QNA Set 2.pdf

H92240‐20‐R‐0005 QNA Set 2

Question Document Question Gov Response

Attachment 1 – PWS NSWC IESS Support – Base Contract and Attachment 4 – PWS NSWC IESS Support – Task Order One.

Would a cloud-based single pane of glass IESS solution be acceptable?

The Government is unclear how this question relates to specific technical evaluation criteria contained in the RFP, which includes Task Order Key Personnel, Trouble Ticketing system for Attachment 1 PWS in Paragraph 6.2, and VAR status. Further, the Government cannot comment as to how it will actually evaluate a particular aspect of a prosposal until it receives all proposals. To the extent the Offeror is inquiring as to whether the Government would accept a cloud-based solution during performance, see response to Question 2.

Solicitation Paragraph 4. VOLUME 3 – FACTOR 1 – Technical Capability 4.1.b Factor 1 Subfactor 2 Trouble Ticketing System (page 12).

What DOD IT security policies would impact the implementation of a cloud-based ticketing solution? (Specifically the Autotask suite. Does vendor need to be approved by DOD?)

The Government cannot comment as to how it will actually evaluate a particular aspect of a prosposal until it receives all proposals. For informational purposes only, the Government believes there are cybersecurity and information assurance approvals that may be required prior to execution for any external information technology (IT), information security (IS), and software proposed to be used with NSWC IT or IS. For this reason, the Government has amended the RFP to include assessment of security controls in relation to any proposed trouble ticketing system under Attachment 1, PWS Paragraph 6.2. The existing plan is for the IESS solution be hosted on Government servers and networks, but the Government may consider cloud-based solutions. It is up to the Offeror to exercise due diligence and research regarding potential applicable DoD instructions or requirements (e.g., DoD 8500 Cybersecurity, DoD 8510.01, RMF for DoD IT, DoD 8570.01, Information Assurance Workforce Improvement Program) in this area and to assess such risk in submitting a proposal. List of example references is not exhaustive.

3 Attachment 1, Paragraphs1.3.

With an anticipated cloud-based device/system health monitoring solution, would Offeror or the specific system need to be DOD approved from a system/solution security perspective?

Any cloud-based solution for IESS services would need to meet DoD security standards, see response to Question 2.