FDIC's Thales/Safenet 2FA Hardware Maintenance and Support

The Federal Deposit Insurance Corporation (FDIC) is seeking a contract for Thales Two-Factor Authentication (2FA) Hardware Maintenance and Support to ensure secure external user access to FDIC resources and applications like FDICConnect and Examination Tool Suite. The procurement involves a vendor-hosted service solution that must integrate with FDIC's identity management system, support multiple authentication methods including hard tokens, soft tokens, and SMS, and provide robust administrative capabilities. Key requirements include FIPS 140-2 compliance, 99.9% service availability, and data storage and processing exclusively within the United States. Vendors must obtain an Authority to Operate (ATO) through the System Security Authorization process and be prepared to deliver a comprehensive 2FA solution across DEV, QA, PROD, and DR environments. Critical dates include a deadline for questions on December 3, 2024, at 12 PM EST, and a proposal submission deadline of December 23, 2024, at 12 PM EST.

The solicitation is not set aside for any specific business category and is classified under NAICS category 541519 for Other Computer Related Services. The contract will span four years, consisting of a one-year base period from March 1, 2025, to February 28, 2026, followed by three one-year option periods. The place of performance is located in Arlington, VA 22201. While specific award values are not explicitly stated, the pricing schedule includes detailed costs for authentication services, hardware tokens, SMS messages, bandwidth, data center services, and part-time engineering support. The solution requires comprehensive security control assessments, with evaluations scheduled at 33% increments over the first three years and a 100% assessment in the final option year. Notably, the solicitation emphasizes that no equivalent solutions will be accepted, indicating a strict requirement for Thales 2FA hardware and services.