Amendment 002.pdf

Amendment 0002 Solicitation Number FY26R1221102 Title USIBWC SCADA Lifecycle Support

Purpose of Amendment This amendment is issued to clarify Performance Work Statement. This amendment does not change the scope of work, evaluation factors, period of performance, or submission due date.

Amendment Details

This Amendment 2 consolidates all questions and answers received to date. This amendment is issued to ensure equal access to information for all offerors. All other terms and conditions of the solicitation remain unchanged unless specifically stated below.

1. Multiple Offers Reference FAR 52.212 1 Instructions to Offerors.

Question. May offerors submit multiple offers reflecting different technical or staffing approaches, or is submission limited to one offer per legal entity.

Answer. Offerors may submit multiple offers. Offerors should submit approaches they believe are appropriate to meet the requirement.

2. Personnel Count Limitation Reference PWS Section 3 and Price Sheet CLINs 001 through 009.

Question. Is the personnel list a maximum cap or a minimum benchmark.

Answer. The personnel list represents a minimum baseline. Offerors may propose additional qualified personnel as needed.

3. Background Investigation System Reference PWS Section 22.

Question. Which system is used for background investigations and who coordinates submissions for subcontractors.

Answer. USIBWC uses eAPP. The prime contractor will coordinate submissions for subcontractor personnel.

4. Alternate and Backup Personnel Reference PWS Sections 3 and 22.

Question. May offerors propose additional cleared or clearance eligible personnel for continuity and emergency coverage.

Answer. Yes. Additional personnel may be proposed.

5. CLIN 003 Software Scope Reference Price Sheet CLIN 003.

Question. Are specific Government tools required or may commercial solutions be proposed.

Answer. Solutions must meet FISMA, FEDRAMP, NIST, and CISA standards. The system is intended to remain as air gapped as possible, with limited approved exceptions.

6. Endpoint Quantity Reference Price Sheet CLIN 003.

Question. Does the quantity of 20 represent endpoints or a pricing placeholder.

Answer. Twenty endpoints reflect the current configuration.

7. Tier 4 Timing Reference PWS Section 3 and Section 22.

Question. Must Tier 4 personnel be fully adjudicated at proposal submission.

Answer. Personnel requiring administrator privileges must possess the Tier 4 clearance on day one of award.

8. Emergency Labor Pricing Reference Price Sheet CLINs 002, 005, 007, 009.

Question. May offerors propose hourly emergency labor rates with severity based estimates instead of fixed per event pricing.

Answer. Yes. The Government will consider scaled pricing options based on severity and estimated hours.

9. Clearance Leveraging by Prime Reference PWS Section 22.

Question. May a prime SDVOSB leverage Tier 2 and Tier 4 clearances from a teaming partner.

Answer. Yes, provided the proposal is responsive and compliant and personnel are properly identified and approved.

10. On Call Coverage Reference PWS Section 3.

Question. Is 24 by 7 coverage required.

Answer. Most emergencies can be handled during business hours. Disaster events may require after hours response.

11. Remote Versus On Site Support Reference PWS Sections 5 and 6.

Question. Is there an estimated split between remote and on site labor.

Answer. For Nogales SCADA, the current estimate is seventy five percent remote and twenty five percent on site. As the system transitions, this may shift to seventy five percent on site and twenty five percent remote. Other IBWC systems are primarily remote, with on site audits as required.

12. Transition In Period Reference PWS Section 13.

Question. Will there be a transition in period after award.

Answer. There is no formal transition period. IBWC will assist with documentation, access, and reasonable adjustment time.

13. Software Licensing Responsibility Reference PWS Section 7.

Question. Are additional recurring licenses required beyond Government provided Rockwell licenses.

Answer. No additional licenses are required at this time.

14. Set Aside Requirement Reference Classification Section of the Solicitation.

Question. Is this requirement set aside and if so under what authority.

Answer. Yes. This requirement is set aside for Service Disabled Veteran Owned Small Businesses in accordance with FAR 19.14, as stated in the Classification Section of the posted solicitation.

15. SCADA Audit Scope Reference PWS Section 5.

Question. Will USIBWC provide audit templates or should the contractor propose a methodology.

Answer. Audits will be a joint effort between the contractor and IBWC.

16. Endpoint Protection and Patch Management Tools Question. Does the Government have existing tools in place.

Answer. Offerors should assume no tools are in place. Endpoint protection is not required. An optional patch management tool may be proposed. The contractor is expected to track CISA KEVs and CVEs and implement patching through an approved plan.

17. Patching Approach Question. Are automated patching approaches acceptable.

Answer. Systems must remain operational. Patching must occur during approved maintenance windows and receive prior approval.

18. CLIN 003 Boundary Question. Does CLIN 003 apply only to IT endpoints or also OT components.

Answer. CLIN 003 applies to all devices within the IT and OT boundary.

19. Government Furnished Equipment Question. Will contractor personnel receive Government furnished devices.

Answer. Yes. The Government will provide devices required to connect to equipment.

20. Monitoring and Response Question. Is the contractor responsible for both monitoring and response.

Answer. Yes. The contractor will provide both, consistent with an air gapped architecture.

21. Insurance Requirements Reference FAR 52.228 5.

Question. Do insurance requirements apply to remote work.

Answer. Insurance requirements apply only when contractor personnel are physically present at IBWC locations.

22. GSA MAS Requirement Reference PWS Section 12.

Question. Does the solicitation require the prime contractor to hold a GSA MAS contract.

Answer. No. The reference to IT Schedule 70 is for pricing basis only and does not impose a mandatory contract vehicle requirement.

23. Vulnerability Assessment Scope and Execution Reference PWS Objectives and Security Requirements.

Question. Does USIBWC intend to require intrusive OT penetration testing or adversary emulation as part of vulnerability assessments and is there flexibility in how specialized cybersecurity activities are supported under the SDVOSB set aside.

Answer. Vulnerability assessments will be non intrusive and primarily paperwork based. The contractor is expected to keep current with CISA Binding Operational Directives and CVE vulnerabilities for the Nogales site only. The intent is configuration review, continuous monitoring, and patch driven remediation. The contractor will support downward directed assessments but will not initiate them.

There is flexibility in how specialized cybersecurity support is provided, consistent with the solicitation requirements.

All other terms and conditions of the solicitation remain unchanged.

End of Amendment.