USCYBERCOM-_RFI_Questions Answers.pdf

USCYBERCOM Mission Support Services

RFI Questions and Answers

1. Is the Government’s intent to receive RFI responses from only Small Businesses that are certified and qualified under NAICS code, 541512: Computer Systems Design Services, with a size standard of $25.5M ?

Government Response: Yes

2. Is it the Government’s intent for the subsequent USCYBERCOM Mission Support Services RFP to restrict

Large Business primes from bidding and limit the award(s) to Small Business prime contractors that are certified and qualified under NAICS code, 541512: Computer Systems Design Services, with a size standard of $25.5M?

Government Response: The RFI is strictly for Market Research purposes ONLY. No final determination on the appropriate acquisition strategy has been made.

3. Attachment E paragraph 2: “The contractor must have readily available access to Defense Security Services

(DSS) certified work locations for performing classified work up to and including TS/SCI at time of contract award. Individuals performing work under resultant tasks orders must be a United States citizen and comply with applicable program security requirements which will require Top Secret personnel security clearances with SCI eligibility at time of award. The contractor shall comply with all appropriate security regulations in handling classified material and in publishing reports and other products.”

Will the Government accept a SCIF accredited by NSA acceptable? Upon award are Contractors required to be SCI eligible or SCI cleared with CI Poly?

Government Response:

SCIF Co-utilization / Co-use Agreement (CUA) or SCIF transfers are acceptable by a

Government cognizant security authority.

A Final DD 254 must be awarded with SCIF requirement.

Contractor companies that do not possess a Final TS FCL shall not be eligible to receive a

SCIF/CUA accreditation until receipt of a Final TS FCL.

Contractor personnel must hold a TS clearance with SCI eligibility and successfully complete a

Counter-intelligence Polygraph (CIPG) provided by a Government polygraph entity prior to award.

4. Attachment E, Paragraphs 2 - 6. "The contractor must have readily available access to Defense Security

Services (DSS) certified work locations for performing classified work up to and including TS/SCI at time of contract award." Would these include DSS certified work locations at Government facilities or are you requiring a Contractor Owned Contractor Operated SCIF?

Government Response:

A FCL is a determination by the Defense Security Service (DSS) that a contractor facility satisfies the requirements for access to classified information and/or SCIF/CUA. Although contracts requiring contractor access to classified information may be awarded to contractors that do not yet possess a FCL, execution of those contracts do require the appropriate FCL at the appropriate clearance level. A TS FCL is required for TS/SCI contract.

A Defense Security Services (DSS) certified work locations should be understood as contractor companies that possess a Final FCL and location listed on the DD Form 254 as a contractor performance location and place of performance identified in block 8a/block 13 of the DD 254.

5. Attachment E, Paragraphs 2 - 6. "The contractor must have readily available access to Defense Security

Services (DSS) certified work locations for performing classified work up to and including TS/SCI at time of contract award." Would these include DSS certified work locations at Government facilities or are you requiring a Contractor Owned Contractor Operated SCIF? Since the primary place of performance will be at

USCYBERCOM Government facilities within the Ft. George G. Meade, MD local area, and contractors may only work at the contractor's facility as a contingency, we would assume that this requirement is referring to a SCIF at a Government facility.

Government Response: We are requiring a Contractor Owned Contractor Operated SCIF.

6. Will the Government provide an acquisition schedule for this procurement to include milestones?

Government Response: At this time, the Government is conducting market research. The Government will not provide an acquisition schedule for this procurement.

7. Does the Government intend to release a Draft Request for Proposal (RFP) prior to the release of a Final

RFP?

Government Response: No final determination on the appropriate acquisition strategy has been made.

8. Would the Government consider extending the RFI response date to June 29, 2015.

Government Response: No

9. Per the instruction in the cover letter for the content of the (maximum ten page) response to the

USCYBERCOM RFI, there is no reference to including a response to Appendix E Security Requirements.

Should we add an 11th page to the response to ensure we answer the statement on the last line of Appendix

C which states, “Please confirm and describe your company’s ability to meet the requirements in

Attachment E?”

Note: We found when answering Corporate Capabilities-Appendix C that it is difficult (although we have managed) to fit all of the required input into 2 pages, and therefore don’t feel there is room to fit Appendix

E response into the current maximum ten page allotment.

Government Response: The page limitations are unchanged. The security response should be included within the Corporate Capabilities.

10. Please confirm that a) that the Government will be accepting responses from large businesses for this RFI, and b) that the Government is using this RFI to make a determination as to whether a potential

USCYBERCOM RFP would be a total small business set-aside, therefore, the notation on FBO that this will be a total small business set-aside is not correct because the final determination has not yet been made.

Government Response: At this time, this RFI is restricted to small businesses only. Additionally, the RFI is strictly for Market Research purposes ONLY. No final determination on the appropriate acquisition strategy has been made.

11. When we submit do we need to show competency in all 10 Major Task Areas or would you consider multiple firms that collectively show competency across all 10 areas?

Government Response: The prime contractor should clearly show competency in majority of the task areas. If the intent is to show teaming partners/subcontractors work experience, the response should be clear and concise.

12. You note that “The contractor must have access to DSS certified work locations for performing classified work up to and including TS/SCI at time of contract award.” Can you please explain what this entails.

Government Response: The contractor must possess a Facility Security Clearance (FCL) at the TS level prior to the award of the contract; personnel must hold a TS clearance with SCI eligibility; and successfully complete a Counter-intelligence Polygraph (CIPG) provided by a Government polygraph entity.

13. As clarification, is this RFI restricted to Small Businesses only.

Government Response: At this time, this RFI is restricted to small businesses only.

14. Question: Does an entity (SDVOSB with SCI experience and SCIF) desiring to bid the subject opportunity require an existing GWAC or FedSIM contract in place to be eligible to bid?

Government Response: The RFI is strictly for Market Research purposes ONLY. No final determination on the appropriate acquisition strategy has been made.

15. Is $469 million an annual estimate or for the entire 60 month period of performance?

Government Response: The estimate includes the entire anticipated period of performance