐ subject information is not available for public consumption.

29 Exhibit 01 Reference PWS 2.2.1.9 Is there already a policy in place that holds program managers accountable for a response to issues or does the contractor need to develop one? If one exists, what is it?

Existing processes, policies, business models, etc. will be made available to the vendor upon contract award for analysis and integration of process improvement.

30 Exhibit 01 Reference PWS 2.2.1.13 Is the contractor solely responsible for developing mission thread data or for guiding the programs on how to do so and then leveraging the data?

The contractor is expected to develop a technical solution to meet this requirement per PWS 2.2.1.

31 Exhibit 01 Reference PWS 2.2.1.15 Is there an existing cloud migration plan that is available to help develop a security migration plan within an RMF construct? Or is the contractor responsible for ensuring the cloud migration plan being developed incorporates security requirements?

The contractor is expected to develop a technical solution to meet this requirement per PWS 2.2.1.

6 5/10/2019

32 Exhibit 01 Reference PWS 2.4.4.2 Cybersecurity Training:

Can the government provide the number of trainees, number of courses, and length of courses the contractor is required to conduct over the course of a year?

Based on historic information, the number of classroom courses per year will be approximately 73. Classroom size can be approximated to be 35 students for a lecture format and 15 for a lab environment, at 8‐40 hours depending upon the course. The number of online courses (CBTs) will vary and will be dependent upon the vendors understanding and approach to the PWS requirement.

50 Exhibit 01 Exhibit 1 ‐ PWS, Appendix C On Security Control Assessor there is [et 3‐4]. On DAO Support there is [et 0‐1]. On Cybersecurity Program Manager (CPM) there is [et 1‐2]. What does [et x‐y] mean for each of these?

See question #19 for answer.

51 Exhibit 01 Exhibit 1 ‐ PWS. P 6. 1.3.3 states "The cybersecurity Information Technology (IT) services described in this PWS describes the critical security services required in this fast paced continuously evolving environment." This sentence is difficult to read as is…Recommend rewording to perhaps say "This PWS describes the critical cybersecurity Information Technology (IT) services required in this fast paced continuously evolving environment."

The Government has reworded this section based on this comment.

52 Exhibit 01 Exhibit 1 ‐ PWS. p. 6. 1.3.4 the acronym IC ITE is not spelled out. Recommend rewording to state "…(3) transition to the IC IT Environment (ITE)."

The Government will make this change.

53 Exhibit 01 exhibit 1 ‐ PWS, p. 6. 1.3.4 states "Each role or function shall be covered 100% of the time for the duration of the contract. Roles shall be separated between locations, functions, certification requirements, and the organizational hierarchy."

Based on Appendix C, historical level of effort, which positions and quantity of each will be required on site at each of the locations listed in PWS 4.5 Places of Performance

Each offeror has the opportunity to present their unique approach to covering the requirement. The accepted solution will have to meet the 100% requirement. No matrix of personnel will be provided.

54 Exhibit 01 Exhibit 1 ‐ PWS, P. 7. 1.4 Period of Performance states the POP shall be for one (1) Base Year of 12‐months and four (4) 12‐month option years. Since this is going to be awarded as an IDIQ with task orders, would an ordering period of five (5) years with specific POPs related to each task order be more appropriate?

The Government in the review process has changed the IDIQ period to a five

(5) year ordering period as suggested by this comment/question.

55 Exhibit 01 Exhibit 1 ‐ PWS, p. 7. 1.4 Period of Performance: If this is to be awarded as an IDIQ, presumably there will be an ordering period after which no more task orders can be awarded. If a task order is awarded that will exceed the ordering period expiration date, how long beyond that date, can the task order performance continue?

"Services may not be performed after more than one (1) year the last day of the ordering period."

56 Exhibit 01 Exhibit 1 ‐ PWS, p. 10. 2.3.1.3 "cybersecurity process improvement roadmap (CPIR)" is already defined in para 2.2.1 on page 8 and does not need to be spelled out again here.

OK

57 Exhibit 01 Exhibit 1 ‐ PWS, p. 10. 2.3.1.9 "...Cross Domain Solutions (CDS)…" is already defined in para

2.3.1.2 on this same page and does not need to be spelled out again. Same is true for the second occurrence in this same paragraph at the top of page

OK

7 5/10/2019

58 Exhibit 01 Exhibit 1 ‐ PWS There are multiple instances where an acronym is defined (e.g. Security Assessment Report (SAR) on page 7) and is then repeatedly defined again later in the document. Recommend a thorough scrub to remove all duplicate acronym definitions to improve readability of the PWS.

OK

59 Exhibit 01 Exhibit 1 ‐ p. 11. 2.4.1.2 Coordinating Discovery Meetings and ensuring updated Discovery Meeting checklists are uploaded into the A&A Workflow tool. What is the workload tool? Is it government furnished?

The current A&A workflow tool, XACTA, is government furnished.

60 Exhibit 01 Exhibit 1 ‐ PWS p. 37 4.12 This section only lists required contractor certification possibilities.

Please provide special training, certification, and qualifications by labor category for each position/labor category the government anticipates for the IDIQ.

The Government is unable to define specific training by labor category, as it is up to the offeror to suggest labor categories. Once labor categories are accepted, exact qualifications will be highlighted at the task order PWS level.

The purpose of this methodology was to evaluate the vendor's approach to how certs would be applied to which labor categories and why they approach it the way they did. As a minimum, each individual contractor employee on the contract must be DoD Directive 8140.1 (Replaces DoD 8570) compliant. See PWS Paragraph 4.12.for applicable certification requirements.

61 Exhibit 01 Exhibit 1 ‐ PWS, p. 40. 4.18.1.4 states "The contractor shall be prepared to transition the work load to the newly‐selected contractor at the end of the fifteen (15) business day phase‐out period, which will occur at the end of the period of performance of the contractual effort." Please clarify the time period during which Phase In/Out will occur for this IDIQ and first task order. Will the incoming contractor have 30 calendar days or 30 work days? Will the current incumbent be available and participate for only fifteen (15) business days during their "phase‐out" period?

This direction will be clarified in the RFP.

64 Exhibit 01 Exhibit 1 ‐ PWS 2.7 Task Summary. P. 22.

The descriptions for PWS 2.5.3 in Table 2.7.1 Task Summary Table do not match PWS 2.5.3. Please clarify the PWS reference and/or the descriptions in Table 2.7.1.

The Government will correct.

70 Exhibit 01 Draft PWS, Section 3.4 pages 32/48

Ref: Equipment Provided: “The Government will provide the contractor access to printers, unclassified and classified if properly cleared networks, copy machines, classified destruction equipment, facsimile machines (secure, DSN, and commercial access), and basic office supplies.” Would the Government confirm the equipment provided will include computers?

Yes, computers that are to remain on‐site are provided by the Government.

71 Exhibit 01 Draft Exhibit 1, PWS; Draft CDRL A001. p 26/48, 1/2

There is an inconsistency between the due date for A001 and PWS 2.1.1.7 and Performance Threshold SS#2. Please confirm the correct due date is 30 working days after completion.

The Government will clarify.

72 Exhibit 01 Draft Exhibit 1, PWS; Draft CDRL A001. p 26/48, 1/2

There is an inconsistency between the due date for A003 and PWS Performance Threshold SS#4. Please confirm the correct due date is 10 working days after completion

The Government will clarify.

75 Exhibit 01 Draft PWS. p 4. Paragraph 1.2.1.

All personnel must be TS//SCI cleared according to the PWS. Would it be possible to include personnel with Secret//Collateral clearances for certain functions like RMF process improvement policy development?

No, all personnel must be TS//SCI cleared to work on this contract.

8 5/10/2019

76 Exhibit 01 Draft PWS. p 4. Paragraph 1.2.1.

Does the Air Force plan to adopt NIST SP 800‐37 Revision 2 RMF changes for the purpose of this solicitation?

All applicable NIST documentation will be utilized to fulfill the requirements of this PWS.

77 Exhibit 01 Draft PWS. Paragraph

2.4.4.3 and 2.5.1.

Can the government provide specifics on the AF ISR systems, weapons systems, and networks that will be in scope of overall level of effort

Information will be made to the contractor upon contract award.

62 Exhibit 02 Exhibit 2 ‐ Fully Burdened Rates by Region.

Tabs labeled Region 1 through Region 6 do not include any OCONUS locations. Will pricing be required to support OCONUS?

Any contractor employees operating OCONUS will only do so in TDY status, therefore the six regions do not include OCONUS locations.

63 Exhibit 03 Exhibit 3 ‐ DD254, pp 1‐2 Location(s): ACC/A2S appears to be listed twice as the last entry on page 1 and the first entry on page 2. Is this an error?

This is a duplication and will be corrected by the Government

65 Exhibit 08 Draft Addendum to 52.212‐

Respectfully request 10 pt. or less font for graphics and tables in the proposal.

12 point will be required for all graphics and tables within the proposal.

66 Exhibit 08 Draft Addendum to 52.212‐ 1 (k)(2)(i)

Does the Government want offerors to include a Table of Contents, Compliance Matrix and/or Acronyms and Abbreviations List within the Technical Volume? If so, respectfully request these items be excluded from the maximum page count.

Because this makes it easier for the reviewers to review, the Government concurs with the request and will make the change to the document.

67 Exhibit 08 Draft Addendum to 52.212‐ 1 (4)(i)(ii)(D)

RFP Exhibit 8 is not part of the attachments in the draft RFP or Attachment 5‐Conformance Review Checklist. Is Exhibit 8 included in the proposal submission?

This was added after the initial posting of the Draft RFP and will be part of the RFP.

68 Exhibit 08 Draft Addendum to 52.212‐ 1 (3)(iii)(D)

The referenced form is not included in the list draft RFP package. Please provide the referenced form.

This was added after the initial posting of the Draft RFP and will be part of the RFP.

83 Exhibit 1 Page 48 As per the FTE count provided by the government on page 48 of Exhibit 1, there are currently 106 FTE performing on the current contract. Does the government anticipate the FTE level to remain the same on the new contract and will this level of effort be “prescribed” or “determined” for the contractors when completing the government’s Total Evaluated Price workbook?

For the purposes of evaluation only, the offeror shall consider data found in cells A17 ‐ H25 of Attachment 04 ‐ Total Evaluated Price Worksheet. Using this data may or may not result in 106 FTEs, based on the unique solution/approach of the offeror. The Government is unable to speculate on whether the FTE level will remain commensurate with the existing contract due to variances in each offeror's unique solution/approach.

3 General General Questions Please provide the name and contract number for the incumbent contractors whose work will be part of this contract.

Work which is similar to the work being proposed in Draft RFP is being done by IP Secure under contract number FA7037‐16‐D‐0001.

24 General General Q: Is it anticipated that staff will require approval for access to any Special Access Programs (SAP)? If so, approximately how many staff?

It is not anticipated that the required work will need access to any Special Access Programs.

26 General What contract vehicle will be used for procurement? AMIC proposes writing a single‐award IDIQ type contract with subsequent task orders. No existing contracting vehicles will be utilized.

73 Industry Industry Day Slide Will the systems in the scope of the ISSS Services Contract include multinational networks?

Information will be made to the contractor upon contract award.

9 5/10/2019

74 Industry Industry Day Slide With regard to ATO, does ACC/A26 anticipate transition away from traditional, triennial re‐assessment and re‐authorization to a system of continuous monitoring of security controls.

ATO issuance will follow the RMF process.

The above questions have been received by the Government in response to Draft RFP FA7037‐19‐R‐A001. All potential offerors are placed on notice that answers listed above should be considered "DRAFT" and represent the Government's response as of this posting. All offerors should depend on the text found within the RFP if/when such a document is posted for compliance on the Information Security Support Services requirement as details may change based on the above comments from Industry or from Government sources.

Todd S. Bales, Contracting Officer AMIC Det 2 / PKS

10 5/10/2019