Pre_Proposal_Conference_-_6-6-2013_-_Questions_and_Answers.pdf

HSPD-12 Products and Services Pre-Proposal Conference – June 6, 2013

Questions & Answers Q1: Will small business able to get a list of registered attendees?

A: Companies attending conference was posted on June 11, 2013 on FBO.

Q2: Single source or multiple award?

A: This will be a single source award.

Q3: Will the Operational Capabilities Demonstration be graded pass/fail?

A: No. 22 evaluation criteria will be evaluated in accordance with an adjectival rating chart.

Certain criteria are considered basic functionality, and will get more consideration.

Q4: Will Government entertain extensions of due dates?

A: Not likely. Industry received a draft PWS and RFD and had opportunity to provide comments/questions which have been incorporated into the solicitation. The solicitation was released 1 week earlier than scheduled to allow 5 weeks for response. The first Task Order has FY13 funds attached, and therefore must be awarded before the end of the fiscal year.

Q5: Any issues with the current system? Why a recompete?

A: No. The contract period of performance is expiring.

Q6: What are the projected weeks of the OCDs?

A: Last week of July. More details will be provided if/when schedule changes.

Q7: As part of the OCD, will Test PIV use the DHS PROD CA?

A: No, vendors should use a test CA to issue Test PIV.

Q8: Will the government provide test card stock?

A: Vendor to provide question in writing, response needs further evaluation.

Updated Response: No, the Government will not provide test card stock for the OCD.

Q9: Communication with other DHS facilities outside of the DHS network?

A: Communications between backend server(s), EIWS, light activation stations, and CA will stay on

DHS network.

Q10: On a UNCLASS network?

A: Yes.

Q11: Updates to Factor 2.

A: Government is planning to remove “FIPS 201” requirement from Factor 2, and replace with requirement for products from GSA Approved Products List and integrator from Qualified HSPD- 12 Integrator List.

Q12: Since this is a 10-year IDIQ, and there are products that are not currently on the GSA APL which may in fact exceed requirements, will the government consider products that are going thru the approval process?

A: No. Proposed products must be on the APL at time of proposal submission. IDIQ is flexible to support future changes as requirements/product innovation dictate.

Q13: Is the TS/SCI requirement new or does the incumbent meet this requirement?

A: Current requirement.

Q14: Will the government be issuing a DD-254?

A: CO will be requesting a general DD-254, but process may impede that being completed.

Updated Response: The CO requested a DD254 from the appropriate division, but was informed that they will not process one unless classified information is required during the solicitation phase.

Q15: Looking for an innovation solution or solutions with products on the APL? Potential disconnect here.

A: Government is looking for innovation, but must comply with requirements that HSPD-12 products must be tested and certified on the GSA APL. This is also a way for the government to mitigate risk against non-compliant or non-functional solutions.

Q16: GSA lists include non-US companies? Which is more important, US companies or inclusion on GSA list?

A: Prime must have TS facility clearance, which rules out most, if not all, non-US companies.

However, this answer may require further review. Vendor to provide written question.

Q17: What is it you want the IDMS to do?

A: Current solution is a combined IDMS/CMS, but the government wants the IDMS to:

i) Receive data from authoritative sources such as ISMS

ii) Collect and store biographic data from individual during enrollment process

iii) Act as authoritative data source for identity data

Q18: How much of the procurement is card issuance vs. other IDMS functionality such as access and attribute management?

A: Focus of TO1 and IDIQ is core infrastructure – IDMS/CMS functionality. This will be used to enable PACS and LACS modernization efforts across DHS.

Q19: Please explain the integration with DHS ICAM.

A: Solution will provide high assurance credential linked to identity with completed background investigation. Authorization decisions will be based on possession of credential, as well as certain attributes from IDMS. It is expected that the complete ICAM suite will be a mixed integration that is closely coupled with the IDMS/CMS.

Q20: Explain the requirement for the interface with the IAFIS?

A: Current initiative is to send biometric data (fingerprints) to IDENT, which will send messages to

IAFIS for checks. Responses will be sent back to IDENT, which will send them back to IDMS/CMS for transmission to ISMS. Future requirements may dictate a direct call to IAFIS from IDMS/CMS

Q21: Intent on the use USVISIT database to verify latent prints A: IDMS/CMS will send fingerprints to IDENT, which will temporarily enroll them until response is sent back from IAFIS. Future requirements from Components may dictate enrollment in IDENT to support advanced functionality such as Rapback.

Q22: What is the timing of discussed amendments to Factor 1 and Task Order 1?

A: Government is planning to release amendment on Monday. This will include updates to Factor

1, pricing model, and Task Order 1 alignment with IDIQ.

Updated Response: The amendment was not released on Monday due to the Government’s reconciling comments from vendors, especially on the Pricing Model.

Q23: Requirement to meet with stakeholders soon after award; can these meeting occur earlier?

A: No. These meetings are designed to support any transition discussion, and any other requirements impacting delivery of Task Order 1.

Q24: Explain the approach for evaluating transition / cutover to a new system A: Government has determined that any new vendor would have difficulty managing a transition from current solution, and did not want a 10-year IDIQ evaluation to overly emphasize a one-time transition. Therefore, transition task will be de-emphasized in technical and pricing evaluation. The Government will request transition to be priced separately for informational purposes, but will not be incorporated into Pricing Model evaluation.

Q25: Is DHS prepared to extend the incumbent beyond February?

A: Government is prepared to support any actions that avoid a gap in service, including extending the incumbent beyond February.

Q26: Proprietary information in the HSM; does the government own?

A: Yes, all information necessary to conduct a transition is owned by the government and will be provided to award winner.

Q27: Describe the table’s abbreviation – MO, EA, LT A: Month, Each, Lot – attachment will be updated to provide definitions

Updated Response: The Pricing Model has been revised to clarify abbreviations.

Q28: No number in NTE for Travel?

A: There as CLIN for travel to be applied to contract, not for proposal.

Q29: IDIQ award structure of task orders?

A: Task Order 1 will be award simultaneously with IDIQ. It will be hybrid pricing, with labor hours and firm fixed price model. Base year in pricing model will be used for Task Order 1 pricing.

Q30: TS Clearance requirement?

A: SCI eligible. SCI can only be granted by DHS at time of briefing.

Q31: Migration/pricing not being evaluated?

A: Migration will not be evaluated as part of technical or pricing proposal.

Updated Response: To clarify, there will still be discussion of migration challenges and solutions, but the offeror is not expected to provide a detailed transition migration plan for the current IDMS/CMS solution.

Q32: Will migration section be part of page count?

A: Answer requires further review. Vendor to provide written question.

Updated Response: Yes.

Q33: OCD is not going to be pass/fail?

A: OCD will be rated based on an adjectival rating chart, it is not pass/fail.

Q34: Prime to have TS and personnel access to TS? Products need to be CLASS?

A: Prime and personnel – yes. Products – UNCLASS.

Q35: Who is responsible for Patch Management since solution is hosted at Data Centers?

A: Vendor is responsible for proposing patch management solution, but government expects patches to be tested with solution prior to deployment.

Q36: What is current service level for IDMS/CMS at data center?

A: Power and connection only. Incumbent support IDMS/CMS.

Q37: Is the EIWS a thin or thick client?

A: Current EIWS is a thick client.

Q38: Expected patch management for EIWS?

A: Vendor is responsible for proposing patch management solution, but depending on solution, some patching could be managed by DHS, if EIWS uses DHS licensed software/OS.

Q39: Explain the accreditation boundary of the current system?

A: Backend server(s) and EIWS. Runs on network, so certain controls will be inherited.

Q40: Who are the current IDMS, CMS, and CA vendors?

A: XTec, XTec, and Treasury.

Q41: Access to attributes associated to the system?

A: Depends on migration determination, but majority of attributes come from ISMS, which will be available to seed new system.

Q42: Attachment 5 – labor hours not populated A: Attachment 5 will be updated with the necessary information.

Q43: Labor hours already provided; but no education or certification provided. Can vendors add new labor categories for flexibility?

A: Answer requires further review. Vendor to provide written question.

Updated Response: The Government has amended the solicitation to allow for additional labor categories to be added and evaluated, but the new labor categories will not be incorporated into the Pricing Model.

Q44: Understand the IDMS/CMS is one system. What database does it use?

A: Proprietary, but answer requires further review. Vendor to provide written question.

Q45: CLIN structure and pricing A: Questions for pricing model should be provided by Friday at noon, to allow government opportunity to adjust as quickly as possible.

Q46: Are there transaction fees associated with sending biometrics to IDENT/IAFIS?

A: Yes, but DHS manages payments of these fees outside of IDMS/CMS. Accounting code must be sent along with biometrics to IDENT.

Q47: Will the applicant be required to wait while biometric is sent to IAFIS, before issuance?

A: Enroll and Issuance model for existing personnel does not require fingerprint submission. New personnel require 2 visits:

i) Enroll and collect biometric (first visit)

ii) Submit biometric and await PerSec determination

iii) Issue PIV card (second visit)

Q48: C&A Assessor of the system – who provides?

A: DHS provides ISSO and ISSM, who will manage C&A process. Vendor responsible for providing documentation of security controls, as well as support changes required in POA&Ms.

Q49: IDMS capable to integrate with PACS, but the solution for interoperatibility is not clear on what PACS connections

A: DHS owns majority of PACS available, but is currently in effort to consolidate. Requirement to IDMS/CMS is to be capable of providing attributes relevant to PACS in standards-based format.

Actual integration is still under review, it may require transitional state of direct connects before attribute hub is deployed. Vendors should also display knowledge of PACS integration.

A: LACS has similar model and requirements.

Q50: Funding for the transition, will the incumbent be supporting it?

A: If transition is planned, funding to extend incumbent will be provided.

Q51: Will Task Order 1 contain migration?

A: No. If the Government decides to go with the migration approach it will be included in a separate Task Order.