W912P518T00030003.pdf

CONTRACTING BRANCH (LER)

LETHER.E.ROBINSON@USACE.ARMY.MIL

6TH FLOOR ANNEX, 110 9TH AVE

NASHVILLE TN 37203

W38XDD73467819

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

W912P518T0003 SCADA System Upgrade

This solicitation is being amended to answ er questions received during the question period, extend the proposal due date, revise section 9.a.

of the Proposal Instruction, change Factor IV Small Business Participation Plan Ratings in section subparagraph 2.1.3 of section 2.0 Proposal Evaluation and revise tw elve (12) sections in the technical specifications. No further questions w ill be addressed after the issuance of this amendment. The proposal due date has been extended to 14 May 2018 at 10:00 am central time.

FAR 52.252-3 has been updated.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 31

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 12-Apr-2018

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W912P518T0003

X 9B. DATED (SEE ITEM 11)

11-Jan-2018

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

12-Apr-2018

CODE

US ARMY CORPS OF ENGINEERS-CELRN-RC-N

DIRECTORATE OF CONTRACTING

110 9TH AVENUE SOUTH, RM A680

NASHVILLE TN 37203

W912P5 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE W912P5

FACILITY CODECODE

EMAIL:TEL:

W912P518T0003

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

QUESTIONS AND ANSWERS

1. In Appendix D - SCADA Reference Drawings, there's a reference in Group 2 of the Remote Plant Barkley.

Remote Plant Barkley is not found in Appendix C - Network Diagrams that would shows what work needs to be done. Is there any work required for the Remote Plant Barkley?

Answer: There is not a network diagram for Barkley. Reference the Technical Specifications Section 40 94 53 and Technical Specifications Section 01 11 00, paragraph 1.2.3.1.1 for the required work for Remote Plant Barkley.

2. Is there an anticipated award date for this solicitation?

Answer: The Government anticipates award no later than 31 August 2018.

3. Will the contractor provide new RTUs for 5 sites? RTU I/O points are listed for Cheatham, J Percy Priest, Center Hill, and Dale Hollow but there are no RTU I/O point list for Laurel. Will the Government provide a point list for Laurel?

Answer: All of the SCADA RTU's will be replaced. Reference Appendix A for Laurel’s point list.

4. The Point List is in PDF format. Will the Government provide the list in original source (EXCEL) format so we can open the point Details field?

Answer: No, the Point List is provided in PDF only.

5. Will the Government make the logic diagrams available?

Answer: No, the vendor will provide their own logic diagram.

6. What impact is anticipated by having only partially implemented your replacement of the safety relays? Are there any I/O list impacts, or any puts or takes from the HMI?

Answer: The plants where the safety relays have not been installed will require real and virtual I/O. The plants where the safety relays have been replaced will only require virtual I/O. Dale Hollow plant can be used as an example of the virtual I/O that will be needed for a plant as shown in Appendix A. There are no puts or takes to the HMI. Reference Technical Specifications section 01 11 00, paragraph 1.3.1.1(j).

7. Will the T1 lines all be replaced in time for this project?

Answer: No, contractors should provide equipment capable of T1bandwith.

8. Are redundancy required for the Rack CPU and associated rack power supplies?

Answer: Yes, redundancy is required for power supplies and Rack CPU. Reference Technical Specifications Sections 40 94 51-2.1a and 40 94 53 -2.5.d.

9. Are redundancy required for DC Power Supplies for analog and internal panel power?

Answer: Yes, redundancy is required for power supplies. Reference the Technical Specifications Section 40 94 53

– 2.5.2.d.

10. Are redundancy required for AC Power Feeds?

Answer: Yes. Reference the Technical Specifications Section 40 94 53 – 2.5.2.d.

11. In addition to 25% spare points, will room allow for an additional 25% spare points by adding additional controller and I/O circuits? Can the Government confirm?

Answer: Follow the guidance located in the Technical Specifications Section 40 94 61 -2.1.6.

12. Since the Government will be installing the SCADA system, how should the vendors best determine the amount and duration of on-site support required?

Answer: Vendors should plan on supporting on-site activities up to ten (10) days per unit per remote plant, and up to five (5) days for master plants, but depending on the contractor’s RTU design and installation requirements these durations may vary. Reference Technical Specifications Section 01 75 10, paragraph 3.3c.

13. Is the Government responsible for connecting all external I/O's to the vendor supplied termination panels/blocks as well as from the termination panels to the RTU's?

Answer: Yes. Reference Technical Specifications Section 01 75 10 – 3.3.

14. Does the Government have a preference for the provision of punch blocks over the existing terminal strip approach?

Answer: Terminal Blocks are in Technical Specifications Section 40 94 60 – 2.6.

15. Does the 50 page limit of the solicitation include Volumes 1 and 2, Volume 1 only, or a portion of Volume 1 (e.g. Factors II and III only)?

Answer: Volume 1 & 2 page count has been changed to 200 printed or double-sided pages in section 9a. of the Proposal Instructions.

16. Of the items included in the 50 page limit of the solicitation, are there any pages within those volumes/sections that do not count against that page limit, such as the Title page, TOC, etc.?

Answer: No, Past Performance Questionnaires (PPQs), tabs, dividers, and other organizational materials will not count towards the 50 printed or doubled-sided page limit. See the Governement’s response to question 15 for the updated page count for Volume 1 & 2.

17. Please define the critical system functions.

Answer: The critical system functions are power supplies, RTU CPU and workstations.

18. Is the Government requesting the replacement of the existing RTU termination panels? Will vendors have to supply new panels/blocks as well as the wiring/cabling from the new panels to the RTUs?

Answer: The contractor is responsible for providing everything within the RTU cabinets. Reference Technical Specifications Section 40 94 60.

19. Will the Government be providing examples of existing Software overview, software process flow and system database structure drawings.

Answer: No.

20. How is Siemans EMS RTU's with JemStar data received at the Cordell Hull master site? What protocol is used?

Can a data definition document be provided to understand the scope of interface and the amount of data to be collected and displayed on the HMI?

Answer: Reference Technical Specifications Section 01 11 00 – 1.2.2.1.1 and see Appendix B.

21. Will the Government continue to use BCD?

Answer: Yes, for the water level inputs unless the contractor can provide a replacement device that will read to the hundredth increment and have equal accuracy.

22. Will the installation and start-up be performed on straight time or will it include overtime and weekends?

Answer: The installation and start-up will be performed Monday – Thursday between 6:30 am to 5:00 pm in accordance with the site time zone. Reference the Technical Specifications Section 01 75 10, paragraph 3.3(j).

23. Will each site be converted at one shut down? For example, Cheatham has 3 Units, will they be operating simultaneously with the new system or will the conversion be one Unit at a time?

Answer: Depending on the new system, at least one (1) unit will be operating on the new system while the other units will be operating on the old system.

24. What is the type of certification is required for the I/O point checkout (e.g. self-certified, 3rd party, etc.)?

Answer: Self-certification is required.

25. What is the level of detail required for the training materials?

Answer: The contractor shall provide comprehensive training on site training. Reference Technical Specifications Section 01 79 20 for more information.

26. How are centralized updates to the system currently being made today? How should this be accomplished in the future? (Centralized patch distribution, etc.)

Answer: Currently, centralized updates are not performed. Centralized patching performed in the future will be determined and added by the Government.

27. Does the support of delivered equipment and software for a minimum of 15 years include COTS software that often ends support in fewer than 15 years? Hardware/software support cycle for this equipment is typically in the three to five year timeframe. What is the Government's expectations as to the support for 15 years? Does the Government expect the system's hardware/software to be replaced over the 15 year support period to enable the continued support?

Answer: No, COTS software may not be supported but the contractor's provided software needs to be supported.

The Government expects that some of the hardware and software may need to be updated some throughout the 15-year life cycle.

28. Is this requirement for RTU's only? Please provide examples or scenarios that this requirement would be applied to.

Answer: Reference the Government’s response to Question #27. It should include all equipment and software that is provided by the contractor that is not COTS.

29. What specific software is the Government referring to in Tsepcs section 00 11 00, line 2.1.a? What is considered the "highest level of protection"? What is the expected system categorization level and information classification level?

Answer: Technical Specification Section 00 11 00, line 2.1.a refers to the required software identified in Technical Specification Section 01 35 70, any other software is up to the vendor. The “highest level of protection” will meet RMF requirements. CIA -LMM (Confidentiality - Low, Integrity - Moderate, Availability - Moderate) expected system categorization level and information classification level.

30. What are the Army and DoD cybersecurity specific standards? Is there a Mission Assurance Category (MAC) level defined? What is that MAC level?

Answer: Army and DOD cybersecurity standards are the DoD RMF standard. Yes, there is a MAC. The MAC level is “Sensitive”.

31. RMF accreditation is quite an extensive process requiring substantial amounts of information and typically vendors provide only technical controls related documentation, what specific documentation is required from the vendor? Vendors typically provide only technical controls information, will the Government be creating and maintaining the System Security Plan and integrating vendor technical controls information into the SSP?

Answer: The documentation required for RMS accreditation are specified in Technical Specifications Section 01 35.

32. What cybersecurity IT infrastructure will the Government be providing (Active Directory Authentication, Network Time Protocol Server)?

Answer: The system will be a closed network maintained by the Government. There is no infrastructure provided by the Government.

33. Is the IP network over which SCADA system devices communicate used exclusively for SCADA system communication? Is there any IP connectivity from the SCADA IP network to any other IP Networks Government or non-Government or internet facing?

Answer: Yes, the IP network is exclusively for SCADA. No, there is no connectivity from the SCADA IP network.

34. Please define "strong security program". Does this include providing features, capabilities, and supporting infrastructure to meet RMF technical controls compliance and enable compliance with RMF policy controls? Does the Government require the vendor to provide on-site management of the SCADA security?

Answer: “Strong security program” is defined in Technical Specifications Section 40 94 53 5.a. Vendors shall meet RMF requirements located in Technical Specifications Section 01 35 70. With respect to SCADA security, reference the Government’s responses to Questions #30, #31 and #32.

35. What network monitoring tools to view network traffic during testing and operations specific tool is the Government requiring? Is a LAN sniffer such as "WireShark" an acceptable tool for this purpose? Passive network monitoring tools (i.e. Grass Marlin and WireShark) are acceptable tools?

Answer: Network monitoring tools are required per the contract but the Government has no brand preference.

36. Is the Government requiring vendors to provide Active Directory Domain Controller(s) and an Active Directory infrastructure to support this requirement?

Answer: No. Reference the Government’s response to Question #32.

37. What specific system components are required for the GUI user interface and on-line help to configure, administer, and manage the system interface?

Answer: The Government does not specify any particular component. Reference Technical Specifications Section 40 94 54 for more information.

38. Army Gold Master is used for Windows 2012 operating system. Secure Host Baseline is used for Windows 10 operating system. Both are Government images. Will the Government be providing images and licenses for these?

These images and active directory GPOs change periodically as well. What is the Government's requirement for testing and updating these images for the life of the system?

Answer: The Government will provide images. The contractor is expected to test and update the images up until the site (field) acceptance of the system. Licenses are the responsibility of the vendor. Updating and testing for the life of the system will be Government’s responsibility. Reference Technical Specifications Section 01 35 70.

39. Will the Government replace the microwave radios with redundant T1 line or Satellite link? If microwave radios will be replaced by T1 how many will be needed?

Answer: The Government will replace all of the microwave radios with T-1 systems. Satellite links and microwave radios will not be used. The Government will furnish two (2) T1 links, one (1) as primary and one (1) as backup per remote site. Reference Technical Specifications Section 01 11 00, paragraph 1.2.

40. Which sites will the SIEMENS RTU be replaced and what is the timeline for the replacement?

Answer: None.

41. Will the existing Cisco Ethernet switch in the Operator Room Console at Old Hickory Power Plant remain?

Will an additional switch be added or will a new switch be added to incorporate all devices on the Network Diagram?

Answer: The Ethernet switch at Old Hickory is black box and shall be replaced by the contractor. Reference the Technical Specifications Section 24 51 20, Table 27 51 20.a.

42. Can the Government provide the Tetragenics database listing showing tag names with device and address references, showing how the existing system address all SCADA points?

Answer: No.

43. Can the Government confirm that the 12Vdc power is still being used? There is a Digital input card with BCD inputs using 12Vdc for Level indication. During the site visit, USACE stated that this has changed to another controller at the lock & dam. Please confirm. Can we eliminate the 12Vdc Digital input card?

Answer: 12VDC is still being used at Center Hill, J. Percy Priest, and Cheatham for water level indication. Dale Hollow does not use 12VDC. The contractor may replace the 12VDC digital input card if they have a replacement solution. Reference Technical Specifications Section 40 94 60, paragraph 2.9.

44. What does the AUTO/MANUAL selector switch station do on the RTU board?

Answer: Disables control output.

45. Can Government provide a functional description for the generator control screens? There are Digital Outputs for Start, stop, Estop and Volt Raise and Volts Lower. Is there logic imbedded in the graphic screens or RTU’s to perform the logic associated with these outputs?

Answer: Refer to Appendix B for a description of generator control screens. The Government is unaware of any logic imbedded in the control graphic screens or RTU’s.

46. Can the Government provide pictures of both front and back of each cabinet with equipment to be replaced for each site identifying the site, cabinet, equipment and cabling?

Answer: See Appendices C & D (network diagrams and reference drawings, respectively) for equipment and cabling information. The Government will not provide pictures because of cyber security considerations.

47. Can the Government provide the database for all I/O points for each site?

Answer: No, this is proprietary software for the existing system. Without the software, the database is not usable.

48. Is there a list for equipment and software the contractor shall provide to the Government?

Answer: No, the Contractor shall provide all the hardware and software necessary for the new SCADA systems.

49. Are there any restrictions on purchasing equipment or software manufactured outside the US, but sold by vendors located inside the United States?

Answer: See DFARS 252.225-7002 Qualifying Country Sources as Subcontractors.

50. Should equipment designed for redundancy be priced as optional equipment on a separate line item?

Answer: Pricing shall be in accordance with Technical Specifications Section 01 33 60.

51. Can the weekly meeting noted in Tspecs section 01 31 19 be via teleconference?

Answer: Yes.

52. Are bonds required for this procurement?

Answer: No, the bonding requirement noted in Technical Specifications Section 1.2, paragraph 1.2.1 has been removed.

53. Will the Government provide an Excel spreadsheet copy of the submittal register to the winning proposer?

Answer: No, the awardee will be responsible for creating the submittal register.

54. The integrity scan time noted in Tspecs section 01 33 60 appears to be too long. Please advise if this long integrity scan time is correct?

Answer: The integrity scan time noted in Technical Specifications Section 01 33 60 is correct. This allows the Government to alter the frequency.

55. What level does Tspecs section 26 00 51, items 1.5.5.2a & 1.5.5.3.a. apply too?

Answer: Reference Amendment 0003. Technical Specifications Section 26 00 51 has been revised. Technical Specifications Section 26 00 51, items 1.5.5.2a and 1.5.5.3b no longer exist. However, 1.5.4.2a and 1.5.4.3b now state the following: The primary Contractor shall be responsible for both providing the hardware and writing the software.

56. The items define wet contacts as connecting a DC source (48 or 125 VDC) to a relay coil; does this imply that input interposing relays are required? Also, that would seem to conflict with the "wetting voltage supplied by RTU" and "isolated inputs" required by Tspecs Section 40 94 60, 2.10.a and b

Answer: This is determined by contractor's design. Input interposing relays should not be necessary. Technical Specifications Section 40 94 60, 2.10.a and b is accurate.

57. Tspecs section 27 51 20, item 1.4.c. require different hardware to meet the various requirements. Given that the Government hasn’t identified all of the specific communications interfaces for each link, is it expected that the contractor should provide equipment (and include in its bid price) that will support all of these communications interfaces at both the remote and central sites?

Answer: Reference Amendment 0002. Technical Specifications Section 27 51 20, item 1.4.c has been revised to clarify the contractor shall provide T-1 functionality.

58. Will the Government provide Communication Protocol of the TVA owned Siemens EMS RTU to existing Tetragenics System?

Answer: TVA uses Distributed Network Protocol (DNP).

59. Will the 56K dial up modem system sending revenue metering information from all of the plants to the ESS Computer to be eliminated and replaced with the new SCADA System?

Answer: Yes.

60. Tspecs section 01 11 00, part 1.2.1.1.c states "some Tetragenics proprietary code may be available." Will the Government provide the Flow Diagram of the existing Automatic Controls of the Remote Plants?

Answer: No.

61. In the Tspecs it states JPP Power Plant and Center Hill Power Plant do not have adequate cooling. Will the Government send pictures of the existing installation and area of possible installation of the new RTU?

Answer: No, the Government will not provide pictures of the existing installation and area of possible installation of the new RTU. The SCADA system shall meet the climate requirements of the Technical Specifications Section 01 11 00, paragraph 1.2.2.2.

62. Is the Fiber Link between the Master and the Remote Sites going to be exclusively dedicated to this SCADA System?

Answer: Yes.

63. Is the SCADA system expected to adhere to a specific cybersecurity compliance framework (e.g. NERC CIP, RMF, etc.) or is a general defense in depth framework based on best practices and industry standards expected?

Answer: Yes, see Technical Specifications Section 01 35 70 1.3.1.

64. Would the SCADA system integrate with an existing Antivirus (AV) server, or is the expectation the end user will either supply an AV server or deploy standalone AV endpoint software (McAfee Virus Scan Enterprise 8.1)?

Answer: No, there is no existing AV server and the expectation is the Government will deploy a standalone AV endpoint software. Reference Technical Specifications Section 01 35 70 paragraph 1.3.12.

65. Are there any existing security monitoring solutions deployed the system where is expected to interface?

66. What is meant by "Magnetically latched relays shall be magnetically latched"?

Answer: A relay that is set (ON) or reset (OFF) by the input of a pulse voltage. Even after the input voltage is interrupted, this relay maintains its set or reset condition until it receives the next inverting input. It is also called a keep relay.

67. Can products that are not currently on the DISA approved vendors list be approval?

Answer: No, products must be on DISA approved list. Reference Technical Specifications Section 01 35 70 – 1.3.1.

68. Can the Government provide Group 3 Master Plant Barkley Network Diagram?

Answer: See the Government’s Response to Question #1.

69. Can the Government supply an Intelligent Electronic Devices list that tells how many devices there per substation? What are the communication medium and protocol?

Answer: Reference Technical Specifications Section 40 94 60 and see Appendix C. There are no substations.

70. Would the Government described the requirements of the Primary Link (T1 Channel) regarding routers requirement?

Answer: RJ 48 T-1 interface, the Government currently uses CISCO ISR 2931 with T1/E1 MFT VWIC3.

Reference Technical Specifications Section 27 51 20 and Table 27 51 20a.

71. Are there any hardwire signals to be connected by substation?

Answer: No.

72. Are all required protocols mandatory (i.e. Profibus)?

Answer: The mandatory protocols are only those protocols necessary to control and monitor the entire system.

73. Is there a need for additional logic programming in the SCADA or the RTU (i.e. load shedding, generator control, etc)?

Answer: The contractor will provide necessary programming to control and monitor the remote plants and monitor the master plants.

74. Tspecs section 01 33 60 states “b. Provide redundancy, failure detection, and data throughput-related designs in hardware and software.” What level of redundancy is required? Is this just at the PC/server level? Does it migrate down to Ethernet switches, gateways, PLCs, I/O modules etc?

Answer: The contractor is expected to provide RTU controllers, power supplies, master plant workstations.

Reference Technical Specifications Section 01 33 60, paragraph 1.1b.

75. Can the Government provide an IP Address list for all devices connected via Ethernet?

Answer: No.

76. The proposal instructions states "This is a Full and Open procurement with a ten percent (10%) HUBZone price." Is this a target for participation for HUBZone or a requirement?

Answer: No. In the event a proposal is received by a qualified HUBZone small business concern, the price offered by such HUBZone small business concern shall be deemed as being lower than the price offered by another offeror, if such price is not more than 10% higher than the price offered by the otherwise lowest, responsive, and responsible offeror.

77. The proposal instructions states "This is a Full and Open procurement with a ten percent (10%) HUBZone price." Should the HUB Zone requirement is be part of the Small Business participation plan?

Answer: Yes, HUBZone requirements are a part of the Small Business Participation Plan.

78. Can a vendor utilize a sub-contractor experience and past performance for meeting the Performance Confidence Assessment?

Answer: No. Offerors cannot use a subcontractor's experience or past performance to full the requirements set forth in Factor I – Performance Confidence Assessment.

79. Can a vender use a contract in which similar work is being performed for multiple sites over a 5 year period?

Answer: Yes.

80. Due to size and multisite complexity of this project, can the Government extend the proposal due date by four weeks?

Answer: Reference Amendment 0003. The proposal due date was extended by fourteen calendar (14) days to May 14, 2018 at 10:00 am central time.

81. Will the Government provide the (show run, show CDP NEI, show IP ARP, show mac mac-address tabl ) for all network switches/routers including the Cisco routers and switches at each site?

Answer: No.

82. In the provided drawings, Center Hill shows a Satellite connection into a "Switch"; can the Government provide the expected termination this and other sites Satellite Connection?

Answer: Satellites are decommissioned.

83. Don’t the Government have any updated network drawings?

Answer: No.

84. Are all Satellite connections done via an external satellite receiver/transmitter device?

Answer: Reference the Government’s response to Question #82.

85. Are all Satellite connections expected to terminate in the new router via ETHERNET / NM-1VSAT / Other Type of Connection - specify?

Answer: Reference the Government’s response to Question # 82.

86. Is the Government expecting to re-use any components from the "old" router currently in place on the "new" router?

87. Does “synchronizing potential of 115 VAC” imply that the RTU's are to include synchronizers?

Answer: RTUs will not require synchronizers. Drawings may show 115VAC inputs that serve as power verification but these have nothing to do with generator synchronization. Reference Appendix D drawings and Technical Specifications Section 40 94 61, paragraph 2.10.1.1(f).

88. Are satellite connections COAX from Dish to receiver/Transmitter?

Answer: Reference the Government’s response to Question #82.

89. Are you expecting to replace all of the ADTRAN T1 Channel Banks?

Answer: ADTRANs are being decommissioned.

90. How are the Microwave connection terminated?

Answer: The microwave is decommissioned.

91. Please identify anywhere the Government will use "Media Converters" to convert Ethernet Copper to Fiber Ethernet and the model of each of the converters.

Answer: Reference the network diagrams in Appendix C.

92. Dale Hollow currently has an unknown switch - can you provide the current technical details of this device, ports, speeds, number in use, uplink connectivity speed?

Answer: The existing network switches are 16-port managed switches. The contractor is required to replace the switches boxed in the network diagrams, including Blackbox, Linksys, and Cisco. Reference the Technical Specifications Section 27 51 20 and Appendix C.

93. Do Dale hollow currently has a Cisco 2921 Router?

Answer: Yes.

94. Can DMVPN (tunneled ipsec) technology be used for the requested IPSEC Tunnels between sites?

Answer: No.

95. Can FLEXVPN, EzVPN, or GETVPN be used for IPSEC between sites?

Answer: No.

96. How many firewalls, ports are you expecting to be installed?

Answer: The number of firewalls and ports is dependent upon how the contractor designs the new system.

97. What are the required Firewall Specifications?

Answer: DISA stigs. Reference the Technical Specifications Section 01 35 70 – 1.3.2.

98. Communication between Master and remote plants will be provided by the Government - Is this the Terestrial Links (T1) Microwave, Satellite Communications or some other medium?

Answer: T-1 only.

99. Can the Government provide the IP Addressing Schema (IP plan document) of the existing SCADA system?

100. Is the Government expecting to reuse all of the Moxa Nports?

Answer: No, the contractor shall provide a converter that will work their design.

101. What is the expected connectivity/termination to the router from the Microwave device?

Answer: Reference the Government’s response to Question #90.

102. What is the expected connectivity/termination to the router from the Dedicated T1?

Answer: RJ 48 T-1 interface.

103. What is the expected connectivity/termination to the router from the Satellite?

Answer: Reference the Government’s response to Question #88.

104. What is the number of 2921 routers to be replaced?

Answer: See Appendix C network diagrams.

105. What is the number of IPSEC devices model numbers to be replaced?

Answer: See Appendix C network diagrams.

106. What is the number of Firewalls exact models and details to be replaced?

Answer: See Appendix C network diagrams.

107. What is the number and exact models of 3850 to be replaced?

Answer: See Appendix C network diagrams.

108. What is the number of Current ports per switch and the number of ports required for new switches?

Answer: 16/Minimum of 32 or required from the new design. See Technical Specifications Section 40 94 51 2.1.k For more information reference Amendment 0003.

109. What is the number and models of black box switches to be replaced?

Answer: See Appendix C network diagrams.

110. What is the number and models of other switches to be replaced (port count, speed)?

Answer: See Appendix C network diagrams.

111. FIPS-140-2 Requirement: Faculties on the Same Campus requirement for meeting this standard - Please Clarify this statement (expecting firewalls through-out a campus with multiple facilities)?

Answer: Communications using either the public switched telephone network, leased lines, or any wireless between the different locations and between different facilities on the same location shall be protected via FIPS 140-2 compliant encryption methods. Virtual Private Network IPSec tunnels shall be established between the different facilities using approved network devices to include all wireless devices. Certificates are the preferred method, passphrases and/or pre-shared keys utilized for encryption shall meet DoD minimum standards. Firewalls shall be provided to control communications between tunnels. The proposed network and wireless devices shall be Cisco components, or Government equivalent found on DISA’s approved product list (APL). Cisco components are DoD approved.

112. Is VMW are 6.0/6.5 an acceptable virtualization software for the servers which require virtualization?

Answer: Yes, currently there is no virtualization used in the system.

113. GPS - Is a GPS source at each site already been implemented? Are there any expected changes in the new network design? Please provide GPS Device Details for each site.

Answer: Yes, a GPS source has been implemented at each site. No, there are no expected changes to the network design. GPS provides a modulated IRIG B signal.

114. What protocols are currently on the network? Can the Government provide a packet capture for each site?

Answer: Use protocols that will be necessary to control and monitor the entire systems. No, the Government cannot provide packet capture for each site.

115. Does the Government have the bandwidth analysis, reports, documents, netflow, or interface show commands that show link utilization over time.

Answer: No.

116. What network monitoring and management tools are you currently using to?

Answer: No network monitoring or management tools are currently being used.

117. What does "synchronizing to analog input of 0 to 10 VDC" mean? Does this imply that the RTU's are to include synchronizers?

Answer: The analog input should be able to verify to the RTU what the voltage is in relation to the equipment that is sending the signal.

118. Does the Government have port level traffic analysis showing port utilization when video traffic is transmitted during peak times, trends or Packet captures?

Answer: No.

119. Spec 01 11 00 Section 1.3.1.1 states new SCADA system shall at a minimum have the same capabilities as the current system. Are there any current system capabilities not specified in the RFP that will be required for the new system?

Answer: No.

120. What format is data being sent to ESS from the master stations currently? Are any specific protocols (such as ICCP) in use? How is the data formatted (csv, text document, excel spreadsheet, etc.)? Which side initiates the transfer and how is the data retrieved by the ESS side of the connection?

Answer: Data is being sent in a CSV file. There are no specific protocols in used. The master initiates a data transfer. The data is retrieved from a computer located at ESS. See the network diagram in Appendix C for more information.

121. Are the current ESS dial-up connections from the master sites going to be replaced?

Answer: Reference the Government’s response to Question #120.

122. During the site visit, someone stated that “local SCADA operation of a remote station is required when primary and backup communication is lost to the master station”. Please confirm whether this remote site islanding capability will be added to the system requirements of the RFP.

Answer: Yes, remote site islanding capability will be added to the system requirements of the RFP. This mode is referred to as local automatic operation. Reference Technical Specifications Section 40 94 61, paragraphs 2.2.1 and 2.2.2.

123. What communication protocols (Modbus, DNP3, etc.) are in use for equipment that will remain as a part of this project (Yokagawa, Siemens RTU, SEL devices)?

Answer: Support TCP/IP and serial open network SCADA protocols including but not limited to Modbus TCP/IP, Modbus RTU, RS-232, RS-485, SFTP, and DNP 3.0. Reference Technical Specifications Section 40 94 51, paragraph 2.1(b).

124. Tspec 01 35 70 Section 1.3.2 states the “Government will provide a golden image to apply to the SCADA computers and servers”. Drawings showed Windows 7, but no server version where shown. What OS versions (workstation and server) would be utilized by the golden images provided?

Answer: Workstation will use Windows 10, server will use Windows Server 2012 R2. Reference Technical Specifications Section 01 35 70.

125. Tspec 40 94 51 Section 2.6 indicates that a between 15 and 20 maintenance laptops will be provided by the Government. Is there a more specific number of devices known at this point?

Answer: The contractor should develop a price proposal for the worst case, up to 20 laptops. See Technical Specifications Section 40 94 51, part 2.6 for more information.

126. Spec 40 94 51 Section 2.10 require time synchronization of field devices. During the site visit, it was stated that “sometime synchronization infrastructure has been implemented already at some of the sites”. Can details about existing equipment, architecture, and configuration be provided?

Answer: Yes, GPS provides a modulated IRIG B signal.

127. Will the Government please provide the logic diagrams from the currently installed Tetragenics system?

Answer: No.

128. It was stated during the site visit that “some locations have changed out the protective relays to SEL digital relays.” Please provide a list of sites that have been upgraded and a schedule for completion of the remaining sites.

Answer: Dale Hollow is complete. The lines are complete at Center Hill. The Generators and Transformers are complete at Cheatham and Laurel. JPP is not complete. The schedule for completion is not determined. Reference Technical Specifications Section 01 11 00, paragraph 1.3.1.1(j).

129. Are plant-specific RTU replacement within the required scope of work?

Answer: Yes. Reference Technical Specifications Section 40 94 60 and Appendix C.

130. Will the Government provide more information concerning Tspecs Section 01 11 00, part 1.2.1.2.a.3 bench boards?

Answer: : All references to benchboards refer to hardwired manual controls which will not undergo any changes as part of this contract. Reference Technical Specifications Section 01 11 00, paragraph 1.2.

131. Is the primary/backup T1 switchover transparent to SCADA system?

Answer: Yes.

132. Is Cheatham Power Plant T1 and Microwave backup switchover transparent to SCADA system?

Answer: Reference the Government’s response to Question #90.

134. What are the number of redundant servers and operators stations at Cordell Hull PP?

Answer: There are no redundant servers and two (2) redundant operation stations at Cordell Hull Power Plant.

135. Does Old Hickory PP need to be able to remote monitor /operate the plants Cordell Hull PP?

Answer: No, Old Hickory Power Plant controls and monitors JPP Power Plant and Cheatham Power Plant.

Reference Technical Specifications Section 01 11 00, paragraph 1.2.1. Cordell Hull is a master plant that operates Dale Hollow Power Plant and Center Hill. Reference Technical Specifications Section 01 11 00, paragraph 1.2.2.

136. Is T1 switchover noted in Tspecs 01110.1.2.2.a.3 transparent to SCADA for Dale Hollow PP?

Answer: Yes.

137. Is T1 switchover noted in Tspecs section 01 11 0.1.2.2.2.b.3: CEN/P transparent to SCADA?

Answer: Yes.

138. What are the number of redundant servers and operators stations at Barkley PP?

Answer: There are no redundant servers and one (1) redundant operator workstation at Barkley Power Plant.

139. What are the number of redundant servers and operators stations at Wolf Creek PP?

Answer: There are no redundant servers and two (2) redundant operation stations at Wolf Creek Power Plant.

140. Will local control at Wolf Creek PP be manual only?

Answer: Yes.

141. Is T1 switchover noted in Tspecs 01110.1.2.2.a.3 transparent to SCADA for Laurel PP?

Answer: Yes.

142. According to Tspecs 01110.1.3.1.1.b: General, "The new SCADA system shall at a minimum have the same capabilities as the current system.” What document is considered authoritative for defining the capabilities of the existing system?"

Answer: The new SCADA system shall, at a minimum, have all the functions, monitoring and controls as the existing systems. Reference the Appendixes A-E for more details on the existing system.

143. Will the vendor be responsible for configuring and testing computer and communications equipment to meet the requirements of this section?

Answer: Yes. Reference Technical Specifications Section 27 51 20, paragraph 3.2 and Technical Specifications Section 01 75 10.

144. Is there a particular implementation of SCAP tool that must be used, or can any SCAP tool that accepts the DISA benchmarks be used?

Answer: The SCAP tool on DISA website shall be used.

145. How long is the contractor required to maintain Cybersecurity patches for the system?

Answer: Until the install acceptance test is complete.

146. Will the Government provide a copy of documents referenced in Tspecs 1.3.1 Cyber security documents? Will some require DoD PKI certificates?

Answer: No, the documents referenced in Technical Specifications Section 1.3.1 is publicly available and can be downloaded from the internet. Yes, IAVAs will require certificates.

147. Is the Fiber Link between the Master and the Remote Sites going to be exclusively dedicated to this SCADA System?

Answer: Yes, fiber links are dedicated to the site. Reference Technical Specifications Section 01 11 00, paragraph 1.2.1.1.1.

148. Requirement that failure of RTU does not change state of any controlled equipment means that either RTU has latches or controlled equipment has separate start-stop or raise-lower or open-close commands, like a breaker. Can it be assumed that the controlled equipment is so equipped?

Answer: Yes, the contractor should provide the appropriate control signals and interposing relays to best interface with Government equipment, avoid inadvertent operations, and safeguard against RTU failures. Reference Technical Specifications Section 40 94 61, paragraphs 2.14 and 2.17.

149. Tspecs Section 01 33 60 item 1.13.2 c 4 f (filter algorithms) - Current technology allows for filtering as specified in this section but additionally has the ability to add a time delay – in order to remove low frequency noise and still have the analog signal present data that is meaningful, one would typically put in a small value low pass filter, and then typically a dead band exception to support unsolicited report by exception. The proposed approach only applies a dead band to the alarm processing. Is this correct?

Answer: Yes.

150. During the site visit, the GOVERMENT indicated that this was a materials contract and that the contractor should assume that the GOVERMENT would provide electricians to do the work and that the contractor was to supervise / oversee the work. Tspecs Section 26 00 80 item 3.2.1 i. & j implies that the GOVERMENT wants the contractor to do the work (point to point testing), and correct work done by GOVERMENT not direct GOVERMENT personal to make the changes. Is this correct?

Answer: Reference Amendment 0003. Technical Specifications Section 26 00 80, items 3.2.1 i. & j have been revised to state the Government will provide all labor to install and test on site.

151. Tspecs Section 27 51 20 item 1.4 c. - requires different hardware to meet the various requirements. For example a T1 interface is different than an Ethernet interface to a T1. Given that the Government hasn’t identified all of the specific communications interfaces for each link, is it expected that the contractor should provide equipment (and include in its bid price) that will support all of these communications interfaces at both the remote and central sites?

Answer: Yes, reference Technical Specifications Section 27 51 20 and Appendix C for more information.

152. In Tspecs Section 27 51 20 item 2.1 d (table 27 51 20A – table element 6) - it appear to be a requirement to interface the Cisco 3850 (provided by the Government) to the workstation HMIs. This implies that the Government wants some sort of RS232 switch that would allow all of the HMIs to interact with the Cisco’s one serial port? In addition, RS232 has a distance limitation of 50 feet. Please confirm that the Cisco 3850 is within a 50 foot cable run to all of the workstations?

Answer: Technical Specifications Section 27 51 20, paragraph 2.1 d has been updated, RS 232 shall be Ethernet.

153. In Tspecs Section 40 94 51 item 2.1 a. - Redundant Servers – Will the contractor have to provide a redundant VM system with instances meet the requirements of this section provided that the with VM system meet the individual functionality requirements for each server pair as specified in this section?

Answer: Yes, so long as there is redundant physical hardware.

154. In Tspecs Section 40 94 51 item 2.3 - Please confirm that a broad from interpretation of “workstation” can be provided?

Answer: Yes, broad from interpretation of “workstation” can be provided.

155. In Tspecs Section 40 94 51 items 2.3.1.e and 2.3.3.c.1 - Please confirm that (1) the contractor will retrofit the new SCADA HMI’s to fit on the existing console, (2) that the contractor will not replace the existing console, and

(3) that there is sufficient space on the existing console to mount that required 34 inch wide monitors and (4) that the Government will be responsible for replacing or relocating any of the existing equipment mounted on the Console?

Answer: The answer is yes to all four (4) questions.

156. Section 40 94 51 item 2.10.b. - Please confirm that you only want IRIG-B available rather than both IEEE 1588-2008 (precision clock synchronization protocol for network measurement and control systems) and IRIG-B?

If the Government would accept IEEE 158-2008 can the solution provide be time synchronized using this Ethernet based standard?

Answer: The Government will provide IRIG- B.

157. Section 40 94 53 item 2.5.4.6 f. Downloads - (1) Is the RTU non-functional during the entire download process or is there a requirement to download a new copy of the code and then “restart” the RTU with the new code? (2) Is a copy of the prior image to be retained in the RTU for recovery? (3) If the download fails during the download process what type of recovery is expected? (4) If the download is completed and the new code doesn’t operate as predicted, what recovery is being expected? (5) How much time should it take to recover from a failed download (either the download didn’t complete or the new version isn’t working correctly)? (6) Is there a requirement to resort back to a prior version?

Answer: 1. Please refer to Technical Specifications Section 40 94 53, paragraph 2.5.4.6; 2. Yes; 3. If the download failed, the RTU would go back to the previous version; 4. If the download failed, the RTU would go back to the previous version; 5. Contractor should provide information within their proposal; 6. Reference Amendment 0002.

Technical Specifications Section 40 94 53 has been revised.

158. Will the Government provide the existing logic at the existing RTUs?

Answer: The Government will not provide this information.

159. Section 40 94 60 item 2.1.2.j. - Please confirm that time synchronizing can be provided using either IRIG-B or

IEEE 1588-2008?

Answer: Reference the Government’s response to Question #157.

160. Tspecs Section 40 94 61 item 2.4.2.c. – Is there a requirement to load the MVAR value as well before the start sequence is complete?

Answer: No.

161. Tspecs Section 40 94 61 item 2.11. - This section describes the contents of Appendix A, however the data provided in Appendix A doesn’t match the descriptions described in this section. Will the Government update App A?

Answer: No, Appendix A will not be updated. This is Tetragenics method of programming and describing the points in the current system. The contractor will format their own equipment and train the maintenance personnel on the new system.

162. Appendix A: All points Old Hickory - Please identify the meaning of the following: (1) Group – what does this mean, how is this used? Please provide for each group what the descriptor means? (2) Point – is this the tag name or description or something else? (3) Value – what does this mean? For example, the first point (CUR HR POL OK) appears to be a status point, there is a value of 1180, the state is NORMAL, the level is 3 and time changed is 0, what do each of these items represent? (4) Is this information available in some form of machine readable (like Excel)? (5) Will this information be provided in an Excel spreadsheet to the successful bidder?

Answer: In reference to sub-questions 1-3, this is the way Tetragenics organized their database. In reference to sub-questions 4-5; the new contractor will provide the organization with their method. An Excel format is not available

– the code was written in a proprietary format that is not easily convertible to Excel. The columns listed in Appendix A relate to the way Tetragenics wrote their software. The contractor is expected to come up with their own software and database design.

163. Appendix A: Cheatham Analog/Nstate Points - (1) What do the different columns mean? Where are the units and the ranging for each analog identified? (2) Is this information available in some form of machine readable (like Excel)? (3) Will this information be provided in an excel spreadsheet to the successful bidder?

Ans…