Questions and Answers for SNS Tool 20-Q-0222.pdf

1. Q1 - Is it possible to present the solution before the proposal due date?

Government Response: Due to COVID-19 limitations and time constraints, an industry day for vendors to demonstrate proposed solution products is not feasible.

2. Q2 - Page 28 , “Technical Acceptability Criteria “ Supported social media site:

I. Each network has its own profile search capabilities providing the option to search by the handle ID , name (as keyword) , email address and more. However, some are more limited and WhatsApp as example allows you to search a profile by phone number and return a profile with image (if available) and name (if present). Do you expect to search on such network with other criteria’s?

II. Can you confirm that “medium” is medium.com (url)?

III. Minimum social media site requirement - If our platform currently supports the entire list with the exception of two, can we commit to add it to the platform up to 45 days from the official award or we will be considered as not qualified technically?

Government Response:

I. The primary key search required is by name.

II. www.medium.com III. Yes, consideration will be made for vendors based upon proposal for technical acceptance.

3. Q3 - Page 28 , “Dashboard or user interface “:

I. 2nd bullet - We assume Filter by name or rank, or other textual identifiers means the ability to filter profile results in the dashboard by those identifiers

II. 4th bullet – Risk rating. Can we assume that the end user will define the risk terms (set of keywords within categories ) that will be used to auto risk calculation by the platform ?

III. 5th bullet – Malicious link. Can you elaborate more about what is the functional requirement to retrieve it (the search or monitor term within the social network?)

I. Correct.

II. The service should provide the risk rating as part of the solution offering.

III. The solution offering shall scan, identify, and provide notice of malicious links or virus attributes as found in association to the profiles under monitoring.

4. Q4 - Page 28 , “Discovery”:

I. 1st bullet - We understand Removal\Remediation as requirement to remove fraudulent profile from the social network.

a. is it correct ?

b. Removing accounts from social network is a manual process require to submit online forms and disclose the main account holder ID (photo ID for example) and its not automatic process. Can you elaborate more about the expectation form this process?

c. The process should be done by the account owner or by his legal representative , which is not covered in the RFP which is not covered under this RFQ.

a. Yes, the requirement is correct.

http://www.medium.com/

b. Providing the service is part of the vendor’s solution set. The requirement is to have a process to removal/remediation of fraudulent profiles from a social network site.

c. The process is part of the vendor’s solution set as a service of the subscription as presented in the vendor’s proposal to implement.

II. 4th bullet - “……..which discovered profiles contain malware or malicious… “Do you mean here that as part of the profile metadata such as in the about summary listed URL should be classified or tagged as suspicious link?

Government Response: The requirement is to discover and present instances of malware or malicious links. How this is presented is part of the vendor’s proposed solution set.

5. Q5 - Page 28 , “Remediation”:

I. 1st bullet - The ability to successfully remove account is pending on the social media site. Some of the listed sites are not within US justification and might won’t cooperate.

a. Can it be considered as best effort ?

b. Can you consider the account removal request form will be initiated by the account holder or his legal presentative?

Government Response:

a. The requirement is the vendor to have processes in place to ensure the removal of the identified items once approved by government personnel.

b. The requirement is for the vendor to have processes in place to action the remediation.