22Q0003_ATTCH6_QA_022822.pdf

Question # Question Answer

Will the government please provide a total maximum contract value and/or relevant funding information for this requirement?

This will be a Firm-Fixed-Price, IDIQ contract and funding will be available the order.

Will the DODEA specify more fully the format it expects RFP responses to take i.e., does DODEA want vendors to respond to each question, assertion, and/or T&C asked or implied within the DRAFT RFP and the four attachments? a. Related solicitation areas: Solicitation # HE1254-22-Q-0003 and Attachments 1-4.

Yes. The submission information for quotes for this solicitation is located under FAR 52.212-1, Instruction to Offerors--Commercial Items. See the Addendum version of the Instructions to Offerors--Commercial Items. NOTE: This request is a Request for Quotes and not a Request for Proposal.

Will DODEA issue a final RFP (vs. DRAFT) prior to solicitation close and award? Related solicitation areas: Solicitation # HE1254-22-Q-0003 and Attachments 1-4.

Yes, an amended RFP will be issued and posted to SAM.gov.

Does DODEA have a preference of cloud service provider? a. Related solicitation areas: Solicitation # HE1254-22-Q-0003 and Attachment 1- 4, specifically:

i. RFP item 252.239-7009, REPRESENTATION OF USE OF CLOUD COMPUTING (SEPT 2015), sections a, b, and c.\

ii. Technical Exhibit #1 - TECHNICAL REQUIREMENTS, sections 1.1- 1.17

iii. Attachment 4, Cloud Questionnaire

DoDEA does not have a preference of a cloud service provider. However, as stated in the RFQ, vendors shall submit all required documentation.

Is there a due date for questions?

Yes. See solicitation, paragraph 1.4 Volume 4 Factor 3 - Price: paragraph 2. Questions:

HE1254-22-Q-0003 - IDAMS - ATTACHMENT 6 - QUESTIONS AND ANSWERS

There is a part of the solicitation that indicates the technical poc is TBD. Has that person been identified and can we engage them with questions?

The technical POC has not been identified. Any questions that you have, you can submit your questions, as stated in the solicitation. See question 5, above.

Is there a specific format you can share for the response to the solicitation? The checkbox for an RFQ is checked, but this looks like you are asking for proposals. If you have a sample format I can use as a framework, that would be very helpful.

The formatting for responses to the solicitation is located under FAR 52.212-1, Instruction to Offerors-- Commercial Items. See the Addendum version of FAR 52.212-1, Instructions to Offerors--Commercial Items.

NOTE: This request is a Request for Quotes and not a Request for Proposal.

Attachment 1 - Pricing Sheet” asks to provide the unit price for eBooks, Books, Audio Books, and multimedia. We don’t have a standard unit price for any of those items. Would you accept an average price? Or, can we provide a list of sample titles to demonstrate the variety of prices and our offer?

This question is not applicable to the iDAMS solicitation.

Is the video presentation required at the time of proposal submittal or is this something that will come after the proposal submittal as a live demonstration to proposal evaluators? If it's required with proposal submittal, how is this to be delivered when DoDEA has a maximum email limit of 10MB and you are requesting a 60-120 minute video? This question is not applicable to the IDAMS solicitation.

The following link is not operational:

http://www.dodea.edu/virtualhs/DV/HS/dvhs/index.cfm (Section 1.2 of PWS)

Updated link to the virtual school:

https://www.dodea.edu/dvs/index.cfm

11 Is there a specific format for questions. No, there is no specific format for questions.

“Software, cloud services and associated websites will be rigorously tested to ensure no security risks are posed to DoDEA infrastructure and its users.” Will DoDEA be performing scans in addition to contractor scans? Which tools/software is DoDEA planning to use to scan the platform, e.g., Nessus? Is DoDEA requiring the contractor to purchase any tools/software needed for scans? (Section 1.1.1 of

PWS)

You must ensure that your site is secure. Our cybersecurity advisor conducts random scans.

“User Accounts: Ensure, if feasible, that individual accounts possess unique login credentials that do not require the use of personally identifiable information (PII), i.e., first & last name and any other unique personal identifiers, to access online content.” How is the government expecting the users to authenticate, e.g., integration with existing LDAP? Is two-factor Authentication (2FA) required? (Section

3.6.1 of PWS)

1. Two factor authentication is not required. It is your responsibility to explain your integration practices. Google or classlink is an example.

Does NIST 800-171 need to be implemented? Is a pre-award or post-award Assessment required? (ADDENDUM-INSTRUCTIONS TO

OFFERORS)

Yes, this is a directive as well as the Cloud Computing Security Requirements Guide (a DISA Publication). Yes, a pre-award assessment is required.