Attachment VII - C4IT IT IA Sec Mgmt Spt Svcs List of QuestionsandAnswers.docx

C4IT SC INFORMATION TECHNOLOGY INFORMATION ASSURANCE SECURITY MANAGEMENT SUPPORT SERVICES

HSCG79-11-R-123456

LIST OF OFFEROR QUESTIONS AND GOVERNMENT ANSWERS

GENERAL RFP QUESTIONS

Q1. In Section E-4 under “REQUIREMENTS FOR PROPOSAL FORMAT,” you refer to the word “Section” I-V do you mean Volume I-V?

A1. All references to Sections I-V have been revised to read “Volumes I – V”.

Q2. Section E.6 Offer Due Date and Offeror Submission Address Would the Government please extend the due date by at least two weeks?

A2. The RFP closing has been changed from 17 to 1 February 2011.

RFP document

Q3. Would the Government please provide a separate Word or PDF version of the RFP with page numbering so bidders can ensure they have a complete document? When it first appeared on the FBO web page, the RFP ended with Section E.8 at the end of Factor 2 Management Approach. Several days later, we noticed that Section E.8 continued on with Subfactors 1 and 2, Factors 3, 4, and 5, and included sections E9, E.10, and E.11. Currently the document ends with the subsection E.11, Alternate II (Oct 2000) (iii) Address. Is this a complete RFP document?

A3. The combined synopsis/solicitation RFP will be provided in a word document with the posting of the list of questions and answers, Amendment Two to this solicitation.

Section E.2 FAR 52.212-1 Instructions to Offerors

Q4. The NAICS code and small business size standard for this acquisition appear in Block 10 of the solicitation cover sheet (SF 1449). Would the Government please provide the SF 1449?

A4. The SF 1449 (Section A) will be generated at award. The NAICS code is provided on the first page of the RFP.

Section E.4 Proposal Preparation Instructions

Q5. Information requested under "REQUIREMENTS FOR PROPOSAL CONTENT" for all 5 volumes is missing.

Would the Government please provide content instructions for each volume?

A5. Section E.4 has been revised to provide additional instructions, see Amendment Two.

Q6. Reference Section E.4 Proposal Preparation Instructions- Volume II Management Approach shall include all information requested under "REQUIREMENTS FOR PROPOSAL CONTENT" for Volume II and shall be limited to 10 Pages. This offeror respectfully requests the Contracting Office provide additional guidance regarding the Government's desired content of Volume II. Is this acceptable to the Government?

A6. As stated above, Section E.4 has been revised to provide additional instructions, see Amendment Two.

Q7. Reference Section E.4 Proposal Preparation Instructions- Volume III Quality Control Information shall include all information requested under "REQUIREMENTS FOR PROPOSAL CONTENT" for Volume III and shall be limited to 5 Pages. This offeror respectfully requests the Contracting Office provide additional guidance regarding the Government's desired content of Volume III. Is this acceptable to the Government?

A7. As stated above, Section E.4 has been revised to provide additional instructions, see Amendment Two.

Q8. Reference Section E.4 Proposal Preparation Instructions- Volume IV Past Performance Information shall include all information requested under "REQUIREMENTS FOR PROPOSAL CONTENT" for Volume IV and shall be limited to 5 Pages. This offeror respectfully requests the Contracting Office provide additional guidance regarding the Government's desired content of Volume IV. Is this acceptable to the Government?

A8. As stated above, Section E.4 has been revised to provide additional instructions, see Amendment Two.

Q9. Reference Evaluation Factors - Factor 4: Past Performance. Each offeror shall provide a minimum of three (3) references. Is the five (5) page limit for each individual Past Performance reference or for the entire Section IV?

A9. As stated above, Section E.4 has been revised to provide additional instructions, see Amendment Two.

Q10. RFP Section E.4 Proposal Preparation Instructions: Will compliance matrices be counted in the page count?

A10. No, compliance matrices will not be counted in the page count limits.

Q11. RFP Section E.4 Proposal Preparation Instructions: Do resumes, statements of availability and commitment letters count towards the page limit in Volume II?

A11. No, resumes, statements of availability and commitment letters do not count against the page limit in Volume II.

Q12. RFP Section E.4 Proposal Preparation Instructions: Do Sections A, B, and K count towards the page limit in Volume V?

A12. No, Section A (SF 1449), B, and E (changed K to E) do not count against the page limit in Volume V.

Q13. RFP Section E.8 Evaluation Criteria and Relevant Importance: Factor 1 Technical Approach, Sub Factor 1 and 2 specifies that the contractor must provide several samples and narratives. Do these samples and narratives count against the total page count of the technical volume?

A13. No, samples and/or examples will not be counted against the page limit; narratives ; however, narratives will be counted against the page limit and should not be submitted as “attachments”.

Q14. RFP Section E.8 Factor 3, Sub Factor 1, Quality Control, it is specified to not submit a quality control plan with the proposal, yet the offerors must provide a copy of their quality control processes and procedures that are standard industry practices. Can the Government please clarify the expectations for this section and if offerors are providing additional content, is this content included in the page count?

A14. Offerors are required to provide a copy of their existing standard industry quality control processes and procedures. Content is not included in the page count.

Q15. E.8 Evaluation Criteria and Relevant Importance – Past Performance Volume

On page 36, the Solicitation states, “Each offeror shall provide a minimum of three (3) references to include specific points of contact, e-mail addresses for those contacts, contract number,contract type, contract period of performance, and brief description of the requirement.” Then on page 37, it states, “A list of similar contracts, delivery orders, purchase orders and/or subcontracts completed during the past 3 years, a list of similar contracts, delivery orders, purchase orders and/or subcontracts currently in progress, or a combination of similar contracts, delivery orders, purchase orders and/or subcontracts that have either been completed in the past 3 years or are currently in progress.” and provides criteria A-J. It is unclear if the offeror is to provide three references AND a list of similar contracts, delivery orders, purchase orders and/or subcontracts with criteria A-J. Please provide clarification.

A15. Past Performance information should include all information as required by E.8, pages 37 and 38. The government anticipates receiving a minimum of three references from the price directly tied to contract actions in progress or completed within the last three (3) years submitted for relevancy. Government does not want copies of past contracts but expects the data IAW A-J of Section E-8 of the RFP. See Amendment Two for additional instructions.

Q16. E.4 Proposal Preparation Instructions

Volume V – Price Information. Please confirm the five page limit for Section V, which includes Sections A, B, and K.

A16. The page limit for Volume V does not include Section A (SF 1449), Section B or Section E (changed from K to E). In addition, Volume V page limit does not include Attachment II.

Q17. Who are the incumbent contractors for these three branches under the IA division cited in the proposal?

A17. There is no incumbent for this specific effort. However, the following are the companies providing portions of the services for the CG IA program:

· General Dynamics IT

· SMS Data Products

· Pillar Systems

· Truestone

· Advanced Concepts Incorporated

· Computer Sciences Corporation

Q18. Attachment II Since the “Attachment II Pricing table” Grand Totals for each year are a sum of the “TOTAL with Fully Burdened Labor Rates”, and do not apply to the “TOTAL with Fully Burdened Labor Rates with Discount” column, is the offeror required to complete this column, or areany applicable discounts determined at the task order level?

A18. As a clarification, offerors must provide both fully burdened labor rates and fully burdened labor rates with discounts (If offered). In addition, the Total Labor should be calculated based on the discounted fully burdened labor rates only. The labor rates proposed are fixed at contract award for the life of the contract.

Q19. Please confirm that hard copy proposals are to be submitted as five (5) volumes placed together in one loose-leaf binder, with each volume separated by tabs/dividers, and that one original and five copies of the hard copy submission are required.

A19. To clarify, please provide an original and five (5) sets of your proposal. Each Volume should include all information to meet the requirements of that Volume to include narratives, attachments, appendices, samples, examples and/or resumes (if required) in three separate loose-leaf binders. Volume 1 which includes Factors 1 through 3 - Technical Approach, Management Approach and Quality Control, Volume 2 which includes Past Performance and Resumes and Volume 3 which includes Price/Administration [Section B.1., Attachment II and Section K, ect.] should be in three separate binder Volumes. Each Volume should include a cover letter, TOC, and/or a compliance matrix (if submitted). In addition, six sets of three CD’s are required (an original and five (5) sets) are required. See Amendment Two for further instructions.

Q20. Past Performance References

May past performance references of subcontractor team members be included in the proposal?

A20. Yes, past performance references of prime contractors, teaming partners and 1st tier subcontractors should be included in Volume II if the information is pertinent to this requirement. See Amendment Two for further instructions.

Q21. If past performance cited is as a subcontractor, should the names of references provided by those personnel from the prime contractor, or Government personnel for the prime’s contract?

A21. Yes, if past performance information is provided from a 1st tier subcontractor, the prime contractor and Government personnel POC information should also be included.

Q22. Synopsis/Solicitation

Will a DD form 254 be issued for this solicitation?

A22. Yes, see Attachment V

Q23. Would the Government consider a two week extension to Jan 31, 2011, this is due to loss of man hours over the holidays and a recent snowstorm.

A23. The RFP closing has been changed from 17 to 1 February 2011.

Q24. RFP Attachment II - IT IA Pricing Table

In each of the worksheets, Cell C16 points to cell E9. Cell E9 is the price without discount. Shouldn’t C16 point to cell F9?

A24. Yes, the Labor Total should be calculated with Discounted fully burdened labor rates (If offered). See revised Attachment II.

Q25. Period of Performance

For planning purposes, what is the expected start date and period of performance?

A25. It is anticipated that the start date will be on or after 1 March 2011 through 29 February 2016; Year One may begin on or after 1 March 2011. This is a five (5) year IDIQ.

Q26. Tab: “Contract Year 1” through “Contract Year 5” : For the Estimated NTE Total For Labor PLUS Travel & Materials (Row 15), particularly CY-1 Estimated NTE Fully Burdened Labor (Row 15, Column C:D), does USCG intend the formula to be “F9”, TOTAL with Fully Burdened Labor Rates with Discount, instead of cell “E9”, TOTAL with Fully Burdened Labor Rates?

A26. Yes, the Labor Total should be calculated with Discounted Fully Burdened Labor Rates (if offered). See revised Attachment II.

Q27. Attachment II - IT IA Pricing Table 13 Dec 10, the 'All Years Total' tab, cell C4 for Project Manager, does not calculate properly. It skips Year 2 and Year 4 and doubles Year 3 and Year 5. All other categories correctly calculate all 5 years total's. Does the calculation need to include Year 2 and Year 4?

A27. Yes, a revised Attachment II will correct this error.

Q28 C4IT Pricing Table: Please provide additional instructions on what the Government would like to see in the “Fully Burdened Hourly Labor Rate” and the “Fully Burdened Hourly Labor Rate with Discount” columns of the Pricing Table.

Specifically, does the Government request that offerors convey discounts off of their GSA Schedule rates?

A28. See answers to question 18.

Q29. Will the government allow a compliance matrix at the beginning of each volume to facilitate quick location of elements of the proposal in reference to the performance work statement? If so, will the matrix go against page count? Similarly, will an acronym list be exempt from the page limits?

A29. Yes, a compliance matrix and/or acronym list can be included at the beginning of each Volume, and no, they will not count against page limits.

Q30. Under Evaluation Factors section, Factor 4 “Past Performance,” the Government requires that “[e]ach offeror shall provide a minimum of three (3) references ….” We cannot find a reference to inclusion of team members in this requirement, although we assume the Government wishes references from team members as well. Please clarify.

A30. Yes, past performance information to include (3) references from prime should include teaming partners. See Amendment Two and answer to question 20.

Q31. Section K is usually the Representations and Certifications. These are provided in Section E of HSCG70-11-R-123456. Should “Sections A, B, and K” in Section E.4 read “Sections A, B, and E?”

A31. Yes, See Amendment Two.

Q32. Contract Year 1 through 5, Travel CLIN – DHS/USCG asks for a discount percentage on travel, this is not an offering. Per federal regulations Travel is to be billed at cost plus (approved/reasonable) G&A. We provide a discount to our DCAA approved G&A but the format does not allow us to express this. Changing “Discount % off GSA Schedule List Price” to “Travel G&A” is recommended. How does DHS/USCG wish to proceed. In all cases, the NTE amount, or total amount will not change and is capped at $75,000 per year or $375,000 for the term of the agreement.

A32. See Revised Attachment II, the Government is not requiring a discount of the NTE Travel and, in fact, the NTE Travel provided in Attachment II shall not be altered.

Q33. All Years and Contract Year 1 through 5, Additional CLIN – though not noted in annual or total tabs it is noted in the solicitation. Does the government want an ODC material handling rate to be provided or will this be addressed on the task order level.

A33. See revised Attachment II and Amendment Two.

SPECIFIC TECHNICAL QUESTIONS

Q34. Within the FBO solicitation announcement, section “Product or Service Description”, 2nd paragraph, last sentence, it states “The Contractor may play a support role in the capacity of a subject matter expert (SME)…” The Pricing Table only provides for 6 labor categories, none of which is SME. Could the Government please add a (new) SME labor category, with an appropriate number of yearly hours, to support the need for SME consulting that, in our experience, will be required during the year for most task orders. The contract is an IDIQ that will award multiple task orders, each with a varying need for potential SMEs. The additional SME labor category will provide the Coast Guard with flexibility and pricing options for future task orders.

A34. SME’s are not required as a labor category.

Q35. Section E.8 EVALUATION CRITERIA AND RELEVANT IMPORTANCE Factor 1: Technical Approach, Sub-Factor 2: Use of industry standard and/or non-proprietary tools.

“Contractor shall provide a one-page narrative of Intrusion Detection System (IDS) tools utilized in support of a government agency's computer network defense to include how the data was analyzed, the name of the agency and POC information.”

Please clarify the content instructions for this requirement?

a. Does just the one page narrative of IDS tools constitute the contents of this section or is this one page narrative to be an attachment to the volume and in addition to the content of this section?

b. Is the offeror to describe all tools used in each of the four technical areas – CIRT, C&A, SecureComm, and training?

A35.

a. Yes, the one page narrative of the IDS tools should be included in the volume.

b. The offeror shall describe tools used in the area containing the discipline of IDS data analysis only.

Q36. PWS 1.3.3

"Citizens of the United States…" - Does this limit all work under contract to U.S. Citizens and explicitly exclude legal right to work individuals (like H1b visa holders)?

A36. The PWS states that the contractor personnel must be able to obtain and maintain a security clearance and clearances are only issued to U.S Citizens.

Q37. PWS 6.0

Requirements – “A POC will be assigned to each of the areas C&A, CGCIRT, and SECCOMS.”

Does this imply that a POC is not required for IA related training?

A37. The POC’s for training activities will fall under the areas of C&A, CGCIRT, and SECCOMS.

Q38. Where specifically will OCONUS work occur?

A38. The CG has multiple locations overseas. (i.e. The CG has a site in Cuba, Japan and various ports of calls where USCG cutters may deploy to.)

Q39. RFP Section B.1 Labor Categories: Will there be labor categories for support personnel such as technical writing, contracts, finance, etc?

A39. No.

Q40. RFP Section B.1 Labor Categories: Can the Government provide labor category descriptions, including minimum relevant experience and education?

A40. See Attachment VI.

Q41. RFP Section E.8 Evaluation Criteria, Factor 2, Subfactor 2 states: Proposed organizational structure and staffing. The offeror's proposal will be evaluated on their proposed overall organizational and staffing structure, to include: (1) staffing levels that align personnel by proposed task and proposed labor category, and (2) staffing information to support their proposed level of effort for the tasking detailed in the PWS.

For (2) staffing information to support their proposed level of effort for the tasking detailed in the PWS, can the government clarify what types of staffing information they expect?

A41. See Attachment VI.

Q42. PWS 1.3 Contractor Personnel: Does the Government expect the PM to function as the Team Lead? If so, would the Government consider revising the number of hours required under the RFP for the PM?

A42. No.

Q43. PWS 1.3.3 Qualified Personnel: Task orders may require top secret or higher clearances. Can the USCG designate specific labor categories for TS?

A43. To be determined (TBD) at task order level.

Q44. PWS 1.4 Key Personnel: What positions will be designated as Key?

A44. At the contract level Program Manager and alternate will be designated as key personnel. At the task order level all senior level positions for each labor category will be considered as Key Personnel.

Q45. PWS 1.4 Key Personnel: Are the number and skill set of key personnel at the option of the bidder?

A45. See Attachment VI of Amendment Two.

Q46. PWS 1.4 Key Personnel: Given that this is an IDIQ contract; will key personnel be handled at the IDIQ or Task Order level? If key personnel will be addressed at the IDIQ level, how many key personnel will be required for each labor category?

A46. See answer to question 44.

Q47. PWS 6.0 Requirements: What are the tools that will be utilized on the services for this contract?

A47. Offerors should be familiar with tools that support computer intrusion detection systems, vulnerability scanning etc.as detailed in the PWS that support IA disciplines.

Q48. In the Synopsis, Management Section, Sub-Factor 1 and Sub-Factor 2. In multiple places, the synopsis references a requirement to provide resumes. Can the Government clarify the following: 1) Are you only interested in resumes of key personnel or resumes of non-key personnel as well, 2) If non-key personnel resumes are requested, is there a limit to the number of resumes you want provided, and, 3) Is it the Government’s intent that these resumes count against the page allocation for the Management Approach (Volume II)?

A48. See answer to question 44. Government reserves the right to request resumes for non key personnel at the task order level as determined necessary. Resumes do not count against the page limits.

Q49. In the Synopsis Factor 3, Sub-Factor 1, the Government states “Offerors must provide a copy of their quality control processes and procedures that are standard industry practiced.” Please clarify if it is the Government’s intent to request a copy of our Corporate Quality Control Procedures Document and whether this document will count against the five (5) page limit for the Quality Control Volume (Volume III).

A49. See answer to question 14, See Amendment Two.

Q50. E.8 Evaluation Criteria and Relevant Importance – Tech Volume Regarding the requirement for a TEMPEST certification document, as stated, "The Contractor must provide one (1) example of how TEMPEST requirements and support have been met through previous contracts. The example shall include certification document or TEMPEST Field Technical Authority." If the offeror’s Accreditation Letters to meet this requirement are classified documents, through what classified means would the USCG like to receive the documents (i.e., separate from the unclassified proposal)? Alternatively, please clarify the requirement or state an alternative to the certification document. The solicitation section referenced alludes to an alternative to the certification document, but ends the sentence with "TEMPEST Field Technical Authority" without providing additional guidance.

A50. We are asking the offeror to provide proof that their personnel or contractor is TEMPEST qualified by providing a TEMPEST Certification Letter or Certificate. Use general narrative information to provide this proof. Do not use any classified data.

Q51. Solicitation Section E.8, Factor 1, Technical Approach states that "The contractor shall provide one documented example of a successful Certification and Accreditation submission of a major application or system for a government agency to include agency name, project plans, documents completed, methodologies used and number of revisions required in the overall process."

Please confirm that the government seeks the offeror to provide general process experience in this solicitation requirement rather than detailed documentation of specific plans and documents in this example. This offeror is concerned that such a "documented example" of specific plans and documents may include material that the subject organization would consider sensitive and not releasable, even to another government agency.

A51. See Amendment Two.

Q52. Solicitation Section E.8, Factor 1, Technical Approach states that "Contractor must provide one documented example of IA Tactics Techniques Procedures (TTP) developed for the government by your organization."

Please confirm that the government seeks the offeror to provide general process experience in this solicitation requirement rather than detailed documentation of specific plans and documents in this example. This offeror is concerned that such a "documented example" of specific plans and documents may include material that would be considered sensitive and not releasable, even to another government agency.

A52. See Amendment Two.

Q53. PWS 6.2.1 Information System Security states that "The Contractor shall assemble packages at the direction of the COTR, and provide two (2) copies of the package. A SBU package shall consist of 11 artifacts but not limited to: Certification memorandum; Accreditation memorandum, MOA or ISA, Consent to Monitor memorandum, SSP, FIPS-199, Rules of Behavior, NIST 800-53 , ST&E, Contingency Plan, Contingency test document, Security Assessment Report, and the POA&M. A Classified package shall consist of but not limited to: Network Topology, Consent to monitor, Statement of Residual Risk, SSP, Implementation Plan, Identification Profile, Scorecard, POA&M, Risk Assessment, and Contingency Plan."

The offeror understands that the requirements of 800-53 are documented in the SSP. There should be something that documents the SP 800-53A assessment. Please clarify this requirement.

A53. The government considers PWS 6.2.1 as clearly defined.

Q54. The following sections reference non-existent sections within the PWS:

Section 1.8 (pg 4 of 19): “The Contractor employees assigned to provide support as watchstanders shall perform all work 24x7x365, Monday through Sunday, including holidays. (See PWS 7.1.3.1)”

Section 6.1.2.2 (pg 10 of 19): “The Contractor shall provide findings and supporting documentation to complete the security certification and security accreditation packages (PWS 7.1.2)”

Section 9.0 (pg 17 of 19): “Maintain the highest degree of security trust when accessing USCG’s resources, networks, systems, (see PWS 7.1.1)

Section 9.0 (pg 18 of 19): Ensure all classified and unclassified systems have Certification and Accreditation documentation. (PWS 7.1.1.1)

Maintain CGCIRT intranet web pages (PWS 7.1.3)

Provide 24 Hour watch to monitor and secure the Coast Guard Data Network (CGDN) (PWS 5.1.3.1)

Provide security analysis to both the classified and unclassified systems through the detection of intrusions. (PWS 5.1.3.1)

Section 9.0 (pg 19 of 19): Maintain ISS Training Documents (PWS 7.2.2)

Can the government provide the referenced sections or the appropriate PWS references?

A54. See revised Attachment I - PWS.

Q55. Please provide section location in the solicitation where offeror can identify “Place of Performance” acronyms C2CEN and OSC. In addition, their physical location(s), and the specific location(s) of the Electronic Support Unit facilities located throughout the United States.

A55. The following locations of the ESU’s: Boston, Portsmouth, St. Louis, New Orleans, Alameda, CA, Seattle, and Honolulu. OSC is Operations Systems located in Martinsburg, WV. Command. C2CEN is now known as C3CEN: The Command, Control, and Communications Engineering Center located in Portsmouth, VA. See revised Attachment I - PWS.

Q56. Technical Approach, Sub-Factor 1. Several examples are requested in order to document relevant experience. Please clarify what POC information is to be submitted for each example, e.g., Customer agency, Technical POC name/email address, and Contract POC name/email address.

A56. The government would like to see POC information depicted as: Customer agency, Technical POC name/email address, and Contract POC name/email address.

Q57. Technical Approach, Sub-Factor 1 and 2. Are the 1-page narratives included as part of the 30-page limit for the Technical Approach volume, or may they be included as appendices?

A57. All narratives are included in the page limit for Volumes 1, 2, and 3.

Q58. Please clarify which positions are considered Key Personnel for the purposes of this solicitation.

A58. See answer to question 44.

Q59. Please provide clarification on which resumes are desired as part of the offeror’s submission.

A59. See answers to question 44.

Q60. Please confirm that resumes are not included in the page counts for the Technical and Management volumes.

A60. No, Resumes are not included in page count limits.

Q61. The Management Approach, Sub-Factor 1 refers to the “on-site Contract Program Manager.” Please confirm that this refers to the offeror’s Program Manager responsible for oversight of performance on the contract, and that this individual is expected to have a presence at the Government’s site. Please identify the location where this individual will be located.

A61. The Program Manager is responsible for oversight and performance of the contract. An onsite PM is not required.

Q62. What are the OCONUS estimated man hours and what positions will potentially be OCONUS?

A62. TBD at task order level.

Q63. Has the TEMPEST work been started on any of the vehicles that are presently fielded?

A63. TEMPEST work has been performed under other contracts, this RFP is to support the Coast Guard Certified TEMPEST Technical Authority (CTTA).

Q64. Is there an existing data base of TEMPEST information that will need to be transferred and maintained?

A64. A TEMPEST tracking system is currently in place and being utilized. There is not a new requirement for management of this data base or the creation of a new database to be maintained.

Q65. Is this TEMPEST data base just being established?

A65. See answer to question 64.

Q66. Has there been a time line established to perform the TEMPEST evaluation on the existing fleet?

A66. No, TEMPEST requirements and scope of work will be identified at the task order level.

Q67. Synopsis/Solicitation

Is there a facility clearance requirement for this Solicitation?

A67. No. If a facility clearance is required it will be identified at the task order level.

Q68. Are there Government expected education and years of experience required for the labor categories specified?

A68. See Amendment Two, Attachment VI.

Q69. Would the Government considered adding a Subject Matter Expert (SME) labor category to cover more complex security issues that may arise in the course of this contract?

A69. See answer to question 34.

Q70. PWS, Paragraph 4.1

At that physical location or locations will workspace and other GFE be provided?

A70. See PWS 1.7

Q71. E.5 – RFP Questions

The Performance Work Statement refers to a Project Manager, Team Leaders and Points of Contact (POCs) for C&A, CGCIRT and SECCOMS.

a. Is there a requirement for a Program Manager?

b. Can you please clarify the differences between the roles of the Project Manager and the Team Leaders?

c. Can you please clarify the differences between the roles of the Team Leaders and POC

d. Under the Labor Categories (Attachment II) there is a labor category for the Project Manager.

e. Under what labor category are Team Leaders and POCs to be bid? Is there a requirement for a POC for IA Training Support?

A71.

a. Yes. See attachment II

b. Team leaders will liaison with Program Manager to conduct the personnel management and taskings provided by the government.

c. Team Leaders will be the onsite contact for government POC’s and company project manager for personnel issues and taskings outlined within the PWS.

d. No

e. Team Leaders will be Senior Positions. There is no POC labor category. See revised PWS. Section 6.0.

Q72. Is a resume required for any Key Personnel identified in the proposal? If so, in what volume should the resume(s) be included? If resumes are required, is there a preferred format? Do resumes count against the page count for the Volume in which they are included?

A72. Yes. Volume I. No. No.

Q73. The RFP, Section E.8, Factor 1, Sub-Factors 1 and 2 specifically identifies the one page narratives that required for Vulnerability Management and Scanning, IT Forensics, and Intrusion Detection Systems. Do these one page narratives count against the 30 page Technical Volume page count? If not, are these one page narratives to be included as attachments to Volume 1?

A73. Yes.

Q74. The RFP, Section E.8, Technical Approach, Sub-Factor 1 states: “Contractor must show previous experience in providing Information Systems Security Officers duties by including one (1) example of how they have supported government agencies. This example shall show experience with DHS or DoD mandated tools in support of ISSO duties. The example shall be supplemented by resumes of the ISSO.”

a. Is there a preferred format for the resume?

b. Does the resume(s) count against the Volume 1 page count?

c. Should the resume(s) be included as an attachment to Volume 1?

d. Since the resumes will have the names of the ISSOs, will they be considered Key Persons?

A74.

a. No.

b. No.

c. See volume 1, factor 1, subfactor 1.

d. See volume 1, factor 1, subfactor 1. ISSO’s may be designated as key personnel at the task order level.

Q75. The RFP, Section E.8, Management Approach, Sub-Factor 1 states: “Resumes for key personnel, including past and/or current experience, education, and/or training, along with statements of commitment from key personnel/Teaming Partners, shall be submitted as part of the offeror’s proposal.”

a. Is there a preferred format for the resume(s)?

b. Does the resume(s) count against the Volume II page count?

c. Should the resume(s) be included as an attachment to Volume II?

d. Can you please explain what is meant by “statements of commitment from Teaming Partners”? Are these in the form of signed letters and/or teaming agreements?

e. Do statements of commitment count against the Volume II page count?

f. Should the statements of commitment be included as an attachment to Volume II?

A75.

a. No.

b. No

c. Yes

d. Yes, teaming agreements or letters of intent should be in the form of a letter.

e. No.

f. Yes

Q76. Volume IV – Past Performance Information: Our strongest Past Performance for the Secure Comms requirements is CLASSIFIED. I expect that other offerors will be faced with the same problem. We can certainly address this past performance within our technical section (6.3 requirements); does the government anticipate that the CLASSIFIED nature of Secure Communications past performance will pose a potential evaluation problem?

A76. Use general narrative information to outline your past performance. Do not use any classified data.

Q77. PWS Page 9 of 19, Section 6.1.1.1 Information Systems Security: The PWS does not direct the minimal staffing requirement to possess an ISSO and/or CISSP certification. Please confirm that these topic/criteria will be provided/discussed at the Task Order level or DD-254.

A77. See Amendment 1 Attachment VI and Yes, discussed at the task order level.

Q78. PWS Page 9 of 19, Section 6.1.1.1 Information Systems Security: The PWS states CONUS and OCONUS support may be required. Please confirm that these topic/criteria will be required/discussed in the Pricing Volume 5 or at the Task Order level.

A78. OCONUS requirements will be identified at the task order level.

Q79. PWS Page 15 of 19 - General questions regarding 6.4 IA Training Support:

a. If courseware is required or needed is SCORM conformance of the courseware required, and if so, which version/edition? There is a 508 component which raises the issue of whether WBT might be on the table since DISA/DOD are large supporters of IA pertaining to courseware.

b. In general, the term “provide support” is uninformative for pricing, since it may consist of merely keeping records; researching, writing, producing, scheduling and teaching traditional classes; writing CBT/WBT programs; acquiring, managing, or hosting a Learning Management System (LMS), etc. Can you clarify the term “provide support” in each of its uses?

c. 6.4.a. - What is the planned length, number of tracks, and anticipated number of attendees of future ISSO Security Conferences and training seminars? Is there a specified (or specific) location? Is the contractor responsible for acquiring, scheduling and funding the venue(s)? Is the contractor responsible for providing or finding speakers for the tracks; for catering? These questions may be generalized as to what is the extent of support required? Is the training seminar a separate event than the Security Conference, as implied by the capitalization of one event and the lower case title of the other?

d. 6.4.b. - May the words “support in providing” be stricken from this line, or is the contractor a secondary level of support? Can you please clarify “support in providing” as used here?

A79.

a. Courseware is not required or needed

b. Support for training will fall within the realms of providing presentations formally or informally for conferences, seminars or briefings.

c. Contractor will not be required to setup ISSO conference events or find speakers. That will fall within the realms of the government’s responsibility. Contractor support may fall within the realm of providing training sessions. Training sessions may be formal or informal in nature. Training Sessions or Conferences are estimated at 1 to 3 days in length, an estimated 2 to 4 conferences annually.

d. No, support for training will fall within the realms of providing presentations formally or informally for conferences, seminars or briefings.

Q80. PWS Page 19 of 19. Section 5 - Administrative support.

a. Should reference to PWS 7.2.2 actually refer to 6.2.2 or is there a section of the PWS missing?

b. What is the desired hierarchy among DoD, DHS and USCG policies for keeping training records? The PWS statement implies one policy covers all three agencies. Is the purpose of that phrasing to ensure redundancy of information in all formats? Is an electronic repository provided or expected?

A80.

a. Yes, there was a typo. Corrected to 6.2.2.

b. CG . See revised Attachment I - PWS

Q81. Under the Labor Categories (Attachment II) there is no labor category for Training. Will training support be a collateral duty under one or more of the identified labor categories?

A81. Training requirements will be addressed under issued Task Order either under Senior or Mid-level Security specialist.

Q82. Can the government provide more details as to the overall level, frequency and scope of IA training required and the geographic dispersal of the training?

A82. Requirements for training will be identified at the task order level. See answer to question 79.

Q83. Re: PWS section 4.0, pg 8 – Will all work be performed on the Government site?

A83. Yes.

Q84. Under Management Approach Sub factor 2, the offeror is required to provide “staffing levels that align personnel by proposed task and proposed labor category”. We request clarification as to what is the proposed task? We note that this is an IDIQ PWS with work performed under issued task orders. Without knowing the number, nature, and magnitude of the task orders, it is not feasible to align personnel by PWS task. Please clarify.

A84. See Amendment Two.

Q85. Rates Are rates to be on-site or off-site rates? Which should be used in the Pricing Table?

A85. Onsite rates should be proposed.

Q86. PWS Page 13, 6.2.1 Information System Security. The requirement states “The Contractor shall develop and maintain USCG Online C&A Web Site and C&A Tracking Tool.” Does USCG expect the task order scope of work under the IDIQ to include application and website development? If yes, under which labor category such work can be bid on a task order post IDIQ award?

A86. No.

Q87. RFP Page 39, Factor 4 – Past Performance. The RFP states “The offeror should not provide general information on their performance on the identified contracts”. On the same page, RFP states “Provide the following information for each contract, delivery order, purchase order, and/or subcontract” (E) Description of Contract Work. Does USG expect Description on Contract Work?

A87. General information should not contain how the company performed. Past performance shall include the following; information for each contract, delivery order, purchase order, and/or subcontract”

Q88. RFP Page 38, Factor 4 – Past Performance. The RFP states “Each offeror shall provide a minimum of three (3) references to include specific points of contact, e-mail addresses for those contacts, contract number, contract type, contract period of performance,”. On the RFP page 39, Period of Performance is not included in the list from A-J. Does USCG expect to see Contract Period of Performance?

A88. See RFP Amendment Two.

Q89. PWS Page 3, Para 1.9 Inclement Weather Or Emergency Conditions. This paragraph states …”In the event the situation occurs, the Contractor shall coordinate with COTR and KO.” Can USCG provide clarification on what is meant by “In the event the situation occurs”?

A89. PWS paragraph 1.9 has been revised.

Q90. PWS Page 5, Para 1.17 Security Certification/Accreditation. Second Paragraph states “…USCG shall provide personnel with the appropriate clearance levels …” Should it state “contractor” instead of “USCG”?

A90. Yes, see revised Attachment I - PWS.

Q91. Is the example of procedures for recruiting, training, and retention to be provided within the 10 page limit or can it be included as an appendix?

A91. Yes.

Q92. Is the on-site Contract Program Manager the same as the “Team Lead” identified in PWS section 1.3?

A92. No.

Q93. Section 1.3.3 of the PWS refers to a DD 254. However, only the DHS MD Number 11042.1, Safeguarding Sensitive but Unclassified (For Official Use Only) Information, was supplied with the RFP. Does the Government mean to refer to this document and not a DD254? What level of facility security clearance is required for the offeror? Will the Government sponsor a TS facility clearance if there is a requirement for TS or TS/SCI personnel? Must the prime contractor have the required level of facility clearance?

A93. See Amendment Two

Q94. Question in 2.2. Are we to develop our structure and staffing levels based on the pricing schedule?

A94. Yes, in addition see Amendment Two of the RFP, Attachment VI.

Q95. What is meant by the proposed level of effort? Is this meant to align with the labor categories and labor hours identified in the pricing table for Year 1?

A95. Proposed level of effort shall be based on all contract years and in alignment with Attachments II and VI.

Q96. Is the contractor to provide information for all personnel for all positions based on the pricing table for Year 1? Are resumes required for these people? Are the resumes outside of the 10 page limit?

A96. No, No, Yes.

Q97. Are the Team Lead and any alternate(s) the only key personnel required to be submitted with this proposal? Are the resumes for key personnel outside of the 10 page limit for this volume?

A97. No, Yes. See answer to question 44.

Q98. Is the copy of quality control processes and procedures excluded from the 5 page limit for Volume III and can it be included as an appendix?

A98. Yes

Q99. Solicitation Section E.8, Factor 1, Technical Approach states that "The contractor shall provide one documented example of a successful Certification and Accreditation submission of a major application or system for a government agency to include agency name, project plans, documents completed, methodologies used and number of revisions required in the overall process."

Please confirm that the government seeks the offeror to provide general process experience in this solicitation requirement rather than detailed documentation of specific plans and documents in this example. This offeror is concerned that such a "documented example" of specific plans and documents may include material that the subject organization would consider sensitive and not releasable, even to another government agency.

A99. See answer to Question 51.

Q100. Solicitation Section E.8, Factor 1, Technical Approach states that "Contractor must provide one documented example of IA Tactics Techniques Procedures (TTP) developed for the government by your organization."

Please confirm that the government seeks the offeror to provide general process experience in this solicitation requirement rather than detailed documentation of specific plans and documents in this example. This offeror is concerned that such a "documented example" of specific plans and documents may include material that would be considered sensitive and not releasable, even to another government agency.

A100. See answer to question 52.

Q101. Please provide section location in the solicitation where offeror can identify “Place of Performance” acronyms C2CEN and OSC. In addition, their physical location(s), and the specific location(s) of the Electronic Support Unit facilities located throughout the United States.

A101. See answer to question number 55.

Q102. There are specific requirements conveyed in the PWS that are not appropriately covered in the Labor Category Tables. Specifically in PWS Sections 6.1.1.2 Network Administration and 6.1.1.3 Web Site Maintenance. These sections stipulate that the contractor shall perform network administration functions, application development, deployment and debug activities, and website administration; however, do not have corresponding labor categories represented in the Labor or Pricing tables to directly address and accommodate these activities.

Will the Government be providing revised Labor Categories and Pricing Tables to account for these additional services?

A102. No.

Q103. Is it the Government’s expectation that the offerors recommend and provide the requisite Labor Categories, and make the corresponding enhancements in the Government’s Pricing Tables, to account for the additional service areas conveyed in the PWS?

A103. No.

Q104. In PWS Section “6.1.1.1 Information Systems Security” the Government states “The Contractor shall provide support as an Information Systems Security Assistant (ISSA) to the ISSOs….”, however, the last bullet in this section states “The Contractor employee(s) providing support as an ISSO shall coordinate and maintain the DHS’ and DOD’s vulnerability database accounts.”

Will the Government clarify if the requirement is for the Contractor to provide an ISSA or an ISSO for this engagement?

A104. In some locations there will be requirements for the contractor to be the ISSO for the unit. In most instances the contractor will be working as an assistant ISSO since there will be an assigned government or military ISSO at the location. This requirement will be identified per task order.

Q105. The scale/nature of the network enterprise will have a tangible impact on the offerors technical solution to the C4IT IA requirement.

Will the Government provide documentation detailing the technical aspects of the USCG C4IT TISCOM Network environment?

A105. No documentation will be provided.

Q106. As stated in E.8 Evaluation Criteria And Relevant Importance, Evaluation Factors, Factor 1: Technical Approach, Sub-Factor 1:

“Contractor must provide one documented example of IA Tactics Techniques Procedures (TTP) developed for the government by your organization. Provide at least one (1) example each of Incident Handling and Concept of Operations (CONOPS).”

Is the Government looking for actual TTP and CONOP artifacts or a narrative on how these were produced for a specific Government customer?

A106. A narrative on how the documents were produced is sufficient.

Q107. As stated in E.8 Evaluation Criteria And Relevant Importance, Evaluation Factors, Factor 1: Technical Approach, Sub-Factor 1:

“The contractor shall provide one documented example of a successful Certification and Accreditation submission of a major application or system for a government agency to include agency name, project plans, documents completed, methodologies used and number of revisions required in the overall process.”

Is the Government looking for an actual C&A artifact or a narrative on how these were produced for a specific Government customer?

A107. See answer to question 51.

Q108. As stated in E.8 Evaluation Criteria And Relevant Importance, Evaluation Factors, Factor 1: Technical Approach, Sub-Factor 1:

“Contractor must show previous experience in providing Information System Security Officer duties by including one (1) example of how they have supported government agencies. This example shall show experience with DHS and or DoD mandated tools in support of ISSO duties. The example shall be supplemented by resumes of the ISSO.”

Is the Government expecting the person with the resume to become a “Key Person” on the contract?

A108. Yes, key personnel will be identified at the issuance of task order.

Q109. As stated in E.8 Evaluation Criteria And Relevant Importance, Evaluation Factors, Factor 1: Technical Approach, Sub-Factor 1:

“The Contractor must provide one (1) example of how TEMPEST requirements and support have been met through previous contracts. The example shall include certification document or TEMPEST Field Technical Authority.”

Will the Government exclude the “...certification document or TEMPEST Field Technical Authority” from the overall page count for the Volume II - Technical Approach?

A109. Yes.

Q110. The Government has not provided information on the incumbent contracts that have, or are currently being used by both the C4&IT Service Center and TISCOM, to support the work efforts covered by the Government’s C4IT IA PWS.

Will the Government please provide information on the incumbent contracts that have, or are currently being used by both the C4&IT Service Center and TISCOM, to support the work efforts covered by the Government’s C4IT IA PWS? (Specifically, size, scope, and duration of contracts and/or issued task orders.)

A110. See answer to question 17 Q111. Attachment I, PWS page 2 of 19: Does the government intend for the “Team Lead” to be considered key personnel? Is the “Team Lead” to be considered equivalent to “Project Manager/Contract Program Manager”?

A111. Team Lead will be designated as key personnel at task order level. The Contract PM is Key at Contract Level.

Q112. Para. E-8, Factor 2 (RFP page 35) – Please clarify: How (in what manner) does the government prefer offerors to “…address the extent to which the proposed key personnel have committed themselves to work on this effort.”?

A112. Letter of intents should be included with the response. Letters will not be included as part of the volume page limits.

Q113. Para. E-8, Factor 2, Sub-Factor 2 (RFP page 36) -- Does the government require signed corporate commitment letters from teaming partner and sub-contractor companies, or does the government require signed commitment letters from personnel employed by teaming partner and sub-contractor companies? Do these commitment letters count against the page limit for this section of the proposal?

A113. Yes. No.

Q114. Para. E.8 (RFP page 34) – The request for a C&A example includes the associated C & A…