U.S. General Accounting Office, Acquisition Management, 441 G. Street N.W., Room 6851, Washington, DC 20548

R -- TECHNICAL CONSULTING SERVICES POC Karen T. Gantt, 202-512-2709 E-MAIL: Click here to contact the contracting officer via, ganttk.gsc@gao.gov. The U.S. General Accounting Office intends to award a sole source purchase order to BDC Computer Services (U.S.), 300 Pearl Street, Buffalo, NY 14202 for technical consulting services to be provided to GAO's computer security test facility. The period of performance shall be from date of award through September 30, 2000 or until a contract is awarded, whichever is earlier. This is a requirement for interim services while a full and open competition is being conducted for a contract with a base year and (4) one-year options. The test facility is used by the Consolidated Audits and Computer Security Issues (CACSI) group technical staff to develop computer assisted audit tools, conduct tests in a non-production environment, and train EDP auditors in information systems security technology. CACSI conducts general controls audits of Federal computer centers in conjunction with the consolidated audit of financial statements. The contractor shall use highly skilled, technical EDP security specialists to provide consulting services involving operating system integrity exposures in OS/390 environments. The EDP security specialist(s) assigned shall have: at least ten years of intensive experience in OS/390 operating system software design and support; expert knowledge of OS/390 software integrity mechanisms; expert knowledge of System 390 hardware controls and their relation to OS/390 integrity; extensive knowledge of non-IBM system software products widely used in the industry as extensions to base OS/390 configurations; extensive knowledge of the top three major OS/390 security products as listed above; expert knowledge of the System 390 machine instruction set and principles of operation; expert knowledge of OS/390 assembler language and System 390 object code generation; expert skill in reading and analyzing object code to determine program function without the benefit of source code language statements; a proven track record in performing OS/390 integrity analysis and successful design of OS/390 penetration tests; and, strong oral and written communications skills. This award will be made using Simplified Acquisition Procedures. Interested parties may identify their interest and their ability to meet this requirement or submit a proposal in accordance with Numbered Note 22. This is not a notice for competitive proposals. The Contracting Officer may be reached by facsimile on 202/512-2658. Attn: Karen T. Gantt. Telephone requests or inquiries will not be accepted. See Note 22.***** Posted 10/08/99 (W-SN390385). (0281)

Loren Data Corp. http://www.ld.com (SYN# 0052 19991013\R-0001.SOL)