CISA DTSS SAM.GOV QA revised 4-7-23 - Final.xlsx

XLSX spreadsheet 36 KB Posted Apr 7, 2023

Attached to: CISA Digital Transformation Support Services (DTSS)
Solicitation number: PCCA-23-00012
Issued by: Department of Homeland Security Office of Procurement Operations

View the file

Other files

File	Type	Posted
CISA DTSS Prequotation Conference Briefing Slides FINAL.pdf	PDF	Mar 23, 2023
CISA DTSS Prequotation Conference Registration List.pdf	PDF	Mar 23, 2023
CDTSS Pre-Quotation Registration Form_March 2023.docx	DOCX document	Mar 15, 2023
PCCA-23-00012 CISA DTSS Statement of Work 3-9-23_.docx	DOCX document	Mar 9, 2023

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

CDTSS

No.	Question	Government Responses
1	Previous announcements stated that this would be a multiple award contract. Now that CISA has decided that this is a WOSB, will it also be a multiple award?	Yes. CISA anticipates issuing multiple BPA awards.
2	Was this announcement also released on eBuy?	No. Please note that CISA will only release pre-solicitation announcements on SAM.gov.
3	Will the government accept a GSA Schedule Contractor Team Arrangement (CTA), in which two or more GSA Schedule contractors team together to provide a total solution to meet the government’s needs?	Yes, CISA will allow CTAs. However, please note that all CTAs must still meet security and WOSB set-aside requirements.
4	Would you please clarify if an offeror is required to have both SINs to be eligible, or if holding one of either SIN is all that is necessary for a potential offeror to bid?	The quoter must have both SINs on its schedule to be eligible for award. For CTAs, all CTA members must also have both SINs on schedule to be eligible.
5	On behalf of our Joint venture, KYC JV, a woman-owned small business, we are seeking clarification as to whether the below requirement for the two stated SINs means that the business has to have both SIN designations or just one of them?	The quoter must have both SINs on its schedule to be eligible for award.
8	Regarding the subject effort, is the Government planning on awarding to a single or multiple contractors?	CISA anticipates issuing multiple BPA awards.
9	I understand that acquisition strategies can change at any point so I’m just wondering on the Government’s acquisition strategy as of now.	It is unclear what is meant by "acquisition strategies." CISA has made the determination to set this requirement aside as WOSB.
10	We are seeking clarification as to whether the below requirement for the two stated SINs means that the business has to have both SIN designations or just one of them?	The quoter must have both SINs on its schedule to be eligible for award.
11	With the update, it seems eligible vendors need to have GSA MAS 54151S OR 54151HACS in order to be eligible to be a prime offeror. Could you please confirm it is NOT a requirement to have both 54151S and 54151HACS?	The quoter must have both SINs on its schedule to be eligible for award.
12	Does your office have an anticipated release date for the final RFP at this time?	CISA anticipates to release the final RFQ by the end of April 2023.
13	We did note a pre-proposal conference is scheduled for later this month which we plan to attend. Do you expect additional information on timeline to be released during that time?	No, the pre-quotation conference was held on March 23, 2023 and all the information known at that time was shared with industry.
14	Is CDTSS still going to be considered multiple award or will it be single award?	Yes, CISA anticipates issuing multiple BPA awards.
15	What was the driver behind altering the contract vehicle – from SBSA to 100% WOSB? Are any additional changes to the vehicle to be expected?	CISA has made the determination to set this requirement aside as WOSB. No, no additional changes are planned.
16	Special Item Numbers (SINs): MAS IT Professional Services SIN 54151S; Highly Adaptive Cybersecurity Services (HACS) SIN 54151HACS – Does the WOSB have to have both SINs?	The quoter must have both SINs on its schedule to be eligible for award.
17	Will the government be socializing some type of strategic plan with the RFP so teams can better understand the current depth/breath within each of the new, consolidated task orders.	No, CISA will not be socializing a strategic plan. A draft RFQ will be issued to industry prior to the issuance of the final RFQ.
18	What are the top three concerns CIO wants to address for CISA?	1. Establish an efficient mechanism to quickly acquire agency-wide digital services.

2. To align non-enterprise IT management and governance resulting in capabilities aligned to CISA engineering and security standards, best practices, and policies.

3. Standardize disparate and duplicative IT services acquired by non-IT operators and owners.

	19	How does the government envision coordinating across task orders if there are multiple awardees?	The question is unclear what is meant by "coordinating across call orders if there are multiple awardees."
	20	When is the government planning to release the RFP? What will the response turn-around timeframe be? Will there be a draft coming out prior to the RFP?	CISA anticipates releasing the final RFQ no later than the end of April 2023. The response turn-around timeframe will be provided in the RFQ. Yes, CISA anticipates to release a draft RFQ before the final RFQ is posted.
	21	Will this be a multi-approach down select process?	No, there will not be a multi-approach down select process.
	22	What will likely be involved – Tech Challenge, Orals?	No, there will not be a tech challenge or oral presentation.
	23	If you don’t make the down select, can a team still opt in?	No, there will not be a down select process.
	24	Will there be a prototyping or practical, technical solutioning session required?	No, there will not be a prototyping or practical, technical solutioning session.
	25	Does a bidder need to have both SINs referenced in the Sam.gov notice (MAS IT Professional Services SIN 54151S and Highly Adaptive Cybersecurity Services (HACS) SIN 54151HACS) to bid as prime? In reviewing the SOW, we believe that MAS IT Professional Services SIN 54151S supports all the requirements and is flexible enough to meet all staffing needs throughout the duration of the contract.	Yes, the quoter must have both SINs on its schedule to be eligible for award.
	26	The Government states “Contractor shall provide resumes with the proposal for Key Personnel” and states that the two key personnel positions are “Program Manager for the BPA” and “Project Manager for the Call Order.” Please confirm that only the resume for the “Program Manager for the BPA” will be required with the BPA proposal submission and confirm that any “Project Manager for the Call Order” resume(s) will only apply to each respective Call Order issued under this BPA.	Yes, only the resume for the BPA Program Manager will be required at time of quote submission for the BPA. A resume for the Project Manager will be required at the call order level.
	27	Please provide an updated timeline on the release of the final solicitation. This update would allow industry the opportunity to better focus their planning efforts resulting in higher quality proposals for the Government to consider for award.	CISA anticipates releasing the final RFQ no later than the end of April 2023.
	28	Please confirm that the successful offeror will have to re-certify as a small business at award.	Per 13 CFR 121.404, SBA determines the size status of a concern, including its affiliates, as of the date the concern submits a written self-certification that it is small as part of its initial offer or response which includes price. A small business is certifying at the time of quote submission their size status; therefore, recertifying is not a requirement. In addition, a small business is generally considered to be a small business throughout the life of that contract, unless the contract exceeds 5 years. At the time, the small business would have to recertify their status before the 5 years is up.
	29	Please confirm that any Joint Venture (JV) Women-Owned Small Business (WOSB) must have previously operated on a task-order contract with similar scope of services to DTSS.	No, the RFQ will specify the past performance submission criteria.
	30	The Government stated that “This requirement will be solicited as a 100% Women-Owned Small Business (WOSB) set aside in accordance with FAR Part 8 to GSA Multiple Award Schedule (MAS) holders in the following Special Item Numbers (SINs):
•	“MAS IT Professional Services SIN 54151S
•	“Highly Adaptive Cybersecurity Services (HACS) SIN 54151HACS”
Please confirm that a prospective WOSB only needs to hold either SIN 54151S or SIN 54151HACS to bid and not both SINs.	The quoter must have both SINs on its schedule to be eligible for award.
	31	Please confirm that CISA will grade offeror capabilities more favorably with Highest-level partnerships with CSPs (AWS, Azure, etc), PaaS (ServiceNow, UiPath, MS Power Platform), and SaaS (SAP, Snowflake, etc.).	The quoters will be evaluated on their responses to the RFQ.
	32	Would the Government consider evaluation criteria in the final solicitation that requires offerors to define the number of certified resources in CSPs, PaaS, and SaaS solutions?	Yes, CISA will consider the use of evaluation criteria in the final solicitation that requires quoters to define the number of certified resources in CSPs, PaaS, and SaaS solutions.
	33	Would the Government consider evaluation criteria in the final solicitation that requires offerors to define how they will architect and implement enterprise cloud services that will comply and enforce CISA's ZTA strategy for both internal and external facing solutions?	Yes, CISA will consider the use of evaluation criteria to include demonstrating relevant experience designing, implementing, and evolving enterprise hybrid and/or multi-cloud environments. Quoters will be evaluated on their responses to the RFQ.
	34	Since CISA is initiating new enterprise scale cloud services, would the Government consider instructions in the final solicitation that directs offerors to include demonstrated relevant experience designing, implementing, and evolving enterprise hybrid and/or multi-cloud environments?	Yes, CISA will consider the use of evaluation criteria to include demonstrating relevant experience designing, implementing, and evolving enterprise hybrid and/or multi-cloud environments Quoters will be evaluated on their responses to the RFQ.
	35	Is CISA currently implementing or managing a Technology Business Management program? If yes, can you please provide a description of your current status.	Yes, CISA implemented and manages TBM in accordance with OPM and DHS requirements. TBM is used for capital planning and investment control activities.
	36	Is CISA currently implementing or managing an IT services management program? If yes, can you please provide a description of your current status.	Yes, CISA implemented an IT management service for its field personnel and is in the process of transitioning full IT service management support to CISA HQ.
	37	Can CISA provide a priority for the five listed objectives.	There is no order of priority set for the five listed objectives.
	38	Government's SAM.gov announcement said: This requirement will be solicited as a 100% Women-Owned Small Business (WOSB) set aside in accordance with FAR Part 8 to GSA Multiple Award Schedule (MAS) holders in the following Special Item Numbers (SINs): MAS IT Professional Services SIN 54151S, Highly Adaptive Cybersecurity Services (HACS) SIN 54151HACS. QUESTION: Does Prime WOSB need to hold either 54151S or 54151HACS or both SINs (54151S and 54151HACS)?	The quoter must have both SINs on its schedule to be eligible for award.
	39	We would like to confirm that we can participate as a prime holding GSA MAS 54151S.	The quoter must have both SINs on its schedule to be eligible for award.
	40	We would like to ask CISA to consider allowing new entrants to have a fair participation by allocating some task areas such as Task area 1 and 2 allocated for businesses under $7.5M.	No, CISA anticipates issuing multiple BPA awards covering all tasks.
	41	What is CISA’s plan to incorporate the following OMB guideline into this procurement strategy. OMB Memo Seeks to Improve New Entrant Participation in Federal Marketplace (executivegov.com).	CISA's plan to issue the RFQ as a 100% WOSB set-aside and establish multiple award BPAs under SINs 54151S and 54151HACS is in compliance with the Federal Marketplace (FMP) Strategy per the OMB guideline.
	42	What is your FCL requirement for small business? We feel strongly about our ability to prime based on the task areas but would need CISA’s help us with FCL sponsorship.	Quoters must possess a TS/FCL at the time of quote submission. CISA will not provide TS/FCL sponsorship for this requirement.
	43	Are there any certification requirements for the bidders such as CMMI? If so, would CISA consider easing this requirements to a compliancy level to allow a more playing field for new entrants?	There are no certification requirements such as CMMI.
	44	Can the government confirm it still intends to issue a multi-award BPA? If so, how many BPA awards does the government intend on awarding? Previous announcements for this solicitation on SAM have announced the intention to solicit this as a multi-award BPA, which will provide the government access to a greater diversity of companies and cost effective solutions through task order competitions.	CISA anticipates issuing multiple BPA awards.
	45	SIGNIFICANT TIME AND INVESTMENT. CISA advertised this opportunity as a total small business set aside from July 15, 2022 to March 9, 2023. Over this time there have been significant investments in time and resources made by small businesses, and industry has formed teams in preparation for this opportunity. These investments will be a complete loss and may result in significant economic impacts for small businesses who will now have no opportunity to respond as a prime contractor to the solicitation if it remains 100% WOSB. Would the government please take these small business investments into consideration and allow all GSA MAS small business contract holders who are awarded the appropriate GSA Special Item Numbers (SINs) to compete for this opportunity?	CISA has made the determination to set this requirement aside as WOSB.
	46	INCREASE OPPORTUNITY FOR ALL SMALL BUSINESSES. Would CISA consider releasing this as a Total Small Business Set Aside (open to all socio-economic categories), allowing any small business who has been awarded Special Item Number (SIN) 54151HACS to submit a proposal for this opportunity? While a 100% Women-Owned Small Business (WOSB) set-aside can help increase opportunities for women-owned businesses it also limits the pool of eligible bidders and reduces competition. By soliciting the procurement as a 100% Total Small Business set aside, CISA will increase the pool of eligible bidders.	CISA has made the determination to set this requirement aside as WOSB.
	47	To achieve the Woman Owned Small Business (WOSB) goals, while still allowing innovative small businesses across other socio-economic categories to offer solutions, would CISA consider issuing the solicitation as a total small business set-aside with a dedicated award reserve for Woman Owned Small Businesses in the pool of awardees? Please consider using the following language: “The Cybersecurity and Infrastructure Security Agency (CISA) is issuing a procurement solicitation for a multi-award blanket purchasing agreement. This solicitation will be a total small business set aside with at least one award reserved for a Women-Owned Small Business (WOSB). Under this solicitation, CISA intends to award multiple contracts to small businesses that meet the eligibility requirements as set forth in the solicitation. CISA is committed to promoting the participation of WOSB in federal contracting opportunities. By reserving at least one award for a WOSB, CISA aims to provide a fair opportunity for these businesses to compete and showcase their capabilities.”	CISA has made the determination to set this requirement aside as WOSB.
	48	Would the government consider opening the pool of qualified bidders to companies who have EITHER the IT Professional Services SIN (54151S) OR the Highly Adaptive Cybersecurity Services SIN (54151HACS)? Allowing a vendor to have either of the SINs would allow CISA to field from a larger pool of highly qualified vendors.	The quoter must have both SINs on its schedule to be eligible for award.
	49	For teams proposing as a Contractor Teaming Arrangement (CTA), would the government allow a CTA team comprised of a CTA Lead who is WOSB that holds the 54151S SIN and a CTA partner that is a small business on GSA MAS and is the holder of the 54151HACS SIN, but is not a WOSB?	The quoter must have both SINs on its schedule to be eligible for award. For CTAs, all CTA members must also have both SINs on each corresponding schedule to be eligible.
	50	Would the Government permit the substitution of 3 additional years of experience in lieu of the ITIL certification? Would the Government permit the substitution of 4 additional years of specific experience in lieu of a degree in Management, computer science, or information systems? It is common to substitute years of experience for a degree, as the actual experience provides a higher degree of confidence in program delivery. If these substitutions are not acceptable, please provide substitution equivalencies that the government will accept.	1) No, CISA will not permit substitution of experience in lieu of the ITIL certification. 2) The RFQ will specify any experience substitution in lieu of degrees.
	51	For Offeror's proposing as a Joint Venture (JV), would the government allow one of the members of the JV to satisfy the requirement for being awarded the 54151HACS SIN? With at least one member holding the 54151HACS SIN, the JV has the proven capability as indicated by having gone through the vetting process for this SIN. This would provide SBA approved Mentor/Protégé Joint Ventures who are also WOSB to bring the full complement of capabilities to CISA for the DTSS requirement.	The JV quoter must have both SINs on its schedule to be eligible for award.
	52	We assume that any business that is represented as a small business on their long-term GSA MAS contract and is listed in GSA e-Library as a small business is eligible to submit a bid as prime, can the government please confirm?	Any business that is represented as a WOSB on their long-term GSA MAS contract and is listed in GSA e-Library as a WOSB is eligible to submit a quote as prime.
	53	Does the government intend to make multiple awards?	Yes. CISA anticipates issuing multiple BPA awards.
	54	Recommendation: We recommend allowing Call Orders to extend beyond the expiration date of the BPA to support continuity of operations in Task 2.1.5 Contractor Transition-Out.	Thank you for your recommendation.
	55	Will the government please remove specific degree concentrations (Management, Computer Science, or Information Systems) from the degree requirements for the Program Manager for the BPA and Program Manager for the Call Order Key Personnel Requirements? These degree concentration specifications can be overly restrictive to competition and impede highly qualified resources with specific domain expertise from supporting CISA requirements.	No, CISA will not remove specific degree concentrations. Please note, the RFQ will specify experience substitution in lieu of degrees.
	56	Will this BPA be a multi-award BPA?	Yes. CISA anticipates issuing multiple BPA awards.
	57	Is there an existing CMDB or architecture library available, or will the Offeror be required to develop and implement the appropriate processes and artifacts?	No, there is no existing CISA enterprise CMDB. Any support to develop and implement CMDB processes and artifacts would be competed at the Call Order level.
	58	What is the level of adoption of Agile across the organization? Are there waterfall or hybrid waterfall/Agile projects in progress or planned?	Methodologies used vary across CISA as solutions are disparately developed. Agile and hybrid waterfall/agile are used at varying maturity levels.
	59	Is there an existing SaaS solution in place for Service Desk? If so, what solution is in place?	ServiceNow is the existing SaaS solution in place for Service Desk.
	60	What is the current legacy technology stack to include hosting infrastructure, databases, software frameworks, programming languages?	There is no standard technology stack in use at this time.
	61	In the interest of finding teaming partners, would the Government please share the Pre-Solicitation Conference registration list with attendees please?	The list of participants was released on March 23, 2023 on SAM.gov.
	62	Does CISA intend the DTSS BPA to be single or multi-award?	CISA anticipates issuing multiple BPA awards.
	63	Due to the potential for classified DTSS Call Orders, will CISA require all Key Personnel (Program Manager for the BPA and Project Manager for the Call Order) to be TS/SCI eligible?	Yes, it is advisable for all key personnel to be TS/SCI eligible.
	64	“Contractor access to classified information is not currently required under the resulting BPA. However, the Government, at a later date, may have Call Orders that require Contractor personnel to have up to Top Secret/SCI clearances. Details will be specified in a DD Form 254 in the individual Call Order.” Please confirm CISA will require prime offerors to demonstrate a Top Secret Facility Clearance at the time of proposal submission to ensure awardee(s) have the necessary capabilities to support all future DTSS Call Orders.	The quoter must have TC/SCI Facility Clearance at the time of quotation submission.
	65	We recommend that CISA provide a sample BPA Call Order as part of the final RFP release. This will help vendors better align their capabilities to initial expected tasks.	CISA does not intend to provide a sample BPA Call Order with the final RFQ.
	66	We recommend that CISA provide a list of systems/applications which are in scope for this BPA. This will help vendors better align their capabilities to expected tasks.	The BPA is scoped to allow for all CISA systems/applications requirements to be supported, as applicable.
	67	We recommend that CISA provide a list of tools and technologies which are in scope for this BPA. This will help vendors better align their capabilities to expected tasks.	Thank you for your recommendation.
	68	What are the current Cloud platforms in operation at CISA? Does CISA support a hybrid-cloud and multi-cloud operating model to support a focus on consolidating existing data centers?	1) AWS, MS Azure, GCP, and several SaaS cloud platforms are currently leveraged by CISA. 2) CISA supports both hybrid-cloud and multi-cloud operating models.
	69	Can you provide a list of on-premise tools and applications in use?	No, a full list of on-premise tools and applications in use will not be provided at this time.
	70	Acquisition Questions:
1.	Will the Government provide drafts with sections L and M in advance of the final solicitation?
2.	Could the Government provide the anticipated solicitation timeline?
3.	Will the government be using a phased solicitation approach?
4.	Does the government anticipate having an Orals presentation as part of the phased solicitation approach?
5.	Can task orders can extend past the BPA ordering date, and for how long?	1) CISA will provide a draft RFQ.

2) A notional timeline was presented during the pre-quotation conference on March 23, 2023.

3) This will not be a phased approach.

4) No, orals presentations will not be used.

5) Yes, call orders can extend past the BPA ordering date. The specific dates will be detailed in the RFQ.

	71	Acquisition Recommendations:
1.	The prime offeror must hold a Top Secret Facility Clearance
2.	The prime offeror must be ISO 9001:2015 certified
3.	Prime offerors with contracts (prime or sub) within DHS will receive a higher evaluation rating.
4.	Utilize a phased solicitation approach
5.	Include an Orals presentation as part of the phased solicitation approach
6.	Include the prime offeror’s CEO be part of the Orals presentation team.	Thank you for your recommendations.
	72	Has the government decided how many awards there will be?	CISA anticipates issuing approximately four (4) BPA awards.
	73	In order to respond to the solicitation, is the WOSB Prime required to possess both SINS?	The quoter must have both SINs on its schedule to be eligible for award.
	74	Will the government allow a prime WOSB to bid while only possessing one of the SINs?	The quoter must have both SINs on its schedule to be eligible for award.
	75	The most successful agency wide technology procurement vehicles ensure maximum competition and competitiveness from the small business community. Frequently, agencies will allocate a portion of awards for a specific socioeconomic set aside, such as 50-60% of awards, leaving the remainder of the field open to all qualified bidders. Would CISA consider a 100% small business set aside with 60% of the awards for WOSB, and leaving the remainder of the field open to all qualified small business bidders – ensuring maximum competitiveness?	No, CISA has made the determination to set this requirement aside as WOSB.
	76	Since CISA has other procurements open to large businesses in the technology space, can CISA confirm that CISA DTSS is specifically a Total 100% small business vehicle and that large primes and large teammates will not be considered?	CISA has made the determination to set this requirement aside as WOSB.
	77	The contracting office intends to release this on both GSA MAS SIN 54151S and SIN 54151HACS. Can the government please confirm that the intention is to solicit a response from companies that have either SIN as part of their MAS schedule?	The quoter must have both SINs on its schedule to be eligible for award.
	78	SBA ruling mentions both members do not have to have the same SIN in order to form the CTA can you please confirm if a CTA is formed between two companies only the one CTA member of the CTA is required to have the HACS SIN? In this scenario both members of the CTA would have the 54151S SIN and are WOSBs.	The quoter must have both SINs on its schedule to be eligible for award. For CTAs, all CTA members must also have both SINs on schedule to be eligible.
	79	Additionally, we understand CDTSS has expected to be multiple award since the original announcement. Though, with the new Sam.Gov posting it is not enterally clear if this will be multiple award or single award. Could you please confirm if CDTSS will be a single award or multiple award BPA?	CISA anticipates issuing multiple BPA awards.
	80	Whether the Government would consider modifying the procurement strategy to allow SDVOSB or WOSB respondents.	No, CISA has made the determination to set this requirement aside as WOSB.
	81	It appears that part of the scope of Task Area 7 was shifted into Task Area 3. For the balance of work from Task Area 7 – will that be the subject of a separate procurement, fulfilled by an existing contract, or is the new Task Area 3 intended to encompass all of the previous Task Area 7 scope?	The new Task Area 3 is intended to encompass all of the previous Task Area 7 scope.
	82	If the scope for Task Area 4 and 7 is being considered for separate acquisition, will CISA issue an updated draft SOW and associated acquisition strategy that matches the original DTSS approach (Unrestricted via GSA MAS) which would give CISA access to the broadest pool of qualified vendors?	No, the scope for Task area 4 and 7 are not being considered for a separate acquisition.
	83	Based on SOW/scope changes, how many awards are anticipated, and will all awards be reserved for WOSB?	CISA anticipates to issue approximately four (4) BPA awards. Yes, CISA has made the determination to set this requirement aside as WOSB.
	84	Based on SOW/scope changes, what is the new anticipated BPA ceiling?	The estimated order volume for all of the multiple award BPA is $500 Million.
	85	Does CISA have cloud based solutions in place ? Are the looking for new or this contract to bring in and pay for cloud solutions like AWS?	Yes, CISA has based cloud solutions in place. No, this acquisition is for digital services delivery not the procurement of new and/or existing cloud solutions.
	86	What is the approach of no/low code proposed solutions like SNOW or Salesforce - would they be part of pricing requirements? How would they way into cost eval.	CISA already operates no/low code solutions within its enterprise. No, CISA will not require pricing for SNOW or Salesforce.
	87	Regardless of where you are vetted anywhere else outside of CISA, does everyone still have to go through the process at CISA, so CISA doesn't accept the vetting from any other Agency but CISA?	Yes, all employees and contractors must be vetted for suitability or fitness. The gaining agency/organization may use reciprocity to grant EOD approval if the employee has a current investigation and/or access from another agency.
	88	What is the highest level of clearance that would be required for applicants?	The quoter must hold TS/FCL to be eligible for award.
	89	For billing and pricing , can the contractor charge for staff in the background check to EOD or does the small business have to eat these cost, which is very hard for a small , especially a WOSB. This cost could be very damaging.	No. Please note, for Public Trust positions, CISA/PSD can grant interim EOD approval while the contractor’s Public Trust investigation is pending. Therefore, the contractor can begin working upon interim EOD approval.
	90	Hello, Is the prime bidder required to have both SINs on their MAS (54151S) and HACS (54151HACS) schedules or is one sufficient?	The quoter must have both SINs on its schedule to be eligible for award.
	91	With the BPA be issued with a live Task Order or just initial BPA award	CISA intends to issue initial BPA awards only.
	92	Who is/are the incumbent contractors performing on the contract; and is it one contract or multiple contract bundled into this BPA?	There are no incumbents as this is a new requirement. There are no previous contracts and no contracts were bundled into this BPA.
	93	What is the ceiling on this BPA?	The estimated order volume for all of the multiple award BPA is $500 Million.
	94	Have you decided if this will be single or multiple award?	CISA anticipates issuing multiple BPA awards.
	95	Will an FCL be required for a prime to bid?	Yes, the prime quoter must possess a TS/FCL at the time of quote submission.
	96	Could both SINS be qualified across partners or does the Prime need both?	The question is unclear what is meant by "partners."
	97	Would the government permit one SIN to be held by a prime and the other to be held by a sub?	No, the prime quoter must have both SINs on its schedule to be eligible for award.
	98	Will subcontractors also need a TS facility clearance?	Yes, the sub-contractor will require a TS/FCL if the sub-contractor employees will have access to classified information; however, if the prime is clearing the sub-contractor employees through the prime's TS/FCL, the sub-contractor is not required to possess a TS/FCL.
	99	Will CISA provide all the infrastructure for development etc.. IF the contractor has to provide infrastructure what is the normally ATO process and how will this be factored in?	CISA will provide all the infrastructure for development.
	100	What is source selection methodology?	The source selection methodology is Best Value.
	101	How important is current knowledge of CISA's environment and culture to this requirement?	The question is unclear "How important is current knowledge of CISA's environment and culture to this requirement?"
	102	In furtherance of CISA's small business goals, will CISA please require all prime contractors to recertify at time of submission?	Per 13 CFR 121.404, SBA determines the size status of a concern, including its affiliates, as of the date the concern submits a written self-certification that it is small as part of its initial offer or response which includes price. A small business is certifying at the time of quote submission their size status; therefore, recertifying is not a requirement. In addition, a small business is generally considered to be a small business throughout the life of that contract, unless the contract exceeds 5 years. At the time, the small business would have to recertify their status before the 5 years is up.
	103	What is source selection methodology?	The source selection methodology is Best Value.
	104	Will the small business need to re-certify their SB status at of the time of RFP submission?	Per 13 CFR 121.404, SBA determines the size status of a concern, including its affiliates, as of the date the concern submits a written self-certification that it is small as part of its initial offer or response which includes price. A small business is certifying at the time of quote submission their size status; therefore, recertifying is not a requirement. In addition, a small business is generally considered to be a small business throughout the life of that contract, unless the contract exceeds 5 years. At the time, the small business would have to recertify their status before the 5 years is up.
	105	Will there be an initial task order included with the IDIQ?	No, only BPA awards will be issued initally.
	106	Will a list of participants be provide after the meeting?	The list of participants was released on March 23, 2023 on SAM.gov.
	107	What is CISA's procurement strategy to incorporate the above OMB guideline? Would you consider allowing interim FCL and restricting task 1 and 2 to small business under $7.5M?	CISA's strategy is to issue the RFQ as a 100% WOSB set-aside and establish multiple award BPAs under SIN 54151S and 54151HACS which is in compliance with the Federal Marketplace (FMP) Strategy. No, CISA will require quoters to possess a TS/FCL at the time of quote submission.
	108	Will task orders be competed? or will there be directed awards, and how will that be aligned/designated?	Yes, BPA call orders will be competitively solicited and awarded.
	109	Given WOSB , will there be consideration to recognize the sub-contractors performance to the effort, For example, if he WOSB is fairly new but heavily supported with adapted experience from their sub-contractor, how will this be seen/considered?	The RFQ will specify the past performance submission. Sub-contractor past performance can be considered, within page limitations, per the RFQ instructions.
	110	Will CISA consider using GSA MAS?	CISA is utilizing GSA 54151HACS and 54151S are available through GSA Multiple Award Schedule (MAS) Information Technology.
	111	CISA might want to consider requiring the WOSBs to submit their WOSB certification letters from SBA or SBA designated 3rd party certifying bodies, with proposals to ensure WOSB status at time of submission and award.	We appreciate the feedback; however, in accordance with 13 CFR 121.404, A small business (WOSB) is certifying their size status at the time of quote submission. Furthermore, based on the current updates to the SBA WOSB program, Contracting Officers no longer have to verify a WOSB firm’s documentation. Program participation is displayed on the firm’s Dynamic Small Business Search (DSBS) profile. Therefore, no additional information is required to be submitted at time of submission and award.
	112	Will there be past performances required at the time of BPA award? How many and will they be required for the prime only or will the prime be able to use references from their teaming partners?	Yes, past performance will be required for the quotation submission. Teaming partners' past performance can be considered, within page limitations, per the RFQ instructions.
	113	Will there be a pricing sheet and estimation for the BPA RFQ, especially given if there is no task order attached	Yes, a pricing template will be provided with the final RFQ.
	114	Will CISA allows a WOSB company with the 54151S SIN CTA with another WOSB company with the 54151HACS	No. The WOSB must have both SINs on its schedule to be eligible for award. For CTAs, all CTA members must also have both SINs on each corresponding schedule to be eligible.
	115	Would you please repeat the answer to Question number 7?	PSD does not get involved with contractor pricing and billing. As stated above, contractors supporting classified contracts must come to CISA with the appropriate security clearance. For Public Trust positions, CISA/PSD can grant EOD approval while the contractor’s Public Trust investigation is pending. Therefore, the contractor can begin working upon EOD approval.
	116	Is there any estimate on the number of initial task orders that will follow the award of the BPA and does the government have funding obligated for these? What is the anticipated timelines for release of the initial Task Orders?	No, there is no estimate for the initial number of call orders that will follow the award of the BPA. CISA will have funding obligated at the call order level. There is not an estimated timeline for release of the initial call orders.
	117	Is there any guidance the government will share about draft instructions to offers and details about the response volumes, structure, and templates?	CISA anticipates releasing a draft copy of the RFQ before the final RFQ is posted. The draft RFQ will include quote submission instructions and detail regarding volumes, structure and template requirements.
	118	The draft SOW calls out the need for TS clearances for certain call orders, but does not have a requirement for the prime to have a TS facility. Please provide some clarification on the TS facility requirement. Thank you.	Quoters must possess a TS/FCL at the time of quote submission.
	119	May a company with the 54151s SIN only be a CTA member with a company that has both the 54151s and the HACS SIN as long as the member with the HACS SIN is the lead member.	The quoter must have both SINs on its schedule to be eligible for award. For CTAs, all CTA members must also have both SINs on each corresponding schedule to be eligible.
	120	In addition, should a CTA be utilized: I would recommend that CISA require all members of the CTA be required to recertify as a small business to ensure competition is between actual WOSBs.	We appreciate the feedback; however, Per 13 CFR 121.404, SBA determines the size status of a concern, including its affiliates, as of the date the concern submits a written self-certification that it is small as part of its initial offer or response which includes price. A small business is certifying at the time of quote submission their size status; therefore, recertifying is not a requirement. In addition, a small business is generally considered to be a small business throughout the life of that contract, unless the contract exceeds 5 years. At the time, the small business would have to recertify their status before the 5 years is up.
	121	Will there be any limitations on teaming?	No - CISA does not get involved with Teaming arrangements.
	122	Will the government accept SINS from across partners to cover the requirements of the BPA? Are partner Past Performance inputs acceptable within the response?	It is unclear what is meant by "partners." The prime quoter must have both SINs on its schedule to be eligible for award. Partner past performance can be considered, within page limitations, per the RFQ instructions.
	123	What would be the RFQ number ?	The RFQ number will be provided when the draft RFQ is issued.
	124	Will there be a coding challenge be part of this submission?	No, a coding challenge is not planned at this time.
	125	Will there be bid tasks awarded along wit the BPA's	No, only BPA awards will be issued initally.
	126	what will the tasks be awarded as, e.g. Firm Fixed Price, T&M, Cost Plus?	BPA call orders may be awarded as Firm Fixed Price, Labor Hour, Time & Materials or a hybrid.
	127	Will there be a Sample Tasks involved, Resumes and LOI requirements?	No, there will not be sample tasks or LOI requirements. CISA plans to require resumes for the Key Personnel and letters of Intent.
	128	Is CISA requiring that all members of a bid, i.e. Prime/Sub be certified as WOSB? Or can there be a mix of vendors as long as the Prime is a WOSB?	The prime must be certified as a WOSB.
	129	Will you allow for a WOSB prime with only one of the SINs to be considered if one of their small business subs (though, not WOSB sub) has the other SIN?	No. The prime quoter must have both SINs on its schedule to be eligible for award.
	130	Will Commercial PP be accepted since they employ the highly relevant digital transformation success? Many commercial companies fall into the critical infrastructures. Their successes are highly relevant to this RFP.	Commercial Past Performance will be accepted and evaluated.
	131	If two companies form a JV or CTA, does it matter which of the companies have the SINS? For example, can one have HACS and the other company have the other SIN? Or should the managing company have both?	All members in the CTA must have both SINs on each corresponding schedule to be eligible for award. The JV must have both SINs on each corresponding schedule to be eligible for award.
	132	Would a CTA submitted with a company with the 54151s SIN only and a company with the 54151HACS SIN only meet the SIN requirement as in a CTA all CTA members are considered prime.	No. For CTAs, all CTA members must also have both SINs on each corresponding schedule to be eligible.
	133	Does a JV need to have the active FCL or can just one member (the mentor) have the active FCL?	Yes, the JV quoter must possess a TS/FCL at the time of quote submission.
	134	Does CISA have guidance/advice on teaming requirements, I.e. to avoid a WOSB front and traditional Primes getting divvied the work share?	No. CISA does not provide guidance or advice on teaming requirements.
	135	Will the opportunity published for market research - Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Division (CSD) come under this as well?	It is unclear what you are asking "Will the opportunity published for market research - Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Division (CSD) come under this as well?"
	136	Will CISA please consider integrating a coding challenge/ technical challenge and orals presentation as part of source selection?	No, there will be no coding, technical challenge, or oral presentations.
	137	AS CEO of DSCI, and 100% owner, I maintain a TS clearance. Over the years, we’ve not had the need for a TS FCL . However, my Security Officer tells me it is a 1-3 month lead time to obtain the TS FCL, and DSCI would need CISA to sponsor our TS FCL if we are required to store TS data on our premises	No, CISA will not provide TS/FCL sponsorship for this requirement.
	138	When we obtained our GSA HACs a few years back, there were less than 6 companies with TS FCL, and very, very few WOSB with TS FCL. When the market survey was released, did all your respondents possess a TS FCL? If not, you may have a very small pool of candidate contractors to select from.	CISA's market research was completed in January 2023. Based on CISA's market research, CISA has made the determination to set this requirement aside for WOSB.
	139	Would you re-consider sponsoring a company in this position for a TS FCL for the DTSS BPA?	No. CISA will not provide TS/FCL sponsorship for this requirement.
	140	Does the prime need to be on one of these SINs or both	The prime quoter must have both SINs on its schedule to be eligible for award.
	141	Do you know if a WOSB has the HACS SIN by itself and is also part of a mentor-protégé JV does that HACS SIN qualify for the JV	The WOSB must have both SINs on its schedule to be eligible for award. The JV must also be certified as a WOSB and have both SINs on each corresponding schedule to be eligible.
	142	Can the Government please confirm that the requirements as stated in Section 5.2 of the draft BPA Statement of Work are correct and that specific security requirements will be established at the call order level and not required for the BPA submission	Yes, the requirements stated in Section 5.2 of the draft BPA Statement of Work are correct. Specific security requirements will be established at the BPA call order level; however, quoters must possess a TS/FCL at the time of quote submission.
	143	To avoid unnecessarily restricting competition for the BPA, will DHS allow bidders who do not currently hold a Top Secret facility clearance to bid the BPA?	No, the prime quoter must possess a TS/FCL at the time of quote submission.
	144	A prime contractor with an existing Facility Security Clearance (FCL) at the Secret level and with Key Management Personnel (KMP) possessing active Top-Secret clearances, could upon DTSS award be issued a DD254 and within days have their FCL updated to the TS level. This can occur prior to call orders being issued. Would the Government allow prime contract bids from a company with the ability to show existing Secret level FCL and existing TS cleared KMP?	No, the prime quoter must possess a TS/FCL at the time of quote submission.
	145	Does the WOSB need to have all the subcategories under HAC SINs or having one Subcategory will suffice.	The WOSB must have both 54151S and 54151HACS SINs on its schedule to be eligible for award.
	146	Does the prime WOSB must have a TS FCL at the time of submission at BPA level	Yes, the prime WOSB must possess a TS/FCL at the time of quote submission.
	147	If entered into a CTA, do both CTA partners need to have TS FCL at time of submission at BPA level?	Both CTA partners must hold a TS/FCL at the time of quote submission.
	148	Would the government be flexible with requirements and accept Secret FCL at BPA level, but must have TS FCL at task order level?	No. The prime quoter must possess a TS/FCL at the time of quote submission.
	149	Would the government accept any evidence that TS is pending for approval with DCSA and allow for submission as Prime at BPA level?	No, the prime quoter must possess a TS/FCL at the time of quote submission.
	150	Lastly, is there any possibility to request CISA for assistance with expediting our application with DCSA?	No. CISA will not provide assistance to expediate an application with DCSA.
	151	Should the HACS sin be in place prior to proposal submission or prior to the award? We are currently in the process of getting approved for HACS, but it might not be completed prior to proposal submission. We meet all other criteria.	Yes. At the time of quote submission, the quoter must have both SINs on its schedule to be eligible for award.
	152	If we form a CTA, can some criteria come from any CTA member? For example, all CTA members are WOSB; 1 has HACS sin and the other has Top Secret FCL with 54151S. Would this meet the criteria for the CTA to respond to the proposal?	For CTAs, all CTA members must have both SINs on each corresponding schedule to be eligible for award. The CTA must also be certified as a WOSB and hold a TS/FCL to be eligible at the time of quote submission.
	153	If we form a CTA, can some criteria come from any CTA member? For example, 1 member has Top Secret FCL with Top Secret 54151S sin and the other is a small business with HACS sin Would this meet the criteria for the CTA to respond to the proposal?	For CTAs, all CTA members must also have both SINs on each corresponding schedule to be eligible. The CTA must be a certified WOSB and hold a TS/FCL at the time of quote submission.
	154	Based on our research, there are only 5 WOSB companies on both HACS and 54151S. Three of these companies do not have Top Secret FCL. This severely limits the amount of proposals the government would receive and lowers the opportunity for the government to receive a competitive bid in their best interest. We are asking the government to consider the companies in the process of receiving HACS sins approval who will receive prior to award.	CISA has made the determination to set this requirement aside for WOSB.
	155	Can an MPJV company bid on the work if only the Mentor currently holds the Top secret Facility Clearance?	The JV quoter must possess a TS/FCL at the time of quote submission.
	156	Can a contracting teaming agreement (CTA) be formed to leverage company’s qualifications, specifically to meet the WOSB and HACS requirements.	Yes. All CTA members must also have both SINs on each corresponding schedule to be eligible. The CTA must be a certified WOSB and possess a TS/FCL at the time of quote submission.

https://urldefense.us/v3/__https:/nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Fexecutivegov.com*2F2023*2F02*2Fomb-memo-seeks-to-improve-new-entrant-participation-in-federal-marketplace*2F&data=05*7C01*7CMakahla.Stout*40blujuniper.com*7C3285b2536b254ad4a95308db2675b8a0*7C69bce419f0bf47fba5aa8fdcc8997692*7C0*7C0*7C638146059292597403*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=r8YKBS51VpGbPCwBcUPA3GaGFQBTEJ15FeIDQ9nkdoI*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSU!!BClRuOV5cvtbuNI!SXCY_fiZkN-gn4ZwT5vzHMD1kE8ghcKl-vg79xhZMdmzvI8zLXxS8zGkjJ1_KkzDG6um3lRI$

File details come from the government source that posted it. Updated Apr 7, 2023.