REVISED Attachment F - Cyber BPA Go-No Criteria - post-QA edits.pdf

Attachment F – Go/No-Go Criteria

Cybersecurity BPA “GO/NO-GO” Criteria

Technical Approach GO/NO-GO guidance

• NO GO - The Offeror only repeats the PWS requirements (verbatim or paraphrased) in the technical approach section, demonstrating a lack of a clear understanding of the PWS sufficient to articulate an approach.

• NO-GO - Multiple significant weaknesses without Significant Strengths to counterbalance risk (like a compensating control) in the subtask is unacceptable

• NO-GO - Three or more significant weaknesses in a subtask are unacceptable.

(Exception, an offeror may still earn a “GO” rating for the parent Task Area if ALL the other related subtasks are strong enough to compensate for the single weak subtask.)

Key Personnel - GO/NO-GO guidance

• NO GO - The Offeror does not propose the minimum staff required for all key personnel to perform the work based on the expected staffing levels as defined in the key personnel list. (Exception: the proposal may receive a “GO” if the proposal clearly defines how their approach makes up for the difference between the key personnel profile and their proposal. Note that the Government is explicitly asking for efficiencies to control costs, so the offeror must balance their proposed personnel footprint with a solid approach to manage workload)

Past Performance - GO/NO-GO guidance

• NO GO - The Offeror’s past performance submissions are not current; i.e. documented period of performance services were last performed over 3 years ago.

• NO GO - The Offeror provides no past performance supporting a federal agency.

• Note: Contract periods of performance whose duration have not completed will only count up to the time at which the proposal is evaluated (i.e. a contract POP of 03/15/2021 to 03/14/2026 will only count as experience as two years and two months if the proposal evaluation starts on 5/17/2023).