DOD - MAFPS Recompete - Market Research

The U.S. Department of the Interior's Office of the Chief Information Officer is seeking a Cybersecurity Supply Chain Risk Management (C-SCRM) Tool Solution. The purpose of this tool is to enable the Department to identify, assess, monitor, manage, and mitigate cybersecurity risks associated with its information and communications technology (ICT) supply chain. The Department develops, operates, and maintains multiple information systems that rely on a complex and interconnected supply chain ecosystem. The C-SCRM Tool Solution will be used to streamline and automate processes related to assessing suppliers, products, and entities; ensuring product assurance; continuous monitoring and alerting; sharing information securely; data visualization and reporting; and integration with key systems.

The scope of this opportunity includes assessing cybersecurity risk for supply chains associated with ICT products and services over the next five years. The Department estimates awarding approximately 2,000 contracts and having less than 700 suppliers supporting its ICT portfolio. The implementation of the C-SCRM Tool Solution will occur in a phased approach, starting with critical systems associated with major IT investments or designated as High Value Assets (HVAs). The tool solution should support various use cases, such as supplier/product/entity assessment, product/producer assurance, continuous monitoring and alerting, sharing information securely, data visualization and reporting, and integration with key systems.

The period of performance for this effort is one year with four one-year option periods. The place of performance includes various Department of the Interior facilities located in Denver, CO; Lakewood, CO; Washington DC; and Reston VA. Remote work may be authorized on a case-by-case basis. The contractor will be responsible for delivering the C-SCRM Tool Solution as well as providing implementation support and training for DOI personnel. Project management deliverables include an orientation meeting, project WBS/plan/schedule, status reports/meetings, and all working documents developed under the statement of objectives. Key deliverables for the performance objectives include a final implementation plan and a training plan. The Department prefers implementing the C-SCRM Tool Solution via a software as a service (SaaS) model hosted in a FedRAMP approved cloud environment.