Recompete_Clarifications_Questions_final.pdf

Question # Section Section Title Par Ref. Reference Text Comment/Question for the Government Government Response

1 PWS, C. <General Comment> General na The Government makes several references to requirements that may be added during the contract or requirements that could likely increase over the life of the contract. Is it the Government's intent to provide cost plus CLINs in these areas where requirements may be less defined?

Increases in equipment quantities for technologies with established FFUP will be added unilaterally. New technologies will be negotiated to establish FFUP.

3 C.7 Sustainment Support Program (CLIN X001) Par 2 The Government requires a Program Manager (PM) who: Is the Government's intent to require the PM to be PMP certified and to have experience managing programs of similar size and scope?

PMP certification is encouraged not required. Per SOW similar size and scope experience is required.

4 C.7.6 Transportation Security Equipment Database na na Since the TSRC will support TSE maintained under warranty or under separate contract, are there data requirements specific to that equipment that the Contractor is responsible for?

The Contractor is not responsible for the performance metrics of TSE under warranty or separate contract. The Contractor is responsible for meeting the requirements of B.8.12.2.

5 C.7.9.1 Program Management Reviews Par 1, second sentence

The Contractor shall submit the proposed agenda and PMR slides four (4) business days prior to the scheduled PMR in accordance with CDRL A007A, Meeting Agenda and Presentation Materials, to include, at a minimum, the following topics

The Government mentions both "Working" as well as "Business" days throughout the PWS. Could the Government clarify which is required and/or preferred?

The two are synonymous for program management and administrative functions. The Government will use one term for consistency.

6 C.7.13.1 Controls Par 1 The Contractor shall comply with all Federal, Department of Homeland Security (DHS) and Transportation Security Administration (TSA) security and privacy guidelines in effect at the time of the award of the contract, as well as those requirements that may be added during the contract.

Will the Government clarify how Offerors should handle and/or price requirements that are to be determined? Will the Government ask for pricing at the time the requirements are added or would the Government be providing a cost plus CLIN to support requirements flexibility?

Increases in equipment quantities for technologies with established FFUP will be added unilaterally. New technologies will be negotiated to establish FFUP.

7 C.7.13.4 Information Technology Configuration Management (hardware/software)

Par 2, first sentence

The Contractor shall ensure all application or configuration patches and/or Requests for Change (RFC) have approval by the Technical Discussion Forum (TDF), Systems Configuration Control Board (SCCB) and lab regression testing prior to controlled change release under the security policy document, TSA Management Directive (MD) 1400.3 Information Technology Security and TSA Information Assurance (IA) Handbook, unless immediate risk requires immediate intervention.

Could the Government please clarify the requirements for "approval of changes" so Offerors understand the requirements?

Could the Government also provide additional clarification on the "Lab Regression Testing" requirements?

Yes. TSA requires that the Offerors have TSA approval for all changes made to the system, either through a TSA change control process, or a change control process that the offeror follows. TSA expects to have the ability to be aware of and approve of any changes. Please note that TSA OIT/IAD has the authority to reject changes that negatively effect the security posture of the system.

8 C.7.13.4 Information Technology Configuration Management (hardware/software)

Par 6 (last), first sentence

The Contractor shall establish processes and procedures for continuous monitoring of Contractor systems that contain TSA data/information by ensuring all such devices are monitored by, and report to, the TSA Security Operations Center (SOC).

Would the Government provide additional technical details on the Section C.7.13.4 requirement "continuous monitoring of Contractor systems that contain TSA data/information by ensuring all such devices are monitored by, and report to, the TSA Security Operations Center (SOC)" so that Offerors may understand the support level required?

Yes. There has to be a mechnism/process in place to conduct monitoring and auditing and these audit logs must be sent to TSAs Security Operations Center (SOC) for review.

9 C.7.13.9 Data Stored/Processed at Contractor Site Par 1, first sen

Unless otherwise directed by TSA, any storage of data shall be contained within the resources allocated by the Contractor to support TSA and may not be on systems that are shared with other commercial or government clients.

Could the Government please clarify the requirement that "any storage of data shall be contained within resources allocated by the Contractor to support TSA and may not be on systems that are shared with other commercial or government clients."

Please clarify if Offerors are required to setup a dedicated TSA IT infrastructure to include email servers, call center software, PCs, and mobile devices. For example, corporations often provide email servers in support of all customers, which is not a dedicated TSA IT infrastructure.

Yes. Processing of TSA data shall not be co-mingled with commercial or government clients.

10 C.8.1 Preventative Maintenance General na It is the Offeror's understanding that Deployed TSE under configuration control requires OEM certified parts. Could the Government please verify this understanding? Additionally, are OEM certified and/or trained technicians also a requirement to support Deployed TSE?

Yes, and Yes.

11 C.8.1.1 Level II PM General

Level II PM shall be performed in accordance with the most recent OEM maintenance manual, as well as state and federal environmental and safety regulations. The Contractor shall obtain and utilize OEM PM checklists.. All required materials shall be included within the unit price in Section A.1.2.1, Pricing Schedule, of Part A.

Would the Government consider providing the schedule of PMs required per OEM model to ensure compliance with the most recent OEM maintenance manual?

Offeros shall coordiante with the OEM to understand the number and type of PM required for each TSE.

12 C.8.2.1 Cabinet X-ray and Direct X-ray Exposure Systems

Par 2, bullet 1, subbullet

After system relocation Can the Government describe the relocation service and/or notification process for Offerors to be notified that a unit has been relocated to perform the required RS?

The Government will provide a DD1149 for relocation, and the System Integrator under a separate contract shall conduct the move and provide required documentation.

13 C.8.3.2 Level III Depot Maintenance (DM) Par 2, bullet

Submit a monthly report (spreadsheet) to the Government Property Administrator identified in Paragraph B.3.4.3, Other TSA Points of Contacts, of Part B, including the data above for all TSE in depot maintenance;

and

A023 CDRL identifies this report as weekly while the PWS identifies this report as monthly. Does the Government intend for this report to follow the CDRL (weekly)? The A023 is required weekly. The Government shall change the PWS.

14 C.8.3.2 Level III Depot Maintenance (DM) General na Will the Government require an Offeror to interface with the Government Property Office and/or record the movement of Government Property? Yes.

15 C.8.8.1 Deployed Par 1

For the purposes of this contract, “deployed” TSE means equipment and its associated peripherals (e.g.

carts, monitors, etc.) in a location other than the TSA Logistics Center (TSALC), including the airport, airport storage, airport rigger’s warehouses, TSA testing and training locations, and additional locations as designated under TSA Loan Agreements.

Will the Government please clarify if peripherals are limited to those acquired during the procurement of the actual TSE? For example, the Alternate Viewing Station of an X-Ray unit is included however any roller or divestment tables added after purchase are not included in deployed TSE?

Yes that is a correct synopsis.

16 C.8.8.2.1 TSE Located at TSALC Par 2

The Contractor shall perform Radioactive Leak Tests (RLTs) on applicable ETDs in storage at TSALC in order to comply with federal and state law. Cabinet x-ray systems are not required to have an RS performed while disconnected from a power source; however, the Contractor shall document the dates on which the units are disconnected and reconnected, if applicable, on CDRL A012 to confirm compliance with federal and state laws. ETDs stored at TSALC requiring an RLT must meet RLT periodicity requirements and are not eligible for extensions due to state laws. Copies of all RLTs shall be provided to the TSALC Operations Manager. The Contractor shall coordinate with TSALC as outlined in Section B.3.5.2.

Will the Government please provide an estimated frequency for situations where the TSA ILS Contractor would be disconnecting and reconnecting cabinet x-ray units at the TSALC? If the Government or another contractor disconnects/reconnects cabinet x-ray equipment at the TLC, will the Government provide notification in advance to facilitate an RLT?

The cabinet x-ray sytems should arrive at the TSALC and remain disconnectd while in storage. There are infrequent occasions which may require the unit to be energized and the Government wil inform the Contractor of support requirements.

17 C.8.8.2.2 TSE located at Riggers Warehouse or Other Local Storage Locations Par 1

TSE stored at Rigger’s warehouses or at other local storage locations will be considered deployed and in service for up to 90 days. The Contractor shall make all efforts to continue to service the TSE in accordance with applicable PM, CM and RS or RLT requirements. The Contractor shall notify the COR and Radiation TM immediately if local TSA restricted access prevents a scheduled RS or RLT. After 90 days at the Rigger’s Warehouse / local storage or upon written notification from TSA, whichever occurs earlier, the Contractor will remove the unit from the sustainment CLINs.

Will the Government please further explain how an Offeror will be notified when TSE enters local storage locations?

A DD1149, SI documentation, Global Property Management, local TSA, or the FST may identify TSE moved internally.

18 C.8.8.2.2 TSE Located in Riggers Warehouses and Other Local Storage Locations

Par 2

If the Contractor receives a corrective maintenance work order for a unit recorded at the rigger’s warehouse / local storage or if the Contractor finds the unit in use, the unit will be returned to the sustainment CLIN as of that date. . If after the CM the unit remains at the Rigger’s Warehouse / local storage, then it will begin the 90 day clock again as of the completion date of the CM. If CM cannot be completed and the unit remains in storage, then the unit reverts to the start date in place prior to the CM.

Will the Government please clarify that its expectation is that the equipment should fall off the contract after 90 days in riggers or local storage? Confirmed.

19 C.8.8.2.3 TSE Located at Seasonal Locations Par 1

When the Contractor is notified that an airport is to be seasonally closed, the Contractor shall coordinate with the local TSA to perform upcoming PMs, RSs, and RLTs in advance of the seasonal closure date.

When notified that an airport is to be seasonally opened, the Contractor shall coordinate with the local TSA to perform PMs and RLTs in advance of resumed operations. All equipment at the airport will be added to the sustainment CLINs as of the date of the first WO requested by that location.

Will the Government be able to provide advance notice or an annual schedule on the opening and closing of seasonal airports?

The Contractor shall coordinate with seasonal airports to ensure proper support at opening and closing.

20 C.8.10.3 Technician Response Time (TRT) Supporting Performance Metric

Par 1, second sentence

This performance metric includes low level metrics, M1 and M2.

Will the Government calculate the Technician Response Time (TRT) with consideration of the Airport Operating Hours or a 24 hour clock (if the airport closes)? Will the calculation for TRT end when a technician arrives on location (at the airport) or at the TSE?

TRT will be measured using a 24 hour clock. TRT ends when the technician arrives at the TSE to begin work.

21 C.10 Cannibalization Report General na Will the Government please clarify what level ticket should be created to ensure a cannibalized unit is quickly returned to service (e.g. P1)? The Contractor shall use a P1 for the cannibalized unit.

22 A.1.2.1 Pricing Schedule

Radioactive Leak Tests in TSALC na Will the Government please clarify if the quantity for CLIN 1005 will be 500 and match the quantities provided for 2005, 3005, and 4005?

The quantity of 500 is an estimate for pricing and may vary. The Government will use the same number for all four years.

23 A.1.2.1.2 Preventive Maintenance (PM) Consumables Pricing (CLIN X004)

Par 1, first sentence

The following fixed unit prices shall apply when ordering PM consumables, in accordance with Section C.8.6.2, Preventive Maintenance Consumables, of Part C. Will the Government please clarify if this applies to only Level 1 PMs?

Confirmed. Level II consumables are the responsibility of the contractor under the fixed unit price.

24 A.1.2.1.2 Preventive Maintenance (PM) Consumables Pricing (CLIN X004)

Par 1, first sentence

The following fixed unit prices shall apply when ordering PM consumables, in accordance with Section C.8.6.2, Preventive Maintenance Consumables, of Part C.

Paragraph A.1.2.1.2 outlines the Preventive Maintenance Consumables. Will the Government please clarify if the fixed unit prices provided to the Government by the Contractor in section A.1.2.1.2 include packing and shipping costs?

The fixed unit price shall include packaging and shipping costs of Preventive Maintenance consumables.

25 A.1.2.1.2 Preventive Maintenance (PM) Consumables Pricing (CLIN X004) General na The Government lists the Smiths 400B as supported equipment models in the Pricing Schedule (A.1.2.1). Will the Contractor also have to support any Preventive Maintenance Consumables for that equipment?

The Contractor shall support TSA approved PM consumables for any fielded TSE covered in CLIN X001.

26 A.1.2.3.2 Catastrophic Response and Additional Support (CLIN X007B)

Par 3, last sentence

No profit or fee will be paid on costs for Materials and Travel.

Does the Government intend to have the no profit or fee paid on costs referenced in A.1.2.3.2 apply to only the T&M pricing types? Yes

27 A.1.2.6 Labor Categories for Services (CLINs X007A and X007B) General Will Offerors be permitted to propose additional Labor Categories not already identified in Section A.1.2.6? Yes.

28 A.1.2.7.1 Disincentives "(C)"

(c) Radiation Survey (RS) and Radioactive Leak Test (RLT) Disincentive: For any TSE for which the RS or RLT is not performed within the requirements of Section C.8.2, Radiation Surveys (RS) and Radioactive Leak Tests (RLT), of Part C, CLIN X001 shall decrement each unit by 10% beginning in the month missed and monthly thereafter until the unit is in compliance.

Will the Government include units at the TSALC for Radiation Survey (RS) and Radioactive Leak Test (RLT) for Disincentive purposes? yes

29 A.1.2.7.1 Disincentives "(C)"

(c) Radiation Survey (RS) and Radioactive Leak Test (RLT) Disincentive: For any TSE for which the RS or RLT is not performed within the requirements of Section C.8.2, Radiation Surveys (RS) and Radioactive Leak Tests (RLT), of Part C, CLIN X001 shall decrement each unit by 10% beginning in the month missed and monthly thereafter until the unit is in compliance.

If the RLT/RS is not complete and the unit is out of compliance per regulatory requirements, does the Contractor need to use Lock Out/Tag Out to ensure the unit is not used until the Critical Maintenance action is completed? Would a unit in this situation contribute to the calculation of Ao?

No, No.

30 B.2.1.1.2 Incentives (a)

(a) Parts Availability Time (PAT): The Contractor shall calculate the monthly average parts fulfillment time for all critical corrective maintenance work orders (P1 tickets) in each of the 3 sectors as defined below and all non-critical corrective maintenance work orders (P2 tickets) in each of the 3 sectors requiring parts and compare the values against the SLA requirement identified in Section C.8.10.2, Parts Availability Supporting Performance Metric, of Part C.

Please clarify if the Government intends to include non-relevant work orders in the calculation for PAT per the requirements in Section C.8.10.2? Yes, non-relevant work orders will be included in PAT calculations.

31 B.2.1.4 Security Requirements for Contractor Employees Performing at Airport Locations

Par 1, second sentence

Contractor employees working in this facility will be required to obtain, possess and display a Secure Identification Display Area (SIDA) badge in accordance with the airport’s physical and personnel security requirements.

Will the Government please clarify what support the Government will provide in obtaining the SIDA badges?

SIDA badging processes vary at each location. The Contractor shall coordinate with the local TSA to ensure proper documentation is provided.

32 General N/A N/A N/A Does the Government intend for this to be a FAR Part 12 or FAR Part 15 procurement? FAR Part 12

Part B - Contract Clauses;

52.219-9 Small Business Subcontracting Plan N/A N/A N/A

Will the Government accept a commercial Small Business Subcontracting Plan? yes

B.2.1.3 Suitability Determination for Contract Employees N/A N/A N/A

Can the Government identify a timeline for its review and approval of employees submitted for screening?

Average processing time is currently 60-90 days, but may vary depending on the employee's background.

37 C.7.3 Contract Transition Plan N/A N/A N/A

What information will the Government provide as a part of the Transiton Plan? Will the Government facilitate discussions with the outgoing ILS prime contractor to support the transition?

The Government will provide the successful offeror with current performance data. The Government will facilitate discussions as required.

38 C.7.3 Contract Transition Plan N/A N/A N/A

Based on previous experience what is the Government’s plan to overcome potential obstacles to a seamless transition from the outgoing contractor to ensure the incoming contractor has the data and information to successfully maintain the expected level of support?

The Government will provide the successful offeror with current performance data. The Government will facilitate discussions as required.

40 C.7.9 Meeting and Reviews N/A N/A N/A

Is there a time limit that Government must abide by to review and approve meeting minutes and CDRLs? No

41 C.7.10 Continuity of Operations Plan N/A N/A N/A

Can the Government please identify a due date for the Continuity of Operations Plan after award? The COOP shall be presented as part of the technical proposal, and then updated and submitted within 30 days of contract award.

42 C.8.3 Corrective Maintenance N/A N/A N/A Is there an SLA around Depot Maintenance? If yes, please clarify. No. All downtime associated with depot repair counts against the Ao.

43 C.8.1, C.8.6.2 N/A N/A N/A What is the requirement for Consumables, OEM or generic? TSA will accept pricing for any TSA approved consumable.

44 C.8.10, CLS SLA

Requirements

N/A N/A N/A

Would the Government be willing to restructure the incentive plans surrounding PAT and TRT? They are currently structured as an average of all TSE performance and do not allow for sharing an incentive pool with OEMs who may be positively contributing to the overall metrics achievement. If no incentives are available to the respective OEMs, the efforts will be to meet the lowest possible acceptable number.

TSA is awarding the contract to the prime contractor. Management of agreements with the OEMs is a responsibility of the prime.

N/A

Will indistry Days and Pre-Solicitation Conferences be held to share information regarding the acquisition activities and schedule, program vision, RFP, etc and if so, is there an estimated date the events will be held?

The government intends to conduct a pre-proposal conference/webinar soon after RFP release. Details will be posted to FBO as soon as they are available.

General N/A N/A N/A

It is suggested that TSA conduct one-on-one meetings to create an atmosphere conducive to the open exchange of information, while alleviating bidder’s concerns about compromising competitive advantage in an open forum. Will TSA conduct one-on-one meetings with prospective bidders?

No one-on-one meetings are contemplated at this time

PWS, Section C.4 Government Furnished Information, Page 5 N/A N/A N/A

Please confirm when a complete Technical Data Package will be made available? We recommend that a full Technical Data Package, inclusive of operator and maintenance manuals, bill of materials, vendor lists, product configuration lists, known obsolete parts and other Applicable Documents be provided in a Bidder’s Library and be fully populated and available approximately 90 days before bids are due. This ensures non-incumbent offerors ample opportunity to review, understand efforts required, factor information into technical approaches, and time to request additional data, if required.

A TDP will not be made available. It is the offeror's responsibility to work with the OEMs.

PWS Section C.7.6, Transportation Security Equipment Database, Bullet #5, Pg. 8 N/A N/A N/A

In order to ensure that that all non-incumbent offerors have all of the necessary technical data, please confirm that TSA will include Mean-Time-Between Failure (MTBF) data (current & historical), current reliability data, and equipment Ao data and metrics as part of a Technical Data package.

Confirmed for RMA.

PWS Section C.7.6, Transportation Security Equipment Database, Bullet #8, Pg. 8 N/A N/A N/A

In regards to providing designated Government personnel live ‘read-only’ access to a database enabling them to query maintenance actions on work order tickets, multiple commercially available databases can conduct queries on work orders, will the government require the contractor to develop customized queries for Government users?

No

51 PWS Section C.7.6, Transportation Security Equipment Database, Bullet #8, Pg. 8 N/A N/A N/A

If the government requires the contractor to develop customized queries for Government users, please provide the current list and format of queries required for the program. N/A

PWS Section C.7.6, Transportation Security Equipment Database, Bullet #8, Pg. 8 N/A N/A N/A

Please provide the requirements of any training that the Contractor must to enable designated Government personnel to develop customized queries? N/A

PWS Section C.7.6, Transportation Security Equipment Database, Bullet #9, Page 8 N/A N/A N/A

Most databases can conduct queries on any defined field, is the data referred to in the PWS Section additional to the requirements listed for CDRLS A004, A016, A018, A023, A025, and A026? No

54 PWS Section C.7.6, Transportation Security Equipment Database, Bullet #9, Pg. 8 N/A N/A N/A

In regards to downloading data in an excel spreadsheet meeting the requirements of Section C.3, Document Submission and Compliance, of this PWS Section, are text files compatible with Excel such CSV considered an Excel format? No, the Government requires XLS.

PWS Section C.7.6, Transportation Security Equipment Database, Bullet #9, Pg. 8 N/A N/A N/A

Please provide the FMI Codes currently in use. The list of FMI codes used by each OEM will be provided.

56 PWS Section C.7.10, C.7.10 Continuity of Operations Plans, Bullet #10, Pg. 11 N/A N/A N/A

Are the mail and data server referred to in this bullet Contractor or TSA owned? If contractor owned does this refer only the IT equipment used for contractor communication with the TSA and storage of TSA data?

This is for any equipment that is housing TSA data or email systems that is officially utilized for TSA services.

57 PWS Section C.7.11, C.7.11 Integrated Support Plan Pg 12

N/A N/A N/A

Section refers to CDRL A009. Associated DID ILS-009, Sec 10.2.3.3 Manpower, Personnel, and Training states “All Field Service Technicians must complete technology-specific training through a course approved by the original equipment manufacturer.” – Does the TSA maintain a library of these OEM approved training courses or a list of third party training providers and will this library be provided to bidders as part of the technical data package to ensure that that all non-incumbent offerors have all of the necessary technical data?

The Contractor is responsible for coordinating all TSE specific certifications and required training with the OEMs.

PWS Section C.7.11, C.7.11 Integrated Support Plan, Pg. 12 N/A N/A N/A

Section refers to CDRL A009. DID ILS-009 Sec 10.2.3.3 Manpower, Personnel, and Training states “All Field Service Technicians must complete technology-specific training through a course approved by the original equipment manufacturer.”

Please describe any and all agreements between TSA and OEMS that compel compel or incentivize OEM to provide third party training, to approve third party training materials or to obligate OEMs to provide training to third party service providers at a reasonable price?

The Contractor is responsible for coordinating all TSE specific certifications and required training with the OEMs.

PWS Section C.7.13.4, Information Technology Configuration Management (hardware/software), Pg. 14-15 N/A N/A N/A

Is the TSE database, referenced in Section C.7.6 Transportation Security Equipment Database, covered by the hardware/software configuration management requirements of this section. Yes

60 PWS Section C.8.1 Preventive Maintenance (PM), Parag.1, Bullet #2, Pg. 25 N/A N/A N/A

Is the term “trained maintenance technician” synonymous with “Field Service Technician (FST)”? “Field Service Technician (FST) is first referred to on page 8; “Trained maintenance technician” is referred to on page 25. Yes; the Government will ensure consistency in the final.

PWS Section C.8.1, Preventive Maintenance (PM), Pg. 25 N/A N/A N/A

Section states, “The Contractor shall recommend adjustments to PM schedules, with supporting rationale, that have the potential to improve TSE reliability or reduce costs without degrading TSE reliability.”, and later “Level II PM shall be performed in accordance with the most recent OEM maintenance manual, as well as state and federal environmental and safety regulations.” – The statements appear contradictory, please advise if proposed changes that are in conflict with OEM Maintenance Manuals will be supported?

The Government will consider proposed changes as long as they are compliant with state and federal environmental and safety regulations.

62 PWS Section C.8.1, Preventive Maintenance (PM), Pg. 25 N/A N/A N/A

Please provide previously accepted PM schedule adjustments per TSE model that differ from OEM published PM Maintenance schedules with the RFP. There are none.

PWS Section C.8.1, Preventive Maintenance (PM), Pg. 25 N/A N/A N/A

Please describe the approval process for any such proposed cost saving PM schedule or methodology changes, including required signatories and approvers.

The Contractor shall submit a complete package including supporting data and cost analysis to the Contracting Officer. The COR will evaluate the proposal, confer as required with the Contractor, and final decisions will be provided by the Contracting Officer to the Contractor.

PWS Section C.8.2, Explosive Trace Detection (ETD) Systems Containing a Sealed Radioactive Source, Bullet 1, Pg. 30 N/A N/A N/A

Please provide the list of EOMS that have received U.S. NRC exemption.

Smiths and Morpho. Implant Sciences did not require an exemption for their units as they are not radioactive.

PWS Section C.8.3.1, Level II Corrective Maintenance, Bullet 6, Pg 31 N/A N/A N/A

Please confirm if TSA intends to provide obsolescence data regarding the equipment, subassemblies and their components also as part of the Technical Data Package as this will allow all bidders to understand future sustainment options and minimize costly re-design approaches.

OEMS are responsible for managing parts obsolescence. Offers shall coordinate with the OEMs to address parts obsolesence issues.

PWS Section C.8.3.2, Level III Depot Maintenance (DM). Pg.

32 N/A N/A N/A

Is the ILS contractor responsible for the packing and shipping of the unit destined to / from the Depot as part of this contract? Yes

PWS Section C.8.3.2, Level III Depot Maintenance (DM), Pg.

32 N/A N/A N/A

If the ILS contractor is responsible for the packing and shipping of the TSE, what are the packing and shipping requirements of each model TSE?

Unit will be shipped in an OEM approved container in accordance with Section B.3.1.1

68 PWS Section C.8.3.2 Level III Depot Maintenance (DM) Bullet #1, Parag. 2, Pg. 32 N/A N/A N/A

Does the “depot maintenance” requirement apply and refer to all models of TSE?

Typically depot maintenance refers to BLS and ETD, which are typically routinely repaired at depot. However, if depot repair of other equipment is necessary then these terms would apply.

PWS Section C.8.3.2 Level III Depot Maintenance (DM) Bullet #1, Parag. 2, Pg. 32 N/A N/A N/A

Does “depot repair location” only refer to an OEM location? If other locations, please provide. Yes, unless otherwise directed by the Government

PWS Section C.8.6.2 Paragraph 2, Pg. 34 N/A N/A N/A Will the list of authorized consumables include approved suppliers, and alternative TSA sources and part numbers? see question 25

PWS Section C.8.6.2 Paragraph 2, Pg. 34 N/A N/A N/A Will the list of authorized consumables be segregated by OEM model? yes

PWS Section C.8.8.2.2, TSE Located in Riggers Warehouses and Other Local Storage Locations, Pg. 35. N/A N/A N/A

If crating is required for TSE being stored who is responsible for and what are the packing and shipping requirements for each type of TSE?

Crating and storing equipment is not covered under the scope of this contract.

PWS Section C.8.12, TSA Service Response Center, Pg.

39 N/A N/A N/A

Please confirm that the TSA Service Response Center and associated defined CDRLs are no longer to be provided as a Small Business set-aside Confirmed.

PWS Section C.8.12, TSA Service Response Center, Pg.

39 N/A N/A N/A

Is the Service Response Center responsible for calls in support of OEM equipment still under warranty? If so how are those calls to be processed? Yes. Details are in the PWS

CDRL A004 – TSE Database, Pg. 1 N/A N/A N/A

The CDRL states, “The TSE Database shall be delivered by CD or DVD, or via secure electronic means…. The TSE Database shall be submitted in electronic format compatible with Microsoft Office Suite in accordance with C.3, of Part C, Performance Work Statement.” – A Database often consists of multiple interlinked databases, such as equipment and work orders updated daily. Would the Government accept the capability of Government users to download an Excel file for each distinct database as meeting the CDRL requirement?

Depending in the file format/structure, this may be acceptable

CDRL A004 – TSE Database, Pg. 1 N/A N/A N/A

Would the government accept conversion of Database exported Excel files to Access files as meeting the CDRL requirements? yes

78 CDRL A013 Parts Obsolescence Report, Pg. 1 N/A N/A N/A

Please define obsolescence and the conditions and parameters that constitutes the designation. yes

79 CDRL A013 Parts Obsolescence Report, Pg. 1 N/A N/A N/A

Does the OEMs’ base contracts require the OEMs and their subcontractors to notify TSA of upcoming obsolescence issues? yes

80 CDRL A013 Parts Obsolescence Report, Pg. 1 N/A N/A N/A

Please provide the list of known current and upcoming obsolescence issues as part of the technical data package to ensure that that all non-incumbent offerors have all of the necessary technical data. The Government will provide the most recent A013.

81 CDRL A013_Parts Obsolescence Report, Pg. 1 N/A N/A N/A

Please provide the latest Obsolescence Report to ensure that that all non-incumbent offerors have all of the necessary technical data. The Government will provide the most recent A013.

82 CDRL A013_Parts Obsolescence Report, Pg. 1 N/A N/A N/A

What previous methods of managing obsolescence was acceptable to TSA? see question 65

83 3-3-17 DID OAPM-ILS-009

Integrated Support Plan.doc, paragraph 3, p. 2 N/A N/A N/A

“10.2.3.3 Manpower, Personnel and Training. All Field Service Technicians must complete technology-specific training through a course approved by the original equipment manufacturer.” – Please provide as part of the technical data package the TSA library of coursework that is approved by the original equipment manufacturer (OEM).

The Contractor is responsible for coordinating all TSE specific certifications and required training with the OEMs.

84 3-3-17 DID OAPM-ILS-009

Integrated Support Plan.doc, paragraph 3, p. 2 N/A N/A N/A

“10.2.3.3 Manpower, Personnel and Training. All Field Service Technicians must complete technology-specific training through a course approved by the original equipment manufacturer.” – Please confirm that retraining of staff is only required when new software updates or significant hardware modifications to TSE occurs.

The Contractor is responsible for coordinating all TSE specific certifications and required training with the OEMs.

3-3-17 DID OAPM-ILS-009

Integrated Support Plan.doc, paragraph 3, p. 2 N/A N/A N/A

“10.2.3.3 Manpower, Personnel and Training. All Field Service Technicians must complete technology-specific training through a course approved by the original equipment manufacturer.” – Please provide training requirements for each OEM’s model type?

The Contractor is responsible for coordinating all TSE specific certifications and required training with the OEMs.

86 3-3-17 DID OAPM-ILS-

009_Integrated Support Plan.doc, paragraph 3, p. 2 N/A N/A N/A

“10.2.3.3 Manpower, Personnel and Training. All Field Service Technicians must complete technology-specific training through a course approved by the original equipment manufacturer.” – If a Field Service Technician (FST) completes the course approved by the original equipment manufacturer, may he/she be authorized to train other FSTs, as in the “Train-the- Trainer” method?

The Contractor is responsible for confirming FST certifications and qualifications with the OEMs.

DID –OAPM-ILS-13 N/A N/A N/A

“The Parts Obsolescence Report (POR) identifies obsolete parts, problem resolution, and a recommended approach for mitigating risks associated with obsolete parts over the life of the system.” – Section C.8.6.1 refers to Contractor coordinating with the OEMs. Do the OEMs currently provide the Government with a list of parts that currently are and will become obsolete for the duration of the contract or is some other method of informing the government utilized?

see question 65

DID –OAPM-ILS-13 N/A N/A N/A

“Problem Resolution. This section provides a plan to purchase an identical serviceable part from an alternate vendor that will resolve the part obsolescence issue.” – Who determines if a replacement part is acceptable? What is the approval process? Must OEM agree?

The DID will be revised to clarify language.

89 DID –OAPM-ILS-14 N/A N/A N/A

Will TSA provide the previously approved list of alternative parts and vendors that have been approved to ensure that that all non-incumbent offerors have all of the necessary technical data. see question 86

PWS Section B.3.5.14 N/A N/A

DHS Sensitive Information Required Special Contract Terms (MARCH 2015), SAFEGUARDING OF

SENSITIVE INFORMATION (MAR 2015)

(ii) Independent Assessment. Contractors shall have an independent third party validate the security and privacy controls in place for the system(s). The independent third party shall review and analyze the SA package, and report on technical, operational, and management level deficiencies as outlined in NIST Special Publication 800-53 Security and Privacy Controls for Federal Information Systems and Organizations. The Contractor shall address all deficiencies before submitting the SA package to the Government for acceptance.

Is the third party requirement just for implementation, or is it to remain through the authorization lifecycle of the contract?

This would be throughout the system lifecycle.

C.7.13.4 C.7.13.4 Configuration Management (hardware/software)

The Contractor shall ensure all application or configuration patches and/or Requests for Change (RFC) have approval by the Technical Discussion Forum (TDF), Systems Configuration Control Board (SCCB) and lab regression testing prior to controlled change release under the security policy document, TSA Management Directive (MD) 1400.3 Information Technology Security and TSA Information Assurance (IA) Handbook, unless immediate risk requires immediate intervention. Approval for immediate intervention (emergency change) requires approval of the TSA CISO, SCCB co-chairs, and the appropriate Operations Manager, at a minimum.

Is this applicable to contractor-owned third party systems? If so, is there a 24/7 level of support with CCB authority to make decisions for systems that are expected to operate continuously throughout the year?

3rd party systems should have TSA IAD as part of their CCB approval chain, they are not expected to follow TSA SCCB. There is currently no 24/7 level of support for emergencies. In which case, TSA should be notified if an emergency change is needed outside of normal business hours.

C.7.13.9

C.7.13.9 Data Stored/Processed at Contractor Site

Unless otherwise directed by TSA, any storage of data shall be contained within the resources allocated by the Contractor to support TSA and may not be on systems that are shared with other commercial or government clients.

Does this include cell phones, laptops and desktop? Yes to the first question. Virtual Desktop MAY be allowed but the solution will be closely tested and verified to ensure there are no residual TSA data remaining on the asset.

C.7.13.10 C.7.13.10 Remote Access

The Contractor shall use PIV as the primary means to access TSA resources to include IT applications and physical facility. TSA network domain user account password expiration function shall be disabled when using PIV Machine Based Enforcement (MBE). PINs for PIV card-enabled users shall not expire, and shall have a minimum six-digit PIN when logging into the network using a PIV card.

Does this include cell phones? Does this include apps on cell phones?

If the contractor utilizes iPhones or other smart phone devices for ticket dispatch and maintenance data reporting, and these devices are all issued by the contractor, then they are authorized to access them through fingerprint scanning technology and/or other soft token authorization methods and are not required to use a PIV card. Please refer to mobile parameters section on policy regarding use of iPhone, iPad and other multimedia devices in support of this RFP. Under no circumstances are personal mobile devices allowed.

94 C.7.13.5 Risk Management Framework Risk Management Framework section Will the contractor’s system undergoe a security architecture review to ensure security functions are employed and implemented within the system? Yes.

C.7.13.16 C.7.13.6 Program Performance

The system internet connection shall be behind a commercial Trusted Internet Connection (TIC) that has EINSTEIN 3 Accelerated (E3A) capabilities deployed. These include but are not limited to the analysis of network flow records, detecting and alerting to known or suspected cyber threats, intrusion prevention capabilities and under the direction of DHS detecting and blocking known or suspected cyber threats using indicators. The E3A capability shall use the Domain Name Server Sinkholing capability and email filtering capability allowing scans to occur destined for .gov networks for malicious attachments, Uniform Resource Locators and other forms of malware before being delivered to .gov end-users.

Is the contractor’s system expected to have a dedicated circuit to DHS that all traffic is routed through?

Is the contractor's system expected to be monitored by the TSA SOC? DHS requirement is that all internet traffic must through an MTIPS connection or through the DHS TIC. If the contractors solution requires a dedicated circuit to DHS to meet this requirement, then yes.

Yes.

C.7.13.16 C.7.13.6 Program Performance

MTIPS providers shall comply with the FedRAMP TIC 2.0 Overlay requirements in addition to the basic requirements outlined in the DHS TIC Reference Architecture v2.0.

Is the contractor able to subcontract for their own MTIP's service?

Yes

C.7.13.11 C.7.13.11 Mandatory Public Key Infrastructure Solution

The current approved Government Furnished Equipment (GFE) solution for Privileged User is Xceedium.

Unless otherwise directed by the Contracting Officer, the contractor shall for the term of the contract require all Privileged Users to utilize the GFE Xceedium solution when accessing systems that process or store TSA data. If Xceedium solution is not currently in place or available upon contract award the contractor shall ensure their IT system access has applied the following countermeasures, until such time as the Xceedium solution is operational within the system.

Who do we coordinate with to acquire Xceedium?

Terence Goldsmith in OIT / Project Engineering with an alternate of Walt Winn.

Questions_Clarifications