Answers to Questions for Responses Submitted via SAM RFI (HT0011-25-RFI-0226) - 04012025.pdf

Question No. Section(s) Questions/Comments Response 1 Is this anticipated to be a Firm Fixed Price (FFP), Time and Materials (T&M), or Cost Reimbursement contract? Contracts Cost Reimburseable.

2 Is there an estimated funding ceiling and is it a Small Business Set-aside?? Contracts There is no Ceiling, Small Business Set asides are not being considered at this time.

Strategic Management Support (Section 5.1):

Will the contractor have direct access to senior DHA leadership for strategic planning, or will interaction be limited to advisory teams? Technical There will be direct access to senior J-6 leadership as well as interactions with advisory teams.

Strategic Management Support (Section 5.1):

Is there an existing strategic framework or roadmap that the contractor must align with, or is part of the role to help develop one? Technical The contractor must align with an existing strategic framework of J-6 and DHA.

Strategic Management Support (Section 5.1):

Will the contractor be expected to develop acquisition packages, or only provide advisory and analysis support? Technical The contractor will only provide advisory and analytical support.

Strategic Management Support (Section 5.1):

Does DHA have existing procurement evaluation criteria, or will the contractor be expected to develop new methodologies? Technical The contractor will only provide advisory and analytical recommendation.

7 Cybersecurity & Risk Management: What level of cybersecurity clearance is required for contractor personnel? Technical The contractor personnel will require a public trust.

Cloud & DevOps (5.4.2):

Are there preferred cloud service providers (AWS, Azure, Google Cloud) for DHA’s modernization efforts? Technical The contractor will provide recommendation for DHA's moderization efforts and J-6 will determine if the cloud service provider aligns with DHA perferences.

System Migrations (5.4.3, 5.4.4):

Are there existing transition plans for legacy systems to Salesforce and other platforms? Technical No, there are no transition plans for legacy systems into Salesforce.

10 Engineering Assessments (5.4.1.10): Are there specific DHA enterprise systems that will require automated tiered-storage strategies? Technical No, there are not.

11 Will the contractor conduct independent risk assessments, or will it be a collaborative effort with DHA’s existing security teams? Technical The contractor will conduct independent risk assessment 12 Will DHA provide security clearances, or must the contractor recruit personnel who already have the required clearances? Technical The contractor will be required to have an FSO for clearances.

13 Are there any special background check requirements beyond NACI or DoD CAC issuance? Technical No, there are not.

14 How frequently will contractor personnel be expected to travel to San Antonio, TX or other DHA sites? Technical Travel will depend on the tasks being performed and the mission owner of the task.

15 Will DHA reimburse travel expenses, or should they be factored into pricing? Contracts Travel Expenses will be reimbursed, but are subject to COR

Approval. Please see PWS Section 1.8 Travel ODCs.

16 If the contractor assists with acquisition support, will they be precluded from competing for future IT contracts related to DHA’s modernization? Technical Given that acquisition support is a core task for of this requirement, the successful contractor may be precluded from competing on future IT contracts at DHA if the nature of the work performed could potentially give rise to an unmitigable OCI, such as the “unequal access to information” or “biased ground rules” types OCIs. In the event the potential for such an OCI is found to exist, the government may request a mitigation plan from the contractor as part of its proposal as to how the contractor expects to address the underlying OCI during its performance of the contract. The government would then make a determination as to whether an OCI exists, and if so, whether it is mitigable considering input from the contractor, including any mitigation plan it might submit.

17 Are there existing DHA OCI mitigation strategies, or will the contractor be required to submit a custom plan? Contracts The KTR is required to submit a custom OCI Plan.

18 Are there any specific companies who are OCI’d from this opportunity? Contracts No.

19 Would Prime or Sub awardees from the MHS Enterprise IT Services (EITS) Geographic Service Provider (GSP) IDIQ be OCI'd from this opportunity? Contracts That is not known at this time.

20 6.6.1. Evidence of FISMA compliance must be presented in the form of a POA&M. Systems must have and maintain an Authority to Operate (ATO) or Authority to

Operate with Conditions (ATO-C) by contract award. Does the government require a bidder to possess an active ATO to be eligible for an award?

Technical/Cont racts

No.

PWS Section 6.5.5.2.1 & Section 6.5.2.1.1

Section 6.5.5.2.1 states a basic CMMC assessment shall be obtained and maintained via SPRS, which is a self assessment, but Section 6.5.2.1.1 refers to a Deliverable Schedule in Attachment 2. Will the government please clarify the CMMC requirements for this effort?

Technical/Cont racts

The CMMC as Per DFARS 204.7503 (a) and (b) does not apply to this requirement at this time.

22 Will the government please provide Attachment 2? Technical/Cont racts

There is no Attachment 2. The only documents posted on SAM were the RFI and the Draft Performance Work Statement