Sources Sought.pdf

USCG #: 70Z079-24-SS-UCPL0001

USCG#: 70Z079-24-SS-UCPL0001

TITLE: E -signature Software

Issuance Date: 7/23/2024

The USCG is conducting market research to seek sources and to identify software solutions capable of meeting the requirements specified in section 2.0 – Description for details.

NOTE: THIS SOURCES SOUGHT (SS) IS ISSUED SOLELY FOR INFORMATION AND PLANNING

PURPOSES ONLY. IT IS NOT A SOLICITATION; NOR IS IT A PROMISE TO ISSUE A SOLICITATION.

This SOURCES SOUGHT (SS) does not commit the Government to contract for any supply or service. Presently, the Department of Homeland Security (DHS) and the United States Coast Guard (USCG) are not seeking proposals. Offerors are advised that the U.S. Government will not pay any cost incurred in response to this SOURCES SOUGHT (SS); and that all associated costs shall be the sole responsibility of the interested party. While Offerors are strongly encouraged to submit a response, deciding not to do so does not preclude participation in any future solicitations.

All submissions will become the property of the Federal Government and will not be returned to the Offeror. Also, other than acknowledgment of receipt, if requested by the Offeror, those who respond to this SOURCES SOUGHT (SS) should anticipate no feedback with regard to its submission.

1.0 RESPONSE INSTRUCTIONS

Interested parties shall submit information to Keith Miner and Bo Li at the following addresses keith.a.miner@uscg.mil and bo.li@uscg.mil by 12:00 PM (ET) on July 30, 2024.

Each electronic submission shall include:

The Sources Sought number in the subject line.

A Point of Contact (POC), phone number and email address of the person (in the body of the email) to be contacted regarding any correspondence between the Government and the Vendor. The POC shall be capable of addressing questions or issues associated with the submission and content of the Sources Sought.

A brief summary of email content, vendor name, firm’s mailing address, and small business designation.

A statement verifying that the software has a current FEDRAMP Moderate Impact Level Certification, and has the capability to meet the requirements listed in section 2.0.

Sources Sought

USCG #: 70Z079-24-SS-UCPL0001

2.0 DESCRIPTION

The USCG is seeking Vendor contact information for vendors capable of providing a document signing software solution with the capability to properly and automatically sign PDF forms and documents produced and maintained within the DoD365 cloud environment, across all operational platforms (Windows, mobility, virtual, WEB). All USCG end users will have access the application, and capability within the DoD365 environment, deployed enterprise-wide.

The software must meet the following minimum characteristics:

Functionality . Secure electronic signatures compliant with the Electronic Signatures in Global and National Commerce Act (ESIGN) and Uniform Electronic Transactions Act (UETA).

. User authentication methods to ensure signer identity verification.

. Ability to define signing workflows with designated signing order and routing.

. Secure document storage and retrieval capabilities.

. Audit trails that capture all signing activity for each document.

. User management features for assigning roles and permissions.

. Mobile accessibility for signing documents on smartphones and tablets.

. API integration capabilities for smooth integration with existing DOD systems.

. The proposed solution must adhere to DoD PKI and Digital Certificate signing standards:

Electronic (CAC) signature capability across all USCG platforms for access.

. The foundation for DoD CAC signatures lies in the DoD PKI. This system utilizes digital certificates stored on CACs to verify user identities and enable secure electronic signatures.

. DoD Instruction 8520.02 "Public Key Infrastructure and Public Key Enabling" outlines the overall policies and management of the DoD PKI [1].

. Integration with Microsoft M365 (DoD365) cloud service applications and Microsoft office products.

. The software shall be capable of supporting all USCG platforms for signing (Microsoft Windows desktop workstation, mobility devices (phones/tablets), Microsoft Virtual desktop environment, and WEB access). The application should have a minimal FEDRAMP Moderate impact level accreditation/authorization for use within the government cloud environment.