SNS Tool RFI Final.docx

DOCX document 28 KB Posted

Attached to
Social Networking Site Tool RFI Federal contract opportunity
Solicitation number
M00264-25-RFI-0001
Issued by
United States Marine Corps

About this file

This document is a Request for Information (RFI) issued by the United States Marine Corps for a Commercial-Off-the-Shelf (COTS) automated social networking capability. The purpose is to provide the ability to conduct effective and efficient discovery, reporting, and removal of imposter social media accounts to protect the reputation and privacy of USMC key personnel, General Officers, and Senior Executive Service members.

The RFI seeks information on vendors' capabilities to fulfill the government's requirements, including technical specifications such as the ability to query multiple social media sites, provide dashboard/filtering functionality, discovery and remediation workflows, reporting capabilities, and service level agreements. The government expects to obtain a minimum of one subscription/license, with a maximum of up to ten. Vendors are asked to provide responses by November 8, 2024, addressing various aspects of the draft Statement of Work, such as pricing, areas of concern, and technological developments. The resulting contract is anticipated to have a NAICS code of 513210 and a PSC of 7A21.

View the file

Other files for this federal contract opportunity

Other files attached to Social Networking Site Tool RFI, newest first.
File Type Posted
SNS Tool RFI Final.docx DOCX document
SNS Tool SOW.docx DOCX document
SNS Tool RFI Final.docx DOCX document
SNS Tool SOW.docx DOCX document

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

M00264-25-RFI-0001 –SNS Tool

REQUEST FOR INFORMATION

THIS IS A REQUEST FOR INFORMATION (RFI) NOTICE ONLY. This is not a solicitation or Request for Quote/Proposal/Bid, and no contract or purchase order will be awarded as a result of this notice.

The anticipated North American Industry Classification System Code (NAICS) for this requirement is 513210. The Product Service Code (PSC) for this requirement is anticipated to be 7A21.

Marine Corps Installations National Capital Region- Regional Contracting Office (MCINCR-RCO) has a requirement to provide support to the Marine Corps Deputy Commandant Information (DC I) C4 Compliance (ICC) Branch with a social network site (SNS) tool.

REQUIRED CAPABILITIES: See the Statement of Work (SOW) draft. Interested vendors are notified this is a draft and is not the finalized SOW.

CONTRACT BACKGROUND:

Contract Number
Vendor
Size Status
Contract Vehicle
M00264-20-P-0206
Guidepoint Security, LLC
Small Business
Open Market Purchase Order

(firm fixed-price)

VENDOR RESPONSE SUBMISSION:

Feedback on this requirement is encouraged. This is a market research tool used to identify market capability and solutions (to include statement of work revisions), as well as the availability and adequacy of potential small business sources prior to determining the method of acquisition and issuance of award. The Government is not obligated to and will not pay for any information received from potential sources as a result of this notice. Information submitted by respondents to this notice is strictly voluntary. It is requested that firms submit answers to the MCINCR-RCO at the below email address. A vendor’s response should address, at a minimum the following:

1. Name of Organization, Unique Entity ID (UEI) or CAGE Code, Telephone Number, Address, and Email address for primary point of contact. Also provide the organization’s size status and socioeconomic status that applies;

2. Appropriate NAICS code and PSC (if other than what is listed above) for the services described in this notice with an explanation as to why this code(s) would be a better supported option;

3. Description of your organization’s capabilities / experience with regards to the draft SOW requirements. This description should demonstrate ability to perform the services in the draft SOW. Maximum length: 15 pages.

4. Contract vehicles (GSA Federal Supply Schedule, GSA GWAC, or any other Government Agency contract vehicle), of which your business is a contract holder, for these services. (Lack of does not preclude a business from responding to this notice.)

5. Answers to the below specific questions regarding the requirement:

a. What additional or historical information do you need to propose firm fixed-prices (FFP) for this requirement?

b. What areas of the requirement seem restrictive? Why? What are your suggestions to make areas less restrictive?

c. What areas of the requirement seem vague? Why? Please identify what they are and a recommended remedy.

d. What obstacles would prevent your business from submitting a future quote for this requirement? What is/are the solution(s)?

e. Is the solution to the required SOW criteria available commercially, as a Commercial Off the Shelf (COTS) product?

f. Provide a list of the specific websites that can be currently accessed through the capability/solution via business agreements? If additional sites are needed, what is the process to gain access?

g. Are there any new technological developments that can be applied towards this requirement? If so, please explain/describe, to include the impact of these developments towards the requirements.

h. Is pricing based on number of sites to be accessed, number of users, volume of activity, etc.? If there is a change in sites or users, how does this affect price?

i. Please provide Rough Order of Magnitude (ROM) pricing given the draft technical specifications. A ROM is a general estimate of cost and effort required to complete the requirement. If unable to do so, please specify what additional data is needed. The ROM is non-binding and does not constitute an official request for pricing.

j. Does your company have any questions or recommendations regarding the required services outlined in this RFI, that would contribute to a more accurate solicitation and resulting quote submission? Please provide them in your response so that we may consider them.

Vendors who wish to respond to this notice should send its response via email no later than 08 November 2024, 11:59 AM Eastern Time to ligaya.wallace@usmc.mil.

PROPRIETARY INFORMATION: Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. All government personnel reviewing RFI responses understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as described 41 USC 423. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.

STATEMENT OF WORK (SOW) DRAFT:

INTRODUCTION: The Deputy Commandant Information (DC I) C4 Compliance (ICC) Branch, Cybersecurity Team is currently performing Social Networking Site (SNS) crawling, discovery, and harvesting activities to protect the reputation/privacy of United State Marine Corps (USMC) key personnel, General Office (GO), and Senior Executive Service (SES) community, and to reduce malicious attempts to penetrate Marine Corps Enterprise Network (MCEN) boundaries. The purpose of the activity is to identify fictitious and imposter accounts (a.k.a. “evil twins”), which are masquerading as GOs and SES’. These “evil twins” create malicious links for unsuspecting service members to access and are fraudulently extorting information and in the name of USMC key personnel.

The Government seeks a Commercial-Off-the-Shelf (COTS) automated social networking capability to provide the ability to conduct effective and efficient discovery, reporting and removal of imposter social media accounts. The COTS capability will be used to protect the best interests of the USMC. Using latest available COTS automation technology will reduce both human and network resource expenditure, time and work factor efforts allowing for a comprehensive social media review. The COTS also will be used in integrating the discovery of malware and trends with hashtags as an additional aspect of pinpointing emerging trends concerning the USMC, allowing. for quick identification of threat agents and entry points for malware and impersonators trying to gain followership through discussion topics.

REQUIREMENT DESCRIPTION:

DC I C4 is requesting information and seeking sources capable of fulfilling the requirement for a Social Networking Site (SNS) Tool. DC I C4 is seeking to obtain a minimum of one (1) subscription(s)/license(s) with a maximum of up to ten (10) with the following technical specifications:

Technical Acceptability Criteria:

• The capability/solution shall be a fully functional COTS item available by subscription, software as a service or remote license with ready to begin acceptance and enrollment of user profiles and enable required feature/function upon award.

• The capability/solution must have the ability to query at a minimum, but not limited to the following social media sites. The capability/solution shall be responsible for any agreements with the required social media organizations that will enable the capability to execute and perform successfully.

Dashboard or user interface:

•The capability must have the functionality to view all identified accounts in one location
•Filtering functionality of profiles by last name, first name, rank, date, social media venue
•Drill down functionality for individual incident or alert by entity name, date, social media venue, picture, and malicious links
•Risk rating of entity record
•Malicious link or virus attributes data associate to discovered alerts
•Hash tagging search, trending, and analysis capability (discovery of malicious activity)
•Discovery that includes name, rank, and picture of discoverable asset
•Bulk reporting buttons and features

Discovery:

•Capability must have functional workflow for removal and remediation, of discovered entities
•Capability must have functional whitelisting procedure to convert false positives into whitelisted accounts that fall off the alert list
•Capability must have functional processes/procedures for identifying hashtag trending topics regarding the USMC with malicious intent
•Capability shall have functional ability to individually identify discovered profiles containing malware, malicious links, and redirects

Reports/Reporting:

•Capability must have a functional, highly flexible customizable reporting feature allowing the manipulation of field data to be excluded or included in each report (e.g., time and date stamps of found alerts, priority, comparable risk rating criteria, malware indication, last name, rank, first name, social media site, status including but not limited to closed, open, whitelist, reported for deletion etc.)
•Capability shall have functional customizable executive level reports, exportable by the customer in Adobe Acrobat .pdf and Microsoft Excel .xls formats containing desired/required information (e.g., last name, rank, social media site, risk level).
•Capability must have trending of analytical data available for further analysis by the customer. i.e.: bar charts, graphs, line charts, showing date/site/alert identifying trending and analysis of data.
•Capability must have bulk reporting buttons and features automating the submission for identified “impersonators”

Remediation:

•Capability must include functional workflow process(es) to remediate alerts once government personnel complete human review and categorize alert profile as fake, fraudulent, or malicious. Remediation for the purposes of this document means that the alerted profile has been deleted by the social media site.
•Capability response time for reported accounts is 6 weeks from the first day of discovery or report by customer

· Capability provides via the dashboard on demand status of the remediation request and interaction with respective site administrators at any given time between discovery/reporting and complete deletion.

•Capability must have business agreements, processes, and relationships in place for fictitious account removal from the following included but not limited to sites: Facebook, X, LinkedIn, Instagram, Pinterest, Reddit, and YouTube.
•Capability must contain training materials.

Service Level Agreement (SLA):

• Technical Helpdesk Support must be provided to government users during business hours of 0800 - 1700 (ET) Monday – Friday

· Response to inquiries, requests for reports, and specific data, charts, and graphs provided within four business hours following stamped time of initiator request.

• System uptime of 99.97% and

· Written notification no less than 2 weeks prior of any scheduled maintenance or planned outages that may degrade or interrupt service or user access to the system shall be provided to the Contracting Officer’s Representative (COR), Technical Point of Contract (TPOC), and all Marine Corps government users.

• The capability shall be accessible to the Government user 24 hours per day, every calendar day per year.

image1.emf

File details come from the government source that posted it. Updated .