FA2-061_Q A_(FINAL).docx

FA2-061 Questions- Integrated Compliance Information System

1. Will the assessment include each major component to ICIS as stated in Section 1.1 Overview? These components include ICIS FE&C, ICIS-NPDES and ICIS-AIR?

There is only one system, The Integrated compliance sections: FE&C, ICIS-NPDES and ICIS-AIR are all within ICIS.

1. Does the system boundary include the platform that NetDMR and NPDES e-Reporting Tool (NET) reside?

Yes, NetDmr is an Electronic submission tool. Net is a permit tool hosted at NCC on our servers.

1. Section 1,2 C&A Service Requirement states that the contractor shall use the EPA T-VAL lab to perform scans. In Section 1.3-b,i2 leaves an contractor option to perform scans along with a developing and distributing a rules of engagement and conducting scans utilizing tool sets. Which does the EPA prefer?

EPA staff will perform the Scans.

1. Which controls will be used for this assessment, Revision 3 or Revision 4?

We will use Rev 4.

1. In Section 1.3-b,iII, because the contractor will be facilitating a POA&M report, should ASSERT be replaced with Xacta?

Yes the format should be for Xacta.

1. In Section 1.3,3iv, it says to develop/update the SSP utilizing Revision 3 SSP template (Draft and Final). If Revision 4 controls are being used, is there an updated template? Will the contractor be approved to use a Xacta compliant template if one is not provided? Is the contractor required to updates any materials in the SSP or simply provide suggestions on what to add and/or omit.

Not sure if I have a Rev 4 Template, Yes you can use approved an Xacta compliant template

1. Because this is a web based system and can be accessed through any desktop, is there any PII data being transmitted or stored?

ICIS can run on any desktop. No PII data is stored in ICIS. ICIS data that is transmitted over the internet is encrypted with HTTP over SSL , and requires credentials to access.

1. Will travel outside the DC metro area be required?

No.