CSS_Amendment_Two_(2).pdf

PROPOSED SOLICITATION NUMBER: NHLBI-CSB-RG-2015-80-J

AMENDMENT: Two (2)

TITLE: Audio-Conferencing

EFFECTIVE DATE: April 23, 2015

ISSUED BY:

National Heart, Lung, and Blood Institute, NIH Office of Acquisitions, CSB, OM 6701 Rockledge Drive, MSC 7902 Bethesda, Maryland 20892-7902

Point of Contact: Jenn Frazier, Contract Specialist [E-mail - jenn.frazier@nih.gov]

The above numbered sources sought notice is amended as set forth below. The hour and date specified for receipt of capability statements are unchanged.

DESCRIPTION OF AMENDMENT

PURPOSE: To post the below list of questions and answers submitted by industry with reference to the Sources Sought Notice;

1. QUESTION: Does the Combined Synopsis/Solicitation under solicitation number NHLBI-CSB-RG-

2015-80-JF contain requirements similar to a current contract? If possible, please provide the current contract number. Or, is this a new requirement for the government?

NHLBI Response: The Combined Synopsis/Solicitation is similar to the current contract number

HHSN268201000202P.

2. QUESTION: Regarding the subject RFP, could you provide more detail regarding how you define the mandatory requirement: "The Offeror shall not use a Cloud or Unified Communications based solution."

NHLBI Response: For security purposes any information or recordings regarding the meeting cannot be saved to a cloud-based service.

As for the Unified Communications (UC) – this is redundant as CSR already has a UC solution in place, and not looking for the Messaging/Video Conferencing, etc. capabilities that are inherent with such offerings. CSR is seeking a comprehensive Audio Conferencing solution that strictly uses telephone/mobile device communications.

3. QUESTION: Referenced in the SOW, Attachment 19, “Information Security Program

Requirements” is missing. Would you minding pointing it out to us and/or share it?

mailto:jenn.frazier@nih.gov

NHBLI Response: Attachment 19, “Information Security Program Requirements” is now attached to the notice.

4. QUESTION: Can you clarify if #2 in the “Mandatory_and_Evaluation_Criteria.pdf” document is related to Attachment 19 as well? Below is the verbiage out of the criteria document. If not, can you provide corresponding documentation which details the compliance requirements for “the Department of Health and Human Services (HHS) Cyber Security Program?”

Information Systems Security Plan The offeror must include in its proposal an Information Systems Security Plan that is in compliance with the Department of Health and Human Services (HHS) Cyber Security Program and in accordance with the statement of work that requires the contractor to (1) develop a federal information system at the contractor or subcontractor’s facility; (2) have access to a federal information system (e.g. e-mail); or (3) host and/or maintain a federal information system at the contractor or subcontractor’s facility (e.g., when data is kept off-site). The ISSP must ensure that the contractor is taking precautions to keep the government’s information safe. The evaluation of the ISSP will not be conducted on any offeror whose proposal is determined to be technically unacceptable.

NHLBI Response: Yes, the Non-Cost Evaluation Factor, item #2, “Information Systems Security Plan” within the Mandatory and Evaluation Criteria, is related to Attachment 19 (Please see #3 of this amendment) and all applicable clauses apply. For further information please see the HHS website at the link provided below:

http://www.hhs.gov/ocio/securityprivacy/pglandreports/polguidlegrep.html http://www.hhs.gov/ocio/securityprivacy/pglandreports/polguidlegrep.html