RFI_-_Redefined_IPS_SIN.pdf

REQUEST FOR INFORMATION

U.S. GENERAL SERVICES ADMINISTRATION

FEDERAL ACQUISITION SERVICE

OFFICE OF PROFESSIONAL SERVICES AND HUMAN CAPITAL CATEGORIES

Disclaimer : THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is issued solely for information and planning purposes – it does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. It does not commit the Government to contract for any supply or service. Further, no proposals are sought at this time. Respondents are advised that the Government will not pay for any information or administrative costs incurred in response to this RFI; all costs associated with responding to this RFI will be solely at the potential respondent’s expense. Not responding to this RFI does not preclude participation in any future RFP, if any is issued.

Background

With the increased demand for identity protection services and everchanging requirements of need by our customer agencies, the General Services Administration’s (GSA) Office of Professional Services and Human Capital Categories (PSHC) is redefining Special Item Number (SIN) 520-20 as its official Data Breach Response and Identity Protection Services (IPS) SIN on the Professional Services Schedule (PSS). GSA would like to obtain feedback from industry on the redefined SIN for Data Breach Response and Identity Protection Services.

SIN 520-20 is currently defined as Comprehensive Protection Solutions providing customized solutions that integrate credit monitoring services, risk assessment and mitigation services, independent risk analysis, and data breach analysis. Redefining the SIN will allow industry to provide current state-of-the-art identity protection services while allowing ordering agencies the ability to meet their individual requirements. It will also mean some modification to the existing language of SINs 520-16 and 520-17.

This redefined SIN will require industry to have the ability to provide an integrated total solution of services that include identity monitoring, identity theft insurance, safeguarding and restoration services, breach mitigation, and forensic services. If this SIN is awarded, firms will then have the ability to offer all or part of the services listed. In order to provide any services associated with identity protection, each firm will be required to meet the full scope of SIN 520-20 first.

https://gsa.gov/portal/content/245583

PSHC is releasing this RFI to gain feedback from industry and any other relevant stakeholders on the redefined SIN.

Redefined SIN Scope Description

Please see Attachment A for the full details on the redefined SIN scope description.

Questions for Industry - Feedback on Redefined Scope

GSA would like to obtain feedback from industry on the redefined SIN for Data Breach Response and Identity Protection Services.

1. Redefined SIN Scope (see Attachment A for full details): Please provide overall feedback on the draft scope of the redefined SIN 520-20 and the modification to the existing language of SINs 520-16 and 520-17. Please also provide any specific concerns about the scope of the SIN as well as any proposed changes to the scope. (limit 250 words)

2. Pricing Structure on Redefined SIN (see Attachment A for full details): The pricing structure under the redefined SIN will be firm-fixed-price per impacted individual per month unless otherwise defined at the Task Order level (e.g. “per product redeemed per the agreed-upon coverage period (month, year, etc.)”) covering ALL services cited in the scope of the redefined SIN. Firms will also be encouraged to provide separate line item pricing for key services within this total solution SIN that they believe could be ordered independently (e.g., credit monitoring, restoration, reports, etc.). This will allow the Ordering Agency to obtain only those services needed depending on the level of breach.

Please provide overall feedback on the proposed pricing structure. (limit 250 words)

3. PSS Contractors: Does your firm have a PSS contract? If so, under which current SINs (520-16, 520-17, 520-18, 520-19, and/or 520-20) do your company’s identity protection services fit? (limit 100 words)

Responses in Portable Document Format (PDF) compatible format are due no later than 5:00 PM EST, February 21, 2017. It is requested responses be limited to the number of words identified for each question and submitted via e-mail to IPS@gsa.gov. Proprietary information, if any, should be minimized and MUST BE CLEARLY MARKED. Please be advised that all submissions become Government property and will not be returned.

mailto:IPS@gsa.gov

Industry Discussions

GSA may or may not choose to meet individually with potential firms responding to this RFI.

Such discussions would only be intended to further clarify potential feedback provided.

Questions

Questions regarding this announcement must be submitted in writing by e-mail to IPS@gsa.gov.

Regrettably, phone calls cannot be responded to.

Attachment A: Redefined IPS SIN Scope Description mailto:IPS@gsa.gov