N0025321Q0010 Amend2.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

Purpose of amendment is to answ er vendors' questions as show n on page 2 and extend solicitation closing date. Solicitation w ill close 4

Nov 20 at 2:00 PM PST.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 3

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 27-Oct-2020

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X N0025321Q0010

X 9B. DATED (SEE ITEM 11)

15-Oct-2020

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

27-Oct-2020

CODE

NAVAL UNDERSEA WARFARE CENTER

ATTN: EDWIN DONOR

EDWIN.DONOR@NAVY.MIL

610 DOWELL STREET

KEYPORT WA 98345

N00253 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

N0025321Q0010

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

VENDORS' QUESTIONS AND ANSWERS

1. Specify the VLAN details how many is included in the Scope?

--Approximately 25

2. Can you please provide current number of infrastructure details (Physical Server, Virtual Server, Network Devices etc)? Is there any External Interface need to Pentest? If yes then please specify details?

--Approximate numbers: 50 Physical, 75 Virtual, 25 network.

3. Are any vendor products installed for Governance, Risk, and Compliance (GRC) tracking?

--Tenable Security Center (ACAS) and HBSS, eMASS, and VRAM

4. Are any vendor products installed for Security Incident & Event Management (SIEM)? If yes, please provide currently used SIEM product name.

-- Splunk.

5. How many Active Directory Environment domain is included in Penetration testing?

--Pen testing is not part of this SOW.

6. We may use sampling for configuration review based on number and function of the system (Web server, file server, app server, database, firewall (int/ext), VPN, Load Balancer etc).

--Sampling is only allowed by the Validator, and this contract does not cover package validation work

7. Do you want this as a red team exercise to test the SOC/NOC’s response where they will get to see the results and update their Knowledge Base (KB) afterward or Blue team where we work with the SOC/NOC and share our attacks so they can update their KB during the testing?

--Pen testing is not part of this SOW

8. How many physical locations are included in Pen testing?

--Pen testing is not part of this SOW

9. Is “web application” security testing in scope? If yes, please provide number of applications, External facing (internet accessible) or Internal facing? How Many Web Application is in Scope for Pen testing?

Specify if Any --There is no security testing or Pen testing included in this SOW

10. Do you manage your own data Center, or do you utilize any 3rd-party/colocation facilities?

--All assets are local to Keyport and its detachments. No collocated facilities.

11. The DD254, Block B states that Safeguarding of classified material at the Contractor Facility at the Secret level is required.

If all work and work product is performed at the Government site, will the contractor still be required to have Secret safeguarding at the contractor facility, or will a Secret Facilities Clearance suffice?

N0025321Q0010

--Secret Facilities Clearance will suffice.

12. Is the 6 years of experience for the FIRM to have? Or is the 6 years of experience reference meant to be for the personnel (contractor) who is to perform the work?

-- Firm and personnel

13. Is it possible that this work could be performed 100% offsite and in the NAVSEA SIPR room back in DC?

-- Travel to Keyport will be required.

SECTION SF 1449 - CONTINUATION SHEET

SOLICITATION/CONTRACT FORM

The required response date/time has changed from 29-Oct-2020 02:00 PM to 04-Nov-2020 02:00 PM.

(End of Summary of Changes)