36C10B24Q0046.docx

Sources Sought Notice Sources Sought Notice

GENERAL INFORMATION

SET-ASIDE

Technology Acquisition Center

23 Christopher Way Eatontown NJ 07724

POINT OF CONTACT*

Contract Specialist Erica Wortman Erica.Wortman@va.gov 848-377-5106

PLACE OF PERFORMANCE

ADDRESS

POSTAL CODE

COUNTRY

ADDITIONAL INFORMATION

AGENCY’S URL

URL DESCRIPTION

AGENCY CONTACT’S EMAIL ADDRESS

EMAIL DESCRIPTION

DESCRIPTION

Request for Information

VA-24-00014948

PACT Act - Cyber Security Risk Advisors Support

This is a request for information (RFI) only. This request is for planning purposes only, and does not constitute a Request for Proposal, a Solicitation, a Request for Quote or, an indication that the Government will award a contract for the items contained in this RFI.

This RFI is for planning purposes only and shall not be considered an Invitation for Bid, Request for Task Execution Plan, Request for Quotation or a Request for Proposal. Additionally, there is no obligation on the part of the Government to acquire any products or services described in this RFI. Your response to this RFI will be treated only as information for the Government to consider. You will not be entitled to payment for direct or indirect costs that you incur in responding to this RFI. This request does not constitute a solicitation for proposals or the authority to enter into negotiations to award a contract. The information provided may be used by the VA in developing its acquisition strategy and Performance Work Statement. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. The Government does not intend to pay for the information submitted in response to this RFI.

REQUIREMENT:

The purpose of this RFI is to identify qualified vendors who are able to meet Department of Veterans Affairs, Office of Information & Technology, Office of the Chief Technology Officer (OCTO) need for Cyber Security Risk Advisors support. The Contractor shall provide Assessment and Authorization (A&A) support, support for maintenance of Authorities to Operate (ATO), and cybersecurity services to the CTO in order to secure and retain the ATO for various products.

Cyber Security Risk Advisors support requires the following:

· Extensive knowledge of VA cybersecurity processes

· Coordination with the CTO engineering leadership, product delivery teams, Chief Information Security Officers (CISOs), and other internal VA OIT stakeholders

· Deliver ATO documentation

· Shepherd product delivery teams through VA processes

The estimated skill sets required include but are not limited to the following:

· ATO documentation

· DevOps engineering

· Cybersecurity practices

· Systems architecture

· VA security practices Subject Matter Expertise

RFI SUBMISSION INSTRUCTIONS:

VA requests a clear, concise, and complete response to this RFI. As part of the submission, VA is under no obligation to provide feedback to the RFI respondent, or to contact the RFI respondent for clarification of any information submitted as part of the response. Please submit your RFI response in accordance with the following:

1) Include the following identification information:

a. Name of Company

b. Address

c. Point of Contact

d. Phone Number

e. Email address

f. Unique Entity ID (UEI) Number

g. Company Business Size and NAICS code(s). For VOSB and SDVOSBs, proof of certification in the SBA Veteran Small Business Certification Program and listed in the SBA certification database (see 13 CFR 128.102).

h. Any Schedules held on General Services Administration (GSA), Government-Wide Acquisition Contracts (GWAC) held on the National Aeronautics and Space Administration (NASA) Solutions for Enterprise Wide Procurement (SEWP) V, or any other schedule not mentioned above to assist in determining acquisition strategy if you are included in one or more. Please also include Contract Number, expiration date, etc.

2) Your companies capability and/or capacity to provide the Cyber Security Risk Advisors support identified above.

3) Corporate experience or expertise in performing these services and specific examples or references. Specific examples or references provided must include the agency, point of contact, dollar value, and contract number.

4) If possible, a rough order of magnitude (ROM) for a 12-month period of performance for the support described above.

Please submit your RFI response in accordance with the following: 1) No more than 3- pages. 2) Mark your response as “Proprietary Information” if the information is considered business sensitive. 3) NO MARKETING MATERIALS ARE ALLOWED AS PART OF THIS RFI. The Government will not review any other information or attachments included, that are in excess of the 3-page limit. The Government will not review generic marketing materials that do not address the information contained herein or the attached documents.

All interested parties shall respond no later than 1:00 PM EST on November 15, 2023 via e-mail. If you have any questions on the RFI, please submit via e-mail as well. Please note PACT Act - Cyber Security Risk Advisors Support in the subject line of your response.

Contract Specialist: Erica Wortman, Erica.Wortman@va.gov Contract Specialist: Kelly Driscoll, Kelly.Driscoll@va.gov Contracting Officer: Edward Hebert, Edward.Hebert@va.gov

Sources Sought Notice