Amendment0018.doc

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

SOLICITATION/CONTRACT FORM

A. The required response date/time has changed from 04-Apr-2008 03:00 PM to 08-Apr-2008 03:00 PM.

B. Accordingly, solicitation HE1254-08-R-0018 is modified as follows:

Page 7 of 47, paragraph 2, of BACKGROUND, “The unique Student Identifier (USI) solution will provide alphanumeric identifiers”, is changed to read “The unique Student Identifier (USI) solution will provide numeric identifiers”.

Page 11 of 47, paragraph 4 of Privacy /Security, “Candidate software will be evaluated for security by the DoDEA information Assurance Branch using the Defense Information Systems Agency Gold Disk and Security Technical Implementation Guide”, is deleted in its entirety.

Page 11 of 47, paragraph 5 of Privacy /Security, the “DoDEA Intranet link https://intranet.dodea.edu/intranet/IT/information_assurance/documents/interim-ca-guidance.pdf” is deleted and replaced with “Common Vulnerabilities and Exposures: http://cve.mitre.org/cve/index.html, http://www.microsoft.com/technet/security/bulletinsandadvisories/defauIt.mspx”.

Page 13 of 47, paragraph 3 of Other Requirements, add the following links to “Further Information is available at”: http://www.access.gpo.gov/nara/cfr/waisidx 01/36cfr1194 01.html and http://www.section508.gov/index.cfm?FuseAction=Content&ID=14.

Page 45 of 47, Sub-Factor 2: Written Proposal, Element 1: Description of the proposed software system, including: bullet eleven, delete the sentence; “Description of vendor’s plan for marinating longevity of student identifiers” and replace with “Description of vendor’s plan for maintaining longevity of student identifiers”.

The Government’s response to written questions submitted for this solicitation is listed as follows:

Questions:

1. Is the DoDEA looking for a Tier 1 help desk to answer end user questions?

Answer: No

2. Is the DoDEA looking for Tier 2 support focused on supporting a DoDEA help desk?

Answer: Yes For Tier 2, DoDEA will support the end user.

3. Are there any language requirements for the proposed system other than English?

Answer: No

4. Are there limitations with http access in the foreign countries?

Answer: Not at this time.

5. How many users are expected on the system?

Answer: 800.

6. Would DoDEA provide a list of data elements they would like the proposed system to capture/store on the students?

Answer: Yes, at a minimum, the list would include:

First Name

Last Name

Middle Name

DOB

Grade

Gender

Race

Ethnicity

7. Can you provide a Word version of the Solicitation to help vendors in preparing their responses?

Answer: Yes, A word version of the solicitation is provided as an attachment to this amendment.

8. Solicitation Cover Page (Standard Form 1449) – Box #10 – please clarify what “Size STD: $23M” means?

Answer: In accordance with FAR 19.1, a size standard is a numerical designation from the U.S. Small Business Administration. The Dollar value listed is the largest for that a for-profit concern can be and still qualify as a small business for Federal Government Programs. For the most part, size standards are the average annual receipts or the average employment of a firm.

9. Pg 45 – Written Proposal - With regard to the 25 page limit for a proposal, does this include any attachments and the required RFP forms?

Answer: No

10. Does the privacy and security integration with SMS need to be done during setup?

Answer: Yes

11. Does the vendor need to participate in the Security evaluation process, if so, what are the requirements?

Answer: No

12. Under Other Requirements, what are the testing requirements?

Answer: On page c13 of 47, Other Requirements, There are no testing requirements. You only need to comply with 1., 2., 3., and 4.

13. Pg 33/47 - How do we know whether we need to develop a subcontracting plan?

Answer: Page 42 of 47 entitled “Proposal Submissions, g), requires a completed Subcontracting Plan to be submitted as part of the offer unless you are a Small Business.

14. Pg 7/47 #2 - Background Information states ..."solution will provide alphanumeric identifiers that..." but in Identifier Characteristics on Pg 10 states “numeric”. Please clarify which is preferred.

Answer: Numeric

15. Pg 9/47 – g. Will the DoDEA provide dedicated resources to the implementation of this project?

Answer: Yes

If so, how many?

Answer: One staff member will have this added to their current duties.

Or is the vendor expected to provide full Project Management and Implementation services?

Answer: No

16. Pg 41/47 - What is a "CLIN"? are those the "items" on pages 3 through 5?

Answer: Contract Line Item Number (CLIN) is a four digit sequential (not necessarily consecutive) number that identifies a separately identifiable item or service associated with a solicitation or contract.

17. Are those the "items" on pages 3 through 5?

Answer: Yes

18. Pg 44/47 “Certify that their product is in compliance with DoDEA's Technology and Assurance Standards listed in the Statement of Objectives” - on page 14 I see Technology Standards, but I don't see Assurance Standards. Please clarify.

Answer: You must comply with the contents of solicitation page 14: 1, 1a, 1b, 1c, 2 and 3.

19. Pg 10/47 General Requirements #2 - Based on the description, is the DoDEA requiring 24/7 access to Support?

Answer: Yes

20. Pg 12/47 Operational Requirements #3 – “the application should automatically send the identifier to the SIS” – would this be through SIF or Web Services or some other method?

Answer: The vendor is expected to provide the successful solution.

21. Pg 11/47 Privacy/Security item # 4 and #5, and Pg 13/47. Other Requirements #3 – Could DoDEA provide copy of this information? We were not able to access the files/links.

Answer: For Pg 11/47 Privacy/Security item # 4, The Gold Disk and Security Technical Implementation Guide are not available and will not be used in the award process. The following additional links are provided to address your concerns;

Common Vulnerabilities and Exposures: http://cve.mitre.org/cve/index.html, http://www.microsoft.com/technet/security/bulletinsandadvisories/defauIt.mspx Answer: For Pg 13/47, the following additional links are provided to address your concerns; http://www.access.gpo.gov/nara/cfr/waisidx 01/36cfr1194 01.html, http://www.section508.gov/index.cfm?FuseAction=Content&ID=14

22. Pg 8/47, a vii and ix – Please clarify "Provide appropriate security for data...”? And provide examples of “evidence” for these items?

Answer: SSL or encryption

23. Pg 9/47 re: “Evaluation copy” of software – will the DoDEA accept access via the Internet to a demo database to evaluate the application rather than a physical copy?

Answer: Yes

Our product is designed to be installed in an integrated environment including either of the database management systems they specify. It also includes a set of recommended database configuration settings. Will the DODEA be implementing the settings?

Answer: Yes

Will they require support?

Answer: Yes, if they host the database.

What DBMS will be required?

Answer: Oracle or SQL, Oracle is preferred. Support may be required if

SQL is offered.

24. Pg 45/47 – Element 1, 5th bullet: Please expand on/clarify “ability for DoDEA to customize fields”?

Answer: This is the ability to add custom fields such as “Rank” if necessary.

25. Pg 45/47, Element 1, 11th bullet: “Description of vendor’s plan for marinating longevity of student identifiers” ; please clarify what “marinating longevity” means?

Answer: “Marinating longevity” should read “Maintaining longevity”. Because of the time that is required to maintain the unique identifier, the performance of the product must be enduring,

26. Pg 11 d.ii – Is the proposed system expected to store transcripts? Or will transcripts be stored in another system?

Answer: Another system.

27. Pg 42 3: If we are required to use DoDEA provided computer for the demo, will this computer have access to Internet so we would be able to conduct a live product demonstration?

Answer: Yes

28. Pg 7/47 - Does the initial setup referred to under 3. SCOPE, include real time integration with SMS?

Answer: Yes, this would be ideal. Any delayed integration would need the times identified. If human intervention is required, that would also need to be identified.

29. Is there an incumbent currently providing these products and services?

Answer: No

(End of Summary of Changes)