FDIC's Digicert Subscription Maintenance

The Federal Deposit Insurance Corporation (FDIC) is soliciting quotes for the maintenance of its Digicert Subscription under RFQ# CORHQ-26-Q-0128, with a firm deadline of May 4, 2026, at 12:00 PM EST, following two amendments that extended the original submission date. The solicitation requires offerors to submit proposals in three distinct volumes: Volume I for pricing using the provided Price Schedule, Volume II for additional information including completed Section K representations, confidentiality agreements, and any terms and conditions such as EULAs or MSAs, and Volume III for Supply Chain Risk Management (SCRM) disclosures as outlined in Provision 7.1.2-03. All proposals must be submitted electronically to ditoles@fdic.gov, and prospective contractors must maintain an active SAM.gov registration prior to award. The contract is governed by a Lowest Price Technically Acceptable (LPTA) evaluation method, where technical acceptability and SCRM compliance are pass/fail criteria; only those offers that meet minimum technical requirements and correctly classify their supplier status as OEM, AM, or Authorized Supplier will be considered, with award going to the lowest-priced acceptable offer. The performance period runs from July 1, 2026, through June 30, 2027, with all physical deliveries directed to the FDIC DIT Distribution Center in Arlington, Virginia, and digital deliverables submitted to DITSoftwareMgt@FDIC.gov. The contract includes strict security requirements: all personnel must complete fingerprinting at a GSA USAccess facility, undergo background checks per FDIC Directive 1610.02, execute confidentiality agreements (Forms 3700/46 and 3700/46A), and comply with HSPD-12 and FIPS 201 identity verification standards. Contractors are prohibited from sourcing products or services from Kaspersky Lab or any other federally designated covered entities, and must fully disclose any foreign ownership or supply chain vulnerabilities. Invoicing must be submitted electronically to DOFAPInvoice@fdic.gov in PDF or Excel format and must reference FIN and Asset Name/Number for financial tracking. Payment will be made via Electronic Fund Transfer. The solicitation also mandates that all subcontractors flow down the same compliance obligations, including SCRM, confidentiality, and security requirements, with no exceptions. The contract does not specify packaging, marking, or barcoding standards