VIPER_Industry_Day_Q&A.PDF

VIPER Industry Day Q&A 1 Question: What type of vehicle is being used?

Answer: VIPER will be a Single Award Indefinite-Delivery, Indefinite-Quantity (IDIQ) contract and will be full and open competition released on FBO.

2 Question: What type of funding is anticipated?

Answer: Both Operations and Maintenance (O&M) and Research, Development, Test & Evaluation (RDT&E) funding. There is intended to be predominantly more O&M requirements with integral RDT&E activities performed. Based on that, it was determined to be a services requirement (AFI 63-138 requirements apply).

3 Question: Is this requirement an extension of the previous contract?

Answer: This requirement is an expansion on previous work and will involve more researching and sustainment activities. This requirement is overall defined as a new requirement.

4 Question: Is the effort envisioned to go all 7 years?

Answer: Based on the current trajectory, yes, but it is contingent upon requirements and progress observed during performance.

5 Question: Is additional Assessment & Authorization (A&A) help anticipated?

Answer: SecureView customers are looking for additional Information Assurance (IA) activities to occur under this contract as a part of the creation of A&A documentation. There will be more focus on onsite A&A support in the future, as customers are expecting additional support and in some cases, it is expected at customer sites.

6 Question: Are all of the task orders anticipated to have a 24 month Period of Performance (PoP)? Or will there be some variation?

Answer: The task orders can span up to 60 months for the RDT&E type work, but only 12 months for the O&M type work.

7 Question: Who owns the SecureView trademark?

Answer: Currently the SecureView trademark is held by Assured Information Security, Inc. However, it is being transitioned to AFRL and should be complete around September 2018.

8 Question: Would Australian or Canadian subsidiaries be beneficial?

Answer: AFRL is not yet working directly with either country, but both are interested in SecureView. All cross domain products including SecureView have ITAR restrictions. National Security Agency (NSA) is the ultimate decision maker on which coalition partners it can be shared with.

9 Question: Is the Offeror required to have a SCIF at their facility?

Answer: Access to a SCIF is required, but having one at the Contractor's facility is not required.

10 Question: During the Industry Day discussion it was mentioned that the development work needs to be performed in a closed environment. Is that a closed environment or a classified environment?

Answer: This is an upcoming policy to be issued by the Unified Cross Domain Management Office (UCDSMO) on all cross domain developers as stated in recent Cross Domain Tech Forum. The development work needs to be performed in a closed environment, not classified.

11 Question: What area does the Government find the biggest need for assistance?

Answer: The main new focus area is having onsite A&A engineers at customer locations. An increasing number of customers have been asking for A&A enginers’ onsite to help navigate the systems.

12 Question: How much of the code for SecureView does Assured Information Security, Inc. own? Can any other developer get access to the code?

Answer: The Government has unlimited data rights to the source code. Other developers can access it for Government purpose with Government permission. Some code is open source.

13 Question: What is the plan for transitioning from the legacy contract to the new effort?

Answer: There will be brief overlap as the legacy contract is completed. The Government expects a rapid start up under VIPER to ensure operational sites are fully supported.

14 Question: Is there a specific company size that the Government is looking for to satisfy this requirement?

Answer: As stated previously, this requirement will be released through FBO and is subject to full and open competition. The initial requirement is for 45 Full Time Equivalents (FTEs), which is expected to increase over the life of the contract. There is no specific company size noted to satisfy this requirement. (Unrestricted)

15 Question: Does this requirement require the performer to have a local presence?

Answer: No, a local presence is not required.