M00264-15-T-1104_Amendment_0001.doc

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

QUESTIONS & ANSWERS

1. Question: What is your anticipated requirement for remediation of malicious links, trends, and malware threats linked to profiles?

Answer: The requirement will be the identification, reporting to social media site, and blocking on the MCEN boundary where applicable.

2. Question: What is the anticipated volume of throughput required on a weekly or monthly basis?

Answer: As a subscription based service, there is not an anticipated through put or bandwidth that is the contractor’s responsibility. In terms of alerts discovered, and remediated, the requirement has historically fluctuated from the hundreds to the thousands per week depending on trends.

3. Question: How many general officers are there in the Marine Corps that would require screening?

Answer: The requirement isn’t for screening General Officers. This requirement shall cover up to 200 personnel, including Senior Executives and General Officers.

4. Question: How many service members or full time equivalents are dedicated currently to this requirement?

Answer: This is not a service requirement; therefore, there are zero full time equivalents (FTEs). The requirement has been awarded as a license agreement.

5. Question: Is there an incumbent for this effort? If so, whom?

Answer: The incumbent for this requirement is MTN Government Services, Inc.

6. Question: Is there a particular acquisition threshold you intend to stay below? If so, which level?

Answer: There is no specified threshold to stay below. The resulting award will be issued to the lowest priced technically acceptable quote conforming to the solicitation, at a price determined to be fair and reasonable.

7. Question: Have you considered a small business set aside for this?

Answer: A small business set-aside was considered. Based on market research and responses to the Source Sought Notice, it was determined that this requirement would be solicited under full and open competition.

8. Question: To what degree does the solution need to have the business agreements, processes and relationships in place for fictitious account removal from sites, prior to the award? In other words, can the vendor solidify such business agreements upon award?

Answer: Without the established business agreements, processes and relationships a vendor will be considered non-compliant with the Government’s requirements. In accordance with the third bullet under “Remediation” in the solicitation, “capability must have business agreements, processes and relationships in place for fictitious account removal from the following included but not limited to sites: Facebook, Twitter, LinkedIn, Google+, Instagram, and YouTube.” As such, established business agreements, processes, and relationships shall be in place prior to award.

9. Question: Can the Government provide more fidelity on the targeted social media sites? If not a more detailed list, can the Government provide a rough estimate of the total amount of targeted sites?

Answer: The minimum targeted social media sites are Facebook, LinkdIn, Instagram, G+, Twitter, and Youtube as identified under the Technical Acceptability Criteria of the solicitation.

10. Question: During the course of the contract, will the Government require the addition of new social media sites? If so, can the Government provide an estimation of how frequently such requests could be made?

Answer: This information is not available at this time.

11. Question: Can the Government provide more details about the considerations made to establish the "risk rating”? Is this provided by the Government or developed by the contractor? What is the risk that is being measured?

Answer: The risk rating is developed based on the severity of the threat, provided to the Government by the contractors. Risk decision criterion is established by contractor based on search attributes.

12. Question: What is the anticipated date of award? Will contractor be provided time after award to negotiate business arrangements with social media platforms with which it does not have an existing relationship?

Answer: The anticipated date of award is on or around 30 September 2015. The contractor must have business process and agreements in place at time of the award to meet the requirement.

13. Question: In the event a social media platform refuses to delete an account, what is the contractor’s liability, if any?

Answer: The Marine Corps will continue to work with the contractor to get the difficult accounts deleted.

14. Question: Can the Government provide sample reports or a description of “executive level reports”?

Answer: The executive reports should provide Name, rank, social media site, and the total number of findings for the week, as well as the remediated (removed) and outstanding accounts.

15. Question: How many user profiles does the Government anticipate enrolling?

Answer: This requirement shall cover up to 200 personnel, including Senior Executives and General Officers.

16. Question: How many Government users will have access to dashboard(s) and reports?

Answer: CLINs 0001, 1001, 2001, 3001, and 4001 shall include one user and CLINs 0002, 1002, 2002, 3002, and 4002 shall be priced for up to two additional users.

17. Question: Who does the Government envision having the capability to mark a profile as whitelisted?

Answer: There shall be established work flow, allowing the Government to review all alerts one by one and then be able to report, on an individual basis, for deletion, white list, or close the finding.

18. Question: Are helpdesk business hours defined as those of HQMC i.e. eastern time?

Answer: Helpdesk hours shall be based off of Eastern Time.

19. Question: What is the difference between removal and remediation or are thy synonymous?

Answer: The terms are synonymous.

20. Question: What access to USMC data will we be given to cross-reference for identification of “evil twins?”

Answer: The contractor will be provided the First Name, Last Name, Middle Initial and Rank of the personnel.

21. Question: How do you desire the hosting to work with this application?

Answer: Access to the application will be accessed by subscription service. All hosting is provided by the Service Provider providing the Government the ability access and review findings and export executive level findings in a Microsoft format.

SECTION SF 1449 - CONTINUATION SHEET

SOLICITATION/CONTRACT FORM

The required response date/time has changed from 14-Sep-2015 10:00 PM to 17-Sep-2015 03:00 PM.

The following have been modified:

52.212-1 Addendum - Instructions, Conditions, and Notices to Quoters

1. Multiple Quotes

1.1 Quoters shall not submit multiple quotes presenting alternative terms and conditions for satisfying the requirements of this solicitation.

2. Overview

2.1 The Government intends to make a single award, Firm Fixed Price (FFP) contract for one (1) twelve (12) month base period, and four (4), twelve (12) month option periods, as a result of this solicitation.

2.2 The Government will award a single contract resulting from this solicitation to the responsible Quoter whose quote, conforming to the solicitation, represents the lowest price technically acceptable (LPTA) quote. The following factors will be used to evaluate quotes:

- Technical Capability

- Past Performance

- Price

2.3 Each Quoter shall submit a quote that clearly and concisely describes its response to the requirements of the solicitation. Use of general or vague statements such as “standard procedures will be used” will not satisfy this requirement. Unnecessary elaboration or presentations beyond what is sufficient to present a complete and effective solution are not desired and may be construed as a lack of understanding of the requirement.

3. Guidance

3.1 Quotes must be prepared in accordance with these instructions. Failure to do so may result in the Quoter’s submission being determined unacceptable and ineligible for award. Each Quoter’s submission shall be screened by the Contracting Officer upon receipt to ensure completeness and compliance with the instructions contained in the Request for Quote (RFQ). Elimination of a Quoter is at the sole discretion of the Contracting Officer.

3.2 The purpose of this procurement is to obtain a contractor provided solution to identify fictitious and imposter accounts (also known as “evil twins”) which are masquerading as USMC General Officers, for the Cybersecurity division of Headquarters Marine Corps Command, Control, Communications and Computers (C4) in accordance with the required functional capabilities of the solicitation.

4. Confidential Information

4.1 The Freedom of Information Act (FOIA) and its amendments have resulted in an increasing number of requests from outside the Government for copies of contract qualifications and quotes/proposals submitted to federal agencies. If a Quoter’s submissions contain information that he/she believes should be withheld from such requestors under FOIA on the grounds that they contain “trade secrets and commercial or financial information” (5 USC 552(b)(4)), the Quoter should mark its submissions in the following manner:

The following notice should be placed on the title page: “Some parts of this document, as identified on individual pages, are considered by the submitter to be privileged or confidential trade secrets or commercial or financial information not subject to mandatory disclosure under the Freedom of Information Act. Material considered privileged or confidential on such grounds is contained on page(s)_______.”

4.2 Each individual item considered privileged or confidential under FOIA should be marked with the following notice: “The data or information is considered confidential or privileged, and is not subject to mandatory disclosure under the Freedom of Information Act.”

5. Submission of Questions and Quotes

5.1 Questions

5.1.1 All questions must be received by 08 September 2015 at 3:00 PM ET. All questions submitted for this solicitation must be electronically sent to the following e-mail addresses:

monica.curley@usmc.mil and jamie.dufrene@usmc.mil

5.1.2 Note: Due to the firewall at Quantico, please be advised that it is the Quoter’s responsibility to ensure all electronic submittals of questions are received by the Contracting Officer in the timeframe given above.

5.2 Quotes

5.2.1 Electronic quotes are authorized for this solicitation and must be submitted to the following e-mail addresses:

monica.curley@usmc.mil and jamie.dufrene@usmc.mil Quoters may submit quotes electronically to monica.curley@usmc.mil or via Federal Express, private courier, hand delivered, or mailed, to the following address:

Regional Contracting Office, NCR

2010 Henderson Road

Attention: Monica Curley

Marine Corps Base (MCB)

Quantico, VA 22134

Quotes must be submitted no later than 17 September 2015 at 3:00 PM EST. In order to maximize efficiency and minimize the effort involved in the quotes evaluation process, all Quoters must comply with the following instructions for quote format and content. Quotes that do not comply with these instructions may be considered non-responsive and may render the Quote ineligible for award. For each quote submission, provide a Technical Quote, Past Performance, and Price Quote.

5.3 Quote Content

5.3.1 Technical Capability

5.3.1.1 Quoters shall address the following information in their Technical Quote:

Demonstrate a solution to provide a commercial off-the-shelf (COTS) automated social networking capability to provide significant improvement in the ability to conduct effective and efficient discovery, removal, and reporting of imposter “evil twin” social media accounts in accordance with the solicitation as detailed in the “Required Functional Capabilities” of the solicitation.

5.3.2 Past Performance

Submission Requirements for Contractor Past Performance.

The Quoter’s past performance quote shall not exceed 15-pages, not including the Past Performance Questionnaire (PPQ) in Attachment #1. The quote should address the quality of a Quoter’s recent (performed within three (3) years of the RFQ issued date) and relevant (similar in size and scope) past performance based on the input received by the Quoter, its references and other reliable sources contacted by the Government. Quoters that have no record of past performance (i.e. new businesses) must submit a signed and dated past performance certification statement to that effect. The Quoter should provide at least three (3) references demonstrating relevant past performance to demonstrate the quality of performing the same or similar services within the last three (3) years. Include the following fields:

Customer;

Contract/Task Order Number;

Program name;

Period of Performance;

Contract type;

Total contract value; and Names/Telephone numbers/e-mail for the Procuring Contracting Officer, Contracting Officer’s Representative, Government Project Manager, or other Point of Contact with technical knowledge of the past performance sufficient to complete the PPQ.

The Government may request additional past performance information from others using a PPQ. The Government may also use other information such as Contractor Performance Assessment Reporting System (CPARS), DoD Past Performance Information Retrieval System (PPIRS) and the Federal Awardee Performance and Integrity Information System (FAPIIS) data available from Government sources to evaluate a Quoter’s past performance. The Government reserves the right to limit or expand the number of references it decides to contact and to contact references other than those provided by the Quoter.

Referenced Contracts That Had Problems. The Quoter may provide information on problems encountered on any contract referenced on the Contractor Past Performance Reference Form and the corrective action taken to resolve those problems.

5.3.3 Price

5.3.3.1 Quoter’s shall submit a price quote consistent with the Contract Line Item Number (CLIN) structure in the SCHEDULE OF SUPPLIES/SERVICES.

5.3.3.2 Quoters are only required to price the base period and option year CLINs. The prices for all option items will be evaluated in accordance with FAR 52.217-5, Evaluation of Options. The Government makes no guarantee that the option periods will be exercised. It will be the Government’s unilateral right to exercise any option periods and, once option periods are exercised, the Contractor is required to perform the work when ordered during the scheduled period of performance of the contract.

5.3.3.3 Completeness. The Quoter must sign the SF1449, acknowledge all amendments, and include the below information in its quote submission. At a minimum, the following areas must be addressed:

· Quote is valid for 60 days from the date of submission;

· No exception to any Terms and Conditions has been taken, or if so, clearly stated;

· Acknowledge any amendments to the RFQ;

· A validated registration in the System for Award Management (SAM);

· Signed quote for the one (1) Base Period and one (1) option period provided; and,

· Contract Line Item Number (CLIN) pricing, to include unit and total price.

52.212-2 Addendum – Evaluation -- Commercial Items

1. BASIS FOR CONTRACT AWARD

1.1 This evaluation will be conducted using the procedures contained in the Federal Acquisition Regulations (FAR) 13.106-2, Evaluation of quotations or offers, and application of Lowest Price Technically Acceptable (LPTA) selection procedures. Award will be based on LPTA quotes evaluated in order of lowest priced until a technically acceptable quote is identified. Award will be made to the Quoter who is deemed responsible and responsive and reflects a complete understanding of the services required in the Request for Quote (RFQ). The Government reserves the right to refrain from awarding to any Quoter in the event that all quotes are determined to have quoted pricing that is not considered complete, accurate, and/or reasonable. To be eligible for award, a quote must meet all technical requirements, conform to all required terms and conditions, and include all required information set forth in this RFQ.

1.2 The process of quote evaluation and selection will be as follows:

(a) The Government will evaluate all price quotes first, and determine completeness with regard to price;

(b) The Government will rank Quotes from lowest price to highest price; and

(c) The Government will take the lowest priced complete quote and evaluate it for technical acceptability. If that quote is determined to be technically acceptable, the Government will select that quote for award. If the lowest price complete quote is determined to be technically unacceptable, the Government will evaluate the next lowest priced complete quote, and will continue this process until an alternate lowest priced, technically acceptable quote is identified.

1.3 Quotes that are unrealistic in terms of technical capability or price may be rejected at any time during the evaluation process. The Government may determine that a quote is unacceptable if the option prices are significantly unbalanced or if any unit price is considered unbalanced.

1.4. Unless otherwise stated in the quote, a Quoter’s agrees, by quote submission, to all solicitation requirements, including terms and conditions, representations and certifications, and technical requirements.

1.5. The following factors will be used for evaluation:

(a) Technical Capability

(b) Past Performance

(c) Price

2. TECHNICAL EVALUATION

2.1 The Government will award a contract resulting from this solicitation based on the lowest evaluated price quote meeting or exceeding the acceptability standards for non-price elements and whose quote is from a responsible Quoter.

2.2 Technical capability of the quote to meet the Government’s requirement. The following technical capability standards will be considered in determining quote information contained in 52.212-1 Addendum to be acceptable:

Demonstrate a solution to provide a commercial off-the-shelf (COTS) automated social networking capability to provide significant improvement in the ability to conduct effective and efficient discovery, removal, and reporting of imposter “ evil twin” social media accounts in accordance with the solicitation as detailed the solicitation.

Standard of Acceptability: The quote will be evaluated on its solution to fulfilling the requirement for a COTS automated social networking capability to provide significant improvement in the ability to conduct effective and efficient discovery, removal, and reporting of imposter “evil twin” social media accounts in accordance with the solicitation. Quote should articulate an acceptable solution that meets the requirements provided in the solicitation.

Evidence of technical acceptability of the technical capability includes:

Technical Acceptability Criteria

· The capability/solution shall be a fully functional COTS capability and ready to begin to accept and enroll user profiles and enable required feature/function one (1) day after the contract is awarded.

· The capability/solution must have the ability to query at a minimum, but not limited to the following social media sites: Facebook, Twitter, LinkedIn, Google+, Instagram, and YouTube. The capability/solution shall be responsible for any agreements with the required social media organizations that will enable the capability to execute and perform successfully.

Dashboard or user interface

· The capability must have the functionality to view all identified accounts in one location

· Filtering functionality of profiles by last name, first name, rank, date, social media venue

· Drill down functionality for individual incident or alert by entity name, date, social media venue, picture and malicious links

· Risk rating of entity record

· Malicious link or virus attributes data associate to discovered alerts

· Hash tagging search, trending, and analysis capability (discovery of malicious activity)

· Discovery that includes name, rank, and picture of discoverable asset

· Bulk reporting buttons and features

Discovery

· Capability must have functional workflow for removal and remediation, of discovered entities

· Capability must have functional whitelisting capability to convert false positives into whitelisted accounts that fall off the alert list

· Capability must have functional processes/procedures for identifying hashtag trending topics regarding the USMC with malicious intent

· Capability shall have functional ability to identify which discovered profiles contain malware or malicious links and redirects within each affected profile

Reports/Reporting

· Capability must have a functional, highly flexible customizable reporting feature allowing the manipulation of field data to be excluded or included in each report (e.g. time and date stamps of found alerts, priority, comparable risk rating criteria, malware indication, last name, rank, first name, social media site, status including but not limited to closed, open, whitelist, reported for deletion etc.)

· Capability shall have functional customizable executive level reports, exportable by the customer in Adobe Acrobat .pdf and Microsoft Excel .xls formats containing desired/required information (e.g. last name, rank, social media site, risk level).

· Capability must have trending an analytical data available for further analysis by the customer. ie: bar charts, graphs, line charts, showing date/site/alert identifying trending and analysis of data

· Capability must have bulk reporting buttons and features automating the submission for identified “impersonators”

Remediation

· Capability must include functional workflow process (es) to remediate alerts once government personnel complete human review and categorize alert profile as fake, fraudulent, or malicious. Remediation for the purposes of this document means that the alerted profile has been deleted by the social media site.

· Capability response time for reported Impersonation accounts is 6 weeks from the first day of reporting by the customer.

· Capability must have business agreements, processes and relationships in place for fictitious account removal from the following included but not limited to sites: Facebook, Twitter, LinkedIn, Google+, Instagram, and YouTube.

· Capability must contain training materials.

Service Level Agreement (SLA)

· Technical Helpdesk Support must be provided to Government users during business hours Monday – Friday.

· System uptime of 99.97% and shall inform the USMC C4/ Cyber Division (CY) designated representative(s) (i.e. the Contracting Officer’s Representative, “COR”) in writing no less than 2 weeks prior to any scheduled maintenance or planned outages that may degrade or interrupt service or user access to the SND system.

· The capability shall be accessible to the Government user 24hr/7days/365.

2.3 Failure to satisfy any one, or combination of, or all of the above listed elements and standards will automatically render the entire Technical Capabilities quote as “Unacceptable.” The Technical Evaluators will use their professional judgment to determine if the quote has demonstrated the technical capability to fulfill the requirements set forth in the solicitation. If multiple requirements are either missing or unacceptable, this may indicate a lack of understanding by the Quoter and degrade confidence in the Quoter to successfully complete the services required. The Government intends to make award without discussions, but maintains the right to hold discussions if it so determines.

The following adjectival ratings/definitions will be utilized:

3. PAST PERFORMANCE

In accordance with FAR Part 12.206 Past Performance will be evaluated. The Government will evaluate the Quoter’s, and (if applicable) its principal subcontractors’ demonstrated past performance in delivering quality services and in meeting schedule requirements on similar programs. The performance risk assessment will address the probability of the quoter successfully accomplishing the contract requirements based on relevant past performance. The currency and relevance of the information, source of the information, context of the data, and general trends in contractor’s performance will be considered. Problems not addressed by the quoter will be considered to still exist.

Each quoter will be evaluated to the extent to which they demonstrate satisfactory performance on contracts or subcontracts currently ongoing or completed within the last three (3) years. References other than those identified by the quoter may be contacted by the Government and used in evaluating the quoter’s past performance. Past performance is an indicator of how current and/or previous customers assess contractor performance under a specific contract performed for them and address the full range of all functions required to make any contractual relationship work. Successful past performance indicates that a contractor understands and has the resources to successfully execute a contract; however, it does not necessarily mean a contractor has the resources and skills necessary to perform the specific work requirements of this solicitation.

Evaluation of past performance will be based on consideration of all relevant facts and circumstances. The evaluation will include demonstrated past performance in quality of product or service, schedule, business relations, and customer satisfaction. The following table identifies the adjectival ratings and descriptions utilized in rating past performance history:

The past performance ratings are defined below:

4. PRICE

4.1. The Government will evaluate Quoter’s quoted prices, but this factor will not be given an adjectival rating. Quotes will be evaluated on completeness, accuracy, and reasonableness. Evaluation of the quoted prices for the services will be based on a comparison of quoted prices received in response to the solicitation and may also be based on a comparison to the Independent Government Estimate (IGE) along with any other reasonable basis as prescribed in FAR 13.106-3, Award and documentation. All option period pricing will be considered in the evaluation. A Quoter’s proposed prices will be determined by multiplying the quantities identified in the schedule by the proposed unit price for each item number to confirm the extended amount for each. A Quoter’s price will be evaluated for completeness and reasonableness. Unrealistically high or low proposed costs/prices may be grounds for eliminating quoter from competition on the basis that the quoter does not understand the requirement or the quoter has made an unrealistic quote. The price evaluation will document the Quoters total price, and determine its reasonableness and affordability.

4.2 The price of the base period and option period will be evaluated in accordance with FAR 52.217-5, Evaluation of Options.

4.3 Reasonableness. For the price to be reasonable in its nature and amount, it should not exceed that which would be incurred by a prudent person in the conduct of a competitive business. Reasonableness takes into account the context of a given evaluation procedures, including current market conditions, general economic conditions, and other factors that affect the ability of a Quoter to perform the contract requirements. Normally, adequate price competition establishes a fair and reasonable price.

4.4 Completeness and Accuracy. The Government will review the pricing tables for completeness and accuracy. A determination will be made as to whether the Quoter properly completed the pricing tables. The Quoter’s quote will be checked for mathematical correctness to include the following:

1) Checking arithmetic in all computations; and

2) Ensuring all prices are summarized correctly

(End of Summary of Changes)