GSA_QMAE-EV-180001-D_0001_Signed_SF30_06_15_2018.pdf

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

(a) By completing items 8 and 15, and returning or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

E. IMPORTANT: Contractor is not is required to sign this document and return copies to the issuing office.

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NUMBER 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQUISITION NUMBER 5. PROJECT NUMBER (If applicable)

7. ADMINISTERED BY (If other than Item 6) CODE

STANDARD FORM 30 (REV. 11/2016)

Prescribed by GSA FAR (48 CFR) 53.243

FACILITY CODE

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended. is not extended.

12. ACCOUNTING AND APPROPRIATION DATA (If required) copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NUMBER AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER

NUMBER IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation data, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

15C. DATE SIGNED

15A. NAME AND TITLE OF SIGNER (Type or print)

16C. DATE SIGNED

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

6. ISSUED BY CODE

8. NAME AND ADDRESS OF CONTRACTOR (Number, street, county, State and ZIP Code) (X)

CODE

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

Previous edition unusable

Eric VanderVeen

9A. A9A. AMENDMENT OF

SOLICITATION

NUMBERMENDMENT OF

SOLICITATION NUMBER-170001-

D

See Block 16c

U.S. GENERAL SERVICES ADMINISTRATION

MEDIUM & HEAVY VEHICLES BRANCH (QMAAB)

1800 F STREET NW

WASHINGTON, DC 20405

QMAE-EV-180001-D ELECTRONIC MAINTENANCE AND REPAIR AUTHORIZATION SYSTEM (EMRAS)

The purpose of amendment 0001 is to provide Questions and Answers in response to solicitation QMAE-EV-180001-D.

All other terms and conditions remain unchanged.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

PAGE OF PAGES

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED (SEE ITEM 11)

QMAE-EV-180001-D

06/07/2018

6/15/2018

Solicitation: QMAE-EV-180001-D Questions & Answers

Question 1:

FAR 52.204-2 SECURITY REQUIREMENTS (AUG 1996):

a. This clause applies to the extent that this contract involves access to information classified “Confidential,” “Secret,” or “Top Secret.”

Based on the nature of data that will be used within the vendor’s system, will this clause be required?

Answer: There is no anticipation of access to this type of information (confidential, secret, or top secret) to be included in the information passed by GSA Fleet to the vendor.

Question 2:

ASSESSMENT OF THE SYSTEM

System and security parameters deferred to customers, default settings must be changed.

Does this mean that GSA will want to be able to set their own passwords and not be reliant on any default ones that we may send you or is there a wider meaning here?

Answer: Users should be required to change the default password and be able to create their own.

Question 3:

DATA AVAILABILITY

The data must be available to the Government upon request within one business day or within the timeframe negotiated with the Contractor and shall not be used for any other purpose other than that specified herein. The contractor shall provide requested data at no additional cost to the government.

What data is GSA referring to?

Answer: The data provided to the vendor by the government for implementation, the data captured/retained by the system. (e.g. the repair orders created during utilization of the system), etc.

Question 4:

ADDITIONAL STIPULATIONS

Deliverables shall be labeled Sensitive but Unclassified (SBU) or contractor selected designation per document sensitivity. External transmission/dissemination of SBU to or from a Government computer must be encrypted. Certified encryption modules must be used in accordance with FIPS PUB 140-2, “Security Requirements for Cryptographic Modules.”

What deliverables are GSA referring to?

Answer: Any submittals in response to the LI SaaS ATO process – the responses and the artifacts submitted in support of those responses – should be labeled SBU.

Question 5:

FAR question about boxes Do we need to comply to unchecked boxes?

Answer: The unchecked boxes in the solicitation’s FAR clauses are not applicable;

therefore, the vendor does not have to address or comply with any clauses next to an unchecked box.

Question 6 with Legal:

From the Security Doc: Chapter 3, Section 2e (7), Authorized Processing, of GSA CIO 2100.1 states:

Private sector cloud computing Software as a Service (SaaS) solutions that are implemented for limited duration and/or one time use; involve data already in the public domain or data that is non-sensitive and could be considered minimal impact; GSA would not be harmed regardless of the consequence of an attack or compromise, and the dollar cost for such a deployment does not exceed $100,000 annually, may follow the streamlined assessment and authorization approach defined in IT Security Procedural Guide: Managing Enterprise Risk, OCIO-IT Security- 06-30, for such systems. AOs must consider Federal and agency information security requirements, and the S/SO security needs. An evaluation of the data and project scope must be performed to assure the conditions noted above are met. A review of the security controls and activities for such systems must be performed to assure the security controls and practices of the contractor are adequate before authorizing use and accepting residual risk.

What is being referred to as the deployment?

Answer: Costs borne by the government to bring the SaaS to activation – i.e. costs incurred by GSA to implement and operate the awarded solution should not exceed $100,000 annually. This does NOT refer to costs incurred between GSA and the vendor for the provision of service.