Zero- dollar Request for Information- User Activit

Background
The Social Security Administration (SSA) is seeking to enhance its Insider Threat Program to deter, detect, mitigate, and negate insider threats to protect its workforce, assets, and reputation. This initiative is in compliance with multiple Executive Orders and aims to gather vendor information for User Activity Monitoring (UAM) solutions and case management systems tailored for controlled unclassified and classified environments.

Work Details
The SSA requires a commercial off-the-shelf (COTS) User Activity Monitoring (UAM) solution and case management capabilities. The UAM system will serve as the primary tool to observe and record actions of individuals accessing U.S. Government information, detecting activities indicative of insider threats.

The solution must comply with Executive Order 13587, Committee on National Security Systems Directive 504 (CNSSD 504), and CNSSD 4009-2015. SSA is looking for information regarding companies that are proven leaders in UAM and case management implementation.

Bidder Requirements
Vendors must provide information on their capabilities in UAM and case management solutions that meet the specified requirements.

Incumbent Analysis (see Incumbents section for more detail)
This RFI appears to have a confirmed incumbent based on SSA’s prior contract GS35F650GA-28321324FDX030080 awarded to Everfox for “user activity monitoring software subscription and services” (valued at $12,754,883, 04/26/24–04/25/29), which aligns with the current need for a COTS UAM solution to support the Insider Threat Program. The scope also resembles a continuation of SSA’s ongoing insider threat monitoring efforts, as the UAM software is intended to observe and record user actions indicative of insider threats. A closely related prior award to Deloitte Consulting (28321319A00040007-28321321FA0010173) for SaaS contractor services supporting the Insider Threat Program further indicates continuity in this functional area.