9523ZY20Q0039 A0002 - 10.01.20 - 2.pdf

(x)

9523ZY20Q0039

x x copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted ; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGEMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR

OFFER. If by virtue of this amendment you desire to change an offer already submitted , such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

x

CFTC-FMB

WASHINGTON DC 20581

1155 21ST STREET NW

THREE LAFAYETTE CENTER

COMMODITY FUTURES TRADING COMM

10/01/2020

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS. IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

12. ACCOUNTING AND APPROPRIATION DATA (If required) is not extended.is extended, Items 8 and 15, and returning

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended , by one of the following methods: (a) By completing

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

FACILITY CODE CODE

10B. DATED (SEE ITEM 13)

10A. MODIFICATION OF CONTRACT/ORDER NO.

9B. DATED (SEE ITEM 11)

9A. AMENDMENT OF SOLICITATION NO.

CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code)

7. ADMINISTERED BY (If other than Item 6)CODE 6. ISSUED BY

PAGE OF PAGES

4. REQUISITION/PURCHASE REQ. NO.3. EFFECTIVE DATE2. AMENDMENT/MODIFICATION NO.

5. PROJECT NO. (If applicable)

1. CONTRACT ID CODE

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

06/25/2020

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority) appropriation data, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

E. IMPORTANT: Contractor is not is required to sign this document and return __________________ copies to the issuing office.

ORDER NO. IN ITEM 10A.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

SEE ATTACHED PAGES

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)15A. NAME AND TITLE OF SIGNER (Type or print)

15C. DATE SIGNED 16B. UNITED STATES OF AMERICA 15B. CONTRACTOR/OFFEROR 16C. DATE SIGNED

(Signature of person authorized to sign) (Signature of Contracting Officer)

CHRISTINE PARK

STANDARD FORM 30 (REV. 11/2016)

Prescribed by GSA FAR (48 CFR) 53.243

Previous edition unusable

Except as provided herein, all terms and conditions of the document referenced in Item 9 A or 10A, as heretofore changed, remains unchanged and in full force and effect .

RFQ 9523ZY-20-Q-0039 – A0002

The purpose of this amendment is to provide the following clarification in addition to reopening the RFQ due to CFTC not receiving viable quotations to make an award.

1. The Combined Synopsis/Solicitation notice stated:

"The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2020-06 effective May 6, 2020."

This statement is replaced with the following:

"The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2020-07 effective August 31,2020."

2. This amendment changes RFQ 9523ZY-20-Q-0039 to: 1) Revise the Statement of Work to remove the requirement that the “solution for multifactor authentication and HSPD-12 shall not be solely reliant on the CFTC having implemented Active Directory Federation Services (ADFS)/Security Assertion Markup Language (SAML)” (page 6 of the RFQ);

and, 2) extend the due date and time for quotation submissions to 1:00PM on October 13, 2020.

After further review of the Statement of Work, it was determined that meeting the requirement stated above from page 6 of the RFQ is no longer necessary as a SAML server was implemented at the CFTC at the end of September 2020.

3. As a result of the above, the attached relevant change pages are provided as follows:

a. Page 6 of the original RFQ is replaced with the attached page 6

4. All responsible sources may submit a quotation pursuant to the terms of the solicitation, as revised through this amendment. Vendors that previously submitted a quotation may submit a quotation revision prior to the new date and time for receipt of quotations established by this amendment. If such vendors do not submit a new or revised quotation, CFTC will consider their previous quotation submitted for this procurement.

(End of Amendment A0002)

RFQ# 9523ZY-20-Q-0039 - Page 6 Replacement (A0002)

• The Contractor shall meet CFTC authentication requirements, including multifactor authentication and compliant with HSPD-12 mandate requirements and NIST SP 800-63 for remote access.

• A CFTC-approved logon banner shall be displayed on the first page of any public access web page provided.

• The Contractor shall maintain backups for a minimum and maximum of 6 months.

• The Contractor shall maintain availability of the service during CFTC primary business hours of 6:00 a.m. and 8:00 p.m. Eastern Time Monday through Friday.

• The Contractor shall employ a continuous monitoring strategy to monitor the system.

h. System Privacy

i. Privacy Controls

• The CAFM system shall provide privacy controls to ensure compliance with applicable privacy requirements and to manage the risks to individuals associated with the system’s creation, collection, use, processing, dissemination, storage, maintenance, disclosure, or disposal (collectively referred to as “processing”) of personally identifiable information (PII). This includes providing adequate protection of user information, using a least privilege model for access to PII, completing a privacy impact assessment, and providing appropriate notice to users regarding the processing of PII.

• Contractors, including system development and support staff, will be required to ensure ongoing compliance with the privacy control requirements included in the current version of NIST SP 800-53.

ii. Breach Reporting

• Contractors shall report computer security incidents affecting CFTC data and systems or a breach of personally identifiable information, as defined in OMB Memorandum M-17-12, to CFTC staff in accordance with the National Cybersecurity and Communications Integration Center’s (NCCIC) / United States Computer Emergency Readiness Team (US-CERT) Federal Incident Response Guidelines and CFTC’s policy on “Responding to Incidents Involving CFTC Confidential Information.”