Cybersecurity and Privacy Enterprise Solutions and Services (CyPrESS)

NASA is hereby soliciting information about potential sources for Cybersecurity and Privacy Enterprise Solutions and Services (CyPrESS).

The National Aeronautics and Space Administration (NASA) is seeking capability statements from all interested parties, including Small, Small Disadvantaged (SDB), 8(a), Woman-owned (WOSB), Veteran Owned (VOSB), Service Disabled Veteran Owned (SD-VOSB), Historically Underutilized Business Zone (HUBZone) businesses, and Historically Black Colleges and Universities (HBCU)/Minority Institutions (MI) for the purposes of determining the appropriate level of competition and/or small business subcontracting goals for the Cybersecurity and Privacy Enterprise Solutions and Services (CyPrESS) procurement. The Government reserves the right to consider a Small, 8(a), Woman-owned (WOSB), Service Disabled Veteran (SD-VOSB), or HUBZone business set-aside based on responses hereto. NASA is seeking capabilities from all categories of small businesses for the purpose of determining the appropriate level of competition and/or small business subcontracting goals for this requirement.

This requirement is a new procurement for Agency-wide cybersecurity and privacy services. The types of services include but are not limited to the following:

• Security Operations Center (SOC)
• Assessment and Authorization (A&A)
• Risk Management Framework (RMF)
• Incident Response (IR) and Management Support
• Cybersecurity architecture and engineering
• Penetration testing
• Vulnerability management
• Supply Chain Risk Management (SCRM)
• Training and awareness
• Cybersecurity infrastructure
• Identity, Credential, and Access Management (ICAM)
• Privacy services support

The North American Industry Classification System (NAICS) code for this procurement is 541519 - Other Computer Related Services, with a size standard of $30.0 million dollars.

A copy of the DRAFT Statement of Work (SOW) is attached. Interested parties shall submit a capability statement indicating the ability to perform all aspects of the effort described herein. Responses shall be limited to no more than 10 pages. These pages shall consist of the following:

1. GENERAL INFORMATION: Briefly describe your company and the types of services performed. Please also include: the names, e-mail addresses, and phone numbers for any points of contacts (POCs), the company’s address, CAGE Code/DUNS number, and the type of business demographic that applies (i.e. small business, large business, women-owned).
    
2. PAST PERFORMANCE: The Offeror shall also provide contract information on similar contracts over the past three (3) years. This information shall include: the name of customer/agency, types of services provided, type of contract, total contract value, and whether the contractor was a prime or subcontract. If subcontract, please provide details regarding prime contract and your company’s role in supporting the prime contractor. In addition, please provide any examples about your company’s capabilities to quickly and efficiently staff to rapidly changing requirements.
    
3. CAPABILITIES: Information describing your company’s capabilities to meet the requirements in the current Statement of Work (SOW).

All responses shall be submitted to Amanda L. George via e-mail at amanda.l.george@nasa.gov by COB July 10, 2020.

Questions of a general nature may be directed to the Contracting Officer (CO), Amanda L. George at the e-mail address stated above. Questions of a technical nature may be directed to Bonita J. Oliver at bonita.j.oliver@nasa.gov. Please reference this Sources Sought Notice number, 80GRC020R0027, in all inquiries.

This synopsis is for information and planning purposes only and is not to be construed as any commitment by the Government. Further, the Government will not be financially responsible for any expenses incurred in providing information solicited.

It is the offeror’s responsibility to monitor the Internet site for the release of the solicitation and amendments (if any). Potential offerors will be responsible for downloading their own copy of the solicitation and amendments (if any).