RFAAP - Industry Day 4 Question-Answer.docx

RFAAP Industry Day 4 Q&A

1. Does the Government intend for the contractor to insure the full replacement value of the Government owned equipment and real and personal property at RFAAP?

USG Response: Refer to FAR clause 52.245-1, which will be in the solicitation.

2. Will the risk of loss (as related to facilities, buildings, and/or equipment) be shifted to the operating contractor under this upcoming contract?

USG Response: Refer to FAR clause 52.245-1, which will be in the solicitation.

3. Is the RFAAP site compliant to NFPA 70E requirement for arc flash assessments and labelling? If so, what month/year is the site due up for its next 5 year assessment?

USG Response: By the end of CY2025, RFAAP will be compliant to NFPA 70E requirements for arc flash. Given the vast effort for the initial assessment and labeling, it was conducted in multiple phases. Therefore, the next 5 year assessment will be due for some buildings within the first 2 years of the next contract.

4. For any deficient and/or non-code compliant facility, component, or equipment in place at time of transition; is the operating contractor or the USG financially responsible for bringing facilities and equipment to compliance and to what timeline?

USG Response: Government real and personal property will transition to the Operating Contractor upon contract award. The equipment will be as-is and where-is at time of transition, along with associated ownership and maintenance records. The Contractor is to maintain stewardship records and be responsible and accountable for all property throughout the term of the contract. The Contractor would be responsible for upgrading (at its expense) if it deems the equipment to not be compliant. Timeline for compliance may be shared at a later date.

5. Can the USG provide a list of GSA, government owned, or other vehicles/motive/heavy equipment used to support the prime contract that the prime contractor may be financially responsible for?

USG Response: The TDA which includes the GSA fleet along with the NTV list will be included in the VTL.

6. Will the operating contractor be able to utilize the GSA vehicle program to include fuel and maintenance reimbursement features of the program?

USG Response: GSA vehicle program can be used and includes fuel and maintenance reimbursement.

7. Can the USG provide a complete list of all buildings and equipment designated as active, inactive/caretaker, or ARMS?

USG Response: Yes, Will be included in the VTL.

8. Can the USG provide details on active water towers and last inspection/clean date?

USG Response: Yes, Will be included in the VTL in the building list.

9. Can the USG provide a list of current USG owned IT hardware quantity and age (network switches, wireless access points, computers, servers, SAN/NAS, network fiber/ethernet cabling, etc.) Is there any IT hardware that is not USG owned and will not transfer to the incoming contractor?

USG Response: This will be provided in the VTL or communicated to bidders in a way that will protect the sensitivity of this information. All IT hardware required for production or operation of the plant will be transferred to any potential incoming contractor.

10. Are there separate Information Technology/ Operational Technology (IT/OT) networks? If so, how many machines (Servers/computers) operate on each?

USG Response: Yes, there are separate IT and OT networks. We will provide an exact amount in the VTL.

11. Are IT and OT computers and systems current on OS versions/patching?

USG Response: Yes, the current operating contractor is required to keep IT and OT computers and systems current on OS versions/patching.

12. What is the age and type (POTS, VOIP, other) of the telephone system?

USG Response: This varies throughout the plant and includes POTS and VOIP.

13. Will the contractor be expected to provide IT support to on-site Government staff?

USG Response: No, the contractor does not supply IT support to on-site Gov staff. However, the operating contractor is required to supply computer access to all the local Gov staff access information on BAE’s network regarding environmental, maintenance, security, visitor access, etc.

14. What is age/Status of Data Center(s)? Please also provide the number of comms closets.

USG Response: Applicable information will be provided in the VTL.

15. Will a physical layout of the site with network diagrams be provided on the VTL?

USG Response: Applicable information will be provided in the VTL.

16. Are all IT and OT assets currently used on-site USG owned, including PLCs, SCADA systems, and IoT devices? Please provide a list of USG owned assets.

USG Response: Applicable information will be provided in the VTL.

17. Are all applications currently used in the operations of the facility USG owned? Please provide a list of USG owned and non-USG owned applications.

USG Response: Applicable information will be provided in the VTL.

18. Please identify all active IT projects and IT projects that are planned to be completed prior to contract award.

USG Response: Applicable information will be provided in the VTL.

19. Do you have network segmentation and isolation implemented using the Purdue Model?

USG Response: Applicable information will be provided in the VTL.

20. Is the OT environment an accredited Army network?

USG Response: Applicable information will be provided in the VTL.

21. Is there a facility clearance required for Radford?

USG Response: Operating Contractor employes must be cleared IAW AR 190-56 to confirm his/her trustworthiness, and for handling sensitive government information and material. In addition, the contractor that is awarded the contract will be required to have a Secret FCL before contract is awarded.

22. Are there expectations to perform classified programs?

USG Response: It would be the expectation of the USG for the Operating Contractor to have the ability to perform classified programs.

23. Are there any modern facilities that have implemented Industry 4.0 technology?

USG Response: The USG is not aware of any.

24. Cybersecurity: Is there an active Data Loss Prevention (DLP) program with data labeling capabilities for protecting Controlled Unclassified Information (CUI) and other sensitive data?

USG Response: Applicable information will be provided in the VTL.

25. Cybersecurity: What is the current state of OT system documentation and security posture, including the existence of an up-to-date System Security Plan (SSP)?

USG Response: Applicable information will be provided in the VTL.

26. Cybersecurity: Have recent vulnerability assessments or penetration tests been conducted on IT and OT systems, and are there any unresolved Plan of Action and Milestones (POAM) items?

USG Response: Applicable information will be provided in the VTL.

27. Can the Government provide a timeline for when the tour scripts be provided from Industry days 1,2 and 4?

USG Response: The RFAAP tour scripts for Industry Days 1, 2 and 4 will be provided in the VTL.

28. Please provide facility drawings, including building numbers, and area maps of the production facilities, to include machine schematics, that follow the process flow for each main product stream.

USG Response: This information will be provided in the VTL.