Department of the Treasury (DY), Internal Revenue Service, IS:S:ITG, c/o ISC, 2701 Prosperity Ave, Rm 4434D, Fairfax, VA 22031

D -- COMMERCIAL SECURITY AUDIT MANAGEMENT/AUDIT ANALYSIS PRODUCTS SOL 0-7-10-V0-V4-N18 0001 DUE 011497 POC Randy Osborn, 703-876-4542, 202-283-1411 The Internal Revenue Service (IRS) is seeking sources who can provide commercial-off-the-shelf products for security audit management (audit collection, audit reduction, audit translation) and security audit analysis for a limited duration useability functionality, interoperability and performance testing on a no-cost basis by an existing IRS contractor. The hardware/software products will be installed, tested and evaluated in any or all of the following IRS Proof-of-Concept test environments: Unix Wae, MP-RAS, DC/OSX, Sun Solaris and Windows NT. Vendors may respond to either one or all of the following areas of security audit management: 1) Native Security Audit Collection which must collect the security audit data native to each platform that generates audit data such as operating systems, database management systems and applications and 2) Security Audit Translation/Security Audit Reduction to translate seurity audit data from its native form to a user-defined enterprise wide standard form and too include a reduction process. The IRS will base its initial evaluation on the following criteria: 1) Scalability to support enterprise security audit data in a sysem as large as that required by the IRS; 2) Support of audit analysis techniques, i.e., trends/variance detection, attack signature detection; 3) Range of test platforms and operating environments supported; 4) Reliability in the test environments; 5) Performance in the test environment and 6) Ease of installation, integration and use of test platforms. All interested vendors must submit the following infrmation for each system they are responding to within 60 days of this notice: 1) Descriptive technical literature including information on the product's supported platforms, operating systems and technical architecture; 2) Statement of the products' commerial availability plus current catalogs; 3) vendors amenability to loaning the offered products to the IRS, at no cost, for testing, and 4) any other pertinent documentation that will assist the IRS. Vendors will be notified in writing, within 30 days after completion of the evaluations/testing of the results. Selection for testing neither implies endorsement nor is an expressed or tacit commitment or agreement b the IRS to acquire the products at a later date. Selection for testing will neither provide vendors with an advantage nor preclude them from bidding on related future procurements. At this time, there is neither a solicitation package available nor is oneanticipated in the near future. (0351)

Loren Data Corp. http://www.ld.com (SYN# 0023 19961218\D-0006.SOL)