RFI_SAM.gov_ECSP Audit Support_Final.doc

Request for Information

Enterprise Cybersecurity Program Audit Support

VA-26-00036760

1. Introduction

This is a Request for Information (RFI) only. Do not submit a quote. This RFI is for planning purposes only and shall not be considered a Request for Quotation or a Request for Proposal. Additionally, there is no obligation on the part of the Government to acquire any products or services described in this RFI. Your response to this RFI will be treated only as information for the Government to consider. You will not be entitled to payment for direct or indirect costs that you incur in responding to this RFI. This request does not constitute a solicitation for proposals/quotes or the authority to enter into negotiations to award a task order. No funds have been authorized, appropriated or received for this effort. The information provided may be used by the VA in developing its acquisition strategy. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. The Government does not intend to pay for the information submitted in response to this RFI.

2. Submittal Information:

All responsible sources may submit a response in accordance with the information below.

There is a page limitation for this RFI of 10-pages. The Government will not review any other information or attachments included, that are in excess of the 10-page limit. NO MARKETING MATERIALS ARE ALLOWED AS PART OF THIS RFI. Generic capability statements will not be accepted or reviewed. The Government requests that it not be inundated with artifacts and peripheral content, and that the submission is readable. Your response must address capabilities specific to the services required in the attached Performance Work Statement (PWS) and must include the following:

a. Interested Vendors shall, at a minimum, provide the following information in the initial paragraph of the submission:

Name of Company

Address

Point of Contact

Phone Number

Fax Number

Email address

Company Business Size and Status

For Veteran-Owned Small Businesses (VOSBs) and Service-Disabled Veteran-Owned Small Businesses (SDVOSBs), proof of verification in the Small Business Administration (SBA) Small Business Search database.

NAICS code(s)

Socioeconomic data

Unique Entity ID

Existing Contractual Vehicles (GWAC, FSS, or MAC)

b. Please provide your small business status under the following North American Industry Classification System (NAICS) Code: 541512 “Computer Systems Design Services” with a Size Standard of $34 Million.

c. For SDVOSB/VOSB vendors: Your company’s intent and ability to meet the set aside requirement in accordance with VAAR 852.219-73 (JAN 2023)(Deviation) VA Notice of Total Set-Aside for Certified SDVOSBs and 13 CFR §125.6, which states the SDVOSB prime contractor will not pay more than 50 percent of the amount paid by the Government to the prime for contract performance to firms that are not certified SDVOSBs listed in the SBA certification database (excluding direct costs to the extent they are not the principal purpose of the acquisition and the SDVOSB/VOSB does not provide the service, such as airline travel, cloud computing services, or mass media purchases). When a contract includes both services and supplies, the 50 percent limitation shall apply only to the service portion of the contract.

Your response shall include information as to available personnel and financial resources; full names of proposed team members and the PWS requirements planned to be subcontracted to them, which must include the prime planned percentage or the names of the potential team members that may be used to fulfill the set aside requirement.

d. Provide a summary of your capability to meet all of the requirements contained within the draft PWS. In addition, please also address the following in your response:

1. Provide your direct experience with providing support for Government audit agencies, detailing the types of support provided. Please include contact information, contract number, dollar value, and contract vehicle.

2. Please provide how many Full-Time Equivalents (FTEs) you would anticipate being required to perform the PWS sections, not including the optional task.

3. NOTE: Technical questions may be submitted as part of your response, however, questions directed to the customer are prohibited.

e. Has the draft PWS provided sufficient detail to describe the technical requirements that encompass the audit support services to be performed under this effort.

______ YES _______ NO (if No, answer question g)

f. If “NO”, please provide your technical comments/recommendations on elements of the draft PWS that may contribute to a more accurate proposal/quote submission and efficient, cost-effective effort.

Responses are due no later than 3PM Eastern Time on April 7, 2026 via email to Nicole Bestreski Contract Specialist at Nicole.Bestreski@va.gov and Summer Spalliero, Contracting Officer at Summer.Spalliero@va.gov. Please note “Enterprise Cybersecurity Program Audit Support” in the subject line of your response. Mark your response as “Proprietary Information” if the information is considered business sensitive. The email file size shall not exceed 5 MB.