Search Contract Opportunities

NATO International Competitive Bidding (ICB): Privileged Access Management (PAM) Solution

ID: RFQ-CO-115725-PAM • Type: Special Notice

Description

Posted: Feb. 24, 2025, 12:36 p.m. EST

The NATO Communications and Information Agency (NCI Agency) intends to issue a Request for Quotation (RFQ) for the acquisition and deployment of a Privileged Access Management (PAM) solution to control and audit privileged accesses, actions, and permissions by elevated users managing the IT environment in NCIA data centers.

Potential U.S. prime contractors must 1) maintain a professionally active facility (office, factory, laboratory, etc.) within the United States, 2) be pre-approved for participation in NATO International Competitive Bidding (ICB), 3) be issued a Declaration of Eligibility (DOE) by the U.S. Government, and 4) register with NCIA's eProcurement tool, Neo: https://www.ncia.nato.int/business/procurement/neo-eprocurement

In addition, contractor personnel will be required to work unescorted in Class II Security areas. Therefore, access can only be permitted to cleared individuals. Only companies maintaining the appropriate personnel clearances will be able to perform the resulting contract.

The reference for the RFQ is RFQ-CO-115725-PAM and all correspondence concerning the RFQ should reference this number.

The successful quote pursuant to the RFQ will be that quote that is the lowest price and technically compliant in accordance with the evaluation criteria prescribed in the RFQ.

Please note: If your firm was earlier issued a DOE for RFQ-CO-115725-PAM, you do not need a new DOE unless your POC information has changed. If your POC information has changed, please contact DOC.

SUMMARY OF REQUIREMENTS

Please see attached. These requirements are being refined and detailed as part of the preparation of the RFQ.

BECOMING ELIGIBLE TO BID

NATO ICB requires that the U.S. Government issue a DOE for potential U.S. prime contractors interested in this project. Before the U.S. Government can do so, however, the U.S. Government must approve the U.S. firm for participation in NATO ICB. U.S. firms are approved for NATO ICB on a facility-by-facility basis.

The U.S. NATO ICB application is a one-time application. The application requires supporting documentation in the form of 1) a company resume or capability statement indicating contracts completed as a prime contractor and 2) an annual report or set of financial documents indicating compilation, review, or audit by an independent CPA.

U.S. firms can download a copy of the U.S. NATO ICB application from the following website:

http://www.bis.doc.gov/index.php/other-areas/strategic-industries-and-economic-security-sies/nato-related-business-opportunities

The Department of Commerce (DOC) is the U.S. Government agency that approves NATO ICB applications. Please submit to the email address provided your application and supporting documentation (as attachments). If your firm is interested in a specific NATO ICB project at this time, please also include the following in the text of your email:

the title and/or solicitation number of the project
- the name/phone/email of the company employee who should receive the bid documents

After approval of your one-time NATO ICB application, DOC will then know to follow up by issuing a DOE for the project. DOC will transmit the DOE to the NATO contracting agency.

IMPORTANT DATES:

Request a DOE (and, for firms new to NATO ICB, submit the completed one-time NATO ICB application): 11 March 2025

NCI Agency distributes the RFQ (planned): Q1 2025

Bid Closing (target): Q2 2025

Contract Award (target): Q3 2025

Posted: July 18, 2023, 9:00 a.m. EDT
Posted: July 18, 2023, 8:48 a.m. EDT
Posted: June 10, 2022, 10:15 a.m. EDT
Background
The NATO Communications and Information Agency (NCI Agency) is seeking to acquire and deploy a Privileged Access Management (PAM) solution. This initiative is part of the broader IT Modernisation Recovery Increment 1 (ITM-RC1) project, aimed at enhancing the control and auditing of privileged accesses, actions, and permissions by elevated users within NCIA data centers. The contract is intended for U.S. prime contractors who meet specific eligibility criteria, including maintaining a facility in the U.S., being pre-approved for NATO International Competitive Bidding (ICB), and having personnel with appropriate security clearances.

Work Details
The contractor will be responsible for delivering a comprehensive PAM solution that includes:
- Inventory of privileged accounts
- Implementation of multi-factor authentication for privileged accounts using the NATO PKI-system
- Establishing controls for privileged access
- Account/credentials vaulting
- Session management
- Session recording
- Rationalizing the number and scope of accounts and privileges
- Implementation of Just in Time access controls
- Integration with Security Information and Event Management (SIEM) systems
- Integration with tools like IT Service Management (ITSM) and Identity Governance Administration (IGA)
- Automation of privileged tasks
- User-based analytics.

The PAM system must integrate with various Communication and Information Systems, including network infrastructure equipment, security enforcing infrastructure, operating systems, applications, and IoT/OT devices. The contractor will also provide warranty and operational maintenance support as an option following final delivery.

Period of Performance
The contract's performance period is expected to span from Q1 2025 when the RFQ is distributed until at least Q3 2025 when the contract award is targeted.

Place of Performance
The work will be performed within NCIA data centers.

Overview

Response Deadline
March 11, 2025, 5:00 p.m. EDT (original: July 27, 2022, 5:00 p.m. EDT) Past Due
Posted
June 10, 2022, 10:15 a.m. EDT (updated: Feb. 24, 2025, 12:36 p.m. EST)
Set Aside
None
PSC
None
Place of Performance
Belgium
Source
SAM

Current SBA Size Standard
$34 Million
Pricing
Likely Fixed Price
Est. Value Range
Experimental
$5,000,000 - $15,000,000 (AI estimate)
On 6/10/22 Bureau of Industry and Security issued Special Notice RFQ-CO-115725-PAM for NATO International Competitive Bidding (ICB): Privileged Access Management (PAM) Solution due 3/11/25.
Primary Contact
Name
Lee Ann Carpenter   Profile
Phone
None

Documents

Posted documents for Special Notice RFQ-CO-115725-PAM

Question & Answer

Incumbent or Similar Awards

Potential Bidders and Partners

Awardees that have won contracts similar to Special Notice RFQ-CO-115725-PAM

Similar Active Opportunities

Open contract opportunities similar to Special Notice RFQ-CO-115725-PAM

Additional Details

Source Agency Hierarchy
COMMERCE, DEPARTMENT OF > BUREAU OF INDUSTRY AND SECURITY
FPDS Organization Code
1316-None
Source Organization Code
300000156
Last Updated
March 15, 2025
Last Updated By
leeann.carpenter@bis.doc.gov
Archive Date
March 15, 2025