QAIVV.pdf

Industry Day Questions

QQ&A, IV&V | IV

Question Answer

Good afternoon. I am writing regarding the Assessment and Authorization Support Draft

SOW. This was released last November 17 in the Special Notice HSFE30-15-S-0001. Is there an incumbent contractor associated with this work?

If so, are you able to provide the name of the contractor and the contract #? Or, is this considered a brand new requirement?

There is no draft SOW for this line of business.

There are current contracts in place with three vendors.

What is the delivery mechanism for delivering constructed software and systems to QA and

IV&V?

Software is delivered from developer into FEMA's Integrated Test Environment for User acceptance testing and IV&V.

Which contract manages and makes changes to the process for delivering constructed software and systems to QA and IV&V?

FEMA has a development process for software delivery, which falls under Application

Development.

What is the time expectation for completion of QA and IV&V activities? How is this expectation enforced? Suggest an SLA be placed on IV&V to handle different type sizes of changes.

The timeline is based on the size of the release and the agreed upon schedule with the system owner.

What is the role of ADES once QA and IV&V begins for any particular software/system?

ADES will provide a SME for questions and if software/system fails, it will be rolled back to the system owner and developer for resolution.

What expectations of responsiveness are there for interactions between ADES and QA / IV&V during testing activities?

SME will be available for questions during the testing phase. Code is locked, so no system changes are allowed during testing.

What is the role of ADES once QA and IV&V ends for any particular software/system?

This depends on the success of the testing. If testing fails, the developer/system owner would resolve any issues.

How are issues found during QA and IV&V communicated to ADES?

Issues are found through the FEMA's Delivery

Manager and System Owner.

Question Answer What are the expectations for ADES in resolving issues found during QA and IV&V?

That would be handled by the Application

Development contract.

Where is IV&V performed?

In FEMA Integrated Test Environment or an agreed upon environment.

Who is responsible for creating and managing the

IV&V infrastructure?

System Development Engineering & Integration

Division

What is the difference between the “Testing & Quality Assurance” tasking within ADES and the

Testing activities of the “Quality Assurance, IV&V” contract?

The current IDIQ QA contract scope encompasses quality assurance and program management;

configuration management; requirements management and requirement definition; risk management and test management to include

IV&V activities.

Who ensures that requirements are understood correctly and consistently by all FEMA contracts?

How do we ensure that QA and IV&V interpret requirements in the same way as ADES and the mission areas? For example will ADES contractor be part of IV&V testing document review?

Requirements definition between the program office, development, test management and FEMA operations are reviewed and discussed in multiple meetings through out FEMA System Engineering

Life Cycle.

Question Answer

Given the expected scope of work for the Quality Assurance (QA)/IV&V solicitation, is it correct that the QA/IV&V awardee will be prohibited from performing work on the other procurements for which they will perform QA/IV&V? For example, the vendor providing the Independent Validation of Certification and Accreditation would not be permitted to perform work on the Information

Technology Security procurements (i.e.

Assessment and Authorization and ISSO) to ensure the QA/IV&V is truly impartial and independent.

The current contract does prohibit awardees from performing work on other contracts.

Q&A, IV&V