SOURCES SOUGHT NOTICE - CISA.pdf

SOURCES SOUGHT NOTICE

FOR

DEPARTMENT OF HOMELAND SECURITY (DHS)

CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY (CISA)

HEALTHCARE DATA SETS

INTRODUCTION

CISA is issuing a Sources Sought Notice (SSN) as a means of conducting market research to identify potential qualified firms having an interest in, and the resources to support, the requirement for Healthcare Data Sets.

This SSN is for planning purposes only and shall not be construed as an obligation on the part of the Government. This is NOT a Request for Quotations or Proposals. No solicitation document exists, and the Government may or may not issue a formal solicitation resulting from the responses received to this SSN.

The Government will not pay for any response expenses. All costs incurred responding to this SSN will be solely at the interested party's expense. Failure to respond to this SSN will not preclude participation in any future solicitation. Any information received will become the property of the Government and will not be returned to the submitter.

Interested parties are responsible for adequately marking proprietary or sensitive information.

Government technical experts drawn from staff within CISA, and other federal agencies may review responses. The Government may use selected support contractor personnel to assist in the review of the SSN responses. These support contractors will be bound by appropriate non-disclosure agreements to protect proprietary information.

PROGRAM BACKGROUND

The National Risk Management Center (NRMC) within CISA brings together government and industry to collaborate to reduce cyber and other systemic risks to national and economic security. The NRMC is a planning, analysis, and collaboration center. The NRMC analysis helps CISA prioritize its operational activities and maximize operational effectiveness through more efficient use of resources to support DHS leadership, operational components, and field personnel during crises, emerging threats, or incidents impacting the Nation’s infrastructure.

REQUIRED CAPABILITIES

It is imperative that businesses responding to this SSN articulate their capabilities clearly and adequately regarding each task area listed below.

The Contractor shall provide:

Database Access:

• Geolocated hospital facilities

• Total bed counts

• Sole community hospital

• Bed utilization

• Nursing homes

• Burn centers

• Trauma centers

• Blood centers

• Surgery centers

• Assisted living

• Hospice

• Rural health clinics

• Urgent care clinics

• Dialysis centers

This purchase will help to support agency-wide and interagency efforts to protect and conduct risk assessments of critical healthcare infrastructure. These may include, but are not limited to:

• Regional Characterizations to assess steady-state inventory of infrastructure in a study area.

• Critical Infrastructure/Key Resource (CI/KR) Analyses to determine infrastructure that support key government, emergency response, or public events.

• Infrastructure of Concern (IOC) Lists that inform leadership decisions on protective measures to take and sites to monitor before a known risk, such as a hurricane.

• Risk Assessments that determine vulnerability measurements from known or unexpected threats

• Regional Resiliency Assessment Program (RRAP) support to identify a range of security and resilience issues that could have regionally or nationally significant consequences.

• Key Site Analyses that conduct in-depth assessments and dependency studies of a specific infrastructure facility

• Data to support Policy Decision-Making at the conglomerate or summary and trending level of data

ELIGIBILITY

The applicable NAICS code for this requirement is 513120 – 513120 Periodical Publishers – Scientific Journal and Periodical Publishers with Small Business Size Standard of 1,000 employees. The Product Service Code is 9999 Miscellaneous Items.

Note: In accordance with DHS Directive 060-01, Development and Use of Strategic Sourcing Contract Vehicles, dated August 24, 2012, strategic sourcing vehicles are mandatory for use, with limited exceptions. Therefore, a strategically sourced contract vehicle will take priority over awarding a standalone CISA contract.

SUBMISSION DETAILS

Interested businesses should submit a brief capabilities statement package (up to ten

(10) 8.5 x 11-inch pages, font no smaller than 10 point) demonstrating ability to provide the services listed in this announcement. Cover pages, points of contact information, and other administrative pages are exclusive of the 10 pages.

Responses to this SSN, including any capabilities statement, shall be electronically submitted in either Microsoft Word or Portable Document Format (PDF), via email no later than Friday, September 13, 2023, at 3:00 p.m. ET.

All responses under this SSN must be emailed to: Angel Rhone, Angel.Rhone@cisa.dhs.gov and William Curto, William.CURTO@cisa.dhs.gov

If your organization has the potential capacity to provide the required services, provide the following information:

Organization name, UEI, CAGE code, Business size (large or small) and socio-economic status (i.e., 8(a), Small Disadvantaged, HUBZone, Service-Disabled Veteran- Owned, Women-Owned Small Business, etc.), address, primary points of contact (POCs) and their email address, web site address, telephone number.

Identify any strategic sourcing vehicles or federal supply schedules your company is included on.

Tailored capability statements addressing the requirements of this notice, with appropriate documentation supporting claims of organizational and staff ability.

Include the type of work your company performed within the last three (3) years in support of the same or similar requirements (similar in size, scope, and complexity).

Provide examples that reflect your company’s capabilities in the task areas outlined in “Required Capabilities” section above and specify whether support has been provided as a prime contractor or subcontractor.

If significant subcontracting or teaming is anticipated; identify potential team members (if known) and describe the administrative and management structure of such arrangements.

mailto:Angel.Rhone@cisa.dhs.gov

Furthermore, CISA’s preference is to procure services on a small business set-aside basis, to the extent possible, based on market research results.

We encourage all small businesses, in all socioeconomic categories (including, 8(a) Business Development Program, Small Disadvantage Business, Historically Underutilized Business Zone, Service-Disabled Veteran-Owned, Women-Owned Small Business concerns), to identify their capabilities in meeting the requirement at a fair market price.

Notional Milestones:

Sources Sought Notice: September 10, 2024 Finalize SOW and Acquisition Strategy: FY24 Q4 Release Solicitation/RFQ: FY24 Q4 Award: FY24 Q4