ENTERPRISE CYBERSECURITY SUPPORT (ECSS)

This is a Request for Information (RFI) and is not a Request for Proposal (RFP). No solicitation is being issued at this time. This notice shall not be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Any information provided to the Government as a result of this RFI Notice is voluntary. Responses will not be returned. No entitlement for payment of direct or indirect costs or charges by the Government will arise as a result of contractor submission of responses or the Government's use of such information. This REQUEST FOR INFORMATION is to gather comments or concerns in regards to the attached draft Performance Work Statement (PWS) and to determine the availability of potential businesses (large or small) that can: a. Provide Project Management Support b. Provide Cybersecurity support The information from this market research will help the Department of Health and Human Services (HHS), on behalf of the US Army Intelligence and Security Command (INSCOM) plan their acquisition strategy. Please be sure to indicate if you have a GSA Schedule contract, a contract on a GSA GWAC, or a contract with NITACC, etc. Qualifying businesses which have the organizational capacity to provide the main areas of work are encouraged to respond to this request. This is strictly market research. The Department of Health and Human Services (HHS), on behalf of the US Army Intelligence and Security Command (INSCOM) will not entertain questions regarding this market research. ? Background INSCOM, a Direct Reporting Unit (DRU) to Headquarters (HQ), Department of the Army, G-2, conducts intelligence, security and information operations for military commanders and national decision makers. INSCOM executes mission command of operational intelligence and security forces; conducts and synchronizes worldwide multi-discipline and all-source intelligence and security operations; delivers linguist support and intelligence-related advanced skills training, acquisition support, logistics, communications, and other specialized capabilities in support of Army, Joint, and Coalition Commands and the U.S. Intelligence Community (IC). Headquartered at Fort Belvoir, VA, INSCOM is a global command with MSCs that tailor their support to the specific needs of different theaters. The command synchronizes the intelligence operations of all INSCOM elements to ensure multi-discipline intelligence support to theater/component war fighters, the IC and other national agencies. INSCOM has a variety of smaller units with over 17,000 personnel dispersed over 180 locations worldwide. INSCOM and its MSCs provide the enabling layer to connect the Army and its tactical formations to defense and national intelligence agencies via tactical networks. The ability to provide mission critical intelligence is dependent on the successful use of its Information Technology (IT) networks worldwide. Sources Sought The US Army Intelligence and Security Command (INSCOM) provides intelligence, security and information operations for military commanders and national decision makers. This spans support to HQ INSCOM, and INSCOM facilities CONUS and OCONUS, and MSCs. This Sources Sought Notice is to determine the availability of potential small and large businesses that have the capacity and experience to carry out the work described below. To acquire technical services to enhance INSCOM's Cybersecurity (CS) Program and provide Risk Management Framework (RMF) support and Security Control Assessor - Representative (SCA-R) support to INSCOM. Specific tasks include, but are not limited to: - Risk Management Framework (ICD 503) Support - Cybersecurity Policy, Planning, Compliance, and Program Management Support - IA Vulnerability Management (IAVM) - Incident Response Support - Federal Information Security Management Act (FISMA) Implementation Support - IT Contingency Plan/Disaster Recovery Support - Cybersecurity Administrative Support - Dedicated Security Control Assessor - Representative (SCA-R) support - Information Assurance Support - Computer Network Defense (CND) Support - INSCOM TROJAN Specific Support Services - US Army G2 Cybersecurity Support Services Next Steps Interested sources are invited to submit comments or concerns in regards to the attached draft Performance Work Statement (PWS), along with a capability statement that is no more than 20 pages. This capability statement should include: - A cover letter with the offeror's name, company address, a point of contact, phone number, email address, DUNS number, and any current GSA schedule/GSA GWAC contract/ NITACC contract appropriate to this work (if any). If you have a government approved accounting system, please identify the agency that approved the system, and the type of company (i.e., other than small business, small business, 8(a), woman owned, veteran owned, etc.) as validated via the System for Award Management (SAM). - A clear and concise statement of the offeror's capability and organizational capacity to perform the work as described above. - Bios or resumes for proposed key staff members, including the project manager and lead technical staff. - The offeror's most pertinent previous experience with similar government contracts within the last four years. The capability statement does not need to describe how the contractor would carry out the proposed tasks, does not need to include any budget proposals, and does not need to provide resumes or other information for non-key staff. No proprietary, classified, confidential, or sensitive information should be included in your response. The Government reserves the right to use any non-proprietary technical information in any resultant solicitation(s) and for any other purpose deemed necessary and legally appropriate. This notice does not obligate the Government to award a contract or otherwise pay for the information provided in response. Qualifying small or large businesses which have the organizational capacity to the two main areas of work are encouraged to respond to this request. All teaming arrangements (if any) should also include the above-cited information with certifications for each entity on the proposed team. All offerors must register or be registered on SAM located at https://sam.gov/SAM/. Responses must be received by 3:00 pm EST on April 30, 2019. All submissions should be sent to Shanelle Jackson, via email at Shanelle.Jackson@psc.hhs.gov. Any organization responding to this notice should ensure that its response is complete and sufficiently detailed. Information provided will be used to assess tradeoffs and alternatives available for the potential requirement and may lead to the development of a solicitation. Respondents are advised that the Government is under no obligation to acknowledge receipt of the information received or provide feedback to respondents with respect to any information submitted. Any solicitation resulting from the analysis of information obtained will be announced to the public in Federal Business Opportunities in accordance with the FAR Part 5. However, responses to this notice will not be considered adequate responses to a solicitation.