Combined SSN NOI_NIST-SS25-CHIPS-00369.docx
DOCX document 31 KB Posted
- Solicitation number
- NIST-SS25-CHIPS-00369
About this file
This is a combined Sources Sought Notice and Notice of Intent to Sole Source from NIST seeking market research for a subscription service providing market and packaging technology trends information. NIST CHIPS R&D program requires a corporate license for 10 subscribers to access information about packaging technologies, including Ball Grid arrays, Chip Scale Packages, Stacked Die CSPs, Flip Chip, Wafer Level Packages, substrates, chiplets, and Co-design/EDA equipment and processes. The period of performance is a 12-month base year with one 12-month option year.
If no alternative sources are identified, NIST intends to issue a sole source award to Techsearch International, Inc. under FAR 13.106-1(b). The NAICS code is 541690 (Other Scientific and Technical Consulting Services). Responses must include company information, capabilities, reseller authorization status, and experience. Questions are due by 11:00 AM ET on January 22, 2025. The solution must meet federal cybersecurity requirements including FISMA compliance, encryption standards, and privacy protections for sensitive PII. Licensed access can be reassigned quarterly for new or reassigned employees.
View the file
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
NIST-SS25-CHIPS-00369
POC: Monica H. Brown (Monica.Brown@nist.gov) Title: Subscription Service: Market and Packaging Technology Trends capabilities – Combined Sources Sought/Notice of Intent to Sole Source
BACKGROUND
***THIS IS A COMBINED SOURCES SOUGHT NOTICE AND NOTICE OF INTENT TO SOLE SOURCE***
The National Institute of Standards and Technology (NIST)’s mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life. As part of NIST, the CHIPS Research and Development (R&D) goals include accelerating ideas to market, where the best ideas achieve commercial scale as quickly and cost effectively as possible. To carry out the mission, CHIPS R&D requires a subscription that delivers the latest developments in packaging technologies, particularly those related to Ball Grid arrays(BGAs), Chip Scale Packages (CSPs), Stacked Die CSPs, Flip Chip, Wafer Level Packages, substrates, chiplets, Co-design/EDA, equipment and processes. The subscription will be used by CHIPs R&D program to stay competitive and informed in the rapidly evolving semiconductor and electronics industry.
If no alternate sources are identified, the Government intends to issue a Sole Source Award to Techsearch International, Inc. (4801 Spicewood Springs Rd., STE 150 Austin, TX 78759-8480) under the authority of FAR 13.106-1(b). The North American Industry Classification System (NAICS) code for this acquisition is 541690, Other Scientific and Technical Consulting Services.
NIST has a need for corporate license to allow for an annual subscription for ten (10) subscribers. It shall include customer support, FOB Destination delivery, installation, warranty and training, and option line items. The contractor shall demonstrate capabilities that meets or exceeds the following draft minimum specifications:
A. TECHNICAL REQUIREMENTS
1. The Contractor shall deliver a corporate license to allow for an annual subscription for ten (10) subscribers that shall contain the latest developments in packaging technologies, particularly those related to Ball Grid arrays(BGAs), Chip Scale Packages (CSPs), Stacked Die CSPs, Flip Chip, Wafer Level Packages, substrates, chiplets, Co-design/EDA, equipment and processes and any new applications, developments in materials and assembly equipment, and new package constructions.
2. Licensed access for Authorized Users may be able to re-assigned once per quarter, either when assigning the access to a new employee or employee is taking a new role.
3. The product shall be delivered to the stakeholder’s email addresses.
4. PERIOD OF PERFORMANCE: 12 month base year and 12 month option year.
B. CYBERSECURITY/PRIVACY REQUIREMENTS
1, The solution shall provide security and privacy protection consistent with requirements defined by applicable federal laws, regulations, policies, and standards (e.g., the Federal Information Security Management Act (FISMA), OMB Circular A-130, and FIPS Publication 200). The solution provider (including subcontractors) may meet these requirements through various means, including but not limited to FedRAMP authorization, current third-party assessments (e.g., SSAE, PCI), and/or responses to NIST special publication control set SP 800-171.
2. Minimally Acceptable Controls
| • | System security plan describing physical, technical, and administrative controls implemented to protect systems and sensitive personally identifiable information (SPII). |
| • | IT management processes to establish and manage secure configuration baselines including routine patching for all operating systems and applications. |
| • | Access to SPII is restricted to those with a need to know. Personnel with access to SPII have background investigations performed (e.g. criminal, financial etc.), and are trained on secure handling of SPII. |
| • | Access Controls for SPII meet or exceed industry best practices for access and identification control including, but not limited to, connectivity to servers and databases, multi-factor authentication for remote accesses for administration, secure configurations for any devices accessing the system, and strong physical security for any place where the data is accessed. |
| • | The solution supports multifactor authentication for users and/or supports integration with customer federation services for Single-Sign capability. |
| • | Processes for scanning on a continual basis for vulnerabilities and proper configurations for all aspects of the system, as well as processes for timely mitigation of findings. |
| • | Auditing and Incident Response processes including customer notification of suspected or actual incidents and logging with sufficient information to perform forensics on any incident. Processes for notifying and providing appropriate mitigations, including but not limited to credit monitoring services, for subsidy applicants in the event of suspected or actual incidents. |
| • | SPII is encrypted in transit using TLS 1.2 or better and encrypted at rest in all places the SPII is stored. All encryption algorithms and modules are FIPS 140-2/140-3 validated. |
If unable to meet any of the requirements listed above, the solution provider may provide details of mitigations or alternative protections in place to ensure the appropriate handling and protection of SPII.
If the solution provider provides services to other Federal agencies, provide a general description of the security risk management approach and client point of contact.
HOW TO RESPOND TO THIS NOTICE
In responding to this notice, please DO NOT PROVIDE PROPRIETARY INFORMATION. Please include only the following information, readable in either Microsoft Word 365, Microsoft Excel 365, or .pdf format, in the response. Submit the response by email to the Primary Point of Contact at the top of this notice as soon as possible, and preferably before the closing date and time of this notice.
· Provide the complete name of your company, address, name of contact for follow-up questions, their email, their phone number and, if your company has an active registration in https://sam.gov, your company’s Unique Entity ID (UEI).
· Details about what your company is capable of providing that meets or exceeds NIST’s minimum requirements.
· Whether your company is an authorized reseller of the product or service being cited and evidence of such authorization.
· Identify any aspects of the description of the requirements in the BACKGROUND section above that could be viewed as unduly restrictive or create unnecessary barriers that adversely affect your firm’s ability to fully participate in a procurement for such services and explain why. Please offer suggestions for how the requirements could be organized or structured to encourage the participation of small businesses.
· For the NAICS code
· Indicate whether your company is (a) a small business or (b) other than small business. See the Table of Small Business Size Standards and the associated .pdf download file for small business size standards and additional information.
· If you believe the NAICS code listed in this notice is not the best NAICS code for the type of product addressed in this notice, identify an alternative NAICS code that you believe would be more appropriate for the planned procurement.
· If your firm has existing Federal Supply Schedule contract(s) or other contracts for products or services against which the Department may be able to place orders, identify the contract number(s) and other relevant information.
· Describe your firm’s experience (as a prime, subcontractor, or consultant) providing the products or services described in Background section.
· Provide any other information that you believe would be valuable for the Government to know as part of its market research for this requirement.
· Please let us know if you would like to engage to get a better understanding of the requirement or need additional information about the Government’s requirement for the products or services described in the Background section.
QUESTIONS REGARDING THIS NOTICE
Questions regarding this notice may be submitted via email to the Primary Point of Contact and s should be submitted so that they are received by 11:00 a.m. Eastern Time on January 22, 2025. Questions will be anonymized and answered via sources sought notice amendment following the question submission deadline.
IMPORTANT NOTES
The information received in response to this notice will be reviewed and considered so that the NIST may appropriately solicit for its requirements in the near future.
This notice should not be construed as a commitment by the NIST to issue a solicitation or ultimately award a contract.
This notice is not a request for a quotation. Responses will not be considered as proposals or quotations.
No award will be made as a result of this notice.
NIST is not responsible for any costs incurred by the respondents to this notice.
NIST reserves the right to use information provided by respondents for any purpose deemed necessary and appropriate.
Thank you for taking the time to submit a response to this request!
File details come from the government source that posted it. Updated .