CORHQ-25-Q-0377-Amendment 0002.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF AWARD

1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NO. 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQ. NO. 5. PROJECT NO. (If applicble)

7. ADMINISTERED BY (If other than Item 6) CODE

FDIC 3700/56 (3-08)

FACILITY CODE

9A. AMENDMENT OF SOLICIATION NO.

9B. DATED (SEE ITEM 11)

10A. MODIFICATION OF CONTRACT/ORDER NO.

10B. DATED (SEE ITEM 11)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended, is not extended.

Offer must acknowledge receipt of this amendment by signing in Block 15b below and including the signed amendment with the offeror's proposal.

12. N/A

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO THE CHANGE ORDERS CLAUSE

B. THIS MODIFICATION IS ENTERED INTO PURSUANT TO THE AUTHORITY OF THE FDIC CONTRACTING OFFICER

C. THIS MODIFICATION IS ENTERED INTO PURSUANT TO MUTUAL AGREEMENT OF THE PARTIES

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remain unchanged and in full force and effect.

15C. DATE SIGNED

15A. NAME AND TITLE OF SIGNER (Type or print)

16C. DATE SIGNED

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

14. DESCRIPTION OF AMENDMENT/MODIFICATION

PAGE OF PAGES

6. ISSUED BY CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code) (X)

CODE

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

CORHQ-25-Q-0377 / 0002

NONPUBLIC//FDIC INTERNAL ONLY#

Total Price Base Period + Option Periods $ -

Description

Time of Delivery:

Technical Point of Contract:

Company:

Phone:

Email Address:

This requirement is for the Tenable software for a base year and two one-year option periods. The Tenable software tool is used to fulfill the FDIC's obligation to meet NIST 800-53 RA-5 and CM-6. The capabilities include: host vulnerability detection, baseline compliance detection, The Rapid7 metasploit product is used to fulfil the FDIC's obligation to meet NIST 800-53 CA-8, CA-8(1), CA-8(2), and RA-5 and it assists with running vulnerability exploit attempts in a controlled, repeatable and documented fashion.

Line Item # Purchase Category Purchase Type Description Manufacturer Period of Performance Qty Part # List Price Discount Net Price Extended Net Price

0001 SUBSCRIPTION MAINTENANCE Standard Tenable.sc Console(s) included with Tenable.sc+ purchase** TRUSTED PRODUCT ** Tenable 12/21/2025 - 12/20/2026 1 TSCCV-STNDC-GS $ - $ - $ - $ -

0002 SUBSCRIPTION MAINTENANCE

Tenable Security Center Plus includes scanners 1GB NNM Must match $152,410.24

T.sc license count if upgrading - Annual Maintenance - IP Bands: 50000**

TRUSTED PRODUCT**

Tenable 12/21/2025 - 12/20/2026 1 TSCCV-M-GS $ - $ - $ - $ -

0003 SUBSCRIPTION MAINTENANCE

Renewal-Metasploit Pro User Subscription -

Licensed per user. Each user may login simultaneously to a single Metasploit install

Rapid7 12/21/2025 - 12/20/2026 3 R-MSP-SUB $ - $ - $ - $ -

0004 SUBSCRIPTION MAINTENANCE Nessus Professional - On Premise - Annual Subscription** TRUSTED PRODUCT ** Tenable 12/21/2025 - 12/20/2026 1 GS-SERV-NES $ - $ - $ - $ -

0005 SUBSCRIPTION MAINTENANCE

Tenable.sc+ for Lab Use Only - Annual Subscription: 64 IPs; 1 Nessus

Scanner; 1GB Nessus Network Monitor; 1TB Log Correlation Engine**

TRUSTED PRODUCT**

Tenable 12/21/2025 - 12/20/2026 1 TSCCV-LAB-GS $ - $ - $ - $ -

0006 SUBSCRIPTION MAINTENANCE Premier Support for Tenable Enterprise Customers.** TRUSTED PRODUCT** Tenable 12/21/2025 - 12/20/2026 1 TECH-SUP-PREM $ - $ - $ - $ -

Total Price -$

Price Schedule - Base Period Requirement Description: Tenable & Rapid7 Subscription Maintenance

Line Item # Purchase Category Purchase Type Description Manufacturer Period of Performance Qty Part # List Price Discount Net Price Extended Net Price

1001 SUBSCRIPTION MAINTENANCE Standard Tenable.sc Console(s) included with Tenable.sc+ purchase** TRUSTED PRODUCT ** Tenable 12/21/2026 - 12/20/2027 1 TSCCV-STNDC-GS $ - $ - $ - $ -

1002 SUBSCRIPTION MAINTENANCE

Tenable Security Center Plus includes scanners 1GB NNM Must match $152,410.24

T.sc license count if upgrading - Annual Maintenance - IP Bands: 50000**

TRUSTED PRODUCT**

Tenable 12/21/2026 - 12/20/2027 1 TSCCV-M-GS $ - $ - $ - $ -

1003 SUBSCRIPTION MAINTENANCE

Renewal-Metasploit Pro User Subscription -

Licensed per user. Each user may login simultaneously to a single Metasploit install

Rapid7 12/21/2026 - 12/20/2027 3 R-MSP-SUB $ - $ - $ - $ -

1004 SUBSCRIPTION MAINTENANCE Nessus Professional - On Premise - Annual Subscription** TRUSTED PRODUCT ** Tenable 12/21/2026 - 12/20/2027 1 GS-SERV-NES $ - $ - $ - $ -

1005 SUBSCRIPTION MAINTENANCE

Tenable.sc+ for Lab Use Only - Annual Subscription: 64 IPs; 1 Nessus

Scanner; 1GB Nessus Network Monitor; 1TB Log Correlation Engine**

TRUSTED PRODUCT**

Tenable 12/21/2026 - 12/20/2027 1 TSCCV-LAB-GS $ - $ - $ - $ -

1006 SUBSCRIPTION MAINTENANCE Premier Support for Tenable Enterprise Customers.** TRUSTED PRODUCT** Tenable 12/21/2026 - 12/20/2027 1 TECH-SUP-PREM $ - $ - $ - $ -

Total $ -

Requirement Description: Tenable & Rapid7 Subscription Maintenance Price Schedule - Option Period 1

Line Item # Purchase Category Purchase Type Description Manufacturer Period of Performance Qty Part # List Price Discount Net Price Extended Net Price

2001 SUBSCRIPTION MAINTENANCE

Standard Tenable.sc Console(s) included with

Tenable.sc+ purchase** TRUSTED PRODUCT ** Tenable 12/21/2027 - 12/20/2028 1 TSCCV-STNDC-GS $ - $ - $ - $ -

2002 SUBSCRIPTION MAINTENANCE

Tenable Security Center Plus includes scanners 1GB NNM Must match $152,410.24

T.sc license count if upgrading - Annual Maintenance - IP Bands: 50000**

TRUSTED PRODUCT**

Tenable 12/21/2027 - 12/20/2028 1 TSCCV-M-GS $ - $ - $ - $ -

2003 SUBSCRIPTION MAINTENANCE

Renewal-Metasploit Pro User Subscription -

Licensed per user. Each user may login simultaneously to a single Metasploit install

Rapid7 12/21/2027 - 12/20/2028 3 R-MSP-SUB $ - $ - $ - $ -

2004 SUBSCRIPTION MAINTENANCE

Nessus Professional - On Premise - Annual

Subscription** TRUSTED PRODUCT ** Tenable 12/21/2027 - 12/20/2028 1 GS-SERV-NES $ - $ - $ - $ -

2005 SUBSCRIPTION MAINTENANCE

Tenable.sc+ for Lab Use Only - Annual Subscription: 64 IPs; 1 Nessus

Scanner; 1GB Nessus Network Monitor; 1TB Log Correlation Engine**

TRUSTED PRODUCT**

Tenable 12/21/2027 - 12/20/2028 1 TSCCV-LAB-GS $ - $ - $ - $ -

2006 SUBSCRIPTION MAINTENANCE

Premier Support for Tenable Enterprise

Customers.** TRUSTED PRODUCT** Tenable 12/21/2027 - 12/20/2028 1 TECH-SUP-PREM $ - $ - $ - $ -

Total $ -

Price Schedule - Option Period 2 Requirement Description: Tenable & Rapid7 Subscription Maintenance

The following Provision is hereby updated.

7.3.2-09 – General Proposal Instructions – December 2023

(a) This solicitation does not commit the FDIC to award any contract, to pay any cost incurred related to proposal submission, oral presentation, or any subsequent negotiations. It is also the offeror’s responsibility to inform the

FDIC of any present, pending or possible future conflict of interest.

(b) Because the FDIC expects to receive and analyze a large volume of data in selection of the successful offeror, offers shall be made strictly in accordance with the format set forth herein. Failure to comply with the terms and conditions of this solicitation may result in the offeror being removed from consideration for award.

(c) Each offer shall be divided into the following separate parts:

1. Price Schedule Workbook (Pricing must be submitted in the workbook)

2. Section K - Representation & Certifications (required)

3. Software License Agreements, EULAs, MSAs or similar terms and

Conditions (if applicable)

4. SCRM Information (See Clause 7.1.2-03 Pre-Award Supply Chain Risk Management (SCRM) Information) (required)

5. Proof of Authorized Partnership/Reseller status from the Manufacturers listed in the Price Schedule. (if applicable)

(d) The quote shall have a cover page that identifies: (1) the offeror's name, address, telephone number and the name of its contact person regarding the solicitation; (2) the solicitation number.

(e) Exceptions taken to the terms and conditions of the solicitation, including the attachments, must be identified and fully described in the email response to the solicitation. Each exception must be identified specifically, by

The following Provision is hereby updated.

reference to the paragraph or part of the solicitation to which exception is taken. Provide rationale in support of the exception and fully explain the impact it has, if any, on performance, schedule, and price.

Failure to comply with the terms and conditions of the solicitation may result in the offeror being removed from consideration for award.

Attachment M-1

NONPUBLIC//FDIC BUSINESS

Lowest Price Technically Acceptable (LPTA) – Evaluation Methodology

(a) FDIC may award a contract to the responsive offer which is technically acceptable and has the lowest price.

(b) After receipt and evaluation of proposals, FDIC may award a contract to the responsive offer which is technically acceptable and has the lowest price. Technical Acceptability will be determined by the offer meeting FDIC’s minimum technical requirement.

Minimum Technical Requirements:

• Offeror must provide ALL required documents listed in FDIC Provision 7.3.2-09 General Proposal Instructions.

• Offeror must provide ALL items with matching Part Numbers in Section B - Price Schedule.

• Offeror must be an Authorized Reseller/Partner of Tenable and Rapid7. Contractor shall provide proof of they partnership status. The CO may contact Tenable and Rapid7to confirm the Offeror's reseller status.

(c) Proposals will be evaluated as either “acceptable” or “unacceptable”. If the offer cannot meet the minimum technical requirements. The offer will be deemed “unacceptable”.

There is no evaluation benefit to a proposal that exceeds a minimum requirement.

DOA/ASB

3501 Fairfax Dr Arlington, VA 22226 ditoles@fdic.gov

ditoles@fdic.gov

Offers received that do not use the Price Schedule Workbook attached to SAM.gov, provide the required Pre-Award SCRM Information, and are not authorized resellers of Tenable and Rapid7 will be deemed unacceptable.

See continuation pages for changes.