HAZMAT_Industry_Day_Presentation_8.31.16_FBO.pdf

National Hazardous Materials Management and Disposal Services (VAP)

Industry Day

September 1, 2016

Agenda

• Introductions

• Purpose

• Program Requirements/Security Overview

• Procurement Overview

• Source Selection Process Overview

• Discussion

• Office of Acquisition Points of Contact

• Reading Room

• Please silence your cell phone

• Facilities

• This presentation, question responses, and attendee list will be provided on www.fbo.gov

Administrative Item Reminders http://www.fbo.gov/

Introductions

Purpose

• Pre-Proposal Conference/Industry Day

– FAR 15.201 “Exchanges with Industry before receipt of proposals”

• Exchange information to improve the understanding of the Government’s requirements;

• Enhance Transparency; and

• Enhance the Government’s ability to obtain quality supplies and services at reasonable prices.

• Rules of Engagement

– No one-on-one discussions

– Follow-up comments/questions are not allowed

Program Requirements

Office of Finance and Administration/ Occupational Safety, Health, and Environment Division (OSHE)

• Aviation and Transportation Security Act

(ATSA)

• Voluntarily Abandoned Property (VAP)

• National Hazardous Materials Management and Disposal Contract

• Drivers for changes in VAP

– Liquids, Gels and Aerosols (LGA) Ban – August

– Lighter Ban Lifted – August 2007

MAP

9/1/2016

Background

• Airport Categories −Category X – 28 −Category I – 57 −Category II – 82 −Category III – 122 −Category IV – 148

• Airport Locations −Continental United States (CONUS) – 400 −Outside of Continental United States (OCONUS) – 37

Background Continued

• Airport Category Definitions

─ Category X Largest Airport, most enplanements Examples: Los Angeles, CA(LAX), Atlanta; GA(ATL ); and Chicago O’Hare, IL(ORD)

─ Category I Large Airports, near larger cities Examples: Ontario, CA(ONT); Chicago Midway, IL(MDW); Dayton, OH(DAY); and Richmond, VA(RIC)

─ Category II Examples: Savannah, GA(SAV); Jackson, MS(JAN); and Atlantic City, NJ(ACY)

─ Category III Examples: Grand Junction, CO(GJT); and Idaho Falls, ID(IDA)

─ Category IV Smallest Airports Examples: Elko, NV(EKO); and Florence, SC(FLO)

Technical Support

• Technical Hazardous Materials ─ Regulatory Support ─ Treatment Storage and Disposal Facilities (TSDF) Audits ─ Emergency and Spill Response

◦ TSA

◦ Contractor ─ Training ─ Document and Record Keeping (IT Web Portal)

◦ Commercial Off the Shelf

◦ Cradle to Grave “real-time tracking”

◦ Web accessible

◦ IT Security Requirements

Information Technology (IT) Security Requirements

IT Systems Security Authorization Process

• Security Authorization kickoff ~3-8 months before ATO and use of real data/end of transition

• DHS Hardening Guides, TSA Technical Standards

• Data Dictionary and any Interface Documentation from the existing or legacy system

• Security Control Assessment Execution ~5 to 6 months prior to the ATO expiration

• ATO Package Presentation: ~6 to 8 weeks prior to ATO expiration

Additional Security Requirements

• DHS PIV card authentication to applications, required by HSPD-12

• System access through DHS Trusted Internet Connection (TIC) and Einstein3A

• TSA Security Operations Center (SOC) Event Log Monitoring and Incident Response

Continuous Monitoring

• Continuous Diagnostic and Mitigation Phase 1 tools

– Tools feed data to DHS and into the CDM Dashboard

– Software sensors to be installed on equipment:

• Forescout CounterACT Secure Connector

• McAfee Policy Auditor

• McAfee Application Control

• Vulnerability Scanning tool, DHS will scan the vendor from offsite for less than 500 devices.

– Vulnerability Scanner is being determined by DHS.

• Future CDM phases will also have additional tools (to be determined).

• Tanium scans devices for Indicators of Compromise (IoCs)

• Invincea anti-phishing software

• Encase Incident Response and Forensic Analysis software

TS-70 Secure Code and Software Assurance Development

• Every code release shall be submitted to TSA IAD for security testing prior to implementation in a production environment

• Security testing shall be conducted by TSA IAD or an IAD- approved tester prior to promotion from one environment to another

• Code developed for use in TSA systems shall undergo pairwise combinatorial testing as defined by NIST SP 800-142, at a minimum

Logistical Support

● Logistical Hazardous Materials Management Support −Containers −Sorting, Removal and Shipping ◦Pick-ups within 9 business days ◦Average pickups per Category Airport ◦Reference Historical Contract Data Attachment −Final Treatment/Disposal/Recycling −Non-Hazardous Voluntarily Abandoned Property

● Common Hazardous Materials Examples −Flammable Gas: Aerosols and Lighters (73%) −Flammable Liquid: Alcohol > 40 proof and Nail Polish (22%) −Others: 4%

Logistical Continued

Indemnification ─ Civil and Administrative Liabilities ─ Contractor must posses sufficient and continuous insurance

Deliverables ─ Reports (Weekly, Monthly and Quarterly) ─ Emergency and Non-Emergency Contacts (telephone and email) ─ Information as needed such as training materials, audit reports, etc.

Solicitation Overview

Procurement Overview

• Full and Open Competition (RFP)

• Contract Type: Firm Fixed Price

• Estimated Milestone Schedule

September 16, 2016 Questions Due October 4, 2016 Proposals Due January 27, 2017 Contract Award

Special Contract Requirements

• Technical Instruction

• Software Licenses and Intellectual Property

• Non-Disclosure Agreements

• Suitability Determination for Contractor Employees

• Transition

• Small Business Subcontracting Plan

Source Selection Process Overview

Evaluation Factors for Award – Section IX

• Basis for Award

– Anticipates one (1) award

– Best Value Approach

• Award Selection

– Initial Submissions without discussions

– Initial or subsequent submissions with discussions

• Evaluation Factors

1. Technical Approach;

2. Management Approach

3. Past Performance

4. Price

Acquisition Points of Contact

Contracting Officer:

Evelyn S. Tyndell

Contract Specialist Charlotte Brooks-Dale

Thank you for your interest in our requirement.

Reading Room

• Please silence your phone

• Please note, reading room documents are not publicly available information, therefore, this information shall not be posted or reproduced in any public forum.

Reading Room - Administrative Item

• Rules of Engagement

– Binders must be signed out from a TSA official.

– Each company may sign out one set of binders at a time.

– Pen and pad note taking is permitted.

– Binders may NOT leave the room.

– No pictures or copying of any material in the binders is permitted.

– No removal of documents and/or pages are permitted.

– Companies may NOT approach Government personnel with questions on the content of the binders.

– Companies may NOT approach Government personnel with general inquiries, business cards or questions of any kind.

– Any company found to violate the reading room conditions may be escorted out and may be disqualified from participating in the VAP procurement.

Reading Room Con’t

Thank you for your interest in our requirement.

HAZMAT Industry Day Presentation 8.31.16 SIGN IN SHEET