CORHQ-25-Q-0392-P00001.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF AWARD

1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NO. 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQ. NO. 5. PROJECT NO. (If applicble)

7. ADMINISTERED BY (If other than Item 6) CODE

FDIC 3700/56 (3-08)

FACILITY CODE

9A. AMENDMENT OF SOLICIATION NO.

9B. DATED (SEE ITEM 11)

10A. MODIFICATION OF CONTRACT/ORDER NO.

10B. DATED (SEE ITEM 11)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended, is not extended.

Offer must acknowledge receipt of this amendment by signing in Block 15b below and including the signed amendment with the offeror's proposal.

12. N/A

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO THE CHANGE ORDERS CLAUSE

B. THIS MODIFICATION IS ENTERED INTO PURSUANT TO THE AUTHORITY OF THE FDIC CONTRACTING OFFICER

C. THIS MODIFICATION IS ENTERED INTO PURSUANT TO MUTUAL AGREEMENT OF THE PARTIES

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remain unchanged and in full force and effect.

15C. DATE SIGNED

15A. NAME AND TITLE OF SIGNER (Type or print)

16C. DATE SIGNED

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

14. DESCRIPTION OF AMENDMENT/MODIFICATION

PAGE OF PAGES

6. ISSUED BY CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code) (X)

CODE

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

CORHQ-25-Q-0392 / 0001

CONTROLLED//FDIC BUSINESS

1. What is the name of the incumbent?

HPI Federal LLC

2. What contract vehicle was used to procure the incumbent’s DaaS services?

An FDIC Basic Ordering Agreement (BOA) and Task Order was used to procure the incumbent’s DaaS services.

3. What is the incumbent’s Procurement Instrument Identifier or FDIC’s equivalent?

CORHQ-22-R-0415

4. When does the incumbent’s period of performance end?

The BOA expires June 4, 2028.

5. What are the biggest challenges you’re facing today with your current device environment?

a. FDIC faces challenges in inventory management and cost/benefit of services.

b. Scalability – ability to easily scale upward or downward as federal and contractor headcount fluctuates.

6. What pain points do you want to solve with the new model?

a. FDIC is seeking input from industry on best practices and innovations in the

DaaS space.

b. Flexibility to change models ad-hoc as needed.

7. What’s missing from your current solution?

Availability of a variety of device types for special needs

8. What does success look like to you in this program five years from now?

a. FDIC would measure success through cost optimization and quality of devices and services.

b. Ability to scale.

9. What risks or concerns do you want vendors to proactively solve for?

Inventory management to surge or reduce device quantity as government needs evolve.

10. Describe options for the Device Categories listed above to address a wide range of standard and custom computing needs.

Our business model is based on a build-to-order approach, delivering laptops, desktops, tablets, and special-purpose devices configured to customer requirements by user persona. In order to ensure alignment with FDIC requirements, We respectfully requests that the FDIC provide defined user personas and/or minimum technical specifications for each applicable use case.

In general, FDIC special purpose use cases include training and graphics requirements.

More specifications may be provided if a future procurement is issued.

11. What specific COTS/GOTS-based tools are you using to assist with your device deployment or asset management? Please provide a list of these tools.

a. FDIC currently uses ServiceNow for asset management.

b. Microsoft Intune is used for Device Provisioning and Management

12. Provide a client POC who can speak authoritatively on the Government’s approach to implement cybersecurity requirements on your DaaS model. Does the "client

POC" refer to a Dell customer? Or someone in our organization who focuses on client security?

A federal government customer POC.

13. Will FDIC provide a breakdown of which services are currently performed in-house

vs. outsourced?

FDIC performs the following services in-house: defining the FDIC base image; device, application and OS management/patching; manage and monitor end point security of devices.

14. Can FDIC clarify expectations for “dynamic reporting” and integration with its ITSM system—what platform is currently used?

a. ServiceNow is currently used for asset management.

b. Reporting of asset allocations, warranty / break-fix history, identification of machines experiencing x Incidents over a period of time.

15. Will FDIC provide access to its current Intune configuration and policies for compatibility testing?

Access to FDIC systems can only be provided after contract award and personnel security clearances.

16. Are there specific requirements for integration with FDIC’s Active Directory and VPN

(Palo Alto GlobalProtect)?

These will be provided if a future solicitation is issued.

17. What is the expected overlap period between the current DaaS contract and the new one?

A one-year transition period is desired.

18. What specific federal cybersecurity frameworks (e.g., NIST 800-53, FedRAMP) must the DaaS solution comply with?

NIST SP 800-53, current Rev and FedRAMP or equivalent. There may be other specific cybersecurity requirements added if a future solicitation is issued.

19. What thresholds or metrics does FDIC use to evaluate supply chain resilience and surge capacity?

FDIC requires TAA compliant supply chains and abides by federal requirements for supply chain risk management as per NIST SP 800-161. FDIC requires the ability to quickly increase or decrease device quantity at a rate of between 5% – 10% of the deployed base. FDIC relies on a vendor to mitigate supply chain risks that could impede

FDIC’s ability to achieve mission success.

20. Are there preferred vendors or platforms for TAA/NDAA compliance verification?

No.

21. Will FDIC host in-person or virtual product demonstrations as part of this market research?

Not as part of this RFI. FDIC may request product demos in the future.

DOA/ASB

3501 Fairfax Drive, E-4003 Arlington, VA 22226 ellismith@fdic.gov

(703) 562-6255 ellismith@fdic.gov

1. Provide the questions and answers.

2. Extend the RFI due date to September 24, 2025 at 1 pm.