HOMELAND SECURITY PRESIDENTIAL DIRECTIVE 12 (HSPD-12) SHARED SERVICE PROVIDER III

PART: U.S. Government Procurement SECTOR: 51 - Information NAICS: 518210 OFFADD: U.S. General Services Administration, Integrated Technology Services, 10304 Eaton Place, Fairfax, VA 22030-2213 Subject: 51 - HOMELAND SECURITY PRESIDENTIAL DIRECTIVE 12 (HSPD-12) SHARED SERVICE PROVIDER III Due: July 28, 2010 POC: Jasmine Carter, (703) 306-7804; Email: jasmine.carter@gsa.gov DESC: THIS IS A REQUEST FOR INFORMATION (RFI). The Federal Acquisition Service (FAS) of the U.S. General Services Administration (GSA) is seeking information, comments, feedback and recommendations from sources including, but not limited to, government agencies, potential offerors, and other sources related to Homeland Security Presidential Directive 12 (HSPD-12)-related Personal Identity Verification (PIV) services. The information received will be used by GSA to assess the validity and viability of its requirements for Identity Management services for 2011 and beyond. GSA plans to evaluate different acquisition scenarios that may include government furnished systems managed by an integration contractor, government-owned and operated services, contractor-owned-and-operated services, or some combination of the three. GSA currently provides end-to-end HSPD-12 PIV-related services to approximately 80 Federal departments, agencies, boards, and commissions, specified in GSA IT Schedule 70, SIN 132-62, as follows: PIV Enrollment and Registration Services and Products: These services relate to the initial provisioning of data to create identity stores for agencies to sponsor and register employees and contractors. PIV Systems Infrastructure Services and Products: Equipment and communications systems necessary to receive, store, and return personal identity data in accordance with all federal privacy and information processing standards. PIV Card Management and Production Services and Products: Systems and services to create, personalize, and distribute policy-compliant physical tokens that link to identity stores on a real-time basis. PIV Card Activation and Finalization Services and Products: Systems and services to link PIV cards and identities and manage token life-cycles. PIV System Integration Services and Products: Expert systems engineering and assistance with deploying HSPD-12 solutions for customer agencies. Figure 1, Current HSPD-12 Services, depicts the relationship of the above services. (See Attachment) Figure 1. Current HSPD-12 Services GSA is also seeking information about alternative models and solutions for providing these services. Consequently, all sources are invited to submit information, comments, feedback and recommendations for implementation of HSPD-12-related PIV services. Sources are invited to propose alternative solutions to any one or more of the requirements stated below. General Requirements: Initial issuance and full PIV credential lifecycle management, including technical architecture. Security Requirements: Compliance with requirements defined in NIST and GSA security policies and procedures for a FIPS 199 security impact level of HIGH. System Role Requirements: At a minimum, those roles defined in FIPS 201. Credential requirements: At a minimum, PIV credentials in accordance with FIPS 201 System Interface Requirements: Options for supporting multiple interfaces to differing system components and provision services to customers to include users and locations. System Reporting Requirements: At minimum, activity and transaction reports. Help Desk Services: Provisioning of help desk services for system role holders and individual credential holders. Training: Delivery mechanisms and content for training system role holders and individual credential holders. Service level Agreements: Options for evaluation and management of performance. Contracting Options: Creative solutions for government/industry partnering, including business process approaches towards the monitoring, reporting, providing of data and transactions processed on a recurring basis and also to what level of granularity. Description should also indicate how the business process relates to contract administration and financial management. Contract Transition Requirements: Options for orderly and seamless transition. In addition, the government is seeking information about solutions for supporting the following service enhancements: Future Interfaces: Additional interfaces to support distributed physical and logical operations, such as services being provided by multiple sources. Security Architectures: Additional credential types, such as temporary badges, PIV interoperability, repositories. form factors, additional capability to support additional uses such as stored value. Additional Services: Support for local or limited use logical and physical access. Management Processes: The government is also seeking input on the effective division of responsibilities between the Government and the contractor in managing a service such as HSPD-12. This RFI is for information and planning purposes only and does not constitute a solicitation for bids, proposals or quote and is not to be construed as a commitment by the Government to issue a request for proposal/quote or award of a contract as a result of this request. This announcement is not a Request for Proposals (RFP) or a Request for Quote (RFQ). The Government will not reimburse respondents for any cost associated with information submitted in response to this request. Information, comments, feedback and recommendations are sought for refining the current approach and contributing to overall future program success. Information, comments, feedback and recommendations may be submitted by e-mail only and should be received by COB on July 28, 2010. Please note that no questions will be entertained and no responses to questions submitted will be forthcoming. EMAILADD: jasmine.carter@gsa.gov EMAILDESC: HSPD-12 Shared Service Provider III; Attn: Jasmine Carter