SOURCES SOUGHT
D -- Physical Security Assessment Tool and Support Services
- Notice Date
- 7/20/2021 11:17:24 AM
- Notice Type
- Sources Sought
- NAICS
- 541519
— Other Computer Related Services
- Contracting Office
- US ARMY HUMPHREYS ENGINEER CTR SPT ALEXANDRIA VA 22315-3860 USA
- ZIP Code
- 22315-3860
- Solicitation Number
- W912HQ21S0030
- Response Due
- 7/29/2021 1:30:00 PM
- Archive Date
- 08/13/2021
- Point of Contact
- David A. Kaplan, Phone: 7034288487, W. Dale Dewar, Phone: 7034286485
- E-Mail Address
-
david.a.kaplan@usace.army.mil, wesley.d.dewar@usace.army.mil
(david.a.kaplan@usace.army.mil, wesley.d.dewar@usace.army.mil)
- Description
- This is a SOURCES SOUGHT announcement; market survey for information only, to be used for preliminary planning purposes. No quotes or proposals are being requested or accepted with this synopsis. The Humphreys Engineer Center Support Activity has been asked by Headquarters USACE Operational Protection Division to procure a Physical Security assessment tool and support services (software) that meets the requirements specified by the Department of Army (DA) Army Regulation (AR) 190-13, �The Army Physical Security Program�. The Physical Security Program at the Headquarters DA (HQDA) currently uses a customized web-based variant of the Security Management System (CounterMeasures) SMS(CM) Risk Management Software, to include maintenance and development services. The estimated amount of the award is $6,200,000.00, and the period of performance will be for one base year of services with four (4) one-year option periods.� The software needs to a web-hosted (see below for specifics), NIPRNet domain, accessible to Army personnel throughout the world.� The software will be required to automate all the necessary aspects associated with execution of HQDA level and subordinate to HQDA command levels as well.� The software, and all data, will ensure compliance with policy associated with �controlled unclassified information (CUI)� requirements and other policy as defined hereafter.� The software, in general, will be required to automate processes, risk analysis, checklist development, report writing, form completion, and trends analysis as identified in the various applicable DA regulations, pamphlets, and Unified Facilities Criteria (UFC) 4-020-01 DoD Security Engineering Facilities Planning Manual. The software shall be developed, tested, revised, piloted (with necessary software revisions) and finalized by the contractor in no greater than 12-months from contract award to conduct the following: Automate the completion of a physical security inspection by a physical security inspector as defined in Army Regulation (AR) 190-13 Automate the completion of a physical security survey by a physical security inspector as defined in AR 190-13 Automate the completion of an Army required risk analysis for unclassified Army resources as defined in Army Pamphlet (PAM) 190-51, and completion of required DA Form 7278 (Risk Level Worksheets) for each resource that requires a risk analysis. Develop site specific inspector �checklists� that enable physical security inspectors to export this list from the software, and import back into the software when completed, to document compliance with, or without, security requirements, standards and policy in: AR 190-11, AR 190-13, AR 190-51, & AR 190-56 Checklist data will then be used in the automation and completion of an AR 190-13 required: physical security survey on DA Form 2806 (Physical Security Report), & physical security inspection on DA Form 2806-1 (Physical Security Inspection Report) Will have an Army nodal hierarchal breakdown of sub-commands, and their associated resources for each inspection/survey conducted on that node. Authorizations and Permissions based access to information, nodes, and report data to limit access to those that �don�t have a need to know� Incorporate, and automate, all aspects associated with UFC 4-020-01 Develop a trends and analysis functionality, to enable analysis of approved inspection�s content/results at the: �1. command/sub-command, 2. individual checklist measure/deficiency, 3. location, or 4. resource/asset levels Standardized �reporting out� of data at the command/sub-command, individual checklist measure/ deficiency, location or resource levels Ability to eSign, via common access card (CAC) certificates, all forms that require signature. Develop electronic training manuals to enable all software users the ability to learn how to use the software. Develop on-line training vignettes, content based upon the training manuals, to enable all software users the ability to learn how to use the software. Maintain a separate access to the software, portioned out away from production database information/structure, for U. S. Army Military Police School (USAMPS) to train inspectors on the software. Establish and maintain a website to enable users access reference material, user manuals, training vignettes, etc. After the software has been �reviewed and approved as Final� by HQDA, it shall have to undergo the DoD Risk Management Framework (RMF) process, analysis, scrutiny where the contractor shall be solely responsible for addressing/fix all deficiencies, or non-compliance, which includes the contractor being responsible for development of the various necessary documents associated with obtaining an authority to operate (ATO) for the software on DA or DoD networks in no greater than 24-months from contract award (e.g., no greater than 12-months from Government approval of the final software).� This shall include the contractor being responsible for populating eMASS with all the necessary information, documents, etc. that the contractor will be developing to obtain an ATO for their software. Work entails, the contractor establishing and maintaining a �help desk� call in number, for users to call when they are having problems with the software, have questions on the software, help on a particular problem they are experiencing, or other similar activities of the like associated with typical software �help desk� activities.� Contractor help desk operations are necessary only during normal Federal Government workdays from 0800 hours to 1700 hours Eastern Standard/Daylight Time, Monday through Friday, except Federal holidays. All aspects of this contract will require the contractor to be compliant with all Section 508 requirements of the Rehabilitation Act at all times, and thus must meet the applicable standards specified in 36 CFR 1184.2 unless an agency exception to this requirement exists or as defined by the Government. All contractor, or sub-contractor, personnel working on this contract will be required to sign a non-disclosure agreement. The contractor shall be provided Government furnished property (GFP) or equipment as deemed necessary by the Government to aid the contractor�s performance of work, where the contractor shall use or operate the GFP and equipment in a responsible manner. GFP and equipment issued to contracted employees shall be used for official Government business only, and for only activities associated with the contracted employee execution of this contract.� The contractor, or the contractor�s employees, will not use GFP or equipment in any manner for any personal advantage, business gain, or other personal endeavor.� The contractor shall remunerate the Government for expenses associated with misuse or abuse of GFP and equipment by the contractor�s employees. Government computing and communications resources will be issued to enable contractors to gain access to Government networks, only when contracted staff cannot accomplish mission execution with non-USACE/company computers.� Other government provided communications, computing equipment will be provided by the Government only when, and if, the Government determines it is in the best interest of the Government, and in supporting the contractor executing this contract. Work shall be performed at the contractor�s/sub-contractor�s facility(ies) and with contractor, or subcontractor, provided utilities. The exception to this would be during contractor on-site activities, where the Government would provide sufficient local electrical, water and wastewater services. Contractor, and sub-contractor staff will have to complete various training before work can commence, of which and include, and not limited to:� Antiterrorism, Suspicious Activity, Operations Security, Information assurance/Information Technology, Threat Awareness Reporting Program, CUI, and other training as deemed necessary be the Government. Any firm that believes it can meet this requirement should submit a capabilities statement and submit any questions to the Contract Specialist no later than 21 July 2021. No Proposals are requested at this, but a rough estimate is encouraged if possible. The Point of contact for this requirement is David A. Kaplan, Contract Specialist at email: David.A.Kaplan@usace.army.mil.��� All responses must include responses to the attached Questionnaire.��
- Web Link
-
SAM.gov Permalink
(https://beta.sam.gov/opp/af7fa789a4a246458ce7204bcbced0b7/view)
- Record
- SN06067750-F 20210722/210720230126 (samdaily.us)
- Source
-
SAM.gov Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's SAM Daily Index Page |