Questions and Answers.docx

Here are the answers to the questions:

1. Who is the Current Incumbent? N/A, last company was Southern California Shredding.

2. When does the current contract end? N/A, last contract ended in Jan 2024.

3. Are any Bridge Contracts in place that extend the current contract? No

4. What is the last contract award number and total award amount? HT941023F0017; What is the amount expected of Hard drives needed for destruction? Initially 30-50 old hard drives and then as needed. It will be minimal as we have limited classified spaces and hardware.

5. Service 2.4 Per the SOW of Non-Paper Media (computer and hard drives, etc.,) and paper destruction needed on this solicitation, please include a CLIN for the hard drive per hard drive rate.

How much Non-paper media is expected to be destroyed if there is an expectation for destruction? Initially 30-50 old hard drives and less than 50 CDs/other old media. After the initial items are destroyed it will be minimal as we have limited classified spaces and hardware.

6 Service 2.2 Can pickup day ( Wednesday) be changed if needed? Yes. We are flexible on the pick-up date.

7 NSA/CSS Policy Manual Page 4 Table 1 Paper Sanitization. What size does the paper have to be after it passes through the contractor's shredder? Must meet NSA guidelines: Microsoft Word - NSAEPLPaperShreddersAPR2024. Performance testing evaluates the device’s ability to reduce paper documents to shards measuring 1 millimeter by 5 millimeter, or less.

8 If the contractor is transporting the PII off-site will the agency inspect the facility prior to contract award to check for monitored security systems such as cameras, alarm systems, etc. in accordance with NAID Standards? No 9 Service 2.2 The SOW states on-site or off-site however, the Acceptance location says the services SHALL BE PERFORMED at Naval Medical Center San Diego from the cage provided, please clarify. Shredding services can be performed off-site.

10 CUI Notice 2019-03: Destroying Controlled Unclassified Information (CUI) in paper form (We have provided a copy) Will the agency consider using CUI Notice 2019-03: Destroying Controlled Unclassified Information (CUI in paper form) dated July 15, 2019 instead of the NSA/CCA Policy provided for paper records. The notice allows NMCSD to use a 2-step process (on-site) to destroy CUI while still satisfying the regulatory requirement of disposing of CUI.

The CUI Notice 2019-03 refers to the NHA standards that we require. NSA Evaluated Products Lists (EPLs) + 9-12

11 Does the hospital have a security officer/records manager reviewing the SOW to ensure that this SOW complies with the hospital’s policy on destroying patient medical information? Yes, as long as hospital PHI/PII is shredded in accordance with NSA destruction standards.