JS-1 Bidders Questions and Responses 11202024.xlsx
XLSX spreadsheet 19 KB Posted
- Attached to
- Integrated Combat System (ICS) MK 6 MOD X Full Rate Production (Foundry Hardware Factory)
- Solicitation number
- N0002425R5200
About this file
This is a Questions and Answers document containing three industry questions and government responses related to Draft RFP N00024-25-R-5200 for the Navy's Surface Fleet hardware pipeline "The Foundry." The questions seek clarification on facility requirements, security specifications, and cybersecurity protocols.
The government confirmed that facility requirements for document handling specifically refer to Controlled Unclassified Information (CUI) rather than all unclassified documents. The government indicated a draft DD254 security requirements form will be provided with the final RFP. Regarding cybersecurity, the government clarified that NCIS network sensor installation requirements are standard Navy contract language mandated by ASN RDA memo dated September 28, 2018, and NMCARS Annex 16. The Q&A document appears to be dated November 20, 2024, with questions submitted on November 15, 2024.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| JS-1 Bidders Questions with Responses 06092025.xlsx | XLSX spreadsheet | |
| JS-1 Bidders Questions and Responses 12042024.xlsx | XLSX spreadsheet | |
| JS-1 Bidders Questions and Responses 11062024.xlsx | XLSX spreadsheet | |
| N00024-25-R-5200 Draft Amendment 1.pdf | ||
| N00024-25-R-5200 Draft.docx | DOCX document | |
| Attachment 1 - N00024-25-R-5200 MK 6 MOD X (Foundry Hardware Factory) Questions.xlsx | XLSX spreadsheet | |
| JS-1 Bidders Question Submittal Form.xlsx | XLSX spreadsheet | |
| Exhibit A - N00024-25-R-5200_DRAFT CDRL Data Package.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| Question Number: | Date Submitted: | Question Source: (RFP, attachment #, GFI title, etc.) | Page number and paragraph header from source: | Question: | Government Response: |
| 1 | 11/15/24 | Draft RFP | Page 19, Paragraph 3.5 (Facility) | We seek clarification regarding the following requirement: |
The contractor shall have the ability to receive, log, track, and store unclassified documents, in accordance with applicable regulations (e.g., NISPOM). The contractor shall have Controlled access to a Government site and personnel security mechanisms in place (e.g., facility has swipe access to control access to the area).”
| Could the Government confirm whether this requirement is intended to refer specifically to Controlled Unclassified Information (CUI) rather than all unclassified documents? Given the volume of general unclassified documents that may not require such tracking and logging mechanisms, clarification would help ensure an appropriate understanding of the requirement. | This language is intended to refer specifically to CUI. | |||||
| 2 | 11/15/24 | Draft RFP | Page 19, Paragraph 3.2 (Security Level) | Would it be possible for the Government to provide a draft DD254 to clarify the security and storage requirements for the facility and personnel? If so, when might this document be made available for review? | A draft DD254 will be provided with the final RFP. | |
| 3 | 11/15/24 | Draft RFP | Page 20, Paragraph 3.6 (Personnel) | We seek additional clarification regarding the following requirement: |
"The contractor shall allow the NCIS to install network sensors, owned and maintained by NCIS, on the contractor’s information systems or information technology assets when Government Intelligence indicates a vulnerability or a potential vulnerability."
Could the Government provide more context on why the installation of NCIS network sensors is necessary, given the existing reporting mandates for cyber incidents?
What criteria will be used to define a "potential vulnerability" that triggers the installation of these sensors? How long are the NCIS network sensors expected to remain on the contractor’s systems? What specific types of information will these sensors monitor, and who will have access to the data collected by them? Additionally, will there be any restrictions or protections in place to ensure contractor data security and confidentiality?
Clarification on these points would assist in understanding the intent and scope of this requirement, as well as any implications for the contractor's cybersecurity posture and attack surface This is standard Navy language included in all Navy contracts. The installation of NCIS network sensors is required per ASN RDA memo Implementation of Enhanced Security Controls on Select Defense Industrial Base Partner Networks dated 28 September 2018 and is standard language from NMCARS Annex 16.
&"Calibri"&10&K000000 Sensitivity Label: CGIF Internal - Third Party&1#_x000D_&"Calibri"&11&K000000&"Times New Roman,Regular"&10N00024-21-R-5206 &"Times New Roman,Regular"&10Bidder's Question Submittal Form &"Times New Roman,Regular"&10Attachment J-S2
&"Times New Roman,Regular"&10 22 May 18 &"Times New Roman,Regular"&10&P of &N
File details come from the government source that posted it. Updated .