RFI Attachment 01 - RFI Response Template.xlsx
XLSX spreadsheet 23 KB Posted
- Attached to
- OPM Crowdsource Pentesting
- Solicitation number
- SP-CIO-908761
- Issued by
-
Office of Personnel Management
About this file
This document is a Request for Information (RFI) Attachment 01 - Vendor Response Template related to the federal contract opportunity SP-CIO-908761 for OPM Crowdsource Pentesting.
The RFI is seeking information from vendors to assist the government in making strategic decisions, refining requirements, and assessing the marketplace for FedRAMP certified software and service applications that perform testing of system vulnerabilities and provide for continuous penetration testing, vulnerability discovery, and assessment of external-facing web pages and applications. The RFI template requests vendors to provide information on their business size, socio-economic status, intent to propose as a prime or subcontractor, and whether their proposed product meets specific technical requirements such as FedRAMP compliance, continuous penetration testing, vulnerability assessment, reporting capabilities, and integration with DevOps tools. Vendors are also asked to provide any proposed product numbers and descriptions.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Crowdsource Pentesting RFI.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
RFI Response Form
| Request for Information SP-CIO-908761 | |
| Attachment 01: Vendor Response Template | |
| RFI QUESTIONS | VENDOR RESPONSE |
| Business Name: | |
| UEI: | |
| NAICS: | |
| Business POC Name: | |
| Business POC Phone: | |
| Business POC Email: |
Please answer the following questions to assist us in making some strategic decisions, refining our requirement, and assessing the marketplace.
| 1. Business Size in SAM under NAICS 541519 and 513210: |
| 2. Business Size on GSA under NAICS 541519 and 513210: |
| 3. Business Size on NASA SEWP under NAICS 541519: |
| 4. Socio-economic Status: |
| 5. Does your company anticipate proposing as a Prime or Subcontractor? Please provide identifying details for any partner(s) you would propose as well as the name of your proposed product/solution. |
| 6. Does your proposed product provide the following features/capabilities? Please provide details regarding these features/capabilities in your response. |
| a. FedRamp Compliance: "Moderate" Authorization | |
| b. Continuous penetration testing for vulnerability discovery | |
| c. Assessment of external facing web pages for existing and new vulnerabilities | |
| d. Ad hoc analytic reporting | |
| e. Maintain most relevant and current vulnerability "dictionary" | |
| f. Meet and exceed BODs such as VDP BOD 20-1 and BOD 22-01 (KEVs) | |
| g. Tests from predetermined source IPs | |
| h.Maintains logs for everything and can audit any and all traffic | |
| i. Allocated multiple, 50+ researchers on target per assessment | |
| j. Real Time Results: Client Portal | |
| k. Integrations with DevOps tools to meet enterprise requirements for internal security policies and compliance | |
| 7. Please provide any proposed product number(s) and description(s). | |
| Please Note: As part of its Market Research the Government reserves the right to communicate directly with individual respondents based upon the adequacy of each response, as needed. |
File details come from the government source that posted it. Updated .