Electronic Systems Center, Information Operations Systems Program Office (IY), 50 Griffiss St., Hanscom AFB, MA 01731-1625

70 -- THIS IS A COMBINED SYNOPSIS/SOLICITATION IAW FAR 12.6 FOR INFORMATION WARFARE (IW) VULNERABILITY ASSESSMENT/RISK MANAGEMENT (VARM) SOFTWARE. PART I OF II. SOL F19628-98-R-0024 POC Ann Marie Espinola, Contract Specialist (781) 271-4820; Joseph P. Abate, Contracting Officer (781) 271-7141 WEB: ESC Business Opportunities Web Page, http://www.herbb.hanscom.af.mil. E-MAIL: Click Here to E-mail the POC, espinolaa@hanscom.af.mil. (i) This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested and a written solicitation will not be issued. On 5 Feb 98, presolicitation notice 2026PRD0008 was published in the CBD and the Government evaluated the responses in accordance with the criteria stated in the notice. On 11 Jun 98, there will be a preproposal conference in Bedford, MA to provide all potential offerors an overview briefing of this program and to allow them the opportunity, on a non-attribution basis, to ask any questions they may have. All offeror questions and the Government responses thereto will subsequently be posted to Hanscom Air Force Base's RFP Bulletin Board (HERBB) (www.herbb.hanscom.af.mil). Look under "Biz Opportunities" to see the list of currently available programs, which includes IW VARM. Click on the program name to bring up VARM-specific information, of which the available documents are listed at the bottom. Further details such as the agenda, directions, time and room for the preproposal conference are also on HERBB. (ii) The solicitation number for this acquisition is F19628-98-R-0024 and is issued as a Request for Proposal (RFP). Proposals are requested, including an oral presentation consisting of a demonstration of the proposed product as it currently exists. If the existing product does not yet meet some system requirement, the demonstration will be augmented with a detailed description of any plans or alternative approaches to meet each requirement not met by the existing product. (iii) This RFP incorporates provisions and clauses in effect through the 1997 Federal Acquisition Circular 97-04. (iv) N/A. (v) A Firm-Fixed-Price contract will be issued to modify currently available commercial "information system" risk assessment software to: meet our requirements as listed in paragraph (vi) at multiple spiral development increments; acquire, in limited number, copies of the modified software to validate performance at each release; combine contractor-supplied commercial data on threats, vulnerabilities and countermeasures with the counterpart Government-provided classified and unclassified data supplied as Government-Furnished Information (GFI); and establish a help desk for user support. The scope as outlined in the Contract Line Item Number (CLIN) structure below follows an iterative development process which the offeror must plan for in its proposal. Given specific hard constraints, the plan must tie the following CLIN deliveries and requirements across and within the rough order of magnitude (ROM) estimated annual funding profile presented in paragraph (viii) below. Note: all references to fiscal years denote Government fiscal years. By exercising options, the Air Force plans to annually review and prioritize its continuing iterative requirements within the given funding ceilings. Proposals will follow the following CLIN structure. Within this CLIN structure, offerors are encouraged to propose specifics (time to deliver) which best reflect their plan for meeting the systems requirements detailed in paragraph (vi) and the Systems Requirements Document (SRD) (e.g., if the offeror feels it can deliver CLIN 0001 sooner than the 12 months currently specified, offeror should propose this lesser duration). Use of the term To Be Supplied (TBS) requests the offeror to supply the indicated information in place of the "TBS." (CLIN 0001): The contractor shall deliver four licensed copies of Release 1 software that meet all of the Release 1 requirements identified in SRD Table 1 and include the latest commercial Threat, Vulnerability, and Countermeasure (TVC) data base not later than 12 months after contract award. The contractor shall participate in the planning of coordinated, Government/contractor production and distribution of TVC data that will be needed for Release 2 to support combination of GFI data (SRD para. 5.2.2). The contractor shall provide a Data Base Design Document as described in the Contract Data Requirements List (CDRL). Also in Support of GFI combination, the contractor shall travel as needed to participate in Technical Interchange Meetings (TIMs) (approximately every other month), alternating locations between Boston and the contractor's facility. The contractor shall participate in the initial planning required to create a new Government infrastructure that will gather, correlate, and distribute classified TVC data to tool kit users. Travel to support this activity (SRD para. 6) will consist of participating in Intelligence Support Working Groups (ISWGs), approximately four per year in Boston. The contractor shall support in-plant testing to verify the Release 1 requirements in SRD Table 1. The testing shall be accomplished so that it can be witnessed by the Government, and performed in accordance with the approved test plan as defined in the CDRL. The contractor shall report the results of the testing in a test report as defined in the CDRL. The contractor shall gather problem reports and enhancement requests, both internally and from the Government, and assess the impact of incorporating these in order to enable discussions with the Government that lead to an agreed-to list of modifications to subsequent releases. The contractor shall participate in Program Management Reviews (PMRs), which will occur two months after award and every other month thereafter through the life of the CLIN at a location which alternates between Boston and the contractor's facility. (CLIN 0002, Option): This option may be exercised upon delivery of Government Furnished Information (SRD para. 5.2.2). The contractor shall deliver four licensed copies of Release 2 software that meet all of the Release 2 requirements identified in SRD Table 1 and include the latest commercial TVC data base not later than 12 months after this option is exercised. The contractor shall coordinate with the Government as the Government prepares the representative subset of TVC data and the first full set of TVC data. The contractor shall provide an updated Data Base Design Document as defined in the CDRL. The contractor shall participate in TIMs as needed to support this activity (SRD para. 5.2.2) (approximately every three months, location alternating between Boston and the contractor's facility). The contractor shall participate in the continued planning required to create a new Government infrastructure to gather, correlate, and distribute classified TVC data to tool kit users. Travel to support this activity (SRD para. 6) will consist of participating in ISWGs, approximately two per year in Boston. The contractor shall support in-plant testing to verify the requirements in SRD Table 1. The testing shall be accomplished so that it can be witnessed by the Government, and performed in accordance with an approved test plan as defined in the CDRL. The contractor shall report the results of the testing in a test report as defined in the CDRL. The contractor shall gather problem reports and enhancement requests, both internally and from the Government, and assess the impact of incorporating these in order to enable discussions with the Government that lead to an agreed-to list of modifications to subsequent releases. The contractor shall provide timely updates to the tool kit software, commercial TVC data base, and user manuals to addressees provided by the Government, at intervals of (TBS) months. The contractor shall participate in program management reviews approximately every other month, alternating in location between Boston and the contractor's facility. (CLIN 0003, Option, Labor Hour, Fixed-Price): The contractor shall provide labor as specified in Task Requirement Notices (TRNs) to develop, integrate, test, and distribute software enhancements as needed, through FY02. (See CLIN 0003 TRN clause on HERBB). Related anticipated tasks include: continuing to support TIMs for combining GFI data (SRD para. 5.2.2); continuing to participate in a group that will develop a Government infrastructure that will gather, correlate, and distribute classified TVC data to tool kit users (SRD para. 6); providing timely updates to the tool kit software, commercial TVC data base, and user manuals to addressees provided by the Government, at intervals of (TBS) months; gathering problem reports and enhancement requests, both internally and from the Government, and assess the impact of incorporating these in order to enable discussions with the Government that lead to an agreed-to list of modifications to subsequent releases; and continue program management, coordinating with ESC/IYW by phone, fax, or email. (CLIN 0004): Data (CDRLs available from HERBB). This CLIN is not separately priced; price is included in CLIN 0001 and CLINs 0002 and 0003 if option(s) exercised. (CLIN 0005, Option): Licenses (including help desk costs, distribution costs, user manuals, and warranty costs). Provide prices for various quantities of software licenses based on the prediction that Release 2 software will have 20 initial users (20 licenses) and that this number will grow to 200 users (200 licenses) by the end of FY02. Assume yearly (or TBS) software updates for licensed users and provide the price of these updates, if applicable. In addition, offerors may propose an "enterprise license," which would provide unlimited licenses and updates to the VA/RM user base for a yearly (or TBS) fixed price. Propose these prices in such a way that they can be incorporated directly into the resultant contract upon award. (CLIN 0006, Option, Travel, Fixed Price): All travel and subsistence expenses associated with effort under CLIN 0003. (vi) The items to be acquired must meet the technical requirements as described in the SRD, available from HERBB. This document is incorporated by reference into this RFP. The following is a summary description of system requirements and their references to the SRD. Table 1 of the SRD provides a summary of the system requirements. If any discrepancy exists between the following RFP requirement descriptions and those contained in the SRD, the information in the RFP takes precedence. System requirements: enables complete, autonomous risk management (para. 5.1.1); facilitates ease of use (para 5.1.3); links assets to mission (para. 5.1.4); bases risk on threat and vulnerability data (para. 5.1.5); optimizes countermeasure cost versus risk (para. 5.1.6); supports results aggregation (para. 5.1.7); applies to many assets (para 5.2.1); and combines Government Furnished Information (GFI) and commercial data (para. 5.2.2). (vii) The period of performance for each CLIN is specified in paragraph (v), above. All CLINs shall be accepted at source, F.O.B., destination. THIS COMBINED SOLICITATION/SYNOPSIS FOR IW VA/RM CONTINUES IN THIS SAME COMMERCE BUSINESS DAILY ISSUE. SEE THE REMAINDER OF THIS NOTICE BELOW (RFP F19628-98-R-0024). (0153)

Loren Data Corp. http://www.ld.com (SYN# 0291 19980604\70-0003.SOL)