Questions_Set_1.docx

QUESTIONS N64498-18-R-5093

1. Request copy of Cybersecurity Implementation Plan (CSIP) DI-MGMT-82002

Response: Government will provide as GFE.

2. Referring to:

1.3.3 The Contractor shall design and develop the software architecture in a manner which shall ensure maintainability throughout the development and lifecycle of the software. The Contractor shall follow best coding practices IAW UMPTY. The Contractor shall be appraised at a CMMI maturity level three (3) or higher by a certified SEI appraiser and must utilize their CMMI processes in performance of this contract.

Questions:

Since no development is anticipated, and if required, our SEPS are based on CMMI L3 (previously appraised) - can the reqt be relaxed? Note - the next paragragh already has relaxed wording "The Contractor shall follow software development processes such as those developed for compliance with SEI SW CMMI Level III" - so maybe they intended to change and missed the other reference

The Contractor Standard Enterprise Practices (SEP) shall be based on CMMI maturity level three (3) or higher and must utilize their CMMI processes in performance of this contract.

Response: No. Follow as written.

3. Referring to:

Non Destructive Test (NDT) Examiner - Certification of Level III (Non Destructive Test (NDT) Examiner) personnel shall be based on (1) successful completion of appropriate American Society for Nondestructive Testing Level III Examinations and (2) successful completion of specific and practical examinations based on NAVSEA Technical Publication T9074-AS-GIB-010/271 and associated fabrication documents. Examinations shall be developed and administered by the Contractor or by an outside agent designated in the Contractor's written practice.

Question:

Is this required? - not listed in labor categories in Section B can this requirement be deleted.

Response: No, this requirement cannot be deleted. Follow as written.

4. If NDT personnel are qualified to the T9074-AS-GIB-010/271 requirements, then their qualifications shall be satisfactory until the qualifications expire in accordance with the re-qualification periodicity of T9074-AS-GIB-010/271. At the time their qualifications expire, they shall be required to re-qualify to the requirements stated herein. Documentation pertaining to the qualification and certification of NDT personnel shall be available to the Government for review upon request.

Question:

Is this required? - not listed in labor categories in Section B can this requirement be deleted.

Response: No, this requirement cannot be deleted. Follow as written.

5. Referring to:

For each awarded delivery order, each unit due 90 days after award.

Question:

Can this be changed to 16 months delivery?

Response: Propose your anticipated delivery for each unit. No bidder will be removed from competition because of a differing delivery because the 90 days after award is only a place holder.

6. Question: If we submit the following documents: a STIG checklist to harden the Windows 10 operating system, IA Design Review Information Package (DRIP), IA Test Plan, IA Test Report, threat model, vulnerability analysis results, and Vulnerability Scan Compliance Report, does this fulfill the RMF requirement for this RFP?

Response: No. Follow as written.

7. Recommend IMS submittal not be done electronically and would suggest as supplemental data (PDF).

Response: No. Follow as written. (CDRL A032)

8. EQT prior mil-std revision requires retest or would extension be considered enough?

Response: Requests for extension of previous qualification could be considered provided:

-the equipment seeking extension has a prior qualification that has a pedigree of validation/ approval via the Technical Authority (TWH) for the respective technical discipline for which extension is being requested;

-the requestor provides a Request for Extension detailing specific configuration and design of the as-tested unit, of the unit seeking extension, a detailed description of the differences between the two units and a justification as to why those differences would constitute acceptable risk;

-the current technical requirements or circumstances of installation/ application have not changed sufficiently since initial qualification such that extending the prior results would incur unacceptable risk.

Such extension request would need to be filed with / approved by the respective EQT TWS or to those to whom the TWHs have delegated approval authority.

9. The solicitation announcement indicates that “the required delivery of the supply items is 30 days after date of award.” Please clarify if this means spare parts and INCO kits, or if means the Repair Station Console in its entirety.

Response: see question 5.

10. Question: Solicitation Section C, Paragraph 1.1.2.1 (Page 24) states, “The Contractor shall provide a technical data package (TDP) consisting of drawings, performance data, wiring and signal lists, wiring schematics, wiring diagrams, assembly drawings, detail drawings, installation control drawings, RSC interface data, parts list(s), fabrication methods, test and inspection procedures. Attachment C of this contract provides the basic tailoring required of the TDP. The level of assembly of the TDP drawings is subject to approval of the Government at preliminary design review. In addition the Contractor shall provide, in the form of Interface Control Documents, technical data in advance of the TDP to support ship installation planning and installation drawing development.”

a. Since this language is also in the previous solicitation, the incumbent should have delivered these documents to the Government. If the TDP was previously paid for, would Government provide the TDP to qualified bidders?

Response : No. Each qualified vendor shall provide the TDP for this solicitation, to the Government as required, and as written.

11. The solicitation announcement indicates that “the required delivery of the supply items is 30 days after date of award.” Please clarify if this means spare parts and INCO kits, or if means the Repair Station Console in its entirety?

Response: See question 5.

12. The solicitation document, section 1.3.3, states “The Contractor shall be appraised at a CMMI maturity level three (3) or higher by a certified SEI appraiser and must utilize their CMMI processes in performance of this contract.” However, the performance specification states “The Contractor shall be responsible for delivery of the operating system, device drivers, software, and supporting Commercial off the Shelf (COTS) applications. The Navy will be developing the required MCS computer programs that run on the RSC.” Later sections of the performance specification require the contractor to deliver the system with a COTS, Microsoft Windows based, and operating system.

a. Based on the scope of software development being the responsibility of the Navy, as directed within the performance specification, and the software required to be delivered by the contractor is non-developmental and commercially available, will the Government remove the requirement for the contractor to be appraised to a CMMI level 3 or higher?

Response: No. Follow as written.