(U) Mercury_RFI_Govt_Responses_20260330.pdf

UNCLASSIFIED

Comment # RFI/PWS page number Section Question Response

1 RFI p. 8 4 May respondents use 10-point font for tables and administrative uses such as displaying text from the RFI questions within our response?

Yes, 10-point font may be used in tables. If a table continues onto a new page, please repeat the table header at the top of the next page.

2 PWS p. 8 3.3 To support software maintenance, is software documentation generally available to complement existing code?

Yes, currently on Chinook, there is a Software Delivery Summary CDRL, which will be made available during transition activities

3 PWS p. 9 3.3.2

Will the government provide a partial or complete Software Bill of Materials (SBOM) or traditional list of software packages, libraries, documentation, etc., where appropriate?

Yes, currently on Chinook there is an ODC Plan CDRL listing all current COTS Chinook software, which will be made available during transition activities.

4 PWS pp. 9-10 3.4.1 In an unclassified or classified forum, can the government share details on the NGA Cloud environment to include cloud type (e.g., Azure, AWS, hybrid)?

Yes, the Chinook ODC Plan CDRL includes a listing of all current cloud instances and will be provided during transition activities

5 PWS pp. 10-11 3.4.4

Will the government provide access to the IT ticketing solution leveraged for Enterprise Service Center (ESC) Tier 1 to ensure consistent ticket triage for Mercury help desk staff?

Yes, in instances where Mercury provides Tier 1 support, the vendor will have access to enterprise-level help desk IT ticketing solutions

6 PWS p. 12 3.6

Will the government or another organization perform Security Operations Center functions when continuous monitoring is implemented, or is the intent for Mercury staff to provide this support as well?

No,the vendor will need to provide all security engineering services required for maintaining ICD 503 compliance.

7 PWS p. 12 3.6 Will Mercury staff be responsible for Defensive Cyber Operations on systems for either systems transitioned to ESC-Tier 1 support or development systems?

Systems requiring security engineering support will be defined in the Task Order PWS

8 PWS p. 15 7

Will the government sponsor Common Operating Environment (COE) and SECNet installation at contractor facilities without current connectivity but appropriate facility security measures?

Place of Performance requirements are listed in Section 7 of the IDIQ PWS

9 N/A N/A How many FTEs are expected to perform this work? Or how many FTEs are currently supporting this under the Chinook contract today?

The number of FTEs will vary depending on the scope of the task order(s) awarded under the IDIQ.

10 N/A N/A What is the estimated budget for this work? Greater than $100M

11 RFI p.3 Table Are all the systems listed in the "Potential Mercury Supported Systems and Applications" currently owned by

NGA?

Yes, all current systems on Chinook are Government owned

12 N/A N/A Can the due date for responses be extended to April 13th? The response date is extended to April 9th.

UNCLASSIFIED