Responses_to_Questions_N68335-15-R-0115.docx
DOCX document 19 KB Posted
- Solicitation number
- N68335-15-R-0115
About this file
Responses to Questions current as of 27 October 2015
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Responses_to_Questions_N68335-15-R-0115.docx | DOCX document | |
| Responses_to_Questions_N68335-15-R-0115.docx | DOCX document | |
| Attachment_P1_Workforce_Qualifications.xls | XLS spreadsheet | |
| Attachment_P2_Workforce_Hour_Matrix.xls | XLS spreadsheet | |
| Attachment_P4_CLIN_Breakout_N68335-15-R-0115.xls | XLS spreadsheet | |
| QASP.doc | DOC document | |
| N68335-15-R-0115_DD254_signed.pdf | ||
| N68335-15-R-0115_Solicitation.docx | DOCX document | |
| CDRLs.doc | DOC document | |
| Attachment_P3_Past_Performance_Questionnaire.doc | DOC document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Responses to Questions N68335-15-R-0115
Question #1 received 1 October 2015
Does the Combined Synopsis/Solicitation under solicitation number N6833515R0115 contain requirements similar to a current contract?
If possible, please provide the current contract number.
Or, is this a new requirement for the government?
Answer #1
Yes, the Combined Synopsis/Solicitation under solicitation number N68335-15-R-0115 does contain requirements similar to the current contract, N00178-04-D-4089-4Y06.
Question #2 received 3 October 2015
Could you tell me who the incumbent is for this effort.
Answer #2
The incumbent for this effort is NDI Engineering Co.
Question #3 received 5 October 2015
Are you contemplating to have the award to one contractor, as a SBSA?
Answer #3
Yes
Question #4 received 6 October 2015
The solicitation N68335-15-R-0115 instructs Offerors, if required, to send Past Performance Questionnaire (Attachment P3) to the ACO, PCO, and “Program Manager.” For a contract with no “Program Manager” but with a designated Contracting Officer’s Representative (COR), would it be appropriate to send the Attachment P3 to the ACO, PCO, and COR?
Answer #4
Yes it would be appropriate to send to the COR.
Question #5 received 6 October 2015
The solicitation N68335-15-R-0115 in Section C says that IA Officer functions require a Top Secret clearance OR EQUIVALENT.
"In accordance with Navy policy, personnel performing the Information Assurance Officer function shall be United States citizens and shall be required to possess a TOP SECRET clearance or equivalent for specific labor categories (see Section L)."
In Section L, the Senior Information Assurance Software Engineer SHALL possess a Top Secret clearance.
"D. Clearance requirements:
In accordance with Navy policy, personnel performing the Information Assurance Officer function shall be United States citizens and shall possess a Top Secret clearance."
The Solicitation's DD254 specifies a SECRET level facility clearance.
Please clarify if the Senior Information Assurance Software Engineer must have a Top Secret clearance or may have TOP SECRET clearance equivalent?
Answer #5
The current IA requirement is that the person must have an SSBI security investigation which is the same investigation required for a Top Secret clearance. The Individual must have the equivalent of a Top Secret clearance wherein "equivalent" means he has successfully completed the Top Secret background investigation. A Top Secret clearance will not/would not be issued since the individual does not have an immediate need to access Top Secret information.
Question #6 received 14 October 2015
The solicitation N68335-15-R-0115 in Section L says:
The narrative shall include, but is not limited to, the elements of Section C, Statement of Work Paragraph 4.0, titled “Requirements” as follows: . . .
I believe that this is referring to:
Section C, Statement of Work, Paragraph 1.4 titled "Scope."
Please confirm that Work, Paragraph 4.0, Requirements, refers to Statement of Work, Paragraph 1.4, Scope?
Answer #6 Yes, the solicitation will be amended to reflect this change.
Question #7 received 8 October 2015
Does the government require resumes for all personnel who are proposed for the Technical Support Engineer/Technician Labor Category to cover 35,000 hours/yr i.e. some 18 resumes? Or would a lesser number of resumes e.g. 10 of the 18 demonstrate proposed capability?
Answer #7
The Government will accept six (6) resumes equivalent to 11,520 hours for the Technical Support Engineer/Technician Labor Category.
Question #8 received 8 October 2015
Given the Technical Support Engineer/Technician is a mix of talent, does the government have a minimum number of Engineers or a minimum number of Technicians expected in the proposal to be considered sufficient?
Answer #8
No.
Question #9 received 20 October 2015
Personnel shall be CISSP Certified or demonstrate that they have equivalent experience, skills, and abilities. CISSP certification is preferred. Would the government consider an individual having Security+ certification with extensive IA experience as meeting the requirement?
Answer #9
We would evaluate "or equivalent" training and experience to meet the following criteria:
CISSP lists the following 8 areas as the common body of knowledge covered in the certification.
1) Security and Risk Management
2) Asset Security
3) Security Engineering
4) Communications and Network Security
5) Identity and Access Management
6) Security Assessment and Testing
7) Security Operations
8) Software Development Security
Out of these 8 domain areas, the most critical to our business operations would be 3, 5, 6, 7, & 8.
| More specifically: | |
| 3) Security Engineering -Security architectures, designs, and solution elements vulnerabilities; Web-based systems vulnerabilities; Mobile systems vulnerabilities; Cryptography | |
| 5) Identity and Access Management - Identification and authentication of people and devices | |
| 6) Security Assessment and Testing - Assessment and test strategies; Security control testing; Test outputs (e.g. automated & manual tools) | |
| 7) Security Operations - Logging and monitoring activities; Provisioning of resources; Foundational security operations concepts; Resource protection techniques; Incident management; Preventative measures; Patch and vulnerability management; Change management processes; Recovery | strategies; Disaster recovery processes and plans; Business continuity planning and exercises |
| 8) Software Development Security - Security in the software development lifecycle; Development environment security controls; Software security effectiveness; Acquired software security impact (e.g. automated & manual tools) |
File details come from the government source that posted it. Updated .