Final_MCTIMS_Q&A_for_Sources_Sought.pdf

Question Type Attachment Section Page Question Answer

Technical Final PWS 2 1.2 4

Do all systems use the same Active Directory certificates for CAC card

Authentication? Yes

Management Final PWS 2 1.7 7

Is the contractor expected to have CMMI Level III SVC and DEV certifications? We recommend this, to ensure quality standards.

Only CMMI Level III DEV is required due to the nature of work required by the MCTIMS contract.

Management Final PWS 2 2.1.1 8

Does Engineering, Technical, User, and Training documentation exist for all current systems and procedures, or will the contractor be expected to perform Discovery?

Yes, existing Engineering and Technical Documentation consists of: PM-APPS SEP, CMP, and ST&ES. User guide and Training documents are pre-existing CI to MCTIMS. The Contractor is not expected to perform

Discovery.

Technical Final PWS 2 2.1.2 8

Will EDTE be equivalent to the production system in terms of performance and architecture? The EDTE presently does not exists.

Technical Final PWS 2 2.3.1.3.3 10

Is there a single source code repository for code? Is there a single build server or devops pipeline? No for both questions. Source Code will be delivered via external media.

Technical Final PWS 2 3.1.1.2 11 Is the development and test environment referenced here different than EDTE? Yes

Technical Final PWS 2 3.1.3.1.7 13

Is there an established DR plan with historical backups and predefined records retention standards? Yes, it resides in the MCTIMS Incident Response Plan.

Technical Final PWS 2 3.1.5 14 What software version is used to house the CITBB? The PM-APPS share point site on VIPER houses the CITDB ( document, interfaces, SW & HW).

Technical Final PWS 2 3.1.7 16 Is any Release Management software in place? No

Technical Final PWS 2 3.1.8.10 18 What tools are currently in place for security scanning?

MCEITS uses ACAS for scans. The Government provides HP Fortify for the code development scanning.

Technical Final PWS 2 3.2.3 20

Based on the current capacity management plan, is there a need for storage changes immediately upon award?

There isn't a need for storage changes. MCTIMS is hosted in the MCEITS enterprise facility."

Technical Final PWS 2 3.3.2.2 22

Are all WBTs currently up-to-date and compliant with standards (such as 508), or will the contractor be required to update WBT's immediately upon award? Yes, all WBTs currently up-to-date and compliant with standards.

Management Final PWS 2 4.2.3 24 Is an Agile SDLC acceptable to the government to improve delivery of software? Yes, as long as the deliverables, milestones, and reviews are approved by the Government.

Technical Final PWS 2 4.2.4 24 May the contactor introduce a devops pipeline for deployment of releases? Yes, as long as the devops pipeline is approved by the Government.

Management Final PWS 2 5.1.3 26

Are there existing Reporting and monitoring metrics associated with the PMP that must be met, other than the already described SLA's and requirements? No

Management Final PWS 2 5.2.2.2 27

May off-site resources providing development support leverage a lower clearance level?

The security requirements are based on access to the MCTIMS system, vice physical access to a facility.

The utilization of "off-site" resources does not affect the clearance level.

Overall N/A N/A N/A

Does the Government expect the current contract to be extended pushing this solicitation date to the right/later? This contract is expected to award no later than September 2020.