RFQ W91QF022Q1004 Questions.docx

RFQ W91QF022Q1004 Questions

1. Paragraph 1.6.11, Post Award Conference/Periodic Progress Meetings – May attendance at these meetings be done virtually?

· All meetings are assumed to be virtual unless otherwise noted.

2. Paragraph 1.6.13, Key Personnel – We’re unable to find the reference document FAR Clause 5152.204-4001.

· That should read AFARS Clause 5152.204-4001. The clause is included in the “Combined Synopsis Solicitation W91QF022Q1004” document, page 56. The PWS will be updated upon award.

3. Paragraph 5.4, Meetings - May attendance at these meetings be virtual?

· See Question 1.

Cybersecurity Questions

1. Is NIST 800-171 and DFARS clauses 252.204-7012, 252.204-7019, 252.204-7020 compliance required for this contract?

a. Short Answer: Due to the mandate at DFARS 204.7304, our system will error if those clauses & provisions are not included. There is nothing applicable in them that apply to this requirement.

b. Long Answer:

· IAW DFARS 204.7300, the items in the above listed clauses are only for “covered defense information that resides in or transits through covered contractor information systems”.

· Definitions, as listed in DFARS 204.7301 -

· “Covered contractor information system” means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

· “Covered defense information” means unclassified controlled technical information or other information that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is—

1. (1) Marked or otherwise identified in the contract…

· NO information has been marked or otherwise identified.

2. Are Huawei and other named products the only ones covered in 252.204-7012 and its related DFARS clauses? Or, do these clauses also cover other systems like any personal computers and connections to USAWC network?

· DFARS 252.204-2016 and 252.204-2017 (as well as FAR 52.204-24, 52.204-25, & 52.204-26) are the only clauses/provisions that discuss Huawei.

· For the rest, see question 1.

3. What CUI-type information will contract FIs be responsible for protecting?

· See Question 1.

4. Does the USAWC expect contract FIs to generate CUI information and if so, what?

· See Question 1.

5. To what extent will USAWC exercise its right under DFARS 252.204-7020 to check on the awardees self-reported assessment score?

· See Question 1.

6. If 252.204-7012 is required, when does USAWC expect its awardee to be in full compliance with DFARS 252.204-7012?

· See Question 1.