HSI Extreme Vetting Industry Day Vendor Questions

HOMELAND SECURITY INVESTIGATIONS National Security Investigations COUNTERTERRORISM AND CRIMINAL EXPLOITATION UNIT Responses to Vendor Questions AMYX INC Questions: 1. The government has requested a capability statement but the due date is not clear. Does the government prefer vendors to brief their capability statement during the one-on-one session or is a capability statement expected to be sent prior to meeting face-to-face? Capability statements will be expected within 2 weeks after Industry day. 2. Industry strongly encourages DHS / ICE to set this as a small business aside using the GSA OASIS Small Business Pool 1 vehicle. It is understood that DHS / ICE may have concerns over limiting competition to 43 smallbusiness vendors; however, it should be noted that OASIS SB Pool 1 has successfully competed multiple procurements in excess of $100M and/or 100 full-time employees. Market Research and acquisition planning will drive the final results, as we are currently in the planning phase. 3. Industry strongly recommends that DHS / ICE require all prime contractors to possess current Capability Maturity Model Integration – Development Level 3 (CMMI®-DEV Level 3) or higher appraised processes. With the increased budgetary pressures placed across the Federal Government, quality lifecycle processes must be implemented across all performance areas to minimize rework, mitigate risk, and reduce lifecycle costs. Our requirement is still being developed at this time and more research is required to determine this process certification level and if it is needed for this requirement. Bloomberg Questions: 1. Has a contractor performed similar work to this for the government in the past? If available, please provide the incumbent contract number. No, this is a new requirement for ICE. 2. If you are unable to provide a contract number, is it safe to assume this is a new requirement for the government? 1

HOMELAND SECURITY INVESTIGATIONS National Security Investigations Yes, it is a new requirement for ICE. ICE HSI Data Analytics – Question and Answer RFI Final Questions: 1. Will vendors who were not selected as one of the 20 presenting vendors be allowed to interact with the government at all during any day July 1820, 2017? Yes, vendors will be allowed to interact with the government during Industry day. 2. Will the government only publish responses to submitted questions prior to vendor’s presentations or will it include a Q&A for all questions that arise throughout each of the 20 vendor presentations? All questions will be posted after Industry Day. 3. Would the government consider relaxing the “Interested companies are limited to three (3) people” restriction if a selected vendor is part of a team consisting of additional firms? This restriction is no longer applicable due to the removal of the one-onone sessions. 4. Attachment 2, Section 1, under the contractor shall perform, “Providing case identification and tracking of IV and NIV applications at post through the application and adjudication process and provide electronic mechanism to push information to relevant partner programs systems and subsystems.” Question: Is the government expecting the contractor to provide a new tracking process/electronic mechanism or can an existing system such as PATRIOT be used? The government is seeking recommendations from Industry on the usage of new or existing systems. 5. Attachment 2, Section 3.2, first bullet: Does the government expect the contractor to develop a standalone new electronic mechanism to push social media information to relevant partner systems or work into an existing social media system? 2

HOMELAND SECURITY INVESTIGATIONS National Security Investigations Although there is an existing social media system, the government is seeking recommendations from Industry to determine the most effective method. 6. Attachment 2, Section 6: For the assessment package of the targets of interests, is this to be completed by the contractor each year? Quarterly? Monthly? The contractor should be prepared to complete an assessment package of the targets of interest daily. 7. Attachment 2, Section 3.2: Is the government looking for a new IT system that integrates PATRIOT and Overstay, or just a process to streamline and connect the two efforts? The government is seeking recommendations from Industry. 8. Attachment 2, Section 4: Is the training team training focused on training only the firm’s own contractors, or will they be expected to train other NSID staff on process and system changes? The training team will train both the firm’s own contractors and other NSID staff. 9. Attachment 2, Section 5: Is the contractor limited in the tools it can use for analysis purposes? What tools will be made available for use? The contractor is not limited in the analytical tools it can use, as long as the tools add value. The tools that will be made available for use will be provided at a later date. 10. Attachment 1, Section V, Performance Objectives, item 2: What “value-added information” does ICE require, that doesn’t exist in the current state, to further investigations or support prosecution in immigration or federal courts? The government is seeking recommendations from Industry. 11. Attachment 2, Task1, pg 2, reference, “Having the ability to ingest and screen large volumes of Visa electronic applications efficiently and at high speed in regard DHS holdings in development of pre-adjudication information, derogatory and threat information assessment, adjudication recommendation to the Department of State and notification to other government equites when warranted.” 3

HOMELAND SECURITY INVESTIGATIONS National Security Investigations a. Does this capability exist in the current system(s), and if so through which system(s)? Yes, the capability exists in the current system. The systems will be provided at a later date. b. What is the definition of “large volumes”? “Large volumes” represents over 1.5 million records annually. c. What is the definition of “high speed”? “High speed” would entail providing results in the most efficient and expedient time frame. 12. Attachment 2, Task1, pg 2, reference, “Provide mechanism for scraping Visa issuance information to records and provide electronic mechanism to push information to relevant partner programs systems and subsystems.” a. Does this capability exist in the current system(s), and if so through which system(s)? Yes, the capability exists in the current system. The systems will be provided at a later date. b. What are the “partner programs systems and subsystems”? Please list out. “Partner program systems and subsystems” will be provided at a later date. 13. Attachment 2, Task1, pg 2, reference, “Provide multiple Metric solution capabilities in regard visa applicant, applications, VSPTS cases, ICM cases and trend analyses functions; provide external mechanism to validate the same information remotely. Provide electronic mechanism to push information to relevant partner programs systems and subsystems.” a. Does this capability exist in the current system(s), and if so through which system(s)? 4

HOMELAND SECURITY INVESTIGATIONS National Security Investigations Yes, the capability exists in the current system. The systems will be provided at a later date. b. What are the “partner programs systems and subsystems”? Please list out. “Partner program systems and subsystems” will be provided at a later date. 14. Attachment 2, Task3, pg 3, section 3.2, reference the bullet, “Have the ability to ingest and screen against large volumes of visa electronic applications efficiently and at high speed in… warranted. And, provide electronic mechanism to push information to relevant partner programs systems and subsystems.” a. What is the definition of “large volumes”? “Large volumes” represents over 1.5 million records annually. b. What is the definition of “high speed”? “High speed” would entail providing results in the most efficient and expedient time frame. c. What are the “partner programs systems and subsystems”? Please list out. “Partner program systems and subsystems” will be provided at a later date. 15. Attachment 2, Task3, pg 4, section 3.2, reference the bullet, “Take action to bridge the gap between what is done by VSP screening on the front end and what CTCEU systems do on the back-end.” a. What does the requirement “bridge the gap” mean? “Bridge the gap” means the contractor should provide a system to encompass the entire lifecycle of visa applicants from application through visa issuance, entry, departure, overstay or otherwise violation of the terms of admission into the United States. 5

HOMELAND SECURITY INVESTIGATIONS National Security Investigations T-Rex Questions: 1. The FBO posting states that if a solicitation is released, it could be released on FedBizOpps or on OASIS. We strongly recommend that this solicitation be released on FBO as full & open to maximize the quality of proposals the government will receive as small, mid-tier and large companies would be able to compete for this work. Utilizing FBO would enhance vendor participation and ensure that ICE can select the very best practices that Industry has to offer. Utilizing OASIS would unnecessarily limit the competition and exclude firms who have the experience and capabilities to help ICE meet its future objectives. Market Research and acquisition planning will drive the final results, as we are currently in the planning phase. 2. The government has asked for a capability statement and capability briefing, but the timing of the submission/delivery is not clear. Can you confirm that the government is only requesting a capability statement/briefing during the one-on-one sessions and is not looking for a written capability statement to be sent beforehand? Capability statements will be expected within 2 weeks after Industry day. General Dynamics Information Technology Questions: 1. Attachment 1, Page 2 /Paragraph 2: Is the government proposing as part of the SOO to conduct continuous vetting on Lawfully admitted Permanent Residents (LPR’s)? How many LPR records would this add to the vetting process? How many active Non-immigrant visa holders are in the US? This response will be discussed at a later date. 2. Attachment 1, page 2 / V – 1: What does the government consider timely? What are the current timeframes of identified leads being sent to the field? Timeframes of identified leads being sent to the field vary based upon lead complexity and priority, in addition, what the government considers timely is also dependent on the type of lead. 3. Attachment 1, Page 3 / V - 4: Can ICE identify the operating data systems that are currently used through an automated fashion and those that require manual processes in the current state? 6

HOMELAND SECURITY INVESTIGATIONS National Security Investigations Data systems will be provided at a later date. 4. Attachment 2, Task 2 – Lead Generation: The government outlines the vetting process in task 1 to include Visa security and having metrics for VSPTS cases. Yet in this task, there is no mention visa security lead generation of cases into VSPTS only in-country investigative lead processing into LeadTrac. Is investigative lead development for visa applicants not part of the objectives? Yes, investigative lead development for visa applicants is part of the objectives. 7

HOMELAND SECURITY INVESTIGATIONS National Security Investigations 5. Attachment 2, Task 3 – Social Media Exploitation 3.2: When the Government says that the “Contractor shall have the ability to ingest and screen … “is the government expecting the contractor to provide the data platform / system for all automated vetting? Or just the open source holdings and domains? To what extent does the government utilize MongoDB? Yes, the contractor should provide the data platform/system for the automated vetting. MongoDB is our current tracking system structure. 6. Attachment 2, Page 2, Task 1 – Vetting and Screening: The Government states: “Providing case identification and tracking of IV and NIV applications at post through the application and adjudication process and provide electronic mechanism to push information to relevant partner programs systems and subsystems.” Please identify those “partner programs systems and subsystems.” “Partner program systems and subsystems” will be provided at a later date. 7. Attachment 2, Tasks 1-6: Please identify the current incumbent contractors for each of the stated six tasks. Incumbent contractors may be provided at a later date. 8. Attachment 2, Task 2: Lead Generation: “LeadTrac Mod database management system” a. Please specify the LeadTrac Mod database management system architecture. The LeadTrac Mod database management system architecture is MongoDB (Studio 3T). 9. Attachment 2, Task 3: Social Media Exploitation: “Unattributed computers” a. Will the contractor need to provide un-attributable computers, Internet access, and client configurations to ensure the network and endpoints remain unassociated with ICE or the Government in any way in order to support the open-source collection mission? 8

HOMELAND SECURITY INVESTIGATIONS National Security Investigations All equipment will be furnished by the government. 10. Attachment 2, Task 4: Government and/or Contractor Provided Training: “The Contractor shall provide a dedicated training team responsible for all initial system and database training” a. Please provide the current number of personnel assigned to the dedicated contractor training team as well as the number, location (in-person at HSI field offices, remote webinars, etc.), and mode of training deliveries provided by the dedicated contractor delivery team. 5-8 personnel are assigned to the dedicated contractor training team, and all training is done in person and on-site. b. Has content and/or modules for the “initial system and database training” been developed previously or will the contractor be responsible for developing this training material as well as training delivery? An existing standard operating procedure is established, however, the government is seeking recommendations from Industry to identify process improvements. 11. Attachment 3, Task 6: Ad Hoc Reporting: CTCEU reports: please provide the number of CTCEU reports currently developed and produced annually. Over 1,100 CTCEU reports are developed annually. ICE HSI DAS Vendor Questions: 1. What is the expected RFP release date? This requirement is still in the planning phase and should be released in the next fiscal year, though the exact date and time is unknown at this time. 2. Statement of Objectives, Section III - What is the anticipated Period of Performance? The period of performance will be determined at a future date and provided in the solicitation when it is released. 9

HOMELAND SECURITY INVESTIGATIONS National Security Investigations 3. Attachment 2 Background, Description of Requirements, Page 4 - The government states, "Contractor shall be expected to meet operational demands and ensure timely responses to projects, daily requirements such as lead development and completion of weekly lead imports...." Are there any Service Level Agreements (SLAs) the government has identified that satisfy these "timely" requirements? If so, will the government please share those SLAs? If not, is the government looking for recommendations from Industry? The government is looking for recommendations from Industry. 4. Attachment 2 Background, Description of Requirements, Page 4 - Do "timely" responses to projects and daily requirements such as lead development also include all Visa-waiver and non-priority leads? Yes, "timely" responses to projects and daily requirements include all Visa-waiver and non-priority leads. 5. Will the government please define any infrastructure that may currently be in place to support these requirements? If the infrastructure is currently not in place, is the government seeking recommendations from Industry? Infrastructure is currently in place to support the requirements. 6. Who are the vendors currently supporting (even in part) any of these efforts today? Vendors currently supporting any of these efforts will be provided at a later date. 7. Attachment 2 Background, Task 4: Government and/or Contractor Provided Training - Currently, what are the names of the external systems that are being manually vetted and what is the government's expectation as to which of those may be automated as part of these requirements? External systems will be provided at a later date. 8. Attachment 2 Background, Task 1: Vetting and Screening, Page 1 & 2 Does the government anticipate including requirements to process historic leads as well? 10

HOMELAND SECURITY INVESTIGATIONS National Security Investigations Yes, government does anticipate requirement to process historic leads as well. 9. Attachment 2 Background, Task 3.2: Page 3 - Will the government provide a demonstration to vendors of the Visa Overstay Lifecycle pilot program that is "...supported by two systems: the Visa Security Program’s (VSP) Pre-Adjudicated Threat Recognition and Intelligence Operations Team (PATRIOT), and CTCEU’s overstay enforcement system?" Additional information will be given at a later date. 10. Offeror requests clarification if this effort (even in part) is currently being worked over several contracts/task orders. These efforts are currently being worked by several contractors. PRG Questions: 1. Will the Government provide required key terms/words/criteria for criminal and background information searches? Yes, the Government will provide required key terms/words/criteria. 2. Will the Government require vendor tools to be able to perform cross‐ lingual searching & translation across multiple languages? Yes, the Government will require vendor tools. 3. Certain social media sites have made their APIs private, such as Facebook. Can the vendor assume that the Facebook reference was just for illustration purposes? No, the Contractor shall analyze and apply techniques to exploit publically available information, including social media websites such as Facebook. 4. Would a batch loading and automatic search set‐up process be acceptable for the requirement to ingest large volumes of Visa electronic applications? Yes, batch loading and automatic search set‐up processes will be acceptable. 11

HOMELAND SECURITY INVESTIGATIONS National Security Investigations 5. Will the Solicitation be released under the same NAICS code (518210) as in the pre‐solicitation, with a small business size limit of $32.5M? Market research and acquisition planning will drive this requirement. 12

HOMELAND SECURITY INVESTIGATIONS National Security Investigations 6. Would the Government provide an estimate of the size and scope of this procurement? The size and scope of this procurement will be provided at a later date. 7. Would this procurement consolidate any existing contracts, and if so, which contracts? Yes; information regarding existing contracts may be released at a later date. 8. Would the Government release this solicitation on FedBizOpps to ensure no unnecessary restriction on competition by arbitrarily limiting sources of support to only those holding a position on the OASIS vehicle? Market Research will determine the acquisition plan. 9. How many applications does the Government see processed via automation, cursory review, in‐depth review, before the 10,000 forwarded for investigation? Over 1.5 million records annually are processed. 13