CORHQ-24-Q-0480-Mod0002.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF AWARD

1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NO. 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQ. NO. 5. PROJECT NO. (If applicble)

7. ADMINISTERED BY (If other than Item 6) CODE

FDIC 3700/56 (3-08)

FACILITY CODE

9A. AMENDMENT OF SOLICIATION NO.

9B. DATED (SEE ITEM 11)

10A. MODIFICATION OF CONTRACT/ORDER NO.

10B. DATED (SEE ITEM 11)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended, is not extended.

Offer must acknowledge receipt of this amendment by signing in Block 15b below and including the signed amendment with the offeror's proposal.

12. N/A

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO THE CHANGE ORDERS CLAUSE

B. THIS MODIFICATION IS ENTERED INTO PURSUANT TO THE AUTHORITY OF THE FDIC CONTRACTING OFFICER

C. THIS MODIFICATION IS ENTERED INTO PURSUANT TO MUTUAL AGREEMENT OF THE PARTIES

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remain unchanged and in full force and effect.

15C. DATE SIGNED

15A. NAME AND TITLE OF SIGNER (Type or print)

16C. DATE SIGNED

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

14. DESCRIPTION OF AMENDMENT/MODIFICATION

PAGE OF PAGES

6. ISSUED BY CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code) (X)

CODE

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

CORHQ-24-Q-0480 / 0002

Questions and Answers for

FDIC Solicitation CORHQ-24-Q-0480

Bomgar Software Maintenance

• Scope and Deliverables o Will FDIC require any additional BeyondTrust software features or customization beyond standard maintenance and license renewals?

No o What metrics or benchmarks will FDIC use during the 15-day inspection period for service acceptance?

Confirmation of the correct number of licenses and the correct version of the software

• Compliance and Security Requirements o Are there specific data protection protocols or compliance certifications

FDIC requires from the contractor (e.g., NIST or FedRAMP compliance)?

No o Can you clarify any FDIC-specific data handling policies, particularly regarding retention or destruction of FDIC data after contract completion?

Please reference FDIC IT Security Clauses 7.4.2-02, 7.4.2-05, 7.1.2-03, and 7.1.2-04. No data is stored or processed by the appliance.

• License and Technical Specifications o Could you provide details on the specific BeyondTrust software versions currently in use at FDIC and any plans to upgrade during the contract period?

Currently on version 24.1.2 installed in July 2024. As part of our maintenance renewal, we would upgrade whenever the vendor comes out with an upgrade.

o Will FDIC provide access to internal systems or ServiceNow configurations for testing and integrating the BeyondTrust solution Solution is already in place and has been live for several years – we won’t need any access to internal systems or ServiceNow configurations.

• Contract Timeline and Deadlines o Are there required timelines for initial project kick-off meetings or onboarding after the contract award?

No, the solution is already live. No kick off meeting needed.

• Reporting and Invoicing o Are there specific reporting formats FDIC prefers for quarterly service updates and compliance reporting?

No o Will FDIC require separate invoicing for each service component (e.g., licenses, integration, appliances), or is a consolidated invoice acceptable?

Consolidated is acceptable

• Additional Compliance and Legal Concerns o Are there any additional compliance requirements for subcontractors especially regarding data security or background checks?

No additional requirements for subcontractors. Data security requirements should flow down to the sub-contractor(s). No background checks are required for this requirement.

o Can you confirm that System for Award Management (SAM) registration is the only registration required, or are other verifications needed?

Yes, Sam.gov registration is the only registration required for the FDIC to make a contract award.

• Renewal and Option Year Terms o If FDIC opts to exercise option years, when would the contractor be notified of each renewal?

Please reference Clause 7.5.5-02 - Notice of Exercise of Option o Will pricing adjustments be allowed in option years based on potential increases in BeyondTrust license costs or other factors?

No

DOA/ASB

3501 Fairfax Dr Arlington, VA 22226 ravchilds@fdic.gov

571-213-7297 ravchilds@fdic.gov