FEC - Lotus Notes Replacement - MRAS

The U.S. Department of the Interior's Office of the Chief Information Officer is seeking a Cybersecurity Supply Chain Risk Management (C-SCRM) Tool Solution. The purpose of this tool is to enable the Department to streamline and automate processes related to identifying, assessing, monitoring, reporting, managing, and mitigating cybersecurity supply chain risks associated with its information and communications technology (ICT) suppliers, products, and services. The Department envisions using the tool in various use case scenarios, including supplier/product/entity assessment, product/producer assurance, continuous monitoring and alerting, sharing information securely, data visualization and reporting, and integration with key systems.

The scope of the acquisition includes assessing cybersecurity risk for supply chains associated with DOI ICT products and services over the next five years. The Department estimates awarding approximately 2,000 contracts supporting ICT products and services during this period. The C-SCRM Tool Solution implementation will occur in a phased approach, starting with a pilot deployment in a limited controlled environment before expanding to support department/enterprise, bureau/office, and information system levels. The implementation will include professional services such as managing implementation, providing training for key personnel, integrating and testing the tool solution, developing processes and workflows, implementing role-based access, creating required artifacts for system authorization, and providing documentation and training.

The period of performance for this effort is one year with four one-year option periods. The place of performance includes various Department of the Interior facilities located in Denver, CO; Lakewood, CO; Washington DC; and Reston VA. Remote work may be authorized on a case-by-case basis. The contractor will be required to deliver project management deliverables such as an orientation meeting, project WBS/plan/schedule, status reports/meetings, and working documents. Additionally, they will need to provide deliverables related to the implementation plan and training plan.

Overall, this opportunity presents a significant contract for a C-SCRM Tool Solution that will support the Department of the Interior in managing cybersecurity supply chain risks associated with its ICT products and services. The implementation will occur in a phased approach, and the contractor will be responsible for delivering both the tool solution and professional services to support its deployment and utilization.