D -- Cyber Security Infrastructure Support

This is not a Request for Proposal (RFP) and is not a commitment by the Government to issue a solicitation or ultimately to award a contract on the basis of this Request for Information (RFI). Responses to this RFI will not serve as proposals, bids, or offers, which could be accepted by the Government to form a binding contract. Submission of any information in response to this RFI is completely voluntary, and shall not constitute a fee to the government. The main purpose of this RFI is to conduct market research and determine the organizations interested in providing cyber security infrastructure support services. DEPARTMENT OF STATE, BUREAU OF DIPLOMATIC SECURITY. The Bureau of Diplomatic Security (DS) has a broad range of responsibilities that include providing for a secure cyber environment, in which to carry out Department business and activities. The Department of State (DOS) is currently conducting market research to determine the existence of viable organizations capable of providing the necessary services in support of its cyber security operations. The key functional areas under consideration include but are not limited to the following: 1. Network Security Monitoring and Incident Response: monitors Sensitive But Unclassified (SBU) and classified networks to ensure the integrity, availability, and confidentiality of the critical Information Technology (IT) infrastructure; manages and operates the network monitoring/intrusion detection sensor network; handles computer incident response and reporting. 2. Cyber Threat Analysis: provides enhanced cyber security intelligence information to include indications and warnings on threats and potential threats to the Department?s networks; performs advanced technical analyses and operational security analyses of computer, telephone, communications, and telecommunications systems; conducts penetration testing for mission critical IT assets. 3. Security Research and Engineering: researches, evaluates, and engineers security technology, products, and solutions for safeguarding, monitoring, assessing, and investigating the security of classified and unclassified IT assets. 4. Enterprise Technology Assessment: conducts security test and evaluation of Commercial Off-the-Shelf (COTS) products and enterprise-wide IT solutions to determine potential risks, provide implementation recommendations, and establish security configuration standards. 5. Evaluation and Verification: performs security configuration compliance verification, application configuration verification, vulnerability assessments, and on-site security assessments. 6. Regional Computer Security Officer (RCSO) Program Support: provides technical, administrative and logistical support for RCSOs located worldwide and the conduct of on-site security assessments at foreign service posts. 7. Security Policy and Standards: contributes to the development of National level computer security and communications security guidelines and computer security policies and standards for the Department and Foreign Affairs agencies. 8. Security Awareness: designs and implements a worldwide cyber security awareness program. The Department is interested in small businesses with extensive experience in cyber security with demonstrated successes in supporting a large scale IT infrastructure encompassing 300+ domestic and overseas facilities and classified and SBU IT assets. The effort requires personnel that can obtain and maintain Defense Security Systems (DSS) clearances up to and including Sensitive Compartmented Information (SCI). The closing date for the receipt of responses is SEPTEMBER 14, 2006, at 12:00 PM, Eastern Standard Time. Electronic responses via email are encouraged, although hard copy responses will be accepted. Send your responses to the DOS Point of Contact listed below. Interested parties shall not mark any information as proprietary. All information received will be treated as publicly available information. The RFI response should be concise and focused and not exceed 2 pages excluding the cover page. Sales brochures, videos, and other marketing information materials are not solicited and will not be reviewed. Interested organizations submitting a response should include the following information: 1) company name and address; 2) point of contact; 3) phone/fax/email; 4) NAICS Codes; 5) business size and status, 6) Cognizant Audit Agency information and point of contact; 7) Organizational history/capability statement in response to the requirement description, as follows: 1. A summary/description of the company?s relevant experience in cyber security operations, specifically in the functional areas identified above, and in support of large, complex IT infrastructures encompassing domestic and overseas facilities during the past two (2) years. 2. For cited experience, provide contract period of performance, contract type, contract value, and identify contract and technical points of contact.