Amendment 008 Questions Responses.pdf

Amendment 008 Solicitation SB1341-12-RP-0019

The purposes of this amendment are as follows:

1. To provide official responses to questions submitted by potential Offerors. The questions and their official responses are presented below; and

2. To extend the response deadline for the RFP to June 11, 2012 at 12:00 PM Eastern Time.

Questions & Responses

Question #: 1 Section of RFP: Performance Work Statement: Task Order 1- Security Automation Services Page of RFP Referenced: page 86 and page 90 of the updated RFP issued on May 18 Paragraph of Page: Section 6. SPECIFIC TASKS” on page 86 and Section - 11. PERFORMANCE REQUIREMENTS SUMMARY” starting on Page 88 Description of Question: In section “6. SPECIFIC TASKS” on page 86, there are only three requirements listed; I.a, I.b., and I.c. In section “11. PERFORMANCE REQUIREMENTS SUMMARY” starting on Page 88, the tables refer to the specific performance requirements, I.a, I.b, I.c, I.d, and I.e. The number of requirements for Specific Tasks do not match the number of areas being assessed for performance.

Additionally, III.c is described in the RFP on Page 87, but performance requirements are not available for III.c.

Response: These omissions have been corrected and the changes can be seen in the attached document Amendment 008 RFP, in the Section J Task Order 1 PWS. These changes do not add any new tasks.

They simply ensure that the Performance Requirements Summary matches the Specific Tasks.

Question #: 2 Section of RFP: J.2 Page of RFP Referenced: 80 Paragraph of Page: 10 Description of Question: The contractor should plan to support 3 domestic travel engagements lasting 2 nights/3 days. Is it anticipated that the contractor will include this travel in the costing? If yes, can you please provide locations of travel?

Response: Offerors do not need to include travel in their price proposals. Travel will be paid in accordance with Federal Travel Regulation.

Question #: 3 Section of RFP: J.3 Page of RFP Referenced: 85 Paragraph of Page: 2. IV.

Description of Question: What percentage of work did the incumbent perform, of the work described in the RFP for Task Order 1?

Response: The overall scope of Task Order 1 is similar to the scope of the previous contract, but no percentage will be provided.

Question #: 4 Section of RFP: J.3

Page of RFP Referenced: 90 Paragraph of Page: I.d. and I.e.

Description of Question: Tasks I.d. and I.e. listed in the Performance Requirements Summary are not listed in Paragraph 6. on page 86. Was this an oversight on page 86?

Response: These omissions have been corrected and the changes can be seen in the attached document Amendment 008 RFP, in the Section J Task Order 1 PWS. These changes do not add any new tasks.

They simply ensure that the Performance Requirements Summary matches the Specific Tasks.

Question #: 5 Section of RFP: B Page of RFP Referenced:13 Paragraph of Page: 1st paragraph at top of page.

Description of Question: The new version of the RFP removes the substitution of work experience for a bachelors degree in several areas, including Lead Vulnerability Analyst. Is there a reason that work experience cannot be substituted for those positions and that position, in particular? Would the government reconsider adding that work experience as a replacement option for a bachelors degree?

Response: The Government has reconsidered this change, and the changes made in Amendment 006 to the labor categories listed below have been reversed. The changes made in this amendment can be viewed in the Schedule of Labor Categories in the attached Amendment 008 RFP.

- Technical Subject Matter Specialist (Senior)

- Technical Subject Matter Specialist (Intermediate)

- Lead Vulnerability Analysis Specialist

- Analysis Specialist

Question #: 6 Section of RFP: J.3 Page of RFP Referenced: 92 Paragraph of Page: III.A and III.B of table Description of Question For Task III.A. and III.B of TO1, can the government provide any design documentation or specifications for the Web Services and Vulnerability Data Model, in order to properly scope the work to be performed.:

Response: An in-progress version of the vulnerability model can be found in vulnerability_0.9.1.xsd (see attached .zip file). A version of the vulnerability service WSDL and some associated schemas are also in the attached files. The NVD data feeds and detail information of the vulnerabilities available from the web interface of the NVD also serve as examples of the type of information that will need to be represented within the data feed.

Question #: 7 Section of RFP: J.3.

Page of RFP Referenced: 92 Paragraph of Page: III.B in Table Description of Question: Task III.B on page 92 describes a NIST publication for Online Incident Handling. Is that "Online" in the sense of an Online reporting system for Incident Handling or "Online" in the sense of Online (web-based) attacks/incidents.

Response: It is guidance on how to do incident handling across the internet (I.e., sharing information across distributed organizations).

Question #: 8 Section of RFP: J Page of RFP Referenced: 78 and 82-83 Paragraph of Page: Performance Work Statement: Task Order 1- Security Automation Services, 6.

Specific Tasks (pg. 78) and Performance Requirements Summary Table on page 82-83 Description of Question: On page 78, under paragraph 6. Specific Tasks, and Roman numeral I. Security Data Analysis and Testing, only three tasks are listed as subparagraphs a, b, and c. Yet on page 82, within the Performance Requirements Summary Table, two additional tasks are listed (I.d and I.e) that are not included as subparagraphs on page 78. Were tasks I.d and I.e left in the Performance Requirements Summary Table by mistake, or are they real tasks that have to be addressed in the proposal?

Response: See response to Question 1 of this amendment.