CISA VDP Draft Schedule.xlsx

XLSX spreadsheet 111 KB Posted May 12, 2020

Attached to: Vulnerability Disclosure Platform - Request for Information (RFI)
Solicitation number: ID08200VDP1
Issued by: General Services Administration Federal Acquisition Service Assisted Acquisition Services Region 8

View the file

Other files

File	Type	Posted
QandA RFI Compliance for CISA Vulnerability Disclosure Platform - Follow up VDP1.xlsx	XLSX spreadsheet	May 26, 2020
VDP DRAFT PWS.pdf	PDF	May 12, 2020
VDP Request for Information.pdf	PDF	May 12, 2020

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

Summary

CISA VDP Summary Rollup - IGCE
CLIN	Description	CLIN	Quantity	Unit	Base Period	Option Yr. 1	Option Yr. 2	Option Yr. 3	Option Yr. 4	Total
X001	Management and Operation of VDP (Task 1)	FFP	12	Months	$	$	$	$	$	$
X002	Triage Reporting (Task 2)	T&M	##	Reports	$	$	$	$	$	$
X003	Bug Bounty Pool (Task 3)	NTE			$	$	$	$	$	$ - 0

Total Price All CLINS $ - 0 $ - 0 $ - 0 $ - 0 $ - 0 $ - 0

Base Year Base Year

MANDATORY FFP CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Fixed Firm Price
0001	Management and Operation of VDP (Task 1)	FFP	12	Months

MANDATORY T&M CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Price
0002	Triage Reporting (Task 2)	T&M	##	Reports

Optional CLINs
CLIN	Description	CLIN Type	Total NTE Price
0003	Bug Bounty Pool (Task 3)	NTE	$ - 0
0003a	Bug Bounty Agency A
0003b	Bug Bounty Agency B
0003c	Bug Bounty Agency C
0003d	Bug Bounty Agency D
0003e	Bug Bounty Agency E
0003f	Bug Bounty Agency F

Total Base Year CLINs: $ - 0

Option Year 1 Option Year 1

MANDATORY FFP CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Fixed Firm Price
1001	Management and Operation of VDP (Task 1)	FFP	12	Months

MANDATORY T&M CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Price
1002	Triage Reporting (Task 2)	T&M	##	Reports

Optional CLINs
CLIN	Description	CLIN Type	Total NTE Price
1003	Bug Bounty Pool (Task 3)	NTE	$ - 0
1003a	Bug Bounty Agency A
1003b	Bug Bounty Agency B
1003c	Bug Bounty Agency C
1003d	Bug Bounty Agency D
1003e	Bug Bounty Agency E
1003f	Bug Bounty Agency F

Total Option Year 1 CLINs: $ - 0

Option Year 2 Option Year 2

MANDATORY FFP CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Fixed Firm Price
2001	Management and Operation of VDP (Task 1)	FFP	12	Months	$ - 0

MANDATORY T&M CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Price
2002	Triage Reporting (Task 2)	T&M	##	Reports

Optional CLINs
CLIN	Description	CLIN Type	Total NTE Price
2003	Bug Bounty Pool (Task 3)	NTE	$ - 0
2003a	Bug Bounty Agency A
2003b	Bug Bounty Agency B
2003c	Bug Bounty Agency C
2003d	Bug Bounty Agency D
2003e	Bug Bounty Agency E
2003f	Bug Bounty Agency F

Total Option Year 2 CLINs: $ - 0

Option Year 3 Option Year 3

MANDATORY FFP CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Fixed Firm Price
3001	Management and Operation of VDP (Task 1)	FFP	12	Months	$ - 0

MANDATORY T&M CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Price
3002	Triage Reporting (Task 2)	T&M	##	Reports

Optional CLINs
CLIN	Description	CLIN Type	Total NTE Price
3003	Bug Bounty Pool (Task 3)	NTE	$ - 0
3003a	Bug Bounty Agency A
3003b	Bug Bounty Agency B
3003c	Bug Bounty Agency C
3003d	Bug Bounty Agency D
3003e	Bug Bounty Agency E
3003f	Bug Bounty Agency F

Total Option Year 3 CLINs: $ - 0

Option Year 4 Option Year 4

MANDATORY FFP CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Fixed Firm Price
4001	Management and Operation of VDP (Task 1)	FFP	12	Months

MANDATORY T&M CLINs
CLIN	Description	CLIN Type	Quantity	Unit	Total Price
4002	Triage Reporting (Task 2)	T&M	##	Reports

Optional CLINs
CLIN	Description	CLIN Type	Total NTE Price
4003	Bug Bounty Pool (Task 3)	NTE
4003a	Bug Bounty Agency A
4003b	Bug Bounty Agency B
4003c	Bug Bounty Agency C
4003d	Bug Bounty Agency D
4003e	Bug Bounty Agency E
4003f	Bug Bounty Agency F

Total Option Year 4 CLINs: $ - 0

Vulnerability Report Calculator

Total # of Vulnerability Reports Per Year
	# of Agencies	Average .Gov Public Domains	Other Internet-Accessible Information Systems	Total Internet-Accessible Information Systems	Reports Per Domain/System in 12 month period	Total # of Vulnerability Reports
Non-CFO Act Agencies	75	##	##	ERROR:#VALUE!	##	ERROR:#VALUE!
CFO Act Agencies	23	##	##	ERROR:#VALUE!	##	ERROR:#VALUE!
						ERROR:#VALUE!
Notes:

Description	Amount
Total # of Vulnerability Reports Per Year	$
Price per report in 12 month period	$
	Total

Vulnerability Report Pricing This template is intended to be provided to prospective vendors to show group pricing and discounts by # of vulnerability reports. Note: arbitrary numbers are included for examples

# of Vulnerability Reports	Base Year Price	Option Yr. 1 Price	Option Yr. 2 Price	Option Yr. 3 Price	Option Yr. 4 Price
100
200
300
400
500
1000

# of Purchased Reports Required to Obtain Discount	Base Year % Discount	Option Yr. 1 % Discount	Option Yr. 2 % Discount	Option Yr. 3 % Discount	Option Yr. 4 % Discount
500
1000
2000
5000
Note: Price % discount will be applied as bands to any reports purchased after a threshold is met (e.g. after 500 reports have been purchased, reports 501 to 1000 would get the % discount applied until the next band is met. It is anticipated that the number of reports completed will roll over until the next option year.

Bug Bounty Calculator

Bug Bounty Per Year
	# of Agencies	Bug Bounty Pool
Non-CFO Act Agencies	75		$ - 0
CFO Act Agencies	23		$ - 0
			$ - 0

Option 3

OPTION 3

Period Length (Months)	3
Period Length (Weeks)	12

ITEM EXPENSE QUANTITY (Per Month) QUANTITY (Total) COST (US Dollars) TOTAL PRICE (US Dollars)

0001 FP Platform and Network Access 1 3 $2,000.00 $6,000.00

0002 FP Vulnerability Report Triage Services (per App) 5 15 $1,000.00 $15,000.00

0003 NTE Bounty Payouts - TTS 1 3 $7,800.00 $23,400.00

0004 NTE Bounty Payouts - Login.gov 1 3 $7,800.00 $23,400.00

0005 NTE Other Direct Costs $0.00

0006 NTE Travel $0.00

Ceiling Price $67,800.00

Definitions:	FP	Fixed Price
	NTE	Not To Exceed

Notes:

The Contractor Service rates were calculated based upon an estimate derived from rates obtained from the most well-known providers of Bug Bounty management services.

The Bounty Payouts were calculated based on market averages, derived from data published by two major vendors and other market research.

File details come from the government source that posted it. Updated May 12, 2020.