Question_Answer_updated_09_May.pdf

On behalf of the Headquarters Department of the Army G-3/5/7, ACC-APG thanks you for your questions.

Q&A’s included in this document are not considered part of the RFP. Offerors shall abide by the instructions and terms of the RFP. This document does not alter the terms of the

RFP.

All answers to prior Q&A’s are superseded.

Cybersecurity RFP Questions Updated 09 May 2019

1. Question: Can the subcontractor submit past performance with the prime?

Answer: Yes

2. Question: Can prime company use commercial past performance of equal to scope of the work?

3. Question: Are subcontracts required to have TS facility clearance?

Answer: The prime must have the proper facility clearance.

4. Question: Can the prime utilize 1099?

Answer: Yes, however you must identify what positions are performed by subcontractors, and the number of hours for each subcontracted position. Subcontracted positions and hours should be clearly identified in both the cost model spreadsheet and the price proposal.

5. Question: Is there any corporate certification require for the Prime company as ISO 9001 or CMMI certification?

Answer: If Prime or Sub / JV have an ISO 9001 or CMMI certification it will be accepted and the Vendor will be expected to provide the level of service commensurate with the requisite certifications.

6. Question: Do resumes count towards the page limit? Is there a page limit per resume?

Answer: No, attach as addendum. No page limit.

7. Question: The PWS states that a minimum of two resumes are needed. Is that two per position? Based on the current requirements, the resumes could max out the technical volume.

Answer: One resumes per position. Attach as addendum.

8. Question: Are letters of intent required for each FTE?

Answer: Yes.

9. Question: If all employees are key and all must be there on day one of the transition-in period who are the “remaining employees” that must be there by the 20th day of the transition-in period?

Answer: There are none. Section L sub factor IV remove “and all remaining employees shall begin performance no later than the 20th day of the transition-in period.” Amended to reflect the correction.

10. Question: Two (2) or more projects are required to be included in the Technical volume.

Of those 2, at least 1 must be from the Prime offeror wherein the prime offeror was a prime on that prior project?

Answer: No, prime offeror does not need to be prime on prior project.

11. Question: One or more of the projects included in the Corporate Experience portion of the Technical Volume may be from a major subcontractor?

Answer: As long as the offeror performed the tasks applicable to this PWS.

12. Question: The projects included in the Past Performance Volume (II) must be the same projects as included in the Corporate Experience portion of the Technical Volume (I)?

Answer: Yes. Corporate experience provides information regarding what the company has done in the past and past performance measures how the offeror performed on the work they did in the past.

13. Question: Will the government confirm that each individual personnel are a separate

CLIN?

Answer: Yes.

14. Question: Will there be an ODC CLIN?

Answer: No.

15. Question: What type of contract will this be? T&M? FFP?

Answer: FFP

16. Question: Can the government provide documents that detail the size and scope of the effort (e.g., task lists, project lists, asset lists, etc.)?

Answer: No. The tasks and technical exhibits in the PWS accurately outline the size and scope of this effort. Additionally, the cost model provides the hours.

17. Question: Will the government will accept sealed bids directly from the subcontractor to allow them to keep wrap factors (e.g., Margins, G&A, and Fee) private from the prime while still providing a mechanism to share the factors with the government?

Answer: The subcontractor can send their pricing to the contracting office.

18. Question: If the subcontractor has a Top Secret Facility Clearance, does the Prime need one?

Answer: The Prime must to meet the facility and security clearance requirements prior to proposal submission.

19. Question: Is the Government willing to sponsor for the Clearance?

Answer: No. The offeror must meet the clearance requirements at the time of proposal submission.

20. Question: In paragraph 1.6.8. Special Qualifications:

You state that “The Contractor shall have, at a minimum; a current CMMI Maturity Level 3 for Development or CMMI Level 2 for Cybersecurity released in the Carnegie Mellon Software Engineering Institute’s PARS at time of the proposal submission; and a current ISO 9001 Quality Management Systems (QMC) with a focus on the software engineering.”

Does the Prime have to have these qualifications or will a subcontractor on the team suffice?

Answer: See the answer to question 5.

21. Question: In regards to the Facility Clearance, would the Prime company be required to have the Facility Clearance, if the proposed Sub company had one?

Answer: The Prime must have a TS FCL prior to proposal submission.

22. Question: Will the government sponsor the prime company if they do not have an existing Facility Clearance?

I saw the answer about the JV question, stating both companies apart of the JV, would have to have a Facility Clearance, but nothing about a Prime/ Sub circumstance.

I'm just wondering if you could let me know the procedure to gain the FCL (Facility Security Clearance)? Currently, we do not have a clearance.

Answer: This is a Q&A about the existing requirements. How a vendor can obtain FCL procedures will not be discussed.

23. Question: L.3.c Volume I, Section III - Key Personnel PWS 1.6.11 Key Personnel, Section L: The offeror shall submit a minimum of two (2) resumes addressing the education and experience requirement…PWS: Listed below are personnel requirements and their required qualifications considered key personnel by the government: ...

Do we need to get the FCL prior to the solicitation submission or we could gain that after winning the contract?

Answer: See the answer to questions 3 and 19.

24. Question: Section L, volume I, Subfactor III requires submission of a minimum of 2 resumes. Considering there are 17 Key personnel, does the Government have a preference on which 2 labor categories these 2 resumes support?

Answer: 1 resumes per labor category.

25. Question: 1.6.8 The Contractor shall have, at a minimum; a current CMMI Maturity

Level 3 for Development or CMMI Level 2 for Cybersecurity released in the Carnegie Mellon Software Engineering Institute’s PARS at time of the proposal submission Will the Government consider this requirement met if the CMMI certification is held by a major subcontractor?

Answer: See response to question 5.

26. Question: 1.6.11 All KEY billets must be filled within thirty (7) calendar days of vacancy. [Deliverable A0007] The absence of any KEY personnel for any period of time greater than thirty (7) calendar days will have a detrimental impact on the AOC global C2 mission. Please confirm that the "(7)" is a data entry error and that Key billets must be filled within thirty (30) calendar days of vacancy.

Answer: The error is in the spelling of thirty. That should be “14”. PWS amended to reflect the correction.

27. Question: L.1 and L.3.b The offeror’s proposal shall be submitted in hard copy, with accompanying digital copies, as set forth below. The RFP shall provide the Government address and receipt date for proposal submittal. Files must be submitted electronically via email to Ashley Clary; Ashley.d.clark.civ@mail.mil and Sabrinna Cosom;

Sabrinna.r.cosom.civ@mail.mil. In L.1 on page 160 the RFP states that proposal shall be submitted in hard copy, but in L.3.b on page 161 the RFP states that they shall be submitted electronically. Please clarify.

Answer: Submit electronically via email

28. Question: L.3.c - Content requirements, All information shall be confined to the appropriate file.

May we assume the each Volume is one file?

Answer: Yes, each volume is one file.

29. Question: L.3.c.3 - Subfactor IV Phase In All Key Personnel shall begin performance on the first day of the transition-in period and all remaining employees shall begin performance no later than the 20th day of the transition-in period.

Since all 15 personnel are designated as Key, does the government expect all 15 to begin performance on the first day of the transition-in period or are the 15 Key personnel just Mission Essential and the Contract Manager and Assistant Contractor Manager required on day 1?

Answer: All key personnel are required within the first seven days. Amended to reflect the correction.

30. Question: L.3.c.3 - Vol II - Past Performance A “Recent” contract is defined as one that is performed for at least (3) three years, and was an active contract at any point during the past (5) five years Will the Government revise this requirement to allow contracts that has been performed for at least (2) two years, and was an active contract at any point during the past (5) years?

Answer: No.

31. Question: L.3.c.3 - Vol II - Past Performance The Offeror shall request that the POC: (1) provide information requested in PART II and (2) submit the completed questionnaire (via e-mail) directly to the ACC-APG Contracting Officer by the date specified in the questionnaire.

There is no date specified in the questionnaires. Will the government accept completed Past Performance questionnaires up until the due date of the RFP?

32. Question: L.3.c.3 - Vol III - Cost/Price, The information submitted in this volume shall comply with FAR 15.408, Table 15-2, and the requirements set forth below. There are no page limitations for this volume.

This section contradicts the table on page 160 which set the maximum page count of the Cost/Price volume at 25. Is there a page limitation for the Cost/Price volume?

Answer: No Page Limit

33. Question: L.3.c.3 - Vol III - Cost/Price, Any letters of commitment shall clearly identify the prospective employees’ agreed-to salary/hourly rate and other pertinent conditions of employment. The same detailed support data shall be furnished for all subcontractors.

Are letters of commitment required for all key personnel, or just resumes?

Answer: They are required for all Key Personnel.

34. Question: While you have stated that all personnel must have a TS with SCI eligibility to gain access to the facility, does the Prime need to have the Facility Clearance prior to the solicitation submission or can our subcontractor have one, allowing the Prime the time to acquire one subsequent to contract award?

Answer: See answer to questions 3 and 19.

35. Question: By requesting two resumes for each of fifteen (15) labor categories, making all labor categories key personnel and requiring all key personnel to begin performance on the first day of the Phase-in transition period with no clarification regarding the availability of incumbent personnel during this Phase-in period to assist with this transition, you are making the incumbent the favorite in the proposal evaluation.

Would the government consider reevaluating the requiring for establishing all personnel as Key Personnel and that all Key Personnel must be hire before the start of the transition period. We propose a review of the number of key personnel and the government require a plan for capturing the key personnel from the incumbent contractor as a part of the Transition plan?

Answer: No. All resumes submitted must have a letter of intent, the individual does not need to be currently employed by the vendor. The government will relax the phase-in requirement for all key personnel to be on-site within 14 calendar days of award to allow the vendors’ new employees time to submit the customary two week notice prior to changing jobs.

36. Reference: Section B, Item 0018 States “In accordance with PWS Section 1.5 there will be a Forty Five (45) day transition period.” Whereas in Section C, PWS Section 1.5 states “Reserved.” Further, PWS Section C, 1.6.17 and Section L 3.c. Subfactor IV reference a thirty (30) day Phase-In period.

Question: Could the Government please confirm that Item 0018 should reference Section C, 1.6.17? Additionally, will the Government please confirm whether the transition/Phase-In Period is thirty (30) or forty five (45) days?

Answer: The phase-in period is thirty (30) days. Amended to reflect the correction.

37. Reference: Technical Exhibit 5’s associated Legend does not show the details of the Org Chart’s attributes.

Question: Would the Government please provide a Legend that indicates the meaning of each of the Org Charts attributes (dashed/dotted lines; shaded icons, etc.)?

Answer: Legend was provided. This was blacked out on accident. Amended to reflect the correction.

38. Reference: Section L 2.a states “The offeror’s proposal shall be submitted in hard copy, with accompanying digital copies, as set forth below.” However, Section L 3.b states “Files must be submitted electronically via email. . .”

Question: With respect to L 2.a, the instructions that follow indicate that the submission should be provided electronically via email. Can the Government please confirm that it is requiring only electronic submissions of proposal responses? If it is the Government’s intent to require additional hard copy submissions, can the Government please provide the number of copies to be delivered as well as the digital format required for the additional copies?

Answer: Please see response to question 28.

39. Reference: Section L 3.b File Packaging Instructions

Question: Will the Government please confirm if the files should be read only or just a PDF and if READ ONLY, should it remain printable?

Answer: PDF

40. Reference: Section L 3.c Table of Contents and Summary

Question: Will the Government please confirm that the TOC, transmittal letter, and Summary are excluded from page count?

41. Reference: Subfactor III – Key Personnel

Question: Will the Government please consider excluding resumes and Letters of Intent from page count?

42. Reference: PWS 1.6.11 - All KEY billets must be filled within thirty (7) calendar days of vacancy. [Deliverable A0007] The absence of any KEY personnel for any period of time greater than thirty (7) calendar days will have a detrimental impact on the AOC global C2 mission.”

Question: Will the Government confirm that it intends for all KEY billets to be filled within thirty (30) calendar days vs. 7.

Answer: See response to question 26.

43. Reference: Subfactor IV- Phase In, Page 162. The RFP states, “All Key Personnel shall begin performance on the first day of the transition-in period and all remaining employees shall begin performance no later than the 20th day of the transition-in period.”

Question: Will the Government please identify which positions are required on Day 1?

Answer: See response to question 30.

44. Reference: PWS 1.6.17

Question: Would the Government please confirm that it intends for the “Transition Period” listed in Section B, Item 0018 to be one and the same as the “Phase In Period” listed in PWS 1.6.17 (pg. 55), and the Subfactor IV – Phase In Plan listed in Section L

(pg. 162), and that the solicitation should updated to reflect either a 30 or 45 day transition-in or phase-in period throughout the entire solicitation?

Answer: Yes, transition is for 30 days.

45. Reference: Volume III – Cost/Pricing. The table in Section L indicates the page limit for this volume is 25 pages (p. 160) but the instructions below it states there is no page limit

(p. 163).

Question: Will the Government please confirm that Volume III has no page limit?

Answer: See response to question 33.

46. Reference: Attachment 2 Cost Model (Excel File). The Government has provided a plug number of 160 hours per position within column M of the Cost Model file.

Question: Would the Government please confirm if column M should instead list 240 hours per position to support the 45-day transition period listed in Section B, Item 0018?

Answer: The transition period is for 30 days

47. Reference: PWS 5.23 Deliverables. On page 65, the PWS (5.23) states, “Contractor shall review software to be installed on the network IAW AR, DoD Regulations, approved white lists, Common Criteria, and research of documentation and industry security-related reviews. [Deliverable B0016]” The PWS (5.24) states, “Contractor shall conduct static and dynamic code scanning of COTS/GOTS applications and websites. Contractor shall create and maintain a Secure Software Development Life Cycle (SSDLC) for the Agency to adhere to when developing applications. [Deliverable B0017] On page 77, the PWS (Deliverables Schedule) labels Deliverable B0016 as “Software/Application Scanning and Review”, and Deliverable B0017 as “Project Management”.

Question: Can the Government please clarify the language of the Deliverables Schedule for Deliverable B0017?

Answer: This should be changed in the PWS to ‘SSDLC Program Management’.

“Contractor shall create and maintain a Secure Software Development Life Cycle (SSDLC) for the Agency to adhere to when developing applications.” Amended to reflect the correction.

48. Question: From an evaluation stand point if an offer indicates that they don’t have “recent and relevant” contracts as defined by the solicitation then they receive an evaluation of “unknown” which is considered “acceptable” per Section M Factor II – Past Performance “Note: In the case of an offeror without a record of relevant past performance or for whom information on past performance is not available or so sparse that no meaningful past performance rating can be reasonably assigned, the offeror may not be evaluated favorably or unfavorably on past performance. Therefore, the offeror shall be determined to have unknown past performance. In the context of acceptability/unacceptability, “unknown” shall be considered “acceptable.” However the corporate experience requires showing team performance (one of which is required to be the Prime) providing support to a contract of similar size, scope and complexity. This section doesn’t have the same “recent” stipulation on contracts “performed for at least (3) three years, and was an active contract at any point during the past (5) five years, ”Therefore it is my understanding you could submit contract meeting similar size, scope and complexity in the Corporate experience yet, not in Past Performance if the performance of said contract was under the 3 year threshold.

I wanted to clarify in the event where you show relevant contracts in Corporate Experience they don’t have to be portrayed in past performance and, that your statement is just requiring - if you submit past performance then the contracts shown in Corporate experience must be the same as the contracts shown in Past Performance.

Answer: The Government believes the solicitation requirements for past performance and corporate experience are clear.

QUESTIONS CLOSED