W065--1. Revised #2 and #3 of the Statement of Work 2. Answers to Vendors' Questions to Equipment Lease & Mailing

Active

Contract Opportunity

1. Revised Statement of Work (SOW)
Please refer to the revised RFQ Mailroom Equipment 36C26225Q0464

2. Response to RFQ 36C26225Q0464 Mailroom Equipment and Software Questions

1. In the Statement of Work 2.e. Mail Meter Equipment Features, it states Stand-alone IMPB processing for priority mail, first class parcels, and package services that includes computer, label printer, and >70 pound scale.

Q1.1. In order for the system to produce USPS IMpb compliant labels the solution must accept a recipient address, recipient full name and return address from the user and then transmit that Personally Identifiable Information (PII) to a cloud component regardless of the postage metering manufacturer. When using a cloud service all agencies under the executive branch, including the VA, are required to leverage a FedRAMP authorized cloud solution per the FedRAMP policy memo dated July 25, 2024:
(https://www.fedramp.gov/assets/resources/documents/FedRAMP_Policy_Memo. pdf)
In order to comply with his policy does the government require the proposed solution to leverage a cloud component that is FedRAMP Authorized at time of offer submission and listed on the FedRAMP marketplace with a published FedRAMP package ID to protect Personally identifiable information (PII)?.
A1.1-The machine does not print addresses. The addresses are sent on the correspondence and put in a window envelope.

2. In the Statement of Work 2.e. Mail Meter Equipment Features, it states, it states Multi-carrier capability (i.e., USPS, and UPS) to allow for rate shopping and to ensure continuity of operations for package shipments .

Q2.1. In order for the system to produce USPS IMpb compliant labels the solution must accept a recipient address, recipient full name and return address from the user and then transmit that Personally Identifiable Information (PII) to a cloud component regardless of the postage metering manufacturer. When using a cloud service all agencies under the executive branch, including the VA, are required to leverage a FedRAMP authorized cloud solution per the FedRAMP policy memo dated July 25, 2024:
(https://www.fedramp.gov/assets/resources/documents/FedRAMP_Policy_Memo. pdf)
In order to comply with his policy does the government require the proposed solution to leverage a cloud component that is FedRAMP Authorized at time of offer submission and listed on the FedRAMP marketplace with a published FedRAMP package ID to protect Personally identifiable information (PII)?.
A2.1-The cloud is not used. Addresses are generated on the correspondence and put in a window envelope and the meter is strictly used for postage.

Q3.1. In the Statement of Work 3. Parcel Tracking Equipment Features. Any inbound tracking solution scans carrier tracking barcodes and stores name and address data (PII). In order for an inbound package tracking software to work on handheld scanners it must be downloaded. Will the VA allow the use of cellular hot spots to bypass network connection and system security to allow the software application to be downloaded and maintained on handheld scanners?
A3.1 No. The scanners will download software through the VA's wireless network. Scanning devices and systems after adoption may require an Enterprise Risk Assessment to permit creation of a subnetwork for these devices with appropriate rules for connection. Need for an enterprise Risk Assessment cannot be determined until a vendor and product have been selected.Â

Q3.2. Any inbound tracking software including on premise solutions have cloud components in order for the solution to work that differ from vendor to vendor. Does the VA require any solution with cloud components be FedRAMP authorized?
A3.2-Yes, we require FedRAMP for all cloud integration.

Q4.1. Will the VA please adjust the due date to allow three days for vendors to respond after the Q&As are posted?
A.4. Although the window for questions closed today, 2/18/2025 at 12:00pm PST, the offer submissions are actually due February 24, 2025, by 12:00pm PST (refer to section E.3.2 of Solicitation 36C26225Q0464.)

**After careful consideration, the due date is now extended to February 27, 2025 by 12:00pm PST.

Attachments/Links