Q_A_W50S9B21Q0016_1 Sep 2021.pdf

W50S9B21Q0016, Cybersecurity Training Platform Questions and Answers

1 September 2021

The following are the questions received in connection with W50S9B21Q0016. Following each question is the Government’s official response.

Q1. How exactly do you intend to use this system? What does that use look like over the course of a week/month/year? We are trying to better understand that so we can give you the most accurate pricing. For example, #2 of the Salient Characteristics: If per user licensing is required, the solution provides the ability to transfer user licenses as needed to other users. How many users do you anticipate transferring each license to (we understand that you are asking for 36 but do you anticipate 1-3 people using each license)? From a training perspective we think it's important to track each user that uses one of the seats and wouldn't want just a generic user.

A1. The platform is intended to be used to develop/standardize, execute, and track individual training plans for Virginia Air National Guard Cybersecurity professionals. Once training plans are developed (i.e. a selected series of online courses accessible on the platform), members will execute training on a self-paced basis. The requiring activity (end user/customer) currently has 36 positions/members. However, historical data shows an average of 3 to 5 personnel leave the organization annually. Therefore, as new hires fill vacancies they will also take over the unused account and/or license.

Q2. How many external users and what are they using for (is it a X # of times per year type of thing or regular access...)?

A2. Using a definition of external users as members accessing the internet based training from the internet, there will be a total of 36 members requiring regular/continuous access.

Q3. How many internal staff and how many administrative users will need access to the platform?

A3. At least 4 each on both administrative and internal users (same 4 on both roles) that can be changed out as needed.

Q4. Who are the preferred small business partners the Virginia Army National Guard uses for information technology and software solutions?

A4. The Virginia Air National Guard (VaANG) cannot speak for the Virginia Army National Guard (VaARNG); however, the VaANG does not have preferred small business partners for information technology and/or software solutions.

Q5. Will SANS Institute be the preferred course content provider?

A5. A preferred course content provider has not be identified.

Q6. Is there a preference for Cloud Services versus On-Premise?

A6. Cloud or internet based, as there is no ability to support on-premise services.

Q7. Is there a compliance requirement for Impact Level 4 (IL4)?

A7. There is no requirement for IL4.

Q8. Will the training be 'self paced' (synchronous) or will there be a need for 'real time' (asynchronous) instruction?

A8. Self-paced.

Q9. What is the timeline for swapping out each user for the web based environment? Are users swapped every month, or is there a rolling timeline?

A9. Users will be swapped out as needed due to personnel departing the organization.

Historically, an average of 3 to 5 personnel leave the organization annually.

Q10. Is the expectation to update the content annually?

A10. Content updates will be dictated by higher level authority requirements. Annually should be sufficient on average with occasional mid-year updates as directed.

R. FRANK HARTZELL, SMSgt, VaANG Contracting Officer