DOCUMENT
D -- Data Assessment Risk Tool (DART) - RFI - Attachment
- Notice Date
- 6/21/2018
- Notice Type
- Attachment
- NAICS
- 541519
— Other Computer Related Services
- Contracting Office
- Department of Veterans Affairs;Technology Acquisition Center;23 Christopher Way;Eatontown NJ 07724
- ZIP Code
- 07724
- Solicitation Number
- 36C10B18Q2970
- Response Due
- 7/3/2018
- Archive Date
- 9/1/2018
- Point of Contact
- Kelly Reale
- E-Mail Address
-
0-9712<br
- Small Business Set-Aside
- N/A
- Description
- Request for Information Data Assessment Risk Tool This is a Request for Information (RFI) only. Do not submit a proposal. This RFI is for planning purposes only and shall not be considered an Invitation for Bid, Request for Task Execution Plan, Request for Quotation or a Request for Proposal. Additionally, there is no obligation on the part of the Government to acquire any products or services described in this RFI. Your response to this RFI will be treated only as information for the Government to consider. It is requested that all companies interested in participating in this effort please note their interest and submit a capability statement demonstrating their ability to meet this requirement by providing technical details on how their company would provide these services, specifically addressing the questions outlined below. The page limit for RFI responses is 15 pages. Please note the business size for North American Industry Classification System (NAICS) Code 541519 and indicate if you are a Service-Disabled Veteran-Owned Small Business (SDVOSB) or a Veteran-Owned Small Business (VOSB). You will not be entitled to payment for direct or indirect costs that you incur in responding to this RFI. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. Department of Veteran Affairs (VA) Technology Acquisition Center (TAC) is seeking information concerning the availability of capable contractors to provide a Data Assessment Risk Tool that provides the capabilities listed below. Content Recognition The solution shall have the ability to monitor and assess Cybersecurity and Risk Management for all unencrypted data that resides on any laptop, desktop computer, server, shared drive, or SharePoint folder, based on the exact content of sensitive data stored in that segment. (Essential Capability) The solution shall be have the ability to perform scheduled daily monitoring of all unencrypted data initially targeted in real time and to monitor any data that is added. (Essential Capability) The solution shall have the ability to perform pattern matching or searching of specific data at the record level. (Essential Capability) The solution shall have the ability to evaluate data based on file content (not file extension) and context. (Essential Capability) The solution shall have the ability to open and assess a wide variety of file types, including all MS Office formats, PDF, HTML, etc. (Essential Capability) Content Remediation The solution shall have the ability to provide Real Time Alerts to a given scenario triggered by real time events. (Not Essential) The solution shall enable administrators to take appropriate remediation action. (Essential) The solution shall enable authorized users to manually initiate encryption of unencrypted VA Data to NIST Standards. (Important) The solution shall enable administrators to manually initiate copy, move, and/or quarantine actions for selected files. (Essential) The solution shall have the ability to perform appropriate automated remediation action. (Important) The solution shall have the ability to automatically risk-rate and index unencrypted VA Data to NIST Standards. (Essential) The solution shall have the ability to automatically copy, move, and/or quarantine files. (Important) The system shall have the ability to notify end users of action taken. Reporting The solution shall have the ability to deliver Scheduled Reports daily, weekly and monthly with scorecards presented by VA data and its lifecycle. (Essential) The solution shall provide a robust reporting mechanism with both out-of-the-box reports and the ability to create custom ad-hoc reports. (Essential) The solution shall have the ability to export reports to formats such as HTML, PDF, and CSV. (Essential) The solution shall have the ability to control access to report viewing based on roles. (Essential) Technical The solution shall be client-based. (Essential) The solution shall be capable of centralized distribution The solution shall have the ability to function without creating negative impact on endpoint or network performance. (Essential) The solution shall have the ability to encrypt all communication between the agent and the system. (Essential) System Management The solution shall provide Centralized Management in the form of a single web based console for System Administration, Policy Management, Workflow and Reporting Engine. (Essential) The solution shall have the ability to Index corporate directory information (LDAP/AD, groups, geographies, etc.) to include/exclude specific employees in a policy. (Important) The solution shall provide out-of-the-box predefined Global Policies such as HIPAA and PII. (Essential) The solution shall have the ability to define Custom Policy. (Important) If interested please provide the following: A capabilities statement based on the draft requirements above. If additional information is required by the VA to determine a contractor s ability to provide the full requirement and the economic feasibility of the information provided, additional information may be requested later. Do not provide any proprietary information as any contractor questions and corresponding Government Answers will be made available to all interested parties. Provide a rough order of magnitude price for Government estimating purposes. Any Contract Vehicle of which you are a part of that can be used to acquire your solution as well the company business size and status for each vehicle as designated by the NAICS 541519 and the U.S. Small Business Administration (i.e. Large Business, Small Business, Service Disabled Veteran Owned Small Business, Small Disadvantaged Business, Women-Owned Small Business, Hub Zone Small Business, etc.). Instructions for Submitting Questions and the RFI Response: The VA Technology Acquisition Center points of contact for this RFI are Contract Specialist, Kelly Reale and Contracting Officer, Kevin Monahan. Submit any questions to this RFI directly to Kelly Reale at Kelly.Reale@va.gov and to Kevin Monahan at Kevin.Monahan@va.gov. RFI responses are to be submitted directly to Kelly Reale by 12:00PM Eastern Standard Time, Tuesday, July 3, 2018. If possible, please limit responses to 15 pages or less. Submissions shall be less than 5MB.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/notices/41c7c39e69400cf7646bba5536af69e4)
- Document(s)
- Attachment
- File Name: 36C10B18Q2970 36C10B18Q2970.docx (https://www.vendorportal.ecms.va.gov/FBODocumentServer/DocumentServer.aspx?DocumentId=4416306&FileName=36C10B18Q2970-000.docx)
- Link: https://www.vendorportal.ecms.va.gov/FBODocumentServer/DocumentServer.aspx?DocumentId=4416306&FileName=36C10B18Q2970-000.docx
- Note: If links are broken, refer to Point of Contact above or contact the FBO Help Desk at 877-472-3779.
- File Name: 36C10B18Q2970 36C10B18Q2970.docx (https://www.vendorportal.ecms.va.gov/FBODocumentServer/DocumentServer.aspx?DocumentId=4416306&FileName=36C10B18Q2970-000.docx)
- Record
- SN04963242-W 20180623/180621231043-41c7c39e69400cf7646bba5536af69e4 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |