24-IRA-023-OITA - CSP Continuous Monitoring Automation RFI Info. & Questions.xlsx

This document is a Request for Information (RFI) for Cloud Service Provider Continuous Monitoring Automation services for the Internal Revenue Service (IRS). The RFI is seeking information from vendors on their capabilities and experience in the following areas: Extract, Transform, and Load (ETL) tools; Federal Risk and Authorization Management Program (FedRAMP); Open Security Controls Assessment Language (OSCAL); NIST SP 800-53 Rev. 5; cloud continuous monitoring; development and documentation of cloud security documentation, metrics, and analytics. Vendors are asked to provide suggested labor categories and associated NAICS codes, as well as any concerns with the selected NAICS code. The RFI also requests information on the vendor's capability and experience in cloud continuous monitoring of FedRAMP-certified cloud service providers. The RFI response is due on May 7, 2024, by 5:00 p.m. EST, and questions and comments are due by April 16, 2024, by 5:00 p.m. EST. Responses should be submitted through GSA eBuy or email to the points of contact.