P00010 Attachment 1 Question and Answer SP7000-24-Q-0004.pdf

DEFENSE LOGISTICS AGENCY

DLA CONTRACTING SERVICES OFFICE

5404 J AVENUE, BUILDING 404

NEW CUMBERLAND, PENNSYLVANIA 17070-5059

Questions and Answers

SP7000-24-Q-0004

1. There seems to be a discrepancy between the original RFQ and the revised modification regarding the Section IV. SPECIFICATIONS device security classification. The original RFQ classified the security requirement as NIPR, while the revision changed it to classified. This discrepancy is noted on page 6 of the table. Additional software from 90 Meters is installed on the device to support NIPR, which prevents it from reading SIPR cards. If the objective is to support the Gemalto IDPrime MD 830b family and Thales IDPrime 930 family cards, then SIPR is not necessary.

Could the government please clarify the terms "Classified" and "Unclassified" in relation to the type of network the customer is on, specifically whether it is SIPR or NIPR? Additionally, we would like to request a 5-day extension to allow ample time to make any necessary changes based on the answer to our question.

Answer:

The intent of the government on changing the table is to clarify that the devices are on a classified network but not specifically a SIPR network. Although the original and current solicitation in Section VI, Paragraph 6, have always mentioned that the devices are used for “Confidential Restricted Data (CRD)” classification, it did not correlate to the table in question. The network the devices are being utilize in is a classified National Security System (NSS), but not SIPR.

For clarification purposes Devices placed on the SIPRNet or any device that will be used on National Security Systems (NSS) shall be acceptable if they are included on the NIAP CCEVS Product Compliant List (https://www.niap-ccevs.org/Product/). A “national security system" is defined as any information system (including any telecommunications system) used or operated by an agency or by a contractor of an agency, or other organization on behalf of an agency the function, operation, or use of which involves intelligence activities, involves cryptologic activities related to national security, involves command and control of military forces involves equipment that is an integral part of a weapon or weapons system, is critical to the direct fulfillment of military or intelligence missions (this does not include a system that is to be used for routine administrative and business applications), or is protected at all times by procedures established for information that have been specifically authorized under criteria established by an Executive order or an Act of Congress to be kept classified in the interest of national defense or foreign policy.