SS-19-OIG236025_-_CYBERSECURITY_TRAINING_PRODUCT.docx

Cybersecurity Training Product OIG, The Office of Audit Services (OAS)

SOURCES SOUGHT ANNOUNCEMENT (SSA)

Department of Health and Human Services, Office of the Inspector General, Acquisitions Division, Washington, DC is seeking sources to provide Cybersecurity Training Product to support DHHS, OIG.

CONTRACTING OFFICE ADDRESS:

Department of Health and Human Services (DHHS) Office of Inspector General (OIG), Office of Management and Policy (OMP) Acquisition Division (AD) 330 Independence Ave, SW 5th Floor, Suite 5550 Washington, DC 20201

AGENCY BACKGROUND:

The Inspector General Act established the initial statutory authority and responsibilities for the OIG. The OIG mission is to improve HHS programs and operations and protect them against fraud, waste and abuse. By conducting independent and object audits, evaluations, and investigations, we provide timely, useful and reliable information and advise to Department officials, the Administration, Congress and the public.

INTRODUCTION:

This a Sources Sought to conduct market research and determine the availability and technical capability of all sources to provide the required products.

The OIG is seeking information from potential sources to meet the salient characteristics for a Cybersecurity Training Product.

DISCLAIMER:

THIS SOURCES SOUGHT IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS NOT A REQUEST FOR PROPOSAL NOR QUOTE. IT DOES NOT CONSTITUTE A SOLICTATION AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT. RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS ANNOUNCEMENT. NO FUNDS ARE AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS ANNOUNCEMENT. ANY INFORMATION SUBMITTED BY RESPONDENTS TO THIS TECHNICAL DESCRIPTION IS STRICTLY VOLUNTARY.

CONTRACT/PROGRAM BACKGROUND:

Contract Number: New Requirement Contract Type: FFP Incumbent and their size: N/A Method of previous acquisition: N/A

Brief description of the current program/effort:

OIG has current requirement to procure Cybersecurity Training Product.

Anticipated Timeframe: 01 May 2019 through 20 April 2019 (Base Year and 4 Option Years)

Place of Performance: 330 Independence Ave SW, Washington, DC 20201

PURPOSE:

The objectives are to procure a multi-year contract to provide cybersecurity training product.

REQUIREMENTS:

The HHS-OIG is seeking to procure a Cybersecurity training product that provides the following Salient Characteristics:

1. Hands-on/Modular Lab-based training in current cyber disciplines to include topics such as (but not limited to):

0. Threat Hunting

0. Compliance & Legislation

0. Malware Analysis

0. Digital Forensics

0. Infrastructure & Web Hacking

0. Intrusion Detection

0. Incident response

0. Encoding and Encryption

0. Reverse Engineering

0. IoT

0. Secure coding

1. Ease of access to the training environment, without the need to install any specialized software or plug-ins. Platform must be Web-browser based without the need to download virtual machines to a local system.

1. 24/7 Accessibility

1. Continual and rapid addition of new labs that map to real-world vulnerabilities and breaches as they arise.

1. The platform should provide robust capture-the-flag/training scenarios and challenges for users to exploit vulnerable systems using the latest tactics and techniques of hackers. It should allow for independent navigation through simulated environments based on training objectives.

1. Gamification and scoreboard features to encourage competition among the team

1. Simplified Interface

1. Management Portal - ability of an administrator to track individual and team progress

SOURCES SOUGHT:

The anticipated North American Industry Classification System Codes (NAICS) for this required are as follows:

511210 – Software Publishers, with the corresponding size standard of $38.5M 541519 – Other Computer Related Services, with the corresponding size standard $27.5M 541512 – Computer Systems Design Services, with the corresponding size standard of $27.5M 611420 – Computer Training, with the corresponding size standard of $11M

This Sources Sought Synopsis is requesting responses to the following criteria ONLY from all sources that can provide the required services under the NAICS Codes. To assist the AD’s Office in making a determination regarding the level of participation by small business in any subsequent procurement that may result from this Sources Sought, you are also encouraged to provide anticipated pricing information and information regarding your plans to use joint venturing (JV) or partnering to meet the requirement. This includes responses from qualified and capable Small Business, Small Disadvantaged Businesses, Service Disabled-Veteran Owned Small Businesses, Women-owned Small Business, HUBZone Small Businesses, 8(a) companies, and Other Than Small Businesses. You should provide information on how you would envision your company’s areas of expertise and those of any proposed JV/partner would be combined to meet the specific requirements contained in this announcement.

In order to make a determination for a small business set-aside, two or more qualified and capable small businesses must submit responses that demonstrate their qualifications. Responses must demonstrate the company’s ability to perform in accordance with the Limitation on Subcontracting clause (FAR 52.219-14).

SUBMISSION DETAILS:

Responses must include:

1) Business name and address;

2) Name of company representative and their business title;

3) Type of Business;

4) Cage Code

5) DUNS Number

6) Contract vehicles that would be available to the Government for the procurement of the product and service, to include General Service Administration (GSA), NIH, NASA SEWP, Federal Supply Schedule (FSS), or any other Government Agency contract vehicle. (This information is for market research only and does not preclude your company from responding to this notice.)

7) Anticipated pricing

Vendors who wish to respond to this source sought should send responses via email NLT 1:00 PM Eastern Standard Time (EST), 15 March 2019 to Ms. Chersharon King at Chersharon.king@oig.hhs.gov. Interested vendors should submit a brief capabilities statement package (no more than five (5) pages) demonstrating ability to provide herein Documentation should be in bullet format.

Proprietary information trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. All government and contractor personal reviewing the SSA responses will have signed non-disclosure agreements and understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as described 41 USC 423. The Government shall not be held liable for any damage incurred if proprietary information is not properly identified.