SoURCE CODE BAA QnA ROUND 4_C.pdf

UNCLASSIFIED

P a g e | 1

SoURCE CODE Program

IARPA-BAA-24-02

Industry Questions and Government Responses Round 4

NOTE: Numbering sequencing continues from Round 1, 2 and 3 Response submissions.

57. Does IARPA have a similar WAN system, similar to DARPA's DSWAN (DARPA Secret Wide Area Network) that could be used for data exchange and voice?

Answer 57. Yes, the Government has similar networks. IARPA does not require the use of the DD- 254, as we are not a Department of Defense entity. Our Contract Data Classification Guide (CDCG) will be provided to all offerors when the Government requests proposal cost volumes and takes the place of the DD-254.

58. Would the Government consider/re-consider its position in allowing Offeror's to submit proposals for TA1 only to allow for the broadest number of perspectives (and Offerors) to address this demanding challenge?

Answer 58. No. We cannot give further extensions as proposals have been submitted. The proposal due date for TA 1 only proposals was updated several times, extending the submission date to its final date of March 29, 2024 @ 5PM, on March 12, 2024.

59. Paragraph 4.B of the SoURCE CODE (IARPA-BAA-24-02) BAA provides requirements for the font size of the proposal body, as well as font size for figures, tables, and charts. However, there is no mention of font size for captions for the figures, tables and charts. Is size 10 font permitted for the captions?

Answer 59. Yes, size 10 font is permitted for captions. See 4.B Proposal Format and Content

60. The BAA/Classified addendum says to reach out to the assigned PSO for security related issues.

However, no contact information is provided. Who is the security POC/PSO?

Answer 60. The IARPA Contracts team will be the liaison for all administrative matters relating to SoURCE CODE, including security issues. The PSO will be identified in any resultant contract.

61. If JWICS and SIPR are unavailable to us for classified proposal submission, can you provide alternate instructions for classified e-mail submission of our TA1/TA2/TA3 SoURCE CODE proposal?

Answer 61. Any similarly approved, accredited system is acceptable for electronic submission

62. What information system(s) are authorized for us to write the proposal? This effort is collateral SECRET but our only collateral systems are accredited by DCSA. Without the MOU in place as mentioned above, does IARPA provide accreditation for systems used to support their efforts?

P a g e | 2

Answer 62. The relationship between IARPA and DCSA does NOT require an MOU and IARPA does not provide accreditation for systems. IARPA has requested and received Facility Clearance Reciprocity from DCSA for use of your FCL for this classified proposal process which allows IARPA to send the classified BAA to Offerors at the address of the cage code that was provided. Please utilize the collateral SECRET systems accredited by DCSA within that cage code to complete the proposal process as this satisfies the terms of the reciprocity agreement. If your Regional DCSA Representative has any additional concerns regarding this matter, send us their name, email address, and phone number and we will coordinate with them directly. Anyone whose Facility sponsor is not DCSA and requires specific Co-Use/Joint-Use Authorization will be handled accordingly. If selected for negotiations, the Government will provide instructions for obtaining CUA/JUA which will be required before performance of any classified work.

63. Which type of secure facility is required to perform on this program? As with our systems, our collateral spaces are also accredited by DCSA and would require an MOU between both organizations. Does IARPA require ICD 705 SCIFS/SAPFs for collateral efforts?

Answer 63. Any performance on the SoURCE CODE program for TA's 2 and 3 are required to be performed in cleared facility spaces accredited to the SECRET level, with SECRET level Safeguarding. See answer to number 62.

64. Our facilities are accredited by DCSA. DCSA instructs us to get an ATO for any classified devices, regardless of whether the devices are connected to any outside network. DCSA typically takes 6 months to accredit new classified information systems. Can IARPA provide one or more accredited laptops for us to use to write and submit this proposal? Alternatively, can IARPA accredit any of our laptops for use in this proposal?

Answer 64. See answer to number 62.

65. I wanted to verify if someone with only an Interim clearance can access IARPA classified BAA. I understand that access is different per each proposal or contract and wanted to confirm before someone can have access to this material.

Answer 65. The Government will allow for contractor personnel with interim clearances to access the classified Addendum.

66. There appears to be a disconnect from the unclassified BAA due date and the classified Addendum released on Monday, April 24, 2024. In the unclassified BAA, the delivery is detailed at May 31, 2024 and in the classified Addendum it is detailed at May 23, 2024. Can the Government clarify if this is an oversight?

Answer 66. We recognize this discrepancy. The unclassified BAA (amendment 008) lists the correct due date for TAs 1, 2 and 3 as June 14, 2024, @ 5:00PM EST. Any further date changes will be made via the unclassified BAA on SAM.gov, as it is easier to distribute.

P a g e | 3

67. The latest version of the BAA says that TAs 1, 2 and 3 are due on May 31, 2024 at 5:00PM EST, but the classified Addendum says they should be turned in by May 23, 2024 at 4:00PM. May you clarify which day and time is the right one for a joint TA 1, 2 and 3 proposal?

Answer 67. See answer to number 66.

68. The offers due date in the Addendum states May 23, 2024, and on SAM.gov it states May 31, 2024. Which date should we plan for as the due date?

Answer 68. See answer to number 66.

69. Is there a designated security POC? The BAA says to reach out to the PSO, but doesn't include a name or contact information.

Answer 69. See answer to number 60.

70. If awarded, will collateral (DCSA) facilities suffice or will they need to be ICD 705 spaces?

Answer 70. The Government will provide the next steps for facilities reciprocity for all successful offerors, upon notice of selection.

71. If awarded, who will issue the IS ATO's and what is their process?

Answer 71. See answer to number 70.

72. With regard to the SoURCE CODE SCG (version 1.0, dated December 3, 2023), Section 6, items 6.12, 6.14 and 6.15, can IARPA clarify that TA 1, 2 and 3 cost information required for proposal Volume 1 sections 2.F and 3.F may be handled and marked as unclassified, so long as this cost information does not reveal information that the SCG requires to be handled at higher classification per those items in 6.12, 6.14 and 6.15?

Answer 72. The Government has an updated version of the SoURCE CODE SCG available for transmission for those who have been approved and authorized to receive it, specifically encompassing clarifications for all of Section 6.

73. Our Security team is asking for a DD-254. Is there going to be a DD-254 issued for this BAA?

Answer 73. IARPA does not require the use of the DD-254, as we are not a Department of Defense entity. Our Contract Data Classification Guide (CDCG) will be provided to any successful offeror, and takes the place of the DD-254.

74. Reserved.

Answer 74. Reserved.

P a g e | 4

75. Reserved.

Answer 75. Reserved.