Attachment II - RFI 70RDA126RFI000003 QUESTIONS.pdf
PDF 158 KB Posted
- Solicitation number
- 70RDA126RFI000003
About this file
This is a Request for Information (RFI) issued by the Department of Homeland Security (DHS) seeking vendor responses regarding an enterprise license for biometric matching software (RFI 70RDA126RFI000003).
DHS seeks detailed responses addressing three primary areas: (1) Enterprise Biometric Matching Capability & Technical Maturity—vendors must describe support for multiple biometric modalities (face, fingerprint, palm, iris, voice, multimodal fusion), demonstrated performance metrics including False Accept Rate (FAR), False Reject Rate (FRR), latency, throughput, and scalability for high-volume environments, support for 1:1 verification, 1:N identification, deduplication, watchlist management, and real-time/batch processing, evidence of operational deployments in Federal or national-security environments, alignment with biometric standards (ISO/IEC 19795, ISO/IEC 30107) and presentation attack detection capabilities, and approach to minimizing vendor lock-in through standards-based interoperability; (2) Security, Privacy, Data Governance, and Compliance Posture—addressing encryption methods for data at rest and in transit, key management, role-based access controls, audit logging and SIEM integration, compliance with frameworks including CJIS, HIPAA, GDPR, CCPA, ISO 27001, SOC 2, and FedRAMP, data governance including NARA-aligned retention and deletion controls, policies on Government data use for algorithm training, and data portability at contract expiration; and (3) Scalability, Deployment Flexibility, Licensing, and Sustainment—describing support for on-premises, FedRAMP-authorized cloud, hybrid, and edge deployments, high availability and disaster recovery architectures with RTO/RPO targets, capacity planning for 3–5-year growth, licensing model structure for enterprise-wide use and scaling, maintenance and vulnerability management approaches, training and documentation support, and experience with proof-of-concept evaluations and government validation activities.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment II
RFI 70RDA126RFI000003 QUESTIONS
Enterprise License for Biometrics Matching Software
Under this RFI, DHS is seeking responses and any comments or suggestions in the following areas:
1) Enterprise Biometric Matching Capability & Technical Maturity
Describe your company’s capability to deliver an enterprise-wide, multi-modal biometric matching solution that meets DHS mission requirements?
Responses should address:
1) Supported biometric modalities (e.g., face, fingerprint, palm, iris, voice, multimodal fusion) and technical approach.
2) Demonstrated performance metrics, including False Accept Rate (FAR), False Reject Rate (FRR), latency, throughput, and scalability in high-volume operational environments.
3) Support for 1:1 verification, 1:N identification, deduplication, watchlist management, scoring configurability, and real-time vs. batch processing.
4) Evidence of operational deployments of similar scale and complexity (preferably Federal or national-security environments).
5) Alignment with relevant biometric standards (e.g., ISO/IEC 19795, ISO/IEC 30107) and presentation attack detection (PAD) capabilities.
6) Approach to minimizing vendor lock-in and ensuring interoperability with standards-based data formats and APIs.
2) Security, Privacy, Data Governance, and Compliance Posture
Describe your company’s approach to ensuring security, privacy, and regulatory compliance for an enterprise biometric matching solution operating in DHS environments?
Responses should address:
1) Encryption methods for data at rest and in transit; key management practices.
2) Role-based access controls, least-privilege enforcement, and integration with enterprise IAM systems.
3) Audit logging capabilities, SIEM integration (e.g., Splunk, QRadar, Elastic), and support for forensic analysis.
4) Compliance with applicable frameworks (e.g., CJIS, HIPAA, GDPR where applicable, CCPA, ISO 27001, SOC 2, FedRAMP).
Attachment II
RFI 70RDA126RFI000003 QUESTIONS
Enterprise License for Biometrics Matching Software
5) Data governance capabilities, including data minimization, retention, archival, deletion controls aligned to NARA schedules, and support for Government data ownership.
6) Policies regarding use of Government data for algorithm training, testing, or commercial improvement.
7) Data portability and transition support at contract expiration.
3) Scalability, Deployment Flexibility, Licensing, and Sustainment
Describe your company’s ability to support DHS enterprise deployment models, elastic scaling, and long-term sustainment of a biometric matching capability?
Responses should address:
1) Support for on-premises, cloud (FedRAMP-authorized), hybrid, and edge deployments, including hardware sizing and GPU/CPU requirements.
2) Architecture for high availability, redundancy, and disaster recovery (including RTO/RPO targets).
3) Capacity planning assumptions and ability to scale over a 3–5-year growth horizon without major architectural redesign.
4) Licensing model structure, including how enterprise-wide use, scaling by volume, modalities, or transaction counts is handled.
5) Approach to updates, maintenance, patching, vulnerability management, and technical support.
6) Training, documentation, and user adoption support for both technical and operational users.
7) Experience supporting proof-of-concept evaluations, integration testing, and government validation activities.
File details come from the government source that posted it. Updated .