Request for Information - Laptops.docx

Federal Deposit Insurance Corporation (FDIC) Division of Information Technology

Request for Information - Laptops

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is issued solely for information and planning purposes – it does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This request for information does not commit the Government to contract for any supply or service whatsoever. Further, the FDIC is not seeking proposals at this time and will not accept unsolicited proposals. Responders are advised that the U.S. Government will not pay for any information or administrative costs incurred in response to this RFI; all costs associated with responding to this RFI will be solely at the interested party’s expense. Not responding to this RFI does not preclude participation in any future RFP, if any is issued.

1. Purpose The FDIC is conducting market research to determine the optimal enterprise acquisition strategy for end-user computing devices, including traditional purchasing, Device as a Service (DaaS), hybrid approaches, and other innovative commercial models. The Government seeks information regarding cost, performance, lifecycle management, transition considerations, and acquisition vehicles capable of supporting mandatory department-wide use. FDIC is open to a hardware-only strategy, with laptops, docking stations, and peripherals kit (wireless keyboard and mouse) or any other method that industry is seeing as the best way to procure the latest laptops with artificial intelligence (AI) capabilities. FDIC will review the information to understand the market space, capabilities and levels of service available, and related market pricing, to help shape our requirements and acquisition approach.

A key consideration is the FDIC’s desire to avoid budget spikes necessitated by periodic replacement of large numbers of devices. In addition to this RFI, the FDIC may conduct additional market research engagements. The need and use of these additional market research engagements will be determined at the sole discretion of the FDIC.

2. Background The FDIC has approximately 7,100 employees and contractors who are primarily located in FDIC offices throughout the United States. FDIC employees and assets reside at the headquarters office in Washington, D.C. and Arlington, VA; and six regional offices in Atlanta, Chicago, Dallas, Kansas City, New York and San Francisco. The FDIC also operates 74 field offices in cities throughout the continental United States and Puerto Rico. Additionally, FDIC has a small number of remote workers.

The FDIC foresees requiring and maintaining a fleet of, at minimum, 6,300 laptops from purchased and/or leased sources over the next several years. This number may fluctuate due to staffing changes and the introduction of new technologies. We use Microsoft Intune to deploy the workstation image, including all applications, and envision that pre-provisioning would be performed by a vendor. For more information on current FDIC device environment, see Attachment 1.

3. Laptop Questions FDIC seeks to answer the following questions as it relates to a contract vehicle that will service all FDIC computing device requirements:

Refresh Cycle Timeframes

1. What refresh cycle timeframe produces the lowest lifecycle cost?

2. What refresh cycle timeframe is commercially typical?

3. How are refresh schedules managed?

4. Can different user populations have different refresh schedules?

5. Can devices be refreshed based on age, performance, or user role? Rolling refresh?

Price Considerations

1. What is the comparison of the total cost of ownership for Traditional Purchase, Contractor‑Owned DaaS, Government‑Owned Contractor‑Managed, and Hybrid models?

2. Can pricing be structured as per-device, per-user, per-service, transaction-based, fixed-price, consumption-based, or some combination?

3. Are there any financial considerations that should be evaluated such as pricing, leasing, ownership, refresh? Costs associated with the frequency of deploying newer models?

4. Complete the attached RFI Quote Excel table with pricing information. To present pricing for multiple models of the same size, respondents may fill out the pricing table more than once across an additional tab in the same Excel Workbook. Is there a better way to capture the price?

5. How will the solution aid in the ability to project costs? Ability to capitalize on savings available in the market? Reduce spikes in projected budgetary costs/price changes?

Laptops/Hardware/Managed Services

1. Can the full requirement be supported by a single vendor, with laptops, docking stations, and peripherals kit (wireless keyboard and mouse), imaging/provisioning, warranty support, lifecycle refresh, disposition, and reporting?

2. Are there any hardware considerations that should be evaluated such as OEMs, configurations, docking stations, and peripherals kit, warranties? Surge requirements?

3. Are there any lifecycle considerations that should be evaluated such as imaging, deployment, refresh, disposition?

4. Are there any managed service considerations that should be evaluated such as reporting? Inventory management? How are reductions in deployed laptops and invoice quantity addressed?

5. What is industry doing to mitigate supply chain interruptions? Intel Processors chips?

6. What is included in pre-provisioning for new laptops? Three-year warranty break/fix and Accidental Damage support? Hard drive sanitization? Pickup and return of leased devices at term end? Is mobile imaging through phones included?

7. If desktops models are also needed (187/year) does industry recommend a different approach for desktops vs. laptops?

8. What are two examples of Federal contracts where you are currently providing end-user devices and whether services are included that are of similar size, complexity and scope?

Notional cost using the table below using each approach: (1) Purchase, (2) DaaS, (3) Hybrid:

(Enterprise-wide Refresh) Future State (Rolling Refresh)

4. RFI Response Requirements Responses to the RFI are due no later than Friday October 2, 2026, at 9 a.m. Easter Time. All responses shall be emailed to the Contracting Officer: Trae Dupart (kdupart@FDIC.gov). All submitters will receive a confirmation email within 72 hours.

Please note this is not a Request for Proposal (RFP) and any response provided will not be considered an offer; therefore, pricing information provided is for budgetary purposes only. If a decision is made to pursue an acquisition, information obtained through this RFI may be used to frame a future requirement.

It is highly encouraged that concise responses are provided and contain no extraneous information (e.g., marketing material) or any “Background Information” and “Business Knowledge” sections. Proprietary information, if any, should be minimized and must be clearly marked. Responses that do not address the specifics of this RFI will not be assessed.

RFI responses are limited to 4 pages measuring 8.5 by 11 inches with normal margins and a typeface no smaller than 12 point. Submit your response as a PDF file not exceeding 5MB in file size. The e-mail shall be titled “(insert Company Name) - FDIC Laptop RFI Response 2026.” Provide company name, local contact mailing address and/or headquarters address, phone number, e-mail address of designated point of contact, and DUNS number.

3 9/25/2026

Attachment 1 – Current Environment FDIC IT services are managed and provided by a mix of federal and contractor staff. DaaS hardware and some services are provided by an external vendor. Troubleshooting and end-user support are provided by federal staff and a contractor-provided service desk.

FDIC utilizes Microsoft Intune for endpoint and application management. This capability allows the FDIC to leverage Windows Autopilot to streamline the image setup of Windows devices. Intune is used to enforce modern security policies, deploy FDIC Division-specific applications, and maintain compliance across endpoints. Operating system patches are updated as part of Microsoft’s cumulative monthly patching requirements in Intune. The latest patches are then included in the image within 30 days. Microsoft Active Directory is utilized for user and workstation authentication.

The FDIC corporate-ready image includes at a minimum:

· Microsoft Windows 11 Operating System with UEFI BIOS

· Microsoft Bitlocker

· Microsoft Defender

· CrowdStrike

· Microsoft Office 365 applications (Office, Teams, OneDrive, PowerApps)

· Microsoft Security Patches (most up to date)

· Palo Alto Global Protect VPN

· Smartcard software

In addition, the image contains a host of enterprise-wide applications (in-house and COTS) which are common to each user. The FDIC is made up of several divisions and as a result, the larger divisions utilize applications that are not utilized by others, therefore, the image using a GUI interface provides IT staff the ability to select the division of the end user of the workstation. Once the division is selected, during the initial image process, applications or menu links to applications for the selected division are then included in the build process. The end user, upon receiving the new equipment, may add Limited Use Software (LUS) using Microsoft Company Portal. A standard workstation is configured so that the user does not have administrative rights to download and install software outside of the designed process. Inventory controls are in place for managing the inventory of hardware throughout the FDIC. All equipment is tagged with an FDIC Asset Tag and uploaded into our Asset Management system. Standard hand receipts are completed when equipment is assigned to the end user. These completed hand receipts are then uploaded into our Asset Management system. Verification of inventory is performed annually to ensure compliance.

Internal policies and procedures are in place for managing hard drives. All deployed laptop hard drives must be encrypted. The FDIC has historically purchased the additional Hard Drive Warranty from the vendor to avoid returning inoperable hard drives to the vendor. The hard drives of departing employees are generally removed and held no less than 30 days, then are sanitized and can be re-purposed as needed. In some cases, hard drives are removed and placed on “Legal Hold.”

image1.png