HSI MAMMOTH QnA 08-27-2024.pdf

QUESTIONS & ANSWERS- 08/27/2024

Solicitation# HSI-MAMMOTH

SOR 3.4 “Platform Security, Platform- Security Audits” The platform shall align with Payment Card Industry (PCI) Data Security Standards (DSS) 4.01 (December 31, 2024).

Would it be possible to strike the version and the date, and change the requirement to:

The platform shall align with the current version of the Payment Card Industry (PCI) Data Security Standards (DSS), and maintain compliance throughout contract performance.

This Q&A serves as notice that the CO has struck the date & version number of PCI DSS from the Statement of Requirements. The vendor shall illustrate in its proposal that it meets the current standards and will continue to meet the updated standards over the life the contract.

When providing a link does it need to have a vanity link for the demo? Is providing a link to the website good enough? Additionally, do you want 3 dummy logins for the 3 types of accounts?

One dummy login is sufficient at time of proposal. The url link does not need to be a vanity link at time of proposal, only after award. The contracting officer will instruct the Source Selection Team to navigate the platform, create test orders, and test the functionality of the platform.

RE: Atlas Products

The contracting officer provides notice that these products are to be struck from the product matrix.

These items were a carry over from the FBI RHINO Product Matrix.

There are several products on this RFP that have been discontinued with their replacement items being found elsewhere on the list. Would you like for us to mark these as duplicates, drop them, or quote one item for multiple lines? Additionally, some of the discontinued items are unique and do not have a comparable replacement item. Many of these are technical accessories for other larger items. How do these items need to be addressed?

If a product is duplicated across the list, please indicate “duplicate” for ease of reviewing by the Source Selection Team. If a product has been discontinued w/o a replacement, and it was a complimentary product to a larger item, please indicate “not available, complimentary product”. The contracting officer will verify these instances on a case-by-case basis and make a proper determination to include possibly striking that item(s) from the product matrix across all submissions.

In the scenario in which all submissions are unable to quote the entire product matrix due to the evolving nature of the industry, the contracting officer will review all product matrices to ensure that products that no longer exist/cannot be acquired by any vendor are struck from all submissions. This will ensure that all submissions are rated “apples to apples”. It is understood by the contracting officer and potential & responsible vendors that since time of creation and publication of the product matrix earlier this year, changes continue to occur in the industry. That being said, it is still incumbent upon a vendor to locate a replacement product if one exists. Submitting a product matrix with “no quote” for certain products when competitive submissions are able to provide pricing will impact the proposal’s rating. The opposite occurrence whereby a single vendor provides pricing for several products, while all others claim lack of availability will be reviewed by the contracting officer by way of responsibility determination. The contracting officer will make the final determination as to best value for an award.

Agent profiles:

• Confirm that team leads or admins create addresses or ship to locations o The SOR states add/change addresses. Does add mean “create”?

Correct. To reduce flow of calls for minute administrative tasks.

We would like further explanation on the ideal use case behind a user buying for another user.

o Should a Standard User or Administrative user log in and shop as that employee logged in? They would go to my account and see their account info, not team’s info.

o Or should you remain as your normal user and picking the user you are buying for at time of checkout? They would go my account and see their team’s info and controls.

The statement of requirements alludes to the ability to create the agent profiles. This is a repository to store another employee’s clothing sizes for easy reference. In most cases members of the tactical team have full time investigative roles and not always easily accessible for quick communications.

Should a “view only” user have ability to view kits? see order history/reports? have a limited catalog to view?

A view only account is intended to give members the ability to review/shop all of the products, just not have the ability to make purchases. The view only account does not need the ability to run reports. Most reporting will be conducted by the contracting officer.