Market Survey_Simulated Media Enviroment.docx

Market Survey Simulated Media Environment for Cybersecurity Incident Response Process 2025 Exercise (IRP25)

IRP25 Simulated Media Environment & Software Application Support

1.0 PURPOSE AND INTRODUCTION:

This announcement is a Market Survey. This announcement is NOT A SCREENING INFORMATION REQUEST (SIR) or REQUEST FOR PROPOSAL (RFP). Further, the Federal Aviation Administration (FAA) is not seeking or accepting unsolicited proposals. The FAA will not pay for any information received or costs incurred in preparing the response to the Market Survey. Any costs associated with submittal is solely at the interested vendor’s expense. Please read the entire posting carefully.

As part of its market research, the FAA is issuing this Market Survey to determine if there exists an adequate number of qualified interested vendors capable of providing a solution to meet the requirement. The Government may use the responses to this Market Survey for information and planning purposes. No notification about the outcome of this Market Survey will be released except as deemed appropriate at the FAA’s sole discretion.

A solicitation announcement may be published on the SAM.gov website, or on GSA eBuy, or distributed to contract holders if a strategically sourced vehicle is deemed appropriate. However, this Market Survey does not guarantee that a solicitation or procurement of any kind will be issued, and it should not be construed as a commitment by the Government to enter into a contract.

Respondents to this Market Survey are referred to herein as “you”, “Vendor”, or “Vendors”.

2.0 BACKGROUND:

The Federal Aviation Administration conducts a bi-annual Cybersecurity Incident Response Process 2025 (IRP25) to test the agency's response to cyber threats and incidents. The FAA requires a vendor to build, manage and execute a simulated media environment for IRP25. The vendor must also provide FAA IT Software Application support services in the following functional areas: application log-in access, content management support, and training to enable applications used during the FY25 agency exercise. Additionally, simulated media content should be developed to support exercise objectives and add realism for player engagement during exercise execution week. The FAA requires planning support for the exercise IRP25 for nine (9) months, from December 2024 to August 2025. The five-day live exercise execution is expected to take place in August 2025.

3.0 SCOPE

Software applications support is required for access and management, application helpdesk and documentation, hands-on training and over-the-shoulder mentoring during the FY25 agency annual exercise. Support is required for industry experts to perform the following major services:

1. Manage all user accounts and permissions;

2. Train users to use the simulated platform;

3. Draft simulated events in support of exercise objectives;

4. Build a Simulated Media Project Plan and timeline to meet content requirements;

5. Build and manage all simulated media content;

6. Script and produce four news videos;

7. Virtually participate in meetings from December 2024 – August 2025;

8. Virtually manage a media platform with fake media content during the five-day exercise execution August 4th – 8th, 2025;

9. Provide a sanitization process that meets FAA requirements and standards.

4.0 NON-GOVERNMENT PERSONNEL PARTICIPATION:

The FAA may utilize contract support personnel in meeting with customer organizations and reviewing Vendor submissions. Contract support personnel will sign all relevant Non-Disclosure of Information and Conflict of Interest Agreements for any subsequent acquisition.

5.0 NORTH AMERICAN INDUSTRY CLASSIFICATION SYSTEM (NAICS) Code The North American Industry Classification System (NAICS) codes for this effort is 541511.

6.0 SUBMITTAL REQUIREMENTS FOR RFI

1. Name and Address of Company, Point of Contact (name, title, telephone number, and email address) and whether the respondent is a Large or Small Business, a service disabled veteran owned small business, or a socially and economically disadvantaged small business.

2. Responses must include the vendor’s Capability Statement, (5-page limit). This document should describe the vendor’s ability to meet the FAA’s requirement as well as identify any previously awarded projects for similar work performed. Graphics and Images of simulated media environment are encouraged and are not included in the page limit.

3. Responses shall include a Rough Order Magnitude. While the actual price paid will be negotiated and dependent upon the final level of effort agreed to in the contract, the FAA is budgeting approximately $100,000.00 for this effort and is sharing this information to advise industry of the size/scope anticipated.

The FAA may request that one, some, all, or none of the respondents to this Market Survey provide additional information which may include one-on-one meetings as deemed appropriate by the FAA. No evaluation of vendors will occur based on this additional information, and vendor participation in any informational session is not a promise for future business with the FAA.

All responses (one response per company) are to be provided on company letterhead. No type of font less than 11 point may be used. Responses must be received no later than 19 September 2024, 5:00 PM EST. All questions and submittals, including attachments shall be emailed to Frances.Marigliano@faa.gov. Responses received after this deadline may not be considered. No evaluation letters or results will be issued to respondents in connection with this market survey.

Any information provided under this market survey is for informational purposes only. Any proprietary information submitted must be explicitly and conspicuously marked by the respondent as proprietary. If appropriately marked, such information will not be released to the public by the FAA, except as required under the Freedom of Information Act (FOIA) or any other applicable law, regulation and/or policy.

Note: The FAR references cited in SAM.gov are not applicable to the Federal Aviation Administration (FAA) as the FAA has its own policies and guidance referenced in the Acquisition Management System (AMS).

ACQUISITION SENSITIVE

image1.png