Solicitation_Questions_Part_2.docx

QUESTIONS/RESPONSES:

1. QUESTION: Are RFQ Attachment 5 and 6 submissions required as part of the RFQ response or upon contract award? Are the submissions required by the Prime or both the Prime and any subcontractors?

RESPONSE: Both Attachment 5 and Attachment 6 are due immediately upon contract award. Both Attachment 5 and Attachment 6 are required by the Prime and any subcontractors.

2. QUESTION: 1352.239-72(d) – Can you please provide a copy of the DOC Information Technology Management Handbook? The document is posted on DOC’s intranet site and cannot be accessed remotely.

RESPONSE: Many Department of Commerce IT Policies are posted on the DOC internet and can be accessed remotely. http://ocio.os.doc.gov/ITPolicyandPrograms/Policy___Standards/index.htm

3. QUESTION: 1352.239-72(h) – As a public accounting firm, we are required to follow certain professional standards, as such would the government consider allowing revised language to a final contract such as: “In no event shall any audit cause Contractor to violate its professional standards and/or confidentiality obligations to its clients”?

RESPONSE: This solicitation does not require a vendor to perform an audit function. And if it does in any such capacity, the government would consider allowing such clause in the response.

4. QUESTION: 1352.239-72(i) – Will Contractor personnel connect directly to DOC network/systems? For example, will the Contractor be responsible for logging into DOC’s accounts payable system to obtain a sample of invoices?

RESPONSE: Contractor personnel will be allowed to access DOC network/systems while onsite. When access is required via an authorized remote site, a rule-of-behavior process will be provided before access is granted. DOC has preventive controls for accessing or downloading sensitive agency information. Access to DOC systems, e.g., financial systems, may require contractor personnel being onsite. The DOC Project manager will provide directions when needed.

5. QUESTION: 1352.239-72(i) – Is the certification and accreditation process required only if the Contractor is required to connect to the Agency’s network? If it is required would the government consider buying into the material burden?

RESPONSE: Contract support is expected to be done onsite or through a mutually agreed off-site location. When working remotely, the government will furnish equipment needed for access, store, and transmit sensitive information. Contractor must provide adequate security, e.g., C&A, for government information, if such information is stored, processed, and transmitted outside of government controlled environment.

6. QUESTION: If laptops are required, will Contractor laptops be used or will they be issued by DOC?

RESPONSE: If required, the government will provide needed laptops through its loaner pool.

7. QUESTION: What system(s) will be used to deliver services? For example, Workgroup Collaboration (SharePoint – Contractor only), Workgroup Collaboration (SharePoint – DOC access), Microsoft Office, and File Servers?

RESPONSE: The Contractor is expected to conduct their services on/via government provided network/system/application/equipment, e.g., DOC Network/email/operating platform, to include, MS Outlook, MS Operating system, MS Office and etc.

8. QUESTION: Will any externally hosted systems be used? For example, eGRC for governance/risk/compliance?

RESPONSE: In addition to common operating platform described in question 7, the contractor may be asked to access government provided systems, such as Office of Management and Budget (OMB) MAX Portal, or OMB Federal IT Dashboard or other federal agency provided general support systems. If necessary, general training for those systems may be provided by the government.

9. QUESTION: Please provide a description of the data that the Contractor will be responsible to store/process/access, such as personally identifiable information, business plans, accounts receivable/payable, and security vulnerabilities?

RESPONSE: The contractor will store/process/access/transmit information on government provided network/system/applications. Data types may include PII, business plans, invoicing, system architecture, federal regulation and compliance information, financial reports, and general office support information.

10. QUESTION: How will electronic data exchange be performed? Examples include email (Contractor-issued email account), email (Government-issued email account), and Contractor secure file transfer, file transfer mechanism provided by DOC, CD/DVD provided by DOC.

RESPONSE: The contractor will be required to use DOC issued equipment (PC/laptop), email, network account, and applications, e.g., secure file transfer (SFT).