Questions and Answers to Pre-Solicitation.xlsx
XLSX spreadsheet 13 KB Posted
- Solicitation number
- W91CRB-26-B-A006
About this file
This is a Questions and Answers document to a draft pre-solicitation for Cyber Security Engineering and Risk Management Framework Support services. The requirement involves two full-time positions plus surge capacity under NAICS 541519, designated as a 100-percent 8(a) set-aside. The contract is a follow-on to incumbent contract W91CRB-21-C-0044 and is being issued by the Department of the Army Materiel Command Army Contracting Command Aberdeen Proving Ground.
The final solicitation is anticipated to post on October 29, 2026, with a two-week submission window and award expected in November 2026. Key technical requirements include IT Systems Solutions Architect-Senior and IT Certified Professional-Senior positions requiring active SECRET facility clearances at performance start, with personnel qualifications governed by DoDM 8140.03 cyber workforce standards. The IT Systems Solutions Architect-Senior position requires either DCWF work role 652 (Security Architect) or 802 (IT Project Manager) at Advanced level with CISSP certification and must possess ten years of Risk Management Framework lifecycle experience (with significant DoD RMF work) and five years managing network expansion and cloud/enclave operations. IT Certified Professional-Senior surge positions require DCWF work role 651 (Enterprise Architect) at Intermediate level with acceptable certifications including CISSP, SecurityX, or CYSA+, though CISSP is mandatory for the lead position. Bid submissions must include resumes for all four labor categories, and surge hours will only be ordered and paid when Government-directed. All submission portal information, question deadlines, and bid opening details will be updated in the final solicitation.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| # | Reference | Question | Answer |
| 1 | SF 1449 Block 10; Section I clauses (p. 1) | Block 10 does not clearly show a set-aside, and the clauses do not include FAR 52.219-6, 52.219-14 or 52.219-27. Is the acquisition unrestricted? The requirement is two full-time positions plus surge under NAICS 541519. Would the Government consider a Rule of Two review for a small business or SDVOSB set-aside? | The final solicitation will be for an 8(a) set aside. |
| 2 | Section L.3.3(1), p. 37; Section M.2(4), p. 43; PWS 4.2 | The IFB requires proof of an active SECRET Facility Clearance at the time of bid submission. Would the Government consider requiring the FCL at the time of award or start of performance instead? That would let qualified small businesses whose FCL is in process with DCSA compete. | The personnel that start on this contract must be cleared at the start. There will be little time between award and start of this new contract. |
| 3 | Section L.3.3(2), p. 37; PWS 1.5.7 | Must all proposed personnel hold an active SECRET clearance at bid submission, or will clearance at the start of performance (within the 30-day phase-in, PWS 1.5.17) be accepted? | Same as above |
| 4 | Section M.2(6), p. 43 vs. Section L.3 | M.2(6) evaluates minimum personnel requirements "reflected in resume/CV," but L.3 does not list resumes as a bid requirement. Should resumes for all four labor categories be submitted with the bid, and is there a page limit or format? | Yes resumes should be submitted for all four labor catagories with the bid. |
| 5 | SF 1449 Block 8; PWS 1.4.1; Section L.3.2, p. 37 | The dates conflict. Block 8 shows an offer due date of 31 Aug 2026. PWS 1.4.1 shows a period of performance starting 1 Sep 2026. L.3.2 shows a base year starting 23 Nov 2026. Which dates will govern the final IFB? | Dates have been udpated for Nov timeframe. |
| 6 | Section L.2, p. 36; L.4.1, p. 38; L.5, p. 39 | The submission portal or email, the question deadline, and the bid opening date, time and link are all TBD. When will these be published? | All submission information will be updated in the final solicitation anticipated post date is 10/29/2026. |
| 7 | PWS 1.5.8; Section L.3.3(4), p. 38 | The PWS cites DoD 8570.01-M (Ch4) and DoDD 8140.01. DoD 8570.01-M has been replaced by DoDM 8140.03. Which qualification standard governs? Which DCWF work roles and proficiency levels apply to each labor category? | Yes DODM 8140.03 is now the governing requirement. For the following positions: |
IT Sys Solutions Architect-Sr = 652 (Security Architect) or 802 (IT Project Manager) Advanced (CISSP) IT Certified Professional-Sr = 651 (Enterprise Architect) Intermediate (Security X/CYSA+) Surge Effort - IT Certified Professional-Sr = 651 (Enterprise Architect) Intermediate (Security X/CYSA+) Surge Effort - IT Certified Professional-Sr = 651 (Enterprise Architect) Intermediate (Security X/CYSA+)
| 8 | Section J, Attachments 0002 (DD254) and 0003 (QASP) | Will the DD254 and QASP be posted with the final IFB? The DD254 is needed to confirm safeguarding and SIPRNet requirements. | DD254 and QASP have been posted to the presolicitation and will be included in final solicitation. |
| 9 | General | Is this a new requirement or a follow-on? If a follow-on, please provide the current contract number and incumbent. | W91CRB-21-C-0044 |
| 10 | Section M.2(6)(a), p. 43 | For the IT Solutions Architect Sr., may the 10 years of RMF lifecycle experience include DIACAP-to-RMF transition work and FedRAMP or NIST SP 800-53 authorization work outside DoD? | The 10 years of RMF lifecycle experience may include DIACAP-to-RMF transition work, with a significant amount of that time in RMF, but not outside of DoD. |
| 11 | Draft IFB W91CRB26BA006, Section B and Section M | Section B lists the SURGE labor CLINs as option line items, while M.3 evaluates both surge positions at 2,040 hours per year. Will surge hours be ordered and paid only when the Government directs a surge? | Yes |
| 12 | Draft IFB W91CRB26BA006, Sections L and M | M.2 item 6 evaluates minimum personnel requirements as reflected in resumes, but L.3 does not list resumes among the bid contents. Must the bid include one resume for each of the four Technical Exhibit 3 labor categories? | yes |
| 13 | Section M M.2, item 6(a) | For the IT Solutions Architect-Sr. position, may the required 10 years managing RMF lifecycle reporting and five years involving network expansion and cloud/enclaves be concurrent? Please also clarify the meaning of "progressive requirements" in the five-year experience criterion. | Progressive levels of responsibility and exposure to operating systems and environments. |
| 14 | Section M M.2, item 6(a) | Section M.2, item 6(b), permits CASP+ (SecurityX) "or equivalent" certification for IT Certified Professionals. Please identify the certifications the Government will accept as equivalent, including whether CISSP or other applicable DoD 8140-recognized certifications qualify. | CISSP, SecurtiyX, and CYSA+ are acceptable. However, for the lead position CISSP is required. |
| 15 | Section L L.3.3, item 4 | Section L.3.3, item 4, cites DoDD 8140.01, DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2. Please identify the applicable cyber workforce work role and qualification level for each labor category and confirm whether the signed certification statement is sufficient at bid submission, with underlying certifications verified at award. | IT Sys Solutions Architect-Sr = 652 (Security Architect) or 802 (IT Project Manager) Advanced (CISSP) IT Certified Professional-Sr = 651 (Enterprise Architect) Intermediate (Security X/CYSA+) Surge Effort - IT Certified Professional-Sr = 651 (Enterprise Architect) Intermediate (Security X/CYSA+) Surge Effort - IT Certified Professional-Sr = 651 (Enterprise Architect) Intermediate (Security X/CYSA+) |
| 16 | SF 1449 / Section L SF 1449 Block 10; FAR 52.219-4 | SF 1449 Block 10 identifies a 100-percent 8(a) set-aside, but the solicitation also contains FAR 52.219-4 regarding a HUBZone price evaluation preference. Please confirm that the intended competition is 100-percent 8(a) and whether FAR 52.219-4 is applicable to this acquisition | This is a 100% 8(a) and the 52.219-4 has been removed. |
File details come from the government source that posted it. Updated .