20200102 JECC C5S RFI QA #1.pdf

1A Attachment 1 of the PWS attempts to provide a level of effort and estimates as to the number of accounts;

equipment in use; incidents; activities; and, interactions; however several areas seem to require additional information to accurately estimate associated workloads.

a. What is the average number of cyber security incidents annually (para. 1.3.4.1)

Answer: The average number of Cyber Security Incidents at the JECC is very low, but the JECC is on USTC and USAF networks and must be aware of and track their activities and determine effects on the JECC. USTC maintains the database of these and the JECC J6 participates in weekly Cyber Ops updates that provides visibility.

1B b. Para 1.3.10 Task 10 Special Project Development and Special Studies has extensive requirements for supporting these efforts, but the level of effort is a complete unknown. Can you provide a historical annual average that would guide estimates of associated workload?

Answer: The JECC currently have approximately 15 projects on the books. Paragraph 1.3.10 addresses a need for skilled project management to include requirements development and development of required artifacts to produce a Project Management Plan. Historically, the completion rate is about 3 projects a year.

2 Appendix F has an extensive list of Operating Systems/Software/Applications supported.

Is this a complete list of the software assets that are under oversight of the Inventory Control Monitor team?

Answer: This is a list of software currently in use (it may change with time). It is not a list of Software CIs.

We fall under USTC's JELA for most of our software/OS's. We do maintain a small inventory of application software assets and licenses which will fall under ITAM and the CM program.

3 Are there any unique certification requirements desired or required that are not called out in the PWS para 1.2.2.3?

i.e. Is the contractor expected to provide a CM lead who is certified (e.g. National Defense Industrial Association (NDIA) CM certification?

Answer: Certifications are not required.

4 What CM tool is currently in use? Answer: Using DPAS for ITAM; Excel; Visio; PowerPoint; Word

5 What number of assets, on average, are turned in annually and how many require degaussing?

Answer: The JECC is in the process of clearing out unused assets so the number is fairly high (we reduced our holdings by nearly 2000 items); once in steady state would expect normal lifecycle would be about 200 items a year with about 100-150 requiring degaussing-The JECC maintains a degaussing machine on premises.

6 The RFI states, "The anticipated NAICS for this effort is 541513, Computer Facilities Management Services.

The Small Business Administration small business size standard for NAICS code 541513, Computer Facilities Management Services is $30.0 million annual average receipts (total or gross income) over the past three years. The acquisition strategy of this requirement has yet to be determined."

Since the AQ Strategy hasn't been determined could this end up being a Full & Open solicitation or competed under an existing GWAC such as IT70, Alliant or OASIS?

Answer: We are currently conducting market research to determine the acquisition strategy. Please include in your response any suggested avenues.

Joint Enabling Communications Command C5S Request for Information # HTC711-20-Q-D003

Questions and Answers #1

Sheet2