Questions_and_Answers_N64267.docx

Questions and Answers N64267-13-T-0122 PE Information Assurance and Certification Accreditation

Questions for 5.1.1 Engineering Technical Support

QUESTION:

A. System Integration: is contractor responsible for deployment of new systems/equipment or oversee installation of Manufacturer?

How many approximate systems need to be tech refreshed every year?

Can you provide detailed list of systems for each system group listed above?

Provide specs for each system?

ANSWER:

5.1.1.A

- Contractor is responsible for aiding in deployment of new systems.

- This year, approximately 70 new computers will be deployed and 4 new servers will be deployed.

- One system has two classified standalone laptops; one system has two CLIN27 servers; one system has 2 servers with 68 workstations; one system has two CLIN 27 servers that need to be stood up.

- Workstations are migrating to Window 7. Two Oracle servers are migrating to MS SQL.

QUESTION:

C. How many systems already are currently Accredited?

Package will be new and/or existing systems?

If we provide packages for new systems, how many new systems do we expect annually?

ANSWER:

5.1.1.C -We have 2 systems currently accredited, 1new system in the works, 1 brand new system will be stood up this year.

QUESTION:

E.7 Can you provide list of tools & versions customer currently has to provide above tests?

ANSWER:

E.7

- What 'above' tests? For vulnerability scanning, we use Retina and SCAP. We use Excel for our POA&Ms

QUESTION:

E.9 Can you confirm the type and # of data calls used by the Command?

ANSWER:

E.9

- I cannot confirm the type and number of data calls used by the Command. Our data calls will be the same data calls other NAVSEA activities are required to answer. This is variable dependent upon the IA climate and security requirements.