Computer-Based Testing for the Cryptographic Validation Program

This sources sought notice is REOPENED on 6/16/2022 with a new response date of 6/22/2022 at 12:00 PM. The notice is reopened to revise key task areas two and three and to request small business capabilities regarding the revised key task areas. Task Area 2. Test Administration is revised to clarify that computer based tests must be provided in-person. Task Area 3. Test Site Geographic Location is revised to state that 85% of contractor test centers shall be within FIFTY (50) miles of NVLAP accredited currently located in the US, Canada, Japan, Germany, Spain, France, and Taiwan. The task area is also revised to clarify that use of some temporary test centers is acceptable. ___________________________ INTRODUCTION This is a Small Business Sources Sought notice. This is NOT a solicitation for proposals, proposal abstracts, or quotations. The purpose of this notice is to obtain information regarding the availability and capability of qualified small business sources. This notice is strictly for market research and information purposes only. Your responses will assist the Government in determining the appropriate acquisition method, including whether a set-aside is possible. NIST is seeking responses from all responsible small business concerns. Small businesses are defined under the associated NAICS code for this effort, 541519 (Other Computer Related Services), as those domestic sources having annual revenue of $30 million or less. Background: The National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure. NIST's responsibilities include the development of management, administrative, technical, and physical standards and guidelines for the cost-effective security and privacy of other than national security-related information in Federal information systems. In advancing its mission objectives, NIST must validate cryptographic modules and cryptographic algorithms, and ensure independent, National Voluntary Laboratory Accreditation Program (NVLAP) accredited laboratories meet competence and performance criteria for conducting algorithm and module testing. Scope of Requirement: NIST is seeking information from all responsible small business sources capable of providing services for the development, updating, and administration of computer-based competency exams to NVLAP accredited laboratory testers for the Security Testing, Validation and Measurement (STVM) Group's cryptographic validation programs. Testing centers shall be within 30 miles of NVLAP accredited laboratories. Key Requirement Tasks: The required work includes the following key task areas: Test Development and Maintenance: This task area will require development of two computer-based competency exams, one on FIPS 140-3 and one on approved Cryptographic Algorithms, based on questions and answers developed by NIST. The contractor shall edit and balance questions, assess difficulty to assist in assigning weights for scoring, and update the tests routinely. Test Administration: This task area will require publishing and administering competency exams in-person via a computer-based system. The contractor shall schedule testing, verify candidate eligibility to test, verify candidate identity, protect exam content from unauthorized removal or tampering, share test results with NIST. The contractor shall not notify candidates of test results; NIST will perform that task. Test Site Geographic Location: 85% of contractor test centers shall be within 50 miles of NVLAP accredited laboratories currently located in the US, Canada, Japan, Germany, Spain, France, and Taiwan. A current list of NVLAP accredited labs may be found in Appendix A at the end of this document. The 50-mile maximum distance is mandatory to ensure tests are uniformly and equitably available. Use of some temporary test centers is acceptable. QUESTIONS REGARDING THIS NOTICE Questions regarding this sources sought notice may be submitted via email to Ms. Lauren Roller, Contract Specialist, at contact@example.gov. Questions are due by or before 11:00 AM ET on DATE, 2022. Questions will be anonymized and answered via sources sought notice amendment following the question submission deadline. RESPONSE INSTRUCTIONS All responsible small business sources able to provide the services described above are asked to email a response to Ms. Lauren Roller, Contract Specialist, at contact@example.gov by or before 12:00 PM Noon ET on June 22, 2022 Please include the following information in the response: Name of company authorized to provide services, along with their address and a point of contact for the company (name, phone number, and email address). The company's primary NAICS, size classification, and socio-economic status (i.e., Small Business, Woman Owned Small Business, Service Disabled Veteran Owned Small Business, etc.). Brief description of capabilities in relation to the three key task areas identified in this sources sought notice. Information on any GSA Federal Supply Schedules (FSS) or other Government-wide contracts through which the company offers these services, if applicable. Any other relevant information that is not listed above which the Government should consider. Responses are limited to a maximum total of ten (10) pages in MS Word or searchable PDF format. IMPORTANT NOTES This notice is not to be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Responses will not be considered as proposals or quotes. No award will be made as a result of this notice. The Government will not be responsible for any costs incurred by the respondents to this notice. The Government reserves the right to use information provided by respondents for any purpose deemed necessary and legally appropriate. No proprietary, classified, confidential, or sensitive information should be included in your response; however, NIST will recognize as restricted or proprietary data which is clearly marked such.