Cybersecurity_Engineering_-_Industry_questions_and_answers.pdf

Cybersecurity Engineering September 15, 2015 - 0700 hours

Subject Location Reference Question Response 1 Historical Information Could you please tell me the name and contract number of the incumbent contractor related to the opportunity?

Booz Allen Hamilton, Inc. is the current incumbent under Contract Number HQ0147-10-D-0011-0007.

2 Historical Information Is the incumbent contractor allowed to bid on this opportunity?

The incumbent contractor is a large business and is restricted from bidding as a prime contractor.

3 Historical Information Has the acquisition strategy been determined yet? If so, what is it?

Yes. This acquisition is a small business set-aside, cost-plus-fixed-fee.

4 Attachment J-01_Cybersecurity Performance Work Statement

(PWS)

Page 14 - 6.

Security Requirements

This contract requires access of classified information up to and including Top Secret/Sensitive Compartmented Information (SCI).

Contractor employees requiring access to classified information shall be eligible upon the time of Contract Award to possess a security clearance commensurate with the level of information for which they require access. All contractor personnel requiring unescorted access to MDA facilities shall be required to possess and maintain a minimum of a Secret security clearance. The contractor shall defer to the Contracting Officer or their representative(s) for classified access requirements.

Is the Small Business Prime contractor required to have a Top Secret (TS) Facility Clearance (FCL) in place prior to contract award if the employees requiring access to Top Secret information are employed by a subcontractor with a TS FCL?

Yes, consistent with Defense Security Service and OUSD(I) policy interpretation, access cannot be flowed from a prime contractor to a sub-contractor at a higher clearance level than that held by the prime. This is irrespective of the eligibility (FCL) held by a subcontractor, as it is the responsibility of the prime to issue the subcontractor DD 254. Prime contractors are not authorized to award subcontracts that require an FCL higher than their own.

5 Attachment J-01_Cybersecurity Performance Work Statement

(PWS)

Page 17 - 8.4 Government Furnished Property (GFP) Reporting Requirements

Physical Inventory Plan/Schedule and Reports for GFP (CDRL A005). The contractor shall deliver this report within 30 days of completion of the Contractor’s periodic inventory of GFP in accordance with the Contractor’s approved Property Management System.

Must Offerors have their Property Accounting System approved prior to contract award?

No. There is no requirement to have the contractor Property Accounting System approved prior to contract award.

6 Attachment J-01_Cybersecurity Performance Work Statement

(PWS)

Paragraph 3.1 Page, 6, Section (i) - "Align the schedule to incrementally analyze the entire BMDS architecture and periodically update the master information repository."

Does the entire BMDS architecture include existing programs (e.g., GM) and new programs? How many new programs are anticipated?

Yes. The BMDS consists of existing fielded programs and continues to examine new concepts that may evolve into future BMDS efforts, based upon an ever evolving mission to develop, test and prepare for deployment a layered defense against ballistic missiles.

7 Attachment J-01_Cybersecurity Performance Work Statement

(PWS)

Paragraph 3.1 Performance Objective 1 Please provide information to describe the BMDS Cyber- Key Terrain (C-KT)

The BMDS C-KT is a list of the top-level cyber assets that are most critical to specific mission functions of the BMDS mission.

8 L-15.0 List of Section L Attachments; Attachment L-11 Cybersecurity Engineering Request for Access to Bidders' Documents Library

RFP Page 56 L-15.0 List of Section L Attachments Section J - List of Documents, Exhibits, and Other Attachments

L-15.0 lists Attachment L as Cybersecurity Engineering Request for Access to Bidders' Documents Library. The document provided in the L Attachments as L-11 is the Bid to Product Quantities document which is labeled Attachment J-01a in the document header.

Please provide the Cybersecurity Engineering Request for Access to Bidders' Documents Library as Attachment L-11.

Correct the electronic file name for Bid to Product Quantities document.

Add Attachment J-01a Bid to Document to the Section J List of Documents, Exhibits, and Other Attachments

For the final RFP, Section L Attachment L-11 will be the Bidders’ Documents Library, Attachment 11a will be Steps to View Bidders’ Documents Library, and the Bid to Product Quantities will be incorporated into Attachment L-09 and labeled correctly.

9 L-10.7 Client Authorization Letters

Page 4; Attachment L04.

Each offeror, subcontractor, and/or joint venture shall execute a Client Authorization Letter for commercial customers authorizing release to the Government of requested information on their respective performance using the format provided at Attachment L- 04, Client Authorization Letter.

Is a subcontractor's government prime contractor considered a commercial customer for purposes of past performance?

Yes. In order to facilitate the performance confidence assessment process, offerors are signing this authorization letter granting permission to the Government’s Past Performance review team to discuss Present/Past Performance information with the previous commercial customers during the source selection process.

10 L-10.7 Client Authorization Letters

Page 4; Attachment L04.

Each offeror, subcontractor, and/or joint venture shall execute a Client Authorization Letter for commercial customers authorizing release to the Government of requested information on their respective performance using the format provided at Attachment L- 04, Client Authorization Letter.

If a government prime contractor is considered a commercial customer and the prime contractor is also a competitor for a TEAMS program award, will the Government waive the requirement for the Client Authorization Letter if we are able to provide alternate Points of Contact (POCs) in our past performance citations?

No. Each TEAMS contract is a separate acquisition and requires Client Authorization Letters.

11 Section L Attachments General Question Please provide copies of the Section L proposal forms that need to be completed by the offeror in Microsoft Word format.

It is easier to set-up the template and enter responses if the forms are provided in Word format. Section L includes the PPQ form, Consent Letter format, Client Authorization Letter format, OCI Disclosure form, etc.

These attachments will be provided in Microsoft Word in the release of the final RFP.

12 L-14.3 Cost Reasonableness and Realism

Page 49 The following discussion of the benchmarks the Government will employ to access the reasonableness and realism of proposed direct labor rates is provided to make the process more transparent. These benchmarks are not absolute, but offerors proposing direct labor rates outside these benchmarks risk receiving an unfavorable assessment in the form of cost realism adjustments to the offeror’s total evaluated price or being identified to SSA as having cost reasonableness issues.

The minimum requirement for fringe benefit costs is the $4.02 per hour prevailing health and welfare fringe benefits under the McNamara-O'Hara Service Contract Act (SCA). While this acquisition is not covered by the SCA, the prevailing health and welfare fringe benefits will serve as the absolute minimum acceptable fringe benefit cost. Fringe cost less than this benchmark is not compliant with these instructions and by default is unrealistic. Unrealistic fringe benefit costs often have a direct negative impact on the quality of services provided due to the contractor’s inability to retain and recruit qualified staff.

Given the staffing years of experience required for each labor category, the SCA fringe benefit cost of $4.02 per hour as the minimum acceptable to pass the cost realism threshold seems exceptionally low.

Based on expected salaries, the $4.02/hour fringe minimum could result in a range of 6% - 12% fringe cost as a % of labor. In order to prevent aggressively low bidders from bidding unrealistic fringe cost rates, we recommend the government use a more appropriate benchmark that reflects a non-exempt professional workforce, which the SCA does not.

The Government will not use a different benchmark. Fringe cost less than the $4.02 benchmark specified in paragraph L-14.3 is not compliant with the RFP and by default is unrealistic. However, $4.02 may not be realistic for every company or position. Therefore, offerors must demonstrate their proposed fringe benefits cost is reasonable and realistic.

13 Section L-10.4 Past Performance Questionnaire;

Attachment L-02;

Section M-8.0, 3rd paragraph

Page 43 The offeror is responsible for, not later than 14 days prior to the proposal due date, sending Attachment L-02 to respondents of their choice who will subsequently submit information to the Government…

The categories for performance evaluation in the Government-provided PPQ form (Attachment L-02) for TEAMS requests the same type of information that is evaluated in a CPAR. Some Government contracting organizations will not provide PPQ responses because they complete CPARs that are available in the PPIRS system.

Given that the PPQ form requests the same type of information, and that Section M-8.0 indicates information obtained from the PPIRS system will be used for the evaluation, will the Government waive the requirement to obtain PPQs in cases where CPAR information is available in

PPIRS?

No, the requirement will not be waived.

Section L-2.10 Bidders' Library

The Bidders’ Documents Library are representative products and reference documents provided to assist in development of offerors’ proposals. Requests for access to the Bidders’ Documents Library shall be submitted utilizing the instructions at Attachment L-11.

Please provide a list of the documents available in the Bidders' Documents Library.

The list of documents in the Bidders’ Documents Library will be provided in the final RFP.

15 Section L-6.0 Volume II: OCI Management Plan

Section L-6.0 VOLUME II:

ORGANIZATIONAL

CONFLICT OF INTEREST

(OCI) MANAGEMENT

PLAN mentions the MDA- OCI Manual 5013.78. Will MDA provide a copy of that manual for review prior to release (or with release) of the final solicitation?

The Government intends to provide MDA 5013.78- M, Organizational Conflict of Interest (March 13, 2013), in the Bidders' Documents Library.

16 Attachment 3 - Section L Section L L-1.2 and L-14.1 There are inconsistencies with regard to the definition of Major Subcontractors in Attachment 3 - Section L:

Instructions to Offerors. In the general instructions to offerors section L 1.2 it states that “Major Subcontractors” are defined as a subcontractor whose proposed effort provides at least 10% of the proposed total price of the contract. In the Cost/Price section L–14.1 it states “Major Subcontractor” is defined as and includes any subcontractor at any tier that contributes more than 10% of the hours. What definition are Offerors to follow?

There are two definitions for Major Subcontractors.

The definition at paragraph L-14.1 (the 10% of proposed hours) is strictly intended for the Cost and Price Volume.

17 Attachment 3 - Section L L9.0 Small Business Compliance Plan Given that this is a small business set aside, is there a need for the small business Prime to develop this plan? If it is required, what SB measures apply and how will it be evaluated?

There is a requirement for small businesses to submit a Small Business Compliance Plan to show how the offeror will comply with FAR 52.219- 14(c)(1). The evaluation criteria for Small Business is located in Section M, paragraph M-7.0.

18 Attachment 3 - Section L L-10.3 Page 43: "…a maximum of 10 Past Performances may be submitted."

Is there a minimum number?

Also, what is the evaluation criteria for Past Performance?

There is no minimum number of past performances that may be submitted. The evaluation criteria for Past Performance is located in Section M, paragraph M-8.0.

19 Draft RFP FAR Clause 52.218-28(d)

Page 43: "…a maximum of 10 Past Performances may be submitted."

FAR Clause 52.219-28 (d) on page 43 identifies the size standard as 500 employees.

Then Clause 52.219-1 (a) (2) on page 65 identifies the size standard to be $27,500,000.

It is our understanding that it is the $27.5M size standard.

The NAICS code for HQ0147-15-R-0022 will be amended to 541690 (Other Scientific and Technical Consulting Services) for the final RFP. The corresponding size standard is $15,000,000.

20 Attachment 3 - Section L Paragraph L-5.1 and Table L-1

Company Information Company Information, requires offerors to provide Company/Division Address, Identifying Codes, Applicable Designations, street address, cage code, DUNS, and other identifying information. This information is not included in Table L-1. Will the Government add this requirement to L-1 or does the Government wish this to be included in the 10 page Executive Summary of the Offeror's proposal?

The company information requested in paragraph L-

5.1 shall be included in the Volume 1 Executive Summary (Tab 3: Executive Summary Content).

21 Attachment 3 - Section L L-10.2 Organizational Structure Change History Does the Government require organizational structure change history for the offeror and major subcontractors or all teaming partners?

The organizational structure change history applies to the offeror and all teaming partners to include any subcontractors.

22 Attachment 4 - Section M M-9.1 Subfactor TS1: Technical Expertise/Approach When evaluating the Technical Volume, will solution innovation (ideas, products, process/procedure) be considered as part of the weighted factors within the evaluation criteria?

TS1, Technical Expertise/Approach, measures the degree to which the offeror demonstrates a comprehensive understanding of the nature and scope of work required by the PWS and the Key Product Tables. TS2, Technical Staffing/Approach measures the degree to which the offeror comprehends the PWS based on its proposed technical staffing approach to meeting requirements, to include labor skill mix, key personnel, education and/or experience, and team composition. Solution innovation will only be evaluated within the above constraints.

Section M-4.0, Factor F1: OCI Management Plan

Page 60 "The team will evaluate how the offeror identifies, evaluates, and resolves actual and potential OCIs; the adequacy of its OCI training and oversight programs; the adequacy of its procedures for complying with MDA OCI Manual 5013.78-M, MDA Policy Memorandum No. 51, and TEAMS OCI Policy and OCI Clause (H-09) and the soundness of its processes to protect proprietary and nonpublic information from unauthorized disclosure."

Please provide all referenced attachments to be addressed in the OCI Plan; e.g., a copy of "MDA OCI Manual 5013.78- M," which was not provided with the DRFP.

The Government intends to provide MDA 5013.78- M, Organizational Conflict of Interest (March 13, 2013), in the Bidders’ Documents Library.

Paragraph L-2.10 states, the Bidders' Documents "will be made available for review in a Bidders’ Library located in MDA’s Von Braun III facility, Redstone Arsenal, AL. Requests for access to the Bidders’ Documents Library shall be submitted utilizing the instructions at Attachment L-11."

Section M-4.0, Factor F1: OCI Management Plan

OCI Does MDA see any Organizational Conflict of Interest (OCI) with a Prime or Subcontract offer on the Cybersecurity Systems Engineering TEAMS contract also bidding as a prime or subcontractor on the Computer Security Management/Computer Network Defense

(CSM/CND) TEAMS

contract?

OCI assessments are fact specific and dependent upon the nature of the specific contracting situation. See FAR 9.505. However, contractors supporting the Ballistic Missile Defense System cyber security management/computer network defense area will likely be unable to also support the IT cyber security and IT management and analysis areas. See Attachment L-12.

Sheet1