Responses_to_Questions_N68335-15-R-0115.docx

DOCX document 19 KB Posted

Attached to
NAVAIR Technical & Instrumentation Services to Support ALRE and SE Systems
Solicitation number
N68335-15-R-0115
Issued by

About this file

Responses to Questions current as of 27 October 2015

View the file

Other files

File Type Posted
Responses_to_Questions_N68335-15-R-0115.docx DOCX document
Responses_to_Questions_N68335-15-R-0115.docx DOCX document
Attachment_P1_Workforce_Qualifications.xls XLS spreadsheet
Attachment_P2_Workforce_Hour_Matrix.xls XLS spreadsheet
Attachment_P4_CLIN_Breakout_N68335-15-R-0115.xls XLS spreadsheet
QASP.doc DOC document
N68335-15-R-0115_DD254_signed.pdf PDF
N68335-15-R-0115_Solicitation.docx DOCX document
CDRLs.doc DOC document
Attachment_P3_Past_Performance_Questionnaire.doc DOC document

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Responses to Questions N68335-15-R-0115

Question #1 received 1 October 2015

Does the Combined Synopsis/Solicitation under solicitation number N6833515R0115 contain requirements similar to a current contract?

If possible, please provide the current contract number.

Or, is this a new requirement for the government?

Answer #1

Yes, the Combined Synopsis/Solicitation under solicitation number N68335-15-R-0115 does contain requirements similar to the current contract, N00178-04-D-4089-4Y06.

Question #2 received 3 October 2015

Could you tell me who the incumbent is for this effort.

Answer #2

The incumbent for this effort is NDI Engineering Co.

Question #3 received 5 October 2015

Are you contemplating to have the award to one contractor, as a SBSA?

Answer #3

Yes

Question #4 received 6 October 2015

The solicitation N68335-15-R-0115 instructs Offerors, if required, to send Past Performance Questionnaire (Attachment P3) to the ACO, PCO, and “Program Manager.” For a contract with no “Program Manager” but with a designated Contracting Officer’s Representative (COR), would it be appropriate to send the Attachment P3 to the ACO, PCO, and COR?

Answer #4

Yes it would be appropriate to send to the COR.

Question #5 received 6 October 2015

The solicitation N68335-15-R-0115 in Section C says that IA Officer functions require a Top Secret clearance OR EQUIVALENT.

"In accordance with Navy policy, personnel performing the Information Assurance Officer function shall be United States citizens and shall be required to possess a TOP SECRET clearance or equivalent for specific labor categories (see Section L)."

In Section L, the Senior Information Assurance Software Engineer SHALL possess a Top Secret clearance.

"D. Clearance requirements:

In accordance with Navy policy, personnel performing the Information Assurance Officer function shall be United States citizens and shall possess a Top Secret clearance."

The Solicitation's DD254 specifies a SECRET level facility clearance.

Please clarify if the Senior Information Assurance Software Engineer must have a Top Secret clearance or may have TOP SECRET clearance equivalent?

Answer #5

The current IA requirement is that the person must have an SSBI security investigation which is the same investigation required for a Top Secret clearance. The Individual must have the equivalent of a Top Secret clearance wherein "equivalent" means he has successfully completed the Top Secret background investigation. A Top Secret clearance will not/would not be issued since the individual does not have an immediate need to access Top Secret information.

Question #6 received 14 October 2015

The solicitation N68335-15-R-0115 in Section L says:

The narrative shall include, but is not limited to, the elements of Section C, Statement of Work Paragraph 4.0, titled “Requirements” as follows: . . .

I believe that this is referring to:

Section C, Statement of Work, Paragraph 1.4 titled "Scope."

Please confirm that Work, Paragraph 4.0, Requirements, refers to Statement of Work, Paragraph 1.4, Scope?

Answer #6 Yes, the solicitation will be amended to reflect this change.

Question #7 received 8 October 2015

Does the government require resumes for all personnel who are proposed for the Technical Support Engineer/Technician Labor Category to cover 35,000 hours/yr i.e. some 18 resumes? Or would a lesser number of resumes e.g. 10 of the 18 demonstrate proposed capability?

Answer #7

The Government will accept six (6) resumes equivalent to 11,520 hours for the Technical Support Engineer/Technician Labor Category.

Question #8 received 8 October 2015

Given the Technical Support Engineer/Technician is a mix of talent, does the government have a minimum number of Engineers or a minimum number of Technicians expected in the proposal to be considered sufficient?

Answer #8

No.

Question #9 received 20 October 2015

Personnel shall be CISSP Certified or demonstrate that they have equivalent experience, skills, and abilities. CISSP certification is preferred. Would the government consider an individual having Security+ certification with extensive IA experience as meeting the requirement?

Answer #9

We would evaluate "or equivalent" training and experience to meet the following criteria:

CISSP lists the following 8 areas as the common body of knowledge covered in the certification.

1) Security and Risk Management

2) Asset Security

3) Security Engineering

4) Communications and Network Security

5) Identity and Access Management

6) Security Assessment and Testing

7) Security Operations

8) Software Development Security

Out of these 8 domain areas, the most critical to our business operations would be 3, 5, 6, 7, & 8.

More specifically:
3) Security Engineering -Security architectures, designs, and solution elements vulnerabilities; Web-based systems vulnerabilities; Mobile systems vulnerabilities; Cryptography
5) Identity and Access Management - Identification and authentication of people and devices
6) Security Assessment and Testing - Assessment and test strategies; Security control testing; Test outputs (e.g. automated & manual tools)
7) Security Operations - Logging and monitoring activities; Provisioning of resources; Foundational security operations concepts; Resource protection techniques; Incident management; Preventative measures; Patch and vulnerability management; Change management processes; Recoverystrategies; Disaster recovery processes and plans; Business continuity planning and exercises
8) Software Development Security - Security in the software development lifecycle; Development environment security controls; Software security effectiveness; Acquired software security impact (e.g. automated & manual tools)

File details come from the government source that posted it. Updated .