Copy_of_Cyber_Defense_Questions.pdf

Cyber Defender

SOLICITATION: W9124G18R0020

Industry Questions & Answers

Reference Question(s) Government Response

Performance Assessment Questionnaire

Regarding the Performance Assessment Questionnaire – Cover Letter, it states "Please complete the enclosure and return via email to the Mission and Installation Contracting Command (MICC)

Fort Eustis, 705 Washington Blvd, Fort Eustis, VA 23604, no later than 15 days after receipt of request or 14 March 2019, whichever occurs first." Please note, the Solicitation was released on

14 March 2019. Could the Government provide an extension; permitting the Contractor to update the Cover Letter to "....no later than 15 days after receipt of request or 29 March 2019, whichever occurs first."?

Amendment was released via FBO on 3/28/19; Performance Assessment

Questionnaire will not be accepted after 4/3/19.

PWS

Question 1: RFP W911S018R0020, PWS Part 1, Para 1.9 states “The Contractor Program

Manager (PM) shall be designated as Key Personnel”. The PM, although listed as the only Key

Personnel in the solicitation, is not a labor category for pricing. Can the Government clarify why the PM is not a labor category for pricing and if it will be added to Attachment 4, Tabs A and B, as a labor category requiring pricing?

Historically, the PM is a member of the instructor group who acts as the liason between the requiring activity and the vendor. This arrangement has worked well in the past; there is no need for a full-time PM.

Question 2: RFP W911S018R0020, PWS Part 1, Para 1.5.6 specifies "SIEM/Splunk®/Security

Onion®, paragraph 8.5.17 (40 hours)”; however, Technical Exhibit 3 only makes reference to

"Security Onion" and a Max Crs Len (Hours) of 16. Which value is correct, and would the

Government consider the Contractor proposing a specific number of hours for the topics in paragraph 8.5.17?

Technical Exhibit 3 is an estimate of the volume of work required to meet our needs. The requirements of Para 1.5.6 stipulates the maximum amount of time allowed for this subject. The intent was to require training on the use and functionality of SIEMs using Splunk as one example and Security Onion as a suite of tools which could be used in conjuntion with it. The requirement could have been refined better; but, the time limit of 40 hours should not be exceeded unless it is impossible to do so. The Government will entertain any course length proposals which vary from the 40 hour requirement.

Question 3: Regarding the RFP W911S018R0020, Parts 4 and 9, is it the Government’s expectation that the Contractor maintain inventory and maintenance of the Government Furnished

Equipment and, if yes, would the Government consider adding the Logistician as a Labor Category on Attachment 4, Tabs A and B?

It is the expectation of the Government that the Contractor maintain the operation of equipment insomuch as it pertains to the configuration of the equipment to support their (the contractor's) training. Inventory and maintenance of the equipment will remain the responsibility of the

Government.

PWS

Question 4: RFP W911S018R0020, PWS Part 5, Para 5.2.2, it states “The Contractor shall produce a MOS class pass rate of at least 91%”. Please note, the Contractor cannot assess or control the skill aptitude of incoming personnel. Would the Government consider updating the sentence to “The Contractor will use best efforts to produce a MOS class with a 91% pass rate”?

Each MOS-producing course is conducted multiple times per calendar year. Each iteration shall have a pass-rate of 91% or better. Students who, in the opinion of the Government, are incapable of passing are removed from the course. The historical pass rate is 91%.

Reference Question(s) Government Response

6 Question 5: Attachment 4, TAB B – Task Order Pricing, the Government has provided a total

NTE of $2,671,352.00 for ODCs; however, there is not a breakout to permit the Contractor to provide “allowable” pricing of the ODCs mentioned. Can the Government clarify if a separate template will be provided for the Contractor to identify the price of each ODC mentioned (training materials, permits, certification exams, certification exam retests, online materials, and assessment exams)?

No, there will not be a separate template.

7 Question 6: Regarding (i) RFP W911S018R0020, Section B and Volume IV - Factor 5 - Price and

(ii) Attachment 4 Tabs A and B, if the CLINs are for (1) training support services (labor) and (2)

Other Direct Costs (ODCs) defined as training materials, permits, certification exams, certification exam retests, online materials, and assessment exams, where does the Contractor price such things as travel, meals and incidentals, printing, shipping, etc.?

ODCs will cover incidentals. Travel is not included in this requirement.

Technical

Question 7: In reference to Attachment 4, TAB B – Task Order Pricing, the Government has provided a total NTE of $2,671,352.00 for ODCs (training materials, permits, certification exams, certification exam retests, online materials, and assessment exams). Does “training materials” include both (i) background / pre-existing intellectual property that the Commercial Off The Shelf

(COTS) courses are comprised of, and (ii) the course’s corresponding materials such as books, student handouts, slides, etc.?

(i) No, intellectual property is not considered training material.

(ii) Yes, books, handouts, slides, etc. are considered training material.

Technical

Question 8: Regarding the use of the term “training materials” in (i) RFP W911S018R0020

Sections 1.4 and 5.3.1 and (ii) Attachment 4, TAB B – Task Order Pricing - T003-Task Order

0001- Other Direct Costs (training materials, permits, certification exams, certification exam retests, online materials, and assessment exams), does “training materials” include COTS courseware licenses?

If the courseware/software/web site/etc. will be used to directly support training and will not operate correctly without license or permit, then yes; the license or permit would be considered training material.

10 Question 10: In reference to RFP W911S018R0020, Section B, included within the description of

Supplies/Services for ODCs, it states “Actual and allowable ODCs are reimbursable up to the NTE amount specified in the TO. ODCs will be reimbursed consistent with generally accepted accounting principles, cost accounting standards, and FAR 31.205-26.” It is the Contractor’s opinion that there will be room for interpretation regarding how “actual and allowable” is defined for each ODC invoiced – especially over a potential 66-month Period of Performance; putting a

Contractor and its Subcontractors at risk. Would the Government consider an IDIQ CLIN structure that includes a Unit Price per course type, certification, certification exam retest, and assessment exam?

No, the CLIN structure stated in the RFP will apply.

11 Question 11: Regarding (i) RFP W911S018R0020, Section B and Volume IV - Factor 5 - Price and (ii) Attachment 4 Tab B, can the Prime Contractor list its Subcontractors’ COTS training

(inclusive of materials, instruction, travel, etc.) as an ODC?

ODCs will cover incidentals. Travel is not included in this requirement.

12 Question 12: Concerning the RFP W911S018R0020 Performance Work Statement (PWS), there are other costs implied such as the CyberRange and logistical and administrative support. Is it the

Government’s intent that the Contractor include those as ODCs, separate labor categories, or allocate as burden to the existing labor rates?

No, there will not be a separate template.

13 Question 13: Does the Government expect courseware to exist at contract start? Yes

Contracting

Question 14: Would you be able to tell me if there is an incumbent contractor for this requirement?

If so, could you please provide the contractor name and the contract number that was awarded?

Yes, SANS INNOVATION CENTER, LLC Contract Number W91249-

16-C-0017.

Technical

Question 15: What software is there that is not SANS proprietary in the virtual PODs? Are we directed to use the virtual PODs?

HBSS, ACAS, ESM, Security Onion, Palo Alto VM, Windows &

Linux; Use of the PODs is required.

Contracting

Question 16: Does the ODC CLIN include fees associated with the range and scoring platform?

Please confirm travel costs are ODCs as well.

IAW 52.212-4 Other direct costs (e.g., incidental services for which there is not a labor category specified in the contract, computer usage charges. This contract does not have a requirement for travel.

Technical

Question 17: How many classrooms are available for 20 students’ classes? The course throughput is "Maximum class size for 25D3 or 25D4 is 16 students" in 7.3 but 4.1.1 states 20 student positions in small (750 sf) classrooms and 32 in large (1800 sf) classrooms. Is the class size 16 or

32 for the courses? Are the 32 seat classrooms housing two concurrent convenings? How many 20-seat and 32-seat classrooms are available for these classes? Are students only on Day shift, or is there a Days/Eves or Days/Eves/Mids schedule?

There are five 32-seat classrooms and three 20-seat classrooms. The number of concurrent classes is between two and eight. There are 20 positions in the smaller classrooms because the classrooms are subject to being used by other courses of instruction. The class size for all 25D classes is 16. Often, there are two classes conducted simultaneously in the same classroom to lower the cost of conducting training, resulting in a class size of 32.

Currently, all training is conducted on day shift. This is subject to change upon direction of the Commandant.

Technical

Question 18: Are two classes taking place in the classroom of 32 positions? Are all classes done on day shift, or is it possible for days/eves?

See question 17

Technical

Question 19: Will all hired instructors be put through training for Army Basic Instructor qualifications as part of the on-boarding process?

The Government is not paying for instructor certification.

Technical

Questions 20: How is the online 24/7 availability considered against the 70% on-hands training requirement? What do you consider on-hands training ?

Hands-on training is training which requires a student to actually perform some measureable activitiy directly related to the topic at hand.

No, the 70% requirement does not apply to the web-based training, however, using hands-on training would be appropriate to a lesser or greater degree.

21 Technical Questions 21: Is the Course Manager a contractor FTE or government representative? The Course Manager is a Federal Employee.

Technical Questions 22: Will we be getting access to the current curriculum for the courses listed in 1.5.6 and

1.5.7? Is all curriculum for the non-certified courses GFE?

Paragraph 1.5.6: No

Paragraph 1.5.7: Yes

Courses in 1.5.6 are not Government Owned; There is material in 1.5.7 which will be provided to the vendor for adaptation.

Technical Questions 23: How many actual classrooms are there for these two courses and how many concurrent classes run each day?

There are five 32-seat classrooms and three 20-seat classrooms. The number of concurrent classes has been as few as 2 and as many as eight.

Technical

Questions 24: What is the annual throughput/student pipeline for each course?

It has been as low as 176 and as high as 280 for 25D30; low as 64 and as high as 96 for 25D40; low as 33 and as high as 36 for 255S.

Technical

Question 25 : Will the government provide the Internet connection with external access required to take on-line certification exams?

Yes

26 Technical Question 26: Is the use of an off-base certification exam location authorized? No

Technical

Question 27: When with the government provide data center and classroom access so the cyber range can be installed and connectivity to the student machines established?

Upon contract award.

Technical

Question 28: Which version of Microsoft Office Suite is correct to submit Excel files? The solicitation states 2010 and then 2013.

It matters not.

Contracting

Question 29: Is it the Government's expectation that the Contractor's total labor hours be consistent with the scope of work detailed in Task Order 1, or will the hours in Tab B be modified with what the Contractor expects to use?

The Contractor's total labor hours shall be consistent with the scope of work detailed in Task Order 1.

Contracting

Question 30: . Does the Government expect the Contractor to invoice for the hours in TAB B in a lump sum, or on some periodic basis?

Invoices will be submitted once each month.

Question 31: . If the scope of work were to change within the period of performance identified in

Task Order 1 (such as multiple classes being cancelled) what would the Government's expectation be with respect to invoicing labor hours?

Invoice actual labor hours that were performed.

32 Question 32: The total hours in TAB B reflected in CLIN T001 and T002 for the Certification, Non-Certification and Military courses is 13,440. The total hours reflected in Attachment 1, Section 7.3, Technical Exhibit 3, is 4,384. If the contractor performs all the courses and the scope of work associated, would the Government expect to reimburse the Contractor for the 13,440 hours or the 4,384 hours?

This is a firm-fixed-price contract provides for a price that is not subject to any adjustment on the basis of the contractor’s cost experience in performing the contract.

Technical

Question 33: Please describe the current arrangements for certification testing. Is this arrangement

“SANS” specific? Are they using a portal directly to the classroom ? Is a combination of in-classroom, Ft Gordon Education Center, and off-site (downtown) acceptable?

Certification testing is performed in the classroom, under video-captured proctor supervision, with web-based access to the GIAC servers. Off-site certification testing is not acceptable.

Technical

Question 34: Will the government please clarify the hours required for the HBSS course and ESM course? Currently Section 1.5.7 states that the HBSS course is 16 hours and that the ESM course is

24 hours. However, Technical Exhibit 3 shows the same courses as 40 hours and 32 hours, respectively.

The 25D30 and 255S courses have different requirements as to what depth HBSS/ACAS/ESM subjects will be taught. The 255S will not need as much instruction on either the HBSS or the ESM, so their courses will end up shorter. 25D has 96 hours to spread between the three and 255S has only 80. (The questioner is correct -- there was a mistake in the PWS).

Technical

Question 35: The HBSS training referenced in the RFP is now outdated as of the latest Fragment

Order from DISA. The latest FRAGO provides guidance on the transition away from host-based endpoint security to the new DISA Endpoint Security Solution (ESS) which is based on McAfee's

End Point Security Solution (ENS) platform. Will the Government modify its training requirements in the RFP to match the latest fielding requirements of the current McAfee Software module ENS.

Should all references to HBSS - a legacy solution - be replaced with "Endpoint Security Solution" or "ESS"?

No. We will begin training HBSS. As DISA transistions over to the new system and the Signal School begins training it, we will modify the requirement.

Technical

Question 36: Does the course have to be “pre-recorded” and available on day one or are they to be recorded as you go?

This question appears to refer to para 5.3.2 which requires "audio recordings of the presentation for use while away from a computer".

This paragraph refers to the online resource required for all blocks of instruction. It is assumed that the training block would have been conducted by the vendor on occasion(s) prior to execution under this contract. Audio recordings of the presentations coinciding with the online replication of each course should already exist prior to the commencement of training. As the iterations of the training courses progresses through the period of performance, the recordings, along with the other materials, can be recreated when changes are made to the subject courses.

Contracting

Question 37: For all the proposal volumes, can the Contractor utilize Times New Roman with 10 point font?

No.

Contracting

Will the government consider extending the proposal due date to allow time for offerors to review

Q&A and revise proposals if necessary?

The Government will post the responses to questions in a timely manner for offerors to review and response to the proposal due date.

Contracting

Is the contract start date and/or day one (1) of task order execution the start date of the base period?

Yes