HHS - CMS Administrative Simplification Enforcement and Tool Testing (ASETT) - M

The U.S. Department of the Interior's Office of the Chief Information Officer is seeking a Cybersecurity Supply Chain Risk Management (C-SCRM) Tool Solution. The purpose of this tool is to enable the Department to identify, assess, monitor, and mitigate cybersecurity risks associated with its information and communications technology (ICT) supply chain. The Department relies on a complex and interconnected supply chain ecosystem that presents significant risks, including counterfeit or compromised components and poor manufacturing practices. The C-SCRM Tool Solution will be used to streamline and automate these processes for DOI personnel.

The scope of this opportunity includes assessing cybersecurity risk for supply chains associated with DOI ICT products and services. The Department estimates awarding approximately 2,000 contracts supporting ICT products and services over the next five years, with less than 700 suppliers supporting the ICT portfolio. The C-SCRM Tool Solution will be implemented in a phased approach, starting with critical systems associated with major IT investments or designated as High Value Assets (HVAs). The tool will support various use cases, including supplier/product/entity assessment, product/producer assurance, continuous monitoring and alerting, sharing information securely, data visualization and reporting, integration with key systems, and multi-tenant/tier use.

The period of performance for this effort is one year with four option periods of one year each. Implementation support may be required on-site or off-site at various DOI facilities in Colorado, Washington DC, and Virginia. Remote work may also be authorized on a case-by-case basis. The contractor will be responsible for delivering the C-SCRM Tool Solution as a commercial off-the-shelf software that meets DOI's requirements and providing implementation services and training for DOI personnel.

Overall, this opportunity presents a significant contract for a C-SCRM Tool Solution that will help the U.S. Department of the Interior enhance its cybersecurity supply chain risk management capabilities across its enterprise.