RFI_Login.govFraudCMS_2025-01-16.pdf

General Services Administration Federal Acquisition Service

Technology Transformation Services 1800 F St NW | Washington, DC | 20405

Request for Information (RFI)

Title Login.gov Fraud Case Management System (CMS)

Posted Date 01/16/2025

Response Due Date 1/31/2025 at 5:30 PM EST

RFI Posting Locations SAM.gov

GSA eBuy

Agency The General Services Administration (GSA), Technology Transformation Services (TTS)

RFI Summary This RFI is being issued to conduct market research for GSA’s Login.gov program

This RFI is a notice only. This is not a request for an offer or proposals. This notice does not represent a commitment by the government to issue a solicitation or award a contract. Information received will be used to determine the availability of technically capable and otherwise responsible firms.

The release of this RFI should not be construed as such a commitment or as authorization to incur cost for which reimbursement would be required or sought. The information provided in the RFI is subject to change and is not binding on the government nor does it restrict the government as to the ultimate acquisition approach. Further, the government is not at this time seeking proposals or quotations and will not accept unsolicited proposals. Not responding to this RFI does not preclude participation in any future solicitations. All submissions become government property and will not be returned.

Overview The General Services Administration (GSA), Federal Acquisition Service (FAS), Technology Transformation Services (TTS) is conducting market research with respect to managing fraud investigations and remediation using a robust and scalable Case Management System (CMS).

The purpose of this market research is to stay abreast of developments in the market as the technology landscape evolves and changes over time for fraud case management. This market research will also help determine available contracts, solutions, and contractors to develop a thorough acquisition strategy.

Requested Information Please provide the following information in a capability statement in response to this RFI:

I. Company Information

● Company Name

● Company Address

● Company Website

● UEI Number

● Business size designation (e.g. large business, small business), and any socio-economic designations

● Point of contact information to include phone and email

● List any GSA MAS Contracts, GWACS, or other Government Wide Contract Vehicles that your company or a reseller partner holds

II. Product Information

GSA requests the following information from RFI respondents regarding their case management system product(s):

● Describe your unified investigation interface that consolidates all necessary data to allow investigators to make decisions efficiently without toggling between multiple screens with real-time data syncing;

● Describe your search capabilities that allow for query across names, dates, UUIDs, and transaction details with cross-entity link analysis for identifying related accounts;

● Describe your reporting tools and ability to generate customizable reports on performance and investigation metrics, outcomes and trends as well as any dynamic dashboards with time-series visualizations for fraud analysis;

● Describe your workflow automation processes to assign cases and set deadlines based on predefined workflows and the ability to generate case numbers and investigator reports within minimal manual input;

● Describe your task management process that allows manual task reassignment and investigation labeling;

● Describe your tracking and notification abilities to monitor investigator case metrics, investigation time, and progress as well as alerts for deadlines and unaddressed tasks;

● Describe your data security and privacy abilities with role-based access control (RBAC) to restrict access based on investigator roles and responsibilities, audit trails to log all system activity for accountability, compliance, and chain of custody records for case evidence;

● Describe your regulatory compliance with NARA and privacy act requirements and the ability to securely store sensitive data (PII, 6103 data);

● Describe your integration capabilities and interoperability with authentication services, production databases, and helpdesk and call center systems (e.g. Zendesk, Salesforce) as well as APIs to enable real-time data exchange and system automation

● Describe your identity verification product offering(s) that are able to provide identity resolution by resolving a user to a single identity, and validate that all attributes entered by the user match those of the resolved individual;

● Describe any external services that are utilized in your solution;

● Describe the infrastructure that hosts your identity verification product (i.e., is it cloud hosted or is it hosted via on premises servers), including the infrastructure that hosts external services;

● Describe your fraud category labeling (1st-part, 2nd-part, 3rd-party fraud) and granular confidence scoring (high, medium, low) for each label, labels for fraud tactics and multi-label tagging for overlapping tactics, and decision tree prompts for consistent labeling with real-time updates to truth labels and associated risk scores;

● Describe your collaboration and communication tools for secure internal messaging, centralized storage and document sharing, and external collaboration while maintaining data privacy;

● Describe your scalability for growth and performance under large data demands;

● Describe your subpoena intake management to track subpoenas and link subpoenas to relevant cases or users automatically with logs for compliance and audit readiness;

● Describe your lifecycle case data management with comprehensive tracking and downstream analysis;

● Describe your system architecture, including if the system is multi-tenant with tenant data being stored across resources;

● Describe where encryption is used in the system and explain what type of encryption is implemented;

● Is your solution FedRAMP authorized or does it have a current security authorization from another federal agency? If so, please provide details;

● Provide any relevant Government past performance including solicitation IDs you have provided a quote to or contracts you have been awarded;

● Describe your lessons learned from similar procurements;

● Describe how your case management system is priced including actual pricing for the service and any options that can be exercised; and

● Provide any available corporate experience information from federal clients that have integrated and authorized your case management system.

III. Capability Statement File Format and Page Limitation

Capability statements shall be submitted in a PDF or Word document format, using no less than ten (10) point font character size, and no less than a 3/4" around each page for margins. Tables and figures shall use no smaller than ten (10) point character size and must be clear and readable.

The capability statements provided by RFI respondents shall not exceed ten (10) pages in length. The Government may not review or consider any information that is provided in excess of aforementioned page limitation.

RFI Response Due Date Responses are due no later than 1/31/2025 at 5:30 PM ET. Please forward the response to jonah.jordan@gsa.gov and michelle.roberts@gsa.gov.

mailto:jonah.jordan@gsa.gov mailto:michelle.roberts@gsa.gov