H92240-14-Q-1012_QUESTIONS_2.pdf

H92240-14-Q-1012 QUESTIONS 2

Web Hosting Services (H92240-14-Q-1012)

Document-Section

IT-CNP's Questions

Combined Synopsis/Solicitation, Page 2-Technical Subfactors

Q8. What are the page limitations for the technical subfactors? -

A8. POSTED IN 52.212-1 ADDENDUM; PWS

Page 1, Section 4- Requirements

Q9. Will this proposal be presented in two volumes, Volume I. Technical and Volume II. Price?

A9. POSTED IN 52.212-1 ADDENDUM; PWS

Q10. What is the mandatory font size and style?

A10. TIMES NEW ROMAN, 12 PITCH

Q11. Does the executive summary, cover letter, and resumes count towards the page limitations?

A11. SUMMARY AND COVER LETTER ARE SEPARATE

Combined Synopsis/Solicitation, Page 2-Technical Subfactor 4: Key Personnel

Q12. Does this RFP require resumes for all personnel or just for key personnel?

A12. RESUME REQUIRED ONLY FOR THE PROJECT MANAGER

Combined Synopsis/Solicitation, Page 2-Technical Subfactor 6: Past

Performance

Q13. . How many past performance references are required?

A13. POSTED IN 52.212-1 ADDENDUM

PWS, Page 1, Section-Requirements

Q14. What are the resume page limitations?

A14. PREFERABLY NO MORE THAN THREE PAGES PER RESUME.

PWS, Page 1, Section 2 - Objectives states "The Contractor will provide secure host servers,.."

Q15. Who currently maintains the code for seaslswcc.com, leapfrogs.sealswcc.com, training forum and mobile applications?

A15. GOVERNMENT MAINTAINS ALL CODE.

PWS, Page 1, Section 2 - Objectives states "The Contractor will provide secure host servers."

Q16 . Can the Government provide the desired system architecture of the desired hosted solution? (e.g. number of web servers, number of database servers)?

A16. NO. THE OFFEROR IS EXPECTED TO PROVIDE SUITABLE SOLUTION IN THE

PROPOSAL.

PWS, Page 1, Section 2 - Objectives states "The Contractor will provide secure host servers,.."

Q17. Can the servers be virtualized?

A17. A SUBMISSION THAT EXCEEDS THE STATED REQUIREMENT WILL NOT

RECEIVE ADDITIONAL CONSIDERATION.

Q18. What Operating System is used? (Windows Server 2008 R2 or Red Hat Enterprise Linux)

A18. THE OFFEORO IS EXPECTED TO PROVIDE SUITABLE SOLUTION IN THE

Q19. Is the Contractor expected to provide SSL certificates or will the Government provide SSL certificates to the Contractor?

A19. THE OFFEROR IS EXPECTED TO PROVIDE SSL CERTIFICATES.

Q20. Will the Government provide software licenses for the operating system, database software, forum/website software and any other license needed to operate the environment? If not, which licenses is the Contractor expected to provide as part of the quote?

A20. GOVERNMENT WILL PROVIDE SOFTWARE AND LICENSING FOR FORUM AND

WEBSITE. THE OFFEROR IS EXPECTED TO PROVIDE OTHER LICENSES AS NEEDED.

Q21. What server resources are requested by the Government (CPU, memory, disk space) for each server in the system?

A21. THE OFFEROR IS EXPECTED TO PROVIDE SUITABLE SOLUTION IN THE

Q22. Can the Government provide Disaster Recovery requirements? What is the RTO and RPO objectives?

A22. THE OFFEOR IS EXPECTED TO PROVIDE SUITABLE SOLUTION IN THE

PWS, Page 1, Section 2 - Objectives states "The Contractor must be ready to assume website support on 12 July 2014 to ensure continuous service."

Q23. Can the Government elaborate on 12 July 2014 readiness objective? Is this the anticipated contract award date? Is this the anticipated go-live date at the new contractor facility?

A23. 12 JULY IS THE FIRST DAY OF PERFORMANCE

Q24. Will the Government be responsible for deploying all application code in the new hosting facility?

A24. NO. BIDDER IS EXPECTED TO DEPLOY ALL APPLICATION CODE.

Q25. Can the Government provide lines of responsibility demarcation for all applications deployed at the new hosting facility (web server, database server, application administration)?

A25. BIDDER IS PRINCIPALLY RESPONSIBLE FOR APPLICATION DEPLOYMENT IN

CONSULTATION WITH GOVERNMENT.

PWS, Page 1, Section 4.1 - Web Hosting Supplies/Services

Q26. What is the solution stack hosted on the operating system? Please provide an inventory and version number of all application components including the application, middleware and database systems used.

A26. THE OFFEROR IS EXPECTED TO PROVIDE SUITABLE SOLUTION IN THE

PWS, Page 2, Section 4.3 - Technical Management

Q27. Can the Government provide an example of technical and database support that may be required to maintain the online forum/bulletin board?

A27. BACKUP AND RECOVERY OF DATA IS AN EXAMPLE OF TECHNICAL AND

DATABASE SUPPORT REQUIRED BY BIDDER.

PWS, Page 3, Section 4.4.3 - Web Development - Mobile Application Maintenance and Updates

Q28. Can the Government provide a description/overview of the Mobile application architecture and technologies used, as well as describe typical continuity, maintenance and currency work requested to be provided by the Contractor?

A28. MOBILE APPLICATION IS IN RESEARCH AND DEVELOPMENT PHASE.

GOVERNMENT WILL CONSULT BIDDER AS REQUIRED FOR SUPPORT.

PWS, Page 3, Section 4.4.4 - Web Development - General Updates to Computer Code and

Software

Q29. Can the Government provide an example and additional information what security modification recommendations and general code modification may be requested as part of this support category?

A29. NO. THE OFFEROR IS EXPECTED TO PROVIDE SUITIABLE

RECOMMENDATIONS IN THE PROPOSAL TO INCLUDE SYSTEM SCANS.

PWS, Page 4, Section 8 - Security

Q30. Since this system contains PII, is it correct to assume that Government performed a risk categorization of this system in accordance with DoD I 8510.01 DIACAP and categorized this system as MACIII, Sensitive Information?

A30. NO. APPLICABILITY TO DIACAP IS UNKNOWN AT THIS TIME.

Q31. Is the system currently compliant with DIACAP requirements? If not, what are the exceptions (e.g. it appears that end users are allowed to login using user name and password combinations, where DIACAP requires the use of CAC credentials for multi-factor authentication).

A31. NO. APPLICABILITY TO DIACAP IS UNKNOWN AT THIS TIME.

Q32. Will the Government provide a copy of the current DIACAP security documentation package for update or will the new contractor be expected to generate a brand new DIACAP

Certification and Accreditation package?

A32. NO. APPLICABILITY TO DIACAP IS UNKNOWN AT THIS TIME.

Q33. Are all current data encryption components used by the system FIPS 140-2 certified per

DIACAP requirements? If not, what are the exceptions?

A33. NO. APPLICABILITY TO DIACAP IS UNKNOWN AT THIS TIME.

Q34. Does the Government consider the current state and architecture of the system satisfactory for deployment at the new hosting facility, or are major application changes due to DIACAP compliance are also required?

A34. NO. APPLICABILITY TO DIACAP IS UNKNOWN AT THIS TIME.

Q35. Will the Government provide an Information Assurance Manager (IAM) for this system, or will the Contractor be expected to perform this role as part of its scope of work?

A35. NO. APPLICABILITY TO DIACAP IS UNKNOWN AT THIS TIME.

General

Q36. Can the Government provide a name of the current incumbent hosting provide and whether the incumbent facility is DIACAP compliant?

A36. MUST REQUEST UNDER FOIA

Q37. Can the Government provide the annual dollar amount of the contract with the incumbent hosting provider?

A37. MUST REQUEST UNDER FOIA

Q38. What is the anticipated award date of this contract?

A.38 26 JUNE 14

Q39. What are data backup and data retention requirements?

A39. GOVERNMENT EXPECTS DAILY BACKUP TO INCLUDE UP TO 25 REVISIONS

AND 30 DAYS RETENTION.

Q40. . Will the Government be responsible for providing help desk services to the end users of the website/forum?

A40. GOVERNMENT WILL PROVIDE HELP DESK SERVICES TO END USERS.

Q41. Will the Government be responsible for managing all website and forum content?

A41. YES.