FAQ's.docx

N64627-14-T-0202

FAQ’S

QUESTION 1: In section L, under Personnel Qualifications, Required Qualifications of Contactors for C&A, item 3 states:

Developing C&A policy is NOT a necessary experience requirement to satisfactorily complete the requested tasking.

ANSWER:

The qualification expected would be, in our case, at the local level, in particular in establishing the framework to achieve our ATO. The expectation is an understanding of Navy objectives and defining an effective approach to achieve an ATO. This would include our policy determination with respect to overall planning (the approach, the what, how, and when) and roadmap to initial ATO and maintained compliance.

From our SOW, this pertains to:

1) Submit strategy for IA compliance to maintain ATO to QA31.

2) Make recommendations and provide guidance based on DoD and DoN IA standards in order to meet IA compliance for system engineering activities.

3) Ensure C&A and IA compliance in accordance with the current DoD and DoN IT Instructions and policies for all IT devices owned and supported by the customer.

Any experience (and assumed qualifications) with policy development on a larger scale should demonstrate an understanding of Navy objectives.

QUESTION 2:

SOW section C, subsection 2.0 on page 2 of the RFP, states:

"QA30 requires IA C&A support and system support services listed in this Statement of Work (SOW), including supported related to: preparation of the ATO, and the C&A documentation requirements including C&A plan, C&A package, Retina scanning and mitigation, Gold Disk Reports, implementing Security Technical Implementation Guide (STIG) requirements and generating checklists, Plan of Action and Milestones (POA&M) updates, C&A artifact documents, and uploading into Information Assurance Tracking System (IATS) repository."

IATS is no longer used in DoD or DON for achieving ATO's and supporting collaboration with the Navy Certifying Authority.

Please clarify this government stated requirement.

ANSWER:

Enterprise Mission Assurance Support Services (eMass) is the current DoD tool for uploading C&A information and related artifacts.

QUESTION 3:

Is there an incumbent or is this a new requirement?

ANSWER:

There is an incumbent.

QUESTION 4:

Please confirm number of FTEs required for CLIN0001 and CLIN0002.

ANSWER:

Vendor determines FTEs required for CLIN0001 and CLIN0002.

QUESTION 5:

Solicitation Page 49. Section L (i) - Technical Capability. Please clarify last sentence "Non-Validator C&A qualifications: ( ." What C&A qualifications are required for Non-Validators?

ANSWER:

Must be a Fully qualified Navy Validator

QUESTION 6:

Solicitation Pages-49-50. Section L (ii) - Past Performance. Does the Government want the Past Performance in a specific format?

ANSWER:

No specific format required

QUESTION 7:

Solicitation Page 50. Section L (iii) - Pricing. Does the Government want Pricing in a specific format?

ANSWER:

No specific format required