Amend 0002 Vendor Questions and Answers.xlsx

Sheet1

The only authorized remote access for DDRT ESS systems for the Systems Administrator will be via upgraded/migrated systems that reside on an approved DLA network and infrastructure. Remote access for these systems will be provided via DLA adminstrative accounts requested through DLA's Account Management and Provisioning System (AMPS)

Operational legacy equipment that is physically moved/relocated, involved in a network migration, or has its software significantly modified (IE - Firmware updates, patching, or other SW updates/changes) would constitute a need for warranty. Any warrantied time would not count against applicable contract CLIN hours

Exceptions would apply to any HW/SW that is past any end of life (EOL) or other official support expiration dates by the manufacturer The PWS states "The Contractor shall harden systems using a scan, fix, scan methodology remediating findings IAW current DOD, DLA and Defense Information Systems Agency (DISA) standards. This includes automated and manual STIG application, Assured Compliance Assessment Solution (ACAS) scanning and any other hardening efforts required to make the system ready to connect to a DOD network."

Will the Key Personnel System Administrator have access to complete ACAS scanning or will ACAS scanning be completed by the DLA Cybersecurity Technology team? For systems/equipment that are located on approved DLA networks/infrastructure - ACAS scanning will be completed by the DLA Cybersecurity team utilizing DLA's ACAS infrastructure. Scan requests and reports will be provided to the vendor as needed.

For any standalone, isolated, or non-DLA network based systems - the vendor will be required to provide any infrastructure, software, hardware, or capabilities necessary to meet ACAS scanning and reporting requirements.

The PWS states "As such, the Contractor must clearly identify “what” anticipated Government IT Infrastructure is required to host and operate the OT solution(s) and/or system(s) within the design documentation submitted for Government approval at time of award. These anticipated designs will be incorporated into the system CONOPs. The Contractor will be responsible for all installation, configuration, and deployment of the OT solution(s) and/or system(s) (including but not limited to) its subsystem(s), application(s), and patch cabling, if required." Will the government provide design documentation and requirements associated with the OT facilities, supported systems, and existing solutions? Section 3.3.2 outlines the requirements for two (2) scenarios:

Scenario 1 - DLA OT Network/Infrastructure (Preferred):

"In general, the DLA expects to furnish the IT Infrastructure to host the OT solution(s) and/or system(s) (including VLANs, and Virtual Machines (VMs))"

HW, SW, and other equipment for ESS systems are installed (for new systems), or are migrated into (for existing/legacy systems) DLA's Operational Technology Network (DOTNET) environment and utilize the IT infrastructure therein. In this scenario, the requirements for ESS system/application infrastructure are listed further in the same PWS section (Sect 3.3.2, pages 8-11).

Scenario 2 (Uncommon)- Standalone, Isolated, or non-DLA Network/Infrastructure:

In general, the DLA expects to furnish the IT Infrastructure to host the OT solution(s) and/or system(s) (including VLANs, and Virtual Machines (VMs)) unless there is a hardware, compatibility, or mission issue preventing it.

In this scenario (where a HW, compatibility, or mission issue prevents the usage of the DLA DOTNET environment/infrastructure outlined in Scenario 1), the vendor must provide DLA with any IT infrastructure requirements needed to support the vendor's planned standalone/isolated system installation and configuration (if any exist). If a completely isolated system installation is planned by the vendor (which requires no GOV IT infrastructure/support), then no action is necessary to provide required DLA IT Infastructure requirements for approval. In this case - the contractor is responsible to provide all aspects of the installation, configuration, and deployment of the ESS systems (HW, SW, networking, cabling, etc.). The vendor must provide documentation in their proposal that identifies and explains any requirements for this scenario to DLA J6 for review/approval prior to contract award.

Can DLA provide the drawings/diagrams for all buildings to include requirements for connecting to the network? Is this request asking for building drawings for each ESS system, or for DLA J6's network diagrams for each building, or both?

It is unlikely that network diagrams will be provided for each building, but based on the vendor's installation/sustainment plans - coordination with DLA J6 for network locations and support can be made as needed.