Attachment E Solicitation Questions and Answers (Update 0001).xlsx
XLSX spreadsheet 17 KB Posted
- Solicitation number
- FHF-26-R-0073
- Issued by
-
Federal Housing Finance Agency
About this file
This file is a Solicitation Questions and Answers (Q&A) document for RFP FHF-26-R-0073, "Legal and Strategic Advisory Services Refresh / On-Ramping #01," issued by the Federal Housing Finance Agency (FHFA). The Q&A contains three clarifications addressing pricing and security compliance requirements. Regarding pricing methodology, offerors must propose a single hourly rate per labor category per ordering period applied to estimated hours shown in Attachment C, without blended or tiered rates. Additionally, offerors shall propose a single profit percentage applicable to all labor categories, with a default profit allocation of 10 percent if no percentage is provided by the offeror.
Concerning IT security compliance, the RFP does not require offerors to demonstrate compliance with all listed information security frameworks, including CMMC Level 2 certification. Instead, offerors need only provide documentation demonstrating that their organization and information systems have been independently assessed using at least one of the listed information security frameworks. This approach allows offerors flexibility in meeting security requirements without requiring costly or time-intensive CMMC Level 2 certification, while still maintaining acceptable security standards through alternative compliant frameworks.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| FHF-26-R-0073.pdf | ||
| Attachment E Solicitation Questions.xlsx | XLSX spreadsheet | |
| Attachment C Pricing Worksheet.xlsx | XLSX spreadsheet | |
| Attachment A PWS.pdf | ||
| Attachment D Security Questionnaire.docx | DOCX document | |
| Attachment B Clauses and Provisions.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| Question # | Document Name (e.g., Attachment A - Performance Work Statement, Combined Synopsis Solicitation, etc.) | Document Section (e.g., Section 3 of Attachment A - Performance Work Statement, Evaluation and Selection Process Section of the Combined Synopsis Solicitation), etc.) | Question | Answer |
| 1 | Attachment C - Pricing Worksheet | Ordering Period Tabs | The estimated hours in the ordering period tabs of Attachment C vary by period and labor category. Can FHFA confirm that offerors should propose a single hourly rate per labor category per ordering period (applied to the estimated hours shown), rather than blended or tiered rates? | Offerors shall propose a single hourly rate per labor category per ordering period. |
| 2 | Attachment C - Pricing Worksheet | Overall Summary Tab | Regarding the profit attribution requirement on the "Overall Summary" tab (per FAR 52.212-4, Alternate I, subparagraph (a)(4)) — should offerors disclose a single profit percentage applicable to all labor categories, or a separate profit figure for each individual labor category? | Offerors shall propose a single profit percentage applicable to all labor categories. If the Offeror does not provide a profit percentage, the default portion of the "hourly rate" attributable to profit shall be 10 percent. |
| 3 | FHF-26-R-0073 - RFP | IT Security Compliance | Will FHFA make any exceptions from compliance with CMMC level 2 requirements? It is our understanding that it can take an extended amount of time to get certification or approval for those. | The IT Security Compliance section of the RFP is not mandating that the Offeror provide documentation demonstrating that its organization and information systems have been independently assessed using ALL the listed information security frameworks. Rather, the Offeror will provide documentation demonstrating that its organization and information systems have been independently assessed using at least one of the listed information security frameworks. As such, an Offeror may not comply with CMMC Level 2 requirements, but it can demonstrate compliance under one of the other information security frameworks. |
&"-,Bold"Attachment E
File details come from the government source that posted it. Updated .