Q_and_As_as_of_3_May.docx

Request for Proposal HC1028-13-R-0036 Enterprise Attack Analysis Support Questions and Answers As of 3 May 13

1. We are in the process of responding to the subject solicitation and would like an extension. Is there any way this can be extended?

· The Government is not extending the proposal due date at this time.

2. In the PWS Section 11.1 Delivery Schedule, Items 3 (TOMP) and 5 (WBS) indicate they are initially due 15 days after contract award. PWS Section 6.1.2, Subtask 2 - Task Order Management says “As part of the proposal, the Contractor shall submit a draft TOMP and WBS”. Please clarify when we need to provide our first draft of the TOMP and WBS.

· These documents are to be provided 15 days after contract award. A revised PWS will be incorporated to correct this language.

3. If we need to provide the TOMP and the WBS with the proposal, please clarify if these submissions are to be provided as attachments within the Technical/Management Volume exclusive of the 10 page limit.

· The TOMP and WBS are not required as part of the proposal (see #2 above).

4. Ref. Para L3(a). Does the Government desire the narrative to be a standalone document (file) external to all Volumes, or should the narrative be included with one or more volumes?

· The narrative should be a standalone document.

5. Is it the Government’s intent to require the draft TOMP and WBS within the page limited content of the technical/management response?

· The TOMP and WBS are not required as part of the proposal (see #2 above).

6. If the draft TOMP and WBS is to be provided separately from the technical/management response, how will the Government factor evaluation of the TOMP and WBS into the overall evaluation?

· The TOMP and WBS are not required as part of the proposal (see #2 above).

7. Will the Government provide specifications for the Government servers (operating system, performance parameters, available software, etc.)?

· Government shall provide all servers including operating systems and cloud components including as needed and approved development environment as well as a lab environment. A finalized list of software and hardware that will be provided by the Government is not available but best estimates are:

· SiLK

· YAF

· Trickler

· Oracle

· MySQL

· Linux (RedHat Enterprise)

· SIMP (Government Software), Hadoop, Zookeeper, Accumulo, JBoss, Ozone Widget Framework (OWF) (Government Off the Shelf Software), Java 6, Jzmq, Storm, Flume, Zeromq, NiagraFiles (Government Software). As of this writing, analytics are expected to be written in Java, MapReduce and potentially Storm.

· System performance parameters have not yet been set as the system is in the initial stages of being brought on line as of this writing.

· In addition, vendor is expected to work with various standards: common platform enumeration, common vulnerabilities and exposure, common event format.

8. Is it the Government’s intent for software mediators for data transformation to be developed and delivered under the ESAA Program? If so, recommend the addition of a software deliverable to this section or adding a cross-reference to CDRL 19.

· Deliverable 18 was added.

9. Please provide a description of the LAWT and the reporting and metrics produced by the LAWT. Does the LAWT currently exist or is it to be developed under this contract?

· LAWT exists as Sensage, but another system is being developed outside of this particular contract that the vendor is expected to be knowledgeable about for developing use cases. See above software list for Hadoop cluster being developed now.

10. Are Dashboards intended to be stand-alone applications, or are they to be integrated or compatible with current Government Dashboards and systems?

· These will be developed on the new Hadoop system.

11. Please clarify if training instructors and holding actual training classes are part of this RFP.

· Yes, occasional training by subject matter expert is required, as new tools/dashboards are delivered under this contract by vendor as part of the delivery of the capability.

12. Please provide Data Item Descriptions (DIDs) for contract deliverables – particularly for Government Determined Formats.

· All types not currently specified will be specified at contract award.

13. Is there a required format for deliverables distributed electronically (e.g. Microsoft Office)?

· Microsoft file formats or Adobe Portable File formats are acceptable.

14. What is the required electronic delivery format for DoDAF artifacts?

· Microsoft Visio

15. Is there an incumbent, re-compete work or is this new work?

· Yes, this effort is a re-compete of HC1028-10-C-2015.

16. What is the estimated number of FTEs required for this effort?

· The number of FTEs will be determined by each offeror’s unique technical approach.

17. Please clarify if the Technical Interchange Meeting (TIM) is the Technical Exchange Meeting (TEM) discussed in section 6.1.1.

· Yes. PWS was corrected.

18. Is this work to be performed at the Contractor site or a Government facility?

· In accordance with paragraph 9 of the PWS, the primary place of performance will be at the contractor’s facility. A small portion of the work will require contractor support at the DISA Lab assisting and demonstrating progress to Government engineers at theDISA Headquarters facility in Ft. Meade MD.

19. Are all deliverables required to be unclassified or will the Government provide sufficient time and resources in Government facilities to create required classified deliverables?

· Most deliverables will be sensitive but unclassified. The DD254 for this contract states vendors need to have access to Government facilities for processing SECRET material on SIPRNET; however, the vendor needs to work toward obtaining their own SIPRNET connectivity given current Government resource constraints.