RFP__Question_and_Answers_(1-5).docx

Question and Answers Solicitation HTC711-18-R-CC01

Question 1: Will proposals for Solicitation: HTC71118RCC01 – Domestic Airlift Charter Services be available to Brokers who can supply qualified Air Carriers that meet all of the requirements as outlined in the RFP?

Answer 1: No. The required capabilities and performance characteristics of the services being procured are as follows:

a. Air Carrier Operating Certificate issued by the Federal Aviation Administration (FAA) under Part 121 of the Federal Aviation Regulation (14 CFR 121).

b. Commercial Airlift Review Board (CARB) approved and on the DoD List of Approved Air Carriers, not in temporary nonuse or suspended status at time of award.

c. Participate in CRAF or their aircraft capability must be determined technically ineligible for CRAF.

Question 2: Are there spreadsheets required to be filled to calculate NTE rates as done previously?

Answer 2: No. This contract will not include price competition at the IDIQ level. Each individual requirement will be competed at the task order level establishing a competitive price for each charter mission, using the best value criteria as described in PWS Appendix 3.

Question 3: I did not see an attachment(s) for listing of aircraft, forms 81/82/83 in the Int'l Solicitation, is there something similar that I may have overlooked?

Answer 3: No.

Question 4. PWS: Page 22, Para 11.1.1. Handling and Protection of Non-Public Information “DoD Transactional Information (DTI), which for the purposes of this Page 23 of 38section shall mean any information developed or received in the course of planning, ordering, shipping, tracking, and invoicing in support of the requirements of this contract.”

1. Please explain the difference, if any, between CUI and DTI

1. In the CRAF contract, it was determined the information the government shares is not CUI, does the same hold true for DTI under this contract? If not, please explain the differences.

1. If DTI is disaggregated, is it still considered DTI?

2. Since much of this information resides on DoD websites (WAWF, GOPAX, unencrypted emails….), it may be disaggregated when received or certain items are “pulled” from the system

1. In addition to the above, please provide specific DTI examples as it relates to this contract for cargo and passenger missions with respect to “planning, ordering, shipping, tracking, and invoicing”

1. Will DTI be clearly marked to avoid any confusion about what is or what is not DTI?

Answer 4:

1. Please explain the difference, if any, between CUI and DTI

Answer: The Department of Defense defines CUI as information categorized as "For Official Use Only," "Law Enforcement Sensitive," "Unclassified Controlled Nuclear Information," and "Limited Distribution." While some data that we would share with our Transportation Service Providers (TSPs) could fall into one of these categories, not all data would. But since we are concerned that our potential adversaries could use our DTI to disadvantage us, we require our TSPs to treat all DTI with similar protections under the requirements of NIST 800-171, as modified by the table enclosed within the contract, "Modified NIST SP 800-171 Requirements."

2. In the CRAF contract, it was determined the information the government shares is not CUI, does the same hold true for DTI under this contract? If not, please explain the differences.

Answer: Department of Defense Manual 5200.01, Volume 4, governs the definition of CUI. Most DTI will likely not be CUI. But there may be data from DTI that also meets the DoD definition of CUI. For example, one of the subcategories of FOUO is Personally Identifiable Information (PII). If USTRANSCOM entrusts PII to its TSPs, the TSPs must protect that PII as it would any other CUI. But since we are concerned that our potential adversaries could use our DTI to disadvantage us, we require our TSPs to treat all DTI with similar protections under the requirements of NIST 800-171, as modified by the table enclosed within the contract, "Modified NIST SP 800-171 Requirements."

3. If DTI is disaggregated, is it still considered DTI?

Since much of this information resides on DoD websites (WAWF, GOPAX, unencrypted emails..), it may be disaggregated when received or certain items are "pulled" from the system.

Answer: Even when disaggregated, DTI remains DTI and TSPs must protect under the requirements of NIST 800-171, as modified by the table enclosed within the contract, "Modified NIST SP 800-171 Requirements."

4. In addition to the above, please provide specific DTI examples as it relates to this contract for cargo and passenger missions with respect to "planning, ordering, shipping, tracking, and invoicing"

Answer: Example DTI could include, but is not limited to, dates, ports of embarkation and debarkation, numbers of passengers, weight or dimensions of cargo, existence of hazardous materials, names and other PII of passengers, load plans, mission ID, cargo descriptors, price quotes, names and contact information of transportation officials, etc.

5. Will DTI be clearly marked to avoid any confusion about what is or what is not DTI?

Answer: No; all data the TSP develops or receives from a USTRANSCOM entity while performing this contract is DTI and must be must protected under the requirements of NIST 800-171, as modified by the table enclosed within the contract, "Modified NIST SP 800-171 Requirements."

Question 5: Page 15, 4th paragraph. (f) Fuel Purchase Agreement. This paragraph states that the Kerosene Tax Exemption Certificate (Attachment 2a) must be completed. If the Air Carrier does not have a kerosene purchase that qualifies for a waiver, does this form still have to be filled out and returned in the solicitation response?

If it has to be returned, do we just leave the spaces blank, or write in “N/A” through out the form, and sign it?

Answer 5: If not applicable, Offerors are not required to submit the Kerosene Tax Exemption Certificate with their proposal.