DOD - Battle Control System-Fixed - Market Research

The U.S. Department of the Interior's Office of the Chief Information Officer is seeking a Cybersecurity Supply Chain Risk Management (C-SCRM) Tool Solution. The purpose of this tool is to enable the Department to streamline and automate processes related to identifying, assessing, monitoring, managing, and mitigating cybersecurity supply chain risks associated with its information and communications technology (ICT) suppliers, products, and services. The Department envisions using the tool in various use cases, including supplier/product/entity assessment, product/producer assurance, continuous monitoring and alerting, sharing information securely, data visualization and reporting, and integration with key systems.

The scope of the acquisition includes assessing cybersecurity risk for supply chains associated with DOI ICT products and services over the next five years. The Department estimates awarding approximately 2,000 contracts supporting ICT products and services during this period. The C-SCRM Tool Solution will be implemented in a phased approach, starting with a pilot deployment in a limited controlled environment and then expanding to enable C-SCRM capabilities for the department/enterprise, bureaus/offices, and information systems. The implementation will include professional services such as implementation support and training for DOI personnel.

The period of performance for this effort is one year with four option periods of one year each. The place of performance may include DOI facilities in Denver, CO; Lakewood, CO; Washington DC; and Reston VA. Remote work may be authorized on a case-by-case basis. The contractor will be required to deliver project management deliverables such as an orientation meeting, project WBS/plan/schedule, status reports/meetings, and all working documents developed under the statement of objectives. Additionally, deliverables related to the performance objectives include a final implementation plan and a training plan.

Overall, this opportunity presents a significant need for a C-SCRM Tool Solution that can support the Department of the Interior's efforts to manage cybersecurity risks in its ICT supply chain. The Department is looking for a solution that can address various use cases, provide scalability, integrate with key systems, and be implemented via a SaaS model in a FedRAMP approved cloud environment.