RFI-Data Security Platform.pdf

FEDERAL BUREAU OF INVESTIGATION

FINANCE AND FACILITIES DIVISION | PROCUREMENT SECTION

REQUEST FOR INFORMATION (RFI)-DATA SECURITY

PLATFORM

REQUEST FOR INFORMATION (RFI)

Data Security Platform

May 29, 2025

Information Technology Acquisitions Unit

Attachment AS - Request for Information (RFI) Version 1.2 Page 2

DISCLAIMER:

THERE IS NO COMMITMENT BY THE GOVERNMENT TO ISSUE A SOLICITATION AS A RESULT OF

THIS RFI. THIS IS BEING ISSUED SOLEY FOR INFORMATIONAL AND PLANNING PURPOSES AND

DOES NOT CONSTITUTE A SOLICTIATION. IN ACCORDANCE WITH FAR 15.201(e), RESPONSES TO

THIS NOTICE ARE NOT OFFERS AND CANNOT BE ACCEPTED BY THE GOVERNMENT TO FORM A

BINDING CONTRACT. THIS IS NOT A REQUEST FOR PROPOSAL OR QUOTE. IT DOES NOT

CONSTITUTE A SOLICITATION AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE

GOVERNMENT. RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER

NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS ANNOUNCEMENT. NO FUNDS

ARE AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS ANNOUNCEMENT. ANY

INFORMATION SUBMITTED BY RESPONDENTS TO THIS TECHNICAL DESCRIPTION IS STRICTLY

VOLUNTARY.

INTRODUCTION

Responses to this RFI may be used to formulate final requirements and/or to identify qualified vendors capable of meeting those requirements. The description below outlines preliminary contemplated capabilities envisioned for the Data Security Platform. Responses to the RFI should include detailed information on potential software and products and how the FBI could best implement them, as well as potential costs for implementation (e.g., licensing prices). The

FBI may request demonstrations of proposed products and solutions after responses are received. The information gathered may be used to formulate acquisition strategies for competitive solicitations.

BACKGROUND

A data security platform solution is needed; the best-of-breed of components may be selected to make a whole solution, and to enable the greatest flexibility of enhancement capability. It is not anticipated that every respondent will have the capability to provide a solution for every solution requested therefore respondents should indicate which products, training, and services are within their capability and which are not. Additionally, when multiple solutions are indicated by a respondent, the respondent should indicate which components cannot function independently.

Attachment AS - Request for Information (RFI) Version 1.2 Page 3

The establishment of a new data security platform solution is required to continue to meet the needs of the various FBI stakeholder divisions/programs to fulfill the Government’s mission. The various program offices in the FBI have leveraged the existing FBI data security platform and will continue to need a contract vehicle to renew data security platform solution software and purchase new software licenses, training, and professional services.

The Government requires a data security platform enterprise solution that meets the following capabilities:

• Log aggregation, reporting and real-time alerting

• Security monitoring compliance and investigative data analysis

• Security alerting and health monitoring

• Application performance and motorizing

• To comply with OMB Mandate M-21-31

• Cybersecurity

• Provides controls for auditing, access control, incident response, and system integrity

• To comply with EO 14028

• Event logging requirements o Including the need to log specific event types

• Knowledge sharing

• Roll-up capabilities

• Supports air gapped environments

• Alert creation and capabilities within a SIEM solution

• Dashboard creation

• Ad-hoc searches

CONTRACTOR QUALIFICATIONS

This RFI is open to manufacturers for market research only to request input from potential providers of data security platform enterprise solutions that provide software, training, and professional services. Section 508 requires that Government Agencies ensure that their software is accessible by those with disabilities. All products must be 508 compliant.

The below are systems, products, services, capabilities, and concepts of operation needed to meet the stated capabilities:

• Log aggregation, reporting and real-time alerting

Attachment AS - Request for Information (RFI) Version 1.2 Page 4

• Security monitoring compliance and investigative data analysis

• Security alerting and health monitoring

• Application performance and motorizing

• To comply with OMB MandateM-21-31

• Cybersecurity

• Provides controls for auditing, access control, incident response, and system integrity

• To comply with EO 14028

• Event logging requirements o Including the need to log specific event types

• Knowledge sharing

• Roll-up capabilities

• Supports air gapped environments

• Alert creation and capabilities within a SIEM solution

• Dashboard creation

• Ad-hoc searches

• The Government would like to know which manufacturers can provide the (services and/or products) for the contemplated capabilities by identifying themselves and responding to this RFI. The Government requests the following information:

a. Company name and business size.

b. Provide evidence to show that your company can provide the requested services and/or products required (i.e. technical ability, personnel, and experience).

Information provided shall be succinct and related to the requested information in this RFI. All submissions shall be unclassified.

c. Address whether your company has a GSA Schedule and if they are capable of providing these services on schedule. If able to provide the services on schedule, provide the schedule and SIN.

d. Any other assumptions, comments, concerns, and/or questions relating to the contemplated services.

Required Information:

Contractor Legal/DBA Name:

Address:

Attachment AS - Request for Information (RFI) Version 1.2 Page 5

Point of Contact:

Telephone:

Email Address:

DUNS Number:

Cage Code:

Facility Clearance (if applicable):

Applicable NAICS Codes:

Standard Business Size:

GSA Schedule:

NASA SEWP Contract:

CONTEMPLATED CAPABILITIES

FBI's Office of the Chief Information Officer (OCIO), Technology Acquisition Strategy Unit (TASU) is issuing this Request for Information (RFI) to:

• Gather industry information on the enclosed capabilities.

• Request information on any industry changes or improvements that the FBI should consider when looking to achieve products and the contemplated capabilities.

• Gather cost estimates associated with the contemplated capabilities.

RESPONSES

WHAT SHOULD BE INCLUDED IN YOUR RESPONSE

1. All interested parties shall submit capability packages in response to this notice.

2. Do submit succinct, thoughtful responses to the capabilities/questions listed in this RFI.

3. Do summit cost estimate that will be utilized as part of the Market Research

4. Do submit comments that address the FBI's contemplated capabilities, assumptions, conditions or contemplated approaches to this future acquisition.

5. Do submit information and suggestions that may encourage new, different, or innovative approaches that would result in products, solutions, and direct savings to the

FBI.

Attachment AS - Request for Information (RFI) Version 1.2 Page 6

WHAT SHOULD NOT BE INCLUDED IN YOUR RESPONSE

1. Do not submit proposals or offers.

2. Do not submit past performance information or general descriptions of corporate experience.

3. Do not submit requests to be considered for award or to be notified of a future solicitation.

4. Do not submit requests to be added to a mailing list or distribution list.

5. Do not submit questions or comments not related to this RFI.

6. Do not respond via telephone.

RFI SUBMITTAL INSTRUCTIONS:

The subject line of the email correspondence shall read: Data Security Platform RFI Response

(Company Name).

Questions regarding this RFI are due by 5:00pm Eastern Time (ET) on June 16, 2025. Questions shall be submitted via e-mail to the Contracting Officer, Harriett Williams (hlwilliams2@fbi.gov) and Contract Specialist, Joseph Spatafore (jspatafore@fbi.gov). Oral questions will NOT be accepted. The Government does not guarantee that questions received after that date and time will be answered. Questions shall NOT contain classified information. To the maximum extent possible, the Government will strip all questions and responses of proprietary information (as indicated by the respondent) and make collective responses available to all interested parties by 5:00pm ET on June 24, 2025.

All responses shall be submitted electronically in Microsoft Word or Portable Document Format

(PDF) format and shall not exceed 15 pages. All responses should be e-mailed no later than

5:00pm ET on July 1, 2025, to Harriett Williams and Joseph Spatafore. E-mail verification will be sent upon receipt.

The cost of responding to the RFI shall be exclusively borne by the organization submitting the information. No costs will be reimbursed by the Government. The FBI makes no implied or in fact contract by issuing this RFI.

Attachment AS - Request for Information (RFI) Version 1.2 Page 7

All clarifications, questions, and responses must be made via email. All questions regarding this

RFI shall be in writing. No phone calls will be accepted. Phone messages will not be returned.

Contracting Officer Point of Contact:

Harriett Williams/Joe Spatafore

E-mail: hlwilliams2@fbi.gov/jspatafore@fbi.gov

Address: 935 Pennsylvania Ave. N.W.

Washington, DC 20535

COR Point of Contact: Jerry Hiett Jr

E-mail: jshiett2@fbi.gov

Address: 935 Pennsylvania Ave. N.W.

Washington, DC 20535