RFI_BEP IT GRC-PM RESEARCH AND ADVISORY SUBSCRIPTION SERVICES_01.08.25 (001).docx
DOCX document 3 MB Posted
- Solicitation number
- BEP-001
About this file
This is a Request for Information (RFI)/Sources Sought notice from the Bureau of Engraving and Printing (BEP) seeking information about IT Governance, Risk, Compliance, and Performance Management (GRC-PM) research and advisory subscription services. The BEP requires comprehensive research and advisory services to support its IT strategy development, governance framework implementation, and compliance program, including access for 28 users (1 executive-level, 2 senior professional-level, and 25 general user licenses) to an online research portal, dedicated advisory support, analytical services, and industry research content.
Key requirements include providing tailored advisory services, research and analysis, expert support, proprietary document resources, skill acquisition training, and two annual workshops. Responses are due by January 24, 2025, at 5:00 PM EDT, with questions due by January 16, 2025. Vendors must provide capability statements (maximum 5 pages) and company information (maximum 2 pages) demonstrating their ability to deliver these services. The anticipated price range is indicated as either less than or more than $250K. The Department of Treasury's Internal Revenue Service is the contracting agency, and responses should be emailed to both Aisha.Lee@bep.gov and Adrienne.M.Spruill@irs.gov.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
IT GRC-PM Research & Advisory Subscription Services
REQUEST FOR INFORMATION
TO ALL INTERESTED PARTIES
SOURCES SOUGHT: THIS REQUEST FOR INFORMATION (RFI) IS RELEASED PURSUANT TO FEDERAL ACQUISITION REGULATION (FAR) PART 10, MARKET RESEARCH.
This RFI/Sources Sought is issued solely for information and planning purposes only and shall not be construed as either a solicitation or the obligation on the part of Government. This is NOT a solicitation for proposals, proposal abstracts or quotations. This notice is for market research purposes only.
No reimbursement will be made for any costs associated with providing information in response to this announcement or any follow-up information requests.
Respondents WILL NOT be notified of the results of the analysis. All data received in response to this RFI/Sources Sought synopsis that is marked or designated as corporate or proprietary information will be fully protected from release outside the Government. The Government SHALL NOT be liable for or suffer any consequential damages for any proprietary information not properly identified. Proprietary information will be safeguarded in accordance with all applicable Government regulations. All documentation shall become the property of the Government and will not be returned.
BACKGROUND:
The Bureau of Engraving and Printing (BEP) is the largest producer of security documents in the United States, operating facilities in Washington, D.C., and Fort Worth, Texas. The BEP processes billions of Federal Reserve notes annually, in addition to other security documents. The uninterrupted operation of the BEP's IT systems is critical to continuously producing the Nation’s currency levels essential to maintaining national security and economic stability.
The BEP's Chief Information Officer (CIO) Directorate oversees the IT infrastructure supporting these critical operations. The CIO Directorate’s Office of Enterprise Solutions (OES) is responsible for delivering IT products and services to BEP users. With a complex IT environment encompassing multiple systems and applications, the BEP faces significant challenges in areas such as improving its cybersecurity, data management, and system modernization practices.
To address these challenges and capitalize on emerging opportunities, the BEP requires access to cutting-edge IT insights and expertise. The rapid evolution of digital, analytics, and automation technologies presents both challenges and opportunities for the BEP. By leveraging these technologies, the BEP aims to enhance operational efficiency, improve decision-making, and strengthen its security posture. To achieve these goals, the BEP has developed a formal Integrated Governance, Risk, Compliance, and Performance Management (GRC-PM) program. The GRC-PM Program provides the Bureau with a holistic approach to managing its IT environment.
As a critical first step to standing up the program, OES seeks to develop a robust IT strategy and governance framework to effectively address these challenges and seize emerging opportunities. This comprehensive GRC-PM framework ensures improved IT alignment with business objectives, effective risk management, and compliance with relevant regulations. Additionally, this formal program will enable the BEP to better leverage emerging technologies such as integrating AI-driven insights, scaling the RPA program, and accelerating implementation of predictive analytics initiatives. Additionally, GRC-PM will enhance the collaboration between the CIO’s IT security and IT infrastructure and operations offices, allowing them to work more seamlessly with OES to improve delivery and enhance the end-user experience. Contractor support is needed to assist BEP IT staff in standing up the new GRC-PM program with excellence.
SCOPE:
The scope of this PWS is to obtain contractor support for providing an IT research and advisory subscription service that has the capacity to equip the Bureau with the tools and insights to develop and implement a comprehensive enterprise-wide GRC-PM framework and plan and execute on key program initiatives. The Contractor shall provide access to their research, analysis, and advisory services to assist the BEP in:
· Developing and executing a comprehensive IT strategy aligned with the BEP’s mission, vision, and goals.
· Establishing and maturing an effective IT governance framework, including policies, procedures, roles, and responsibilities in compliance with the Bureau’s ISO 9001:2015 program requirements.
· Implementing a robust compliance program to ensure adherence to applicable laws, regulations, and industry standards.
· Optimizing IT investments and resource allocation to support strategic objectives.
· Enhancing IT service delivery and performance through best practice adoption.
· Mitigating IT risks through proactive identification and response.
To achieve these objectives, the Contractor shall provide the following COTS products and services:
· Tailored Advisory Services: Provide personalized GRC-PM guidance from seasoned IT experts with U.S. Federal Government industry specific experience.
· Research and Analysis: Access to a comprehensive IT strategy, governance, and compliance research repository on best practices, case studies, and industry trends.
· Expert Support: Provide access to analysts for inquiries and consultations, as needed to ensure timely and accurate information to address IT challenges.
· Proven Proprietary Document Resources & Frameworks: Supply pre-existing practical resources (e.g., toolkits, templates, practices, etc.) to support IT strategy, governance, and compliance development.
· Skill Acquisition Support Training: Provide access to online knowledge management/training services for up to twenty-five (25) concurrent users on GRC-PM topics.
· Workshop Facilitations: Annually, design, facilitate, and deliver two (2) collaborative workshops with BEP personnel to support the development and implementation of key IT strategic activities.
The Contractor shall provide comprehensive IT subscription-based services based on readily available COTS products and services that the BEP can utilize to produce its own work products. This includes leveraging the Contractor’s readily available expertise and resources to address IT challenges and opportunities shared between IT organizations in the public and private sectors.
IT SOLUTION
Contractors capable of and interested in providing IT research and advisory support services to the BEP should review the Business Capabilities and Requirements section of this document. Contractors are requested to provide a description of their capabilities as it relates to the requirements provided in the Business Capabilities and Requirements section. Standard brochures and/or paraphrasing of this section are not considered sufficient to demonstrate the capabilities of an interested party as a formal evaluation of the responses to this RFI will not be conducted, BEP does not anticipate providing feedback and/or evaluation information to any firm responding to this RFI. However, BEP may request additional information or conduct open exchanges of information with RFI respondents as deemed necessary.
Company Information:
In response to this RFI, vendors should provide the requested company information outlined in the below table.
| ID |
| Company Information |
| 1 |
| Company Name |
| 2 |
| Company Address |
| 3 |
| Company Point of Contact (name, phone number, and email address) |
| 4 |
| Company Type (i.e., small business, 8(a) Business Development Program, Woman-Owned Small Business, Veteran-Owned Small Business, etc.) |
| 5 |
| Current Contract Number and Task Area(s) appropriate for this notice (include Unique Entity Identifiers (UEIs) number and Standard Industrial Classification (SIC)/North American Industry Classification System (NAICS) Code(s)) |
Business Capabilities and Requirements:
In response to this RFI, vendors should address how their approaches and methodologies can address the BEP business capabilities and requirements outlined in the below table.
| ID |
| Business Capabilities and Requirements |
| 1 |
| Basic Services. The Contractor shall provide comprehensive GRC-PM (i.e., IT strategy, governance, risk, compliance, IT financial management, and IT portfolio management) research and advisory services, including in-depth research reports, expert analysis, benchmarking data, vendor evaluations, customized consulting, best practice recommendations, problem-solving assistance, knowledge transfer, online portal access, analyst interaction, research database access, toolkits and templates, regular research updates, client support, and customizable service plans |
| 2 |
| User Licenses. The Contractor shall provide the following licenses to its IT research online repository portal: |
· One (1) IT Executive-Level License
· Two (2) IT Senior Professional-Level License
· Twenty-five (25) General User Licenses for IT GRC-PM Knowledge Management/Learning Portal
| 3 |
| Advisory Support Services. The Contractor shall provide the following research and knowledge support services dependent on licenses held: |
Service Delivery.
· Dedicated Executive Advisor. The Contractor shall provide personalized and confidential one-on-one support to the BEP’s IT Executive User Licensee from a seasoned IT executive to achieve desired strategic outcomes.
· Dedicated IT Professional Support Advisor. The Contractor shall provide one personalized and confidential one-on-one support to the two (2) named BEP IT Senior Professional User Licensees from a seasoned IT Strategy, Governance, Compliance, and Cost Optimization SME(s) to assist them in the development and implementation of IT initiatives and projects.
Analytical Support Services.
· IT Cost Analysis & Optimization. The Contractor shall provide an online service to analyze the BEP’s IT spend and staffing levels for the BEP to identify cost optimization initiatives and develop a twelve (12)-month roadmap.
· Expanded Industry Advisory Access. The Contractor shall provide unlimited phone access to industry experts for guidance on industry research and trends.
· Analyst Calls. The Contractor shall provide unlimited phone access to subject matter experts for tactical implementation related guidance on IT strategy, governance, and compliance frameworks.
IT Research Content.
· Industry Research. The Contractor shall provide in-depth, industry-specific research content including benchmarking reports, trends analysis, and technology evaluations.
· Technology Research. The Contractor shall provide access to IT domain technologies (e.g., AI, cloud, networking, applications etc.) tools, processes, methodologies, and other best-practice mechanisms to support BEP’s goals and objectives.
· IT Process Research. The Contractor shall provide access to a comprehensive set of IT strategy, governance, and compliance methodologies and best practices.
· People & Leadership Research. The Contractor shall provide strategies for effective technology-centric team leadership and management development, as requested.
· Tools & Templates Library. The Contractor shall provide a library with ample tools and templates for IT document creation specifically related to IT strategy, governance, compliance, and cost optimization knowledge domains.
Additional Feature Definitions.
Online Research Portal.
· The Contractor shall provide an extensive library and continually expanding collection of unclassified, downloadable IT document templates, policies, job descriptions, quantitative analysis tools, and business cases to help expedite daily tasks and improve the BEP IT organization’s operational maturity and expanding technology scope. Research can be shared internally without penalty and after contract term expiration.
Premium Industry Coverage.
· The Contractor shall provide Government-specific industry coverage including reference architectures, industry IT metrics/benchmarking reports, and industry notes covering the latest trends and top-of-mind industry IT challenges.
Guided Implementation Assistance.
· The Contractor shall provide step-by-step assistance via published research for each critical stage of desired IT projects, including full-service toolkits, process plans, roadmaps, and project milestone check-ins. Advisory calls with a subject matter expert and the interested IT member.
On-Site/Online Workshops.
· The Contractor shall provide training and knowledge management activities to support the BEP’s development and maturity of its IT Strategy, Governance and Compliance Program.
· The Contractor shall provide unlimited access for up to 25 concurrent users to a knowledge management portal on IT strategy, governance, compliance, cost optimization, and performance management topics.
· The Contractor shall conduct an annual workshop, up to three (3) days in duration, to assist the BEP in developing annual actions plans to execute its IT Strategic Plan.
· The Contractor shall conduct an annual collaborative workshop with the up to twenty-five (25) users to facilitate the development of a detailed tactical plan for one initiative on the BEP IT Strategic Plan. The BEP will select the initiative for which the tactical plan will be developed.
Technical Capabilities and Requirements:
In response to this RFI, vendors should address their technical capabilities outlined in the below table.
| ID |
| Technical Capabilities and Requirements |
| 1 |
| State whether your company currently offers the requested IT GRC-PM research and advisory support subscription services? |
| 2 |
| Provide a detailed capability statement showcasing the organization's organizational structure, staffing, and proven track record in delivering GRC-PM specific IT research and advisory services. |
| 3 |
| To what extent has your company provided IT GRC-PM subscription services, and what specific expertise does your company bring to this domain? |
| 4 |
| List three organizations to which similar types of services have been previously provided within the last three years (include Contract Number, description of the requirement, dollar value, contract type, name, and telephone number of the customer). |
| 5 |
| Provide a rough order of magnitude for a potential solution of this type, relative to the following: |
a. Less than $250K
b. More than $250K
SUBMISSION INFORMATION:
Information Requested
· Company Information (2 pages maximum): Refer to the above company information requests listed within the Submission Information section.
· Capability Statement (5 pages maximum): Briefly outline your capabilities in relation to the business, operational, and non-functional requirements detailed in both the Business Capabilities and Requirements and Technical Capabilities and Requirements sections above.
Questions Process Questions in response to this Sources Sought Notice may be submitted electronically on or before January 16, 2025, 5:00 PM Eastern Daylight Time (EDT). The Government reserves the right to respond to some, all or none of the questions submitted.
Submission Process Deadline: Vendors that meet the requirements described in this announcement are invited to submit their capability statements/RFI responses. The deadline for responses to this RFI is 5:00 PM EDT, January 24, 2025. Responses should be forwarded via email to both the primary and CC below:
Primary: Aisha.Lee@bep.gov CC: Adrienne.M.Spruill@irs.gov
Response Guidelines Subject Line: Please reference “BEP IT GRC-PM Research and Advisory Subscription Services” in the subject line of your response and any subsequent correspondence.
Content: Responses should be concise and focus on demonstrating your ability to provide the required services. Avoid including brochures, advertisements, or irrelevant graphics. Links to relevant websites are acceptable.
Important Notes:
1. The Government will not respond to phone calls regarding this RFI.
2. The Government seeks products and services commercially available on the open market, predicated on academic and commercially proven best practices and utilized by U.S. Federal government, non-profit, and/or private sector organizations.
image1.png
File details come from the government source that posted it. Updated .