Notice-Of-Intent /Synopsis -Cybersecurity and Infrastructure Agency (CISA) Cyber Security Division (CSD) Vulnerability Mgmt (VM) Disclosure Branch - National Vulnerability Intelligence Platform (NVIP) Support Services

This is a pre-solicitation non-competitive (notice of intent) synopsis to award a contract without providing for full and open competition. THIS IS A NOTICE OF INTENT, NOT A REQUEST FOR PROPOSAL. A SOLICITATION WILL NOT BE ISSUED AND PROPOSALS WILL NOT BE REQUESTED. The Department of Homeland Security (DHS), Office of Procurement Operations (OPO) Cybersecurity and Infrastructure Agency Acquisition Division (CISAAD) intends to negotiate and enter into a contract with Rochester Institute of Technology, Inc (RIT) on a basis of other than full and open competition due to the new, unique, and proprietary capability of these services. DESCRIPTION OF REQUIREMENT Cybersecurity and Infrastructure Agency (CISA), Cyber Security Division (CSD), Disclosure Branch, requires provide subject matter expert (SME) analytic staff resources in support to further develop a National Vulnerability Intelligence Platform (NVIP) using Artificial Intelligence and Machine learning (AI/ML) to drastically reduce the number of labor hours used in the analysis of software and hardware vulnerabilities and publishing those vulnerabilities to the Common Vulnerabilities and Exposure (CVE) database. The CVE Database a repository and taxonomy of software and hardware vulnerabilities. This project describes the next generation of NVIP, a Software-as-a-Service (SaaS) solution to obtain rich, actionable, and real-time intelligence about known vulnerabilities. RIT developed the original proof-of-concept for the NVIP project and performed a 2-year demonstration of its features to DHS's Office of Science and Technology (S&T), the National Institute of Technology and Standards (NIST), and CISA staff under Contract No. 70RSAT19CB0000020. Broadening RIT's prior proof of concept of the NVIP, the goals of this project are to support CISA not only in efficient management and sharing of the vulnerability data but also to enable it to serve as a single source of vulnerability truth for other agencies and partner organizations, industry, and non-profit institutes seeking high-fidelity vulnerability intelligence. The current proof of concept for NVIP provides capabilities such as the automated collection of CVEs and near real-time publishing of vulnerability data and intelligence, surpassing existing publicly available vulnerability databases in timing, completeness, and informed intelligence. Period of Performance is anticipated for twelve months beginning on or about September 15, 2022. CONTRACTING WITHOUT PROVIDING FOR FULL AND OPEN COMPETITION DETERMINATION The determination by the Government to award a contract without providing for full and open competition is based upon the market research conducted, under the statutory authority permitting other than full and open competition is 41 U.S.C. 253(c), implemented by the Federal Acquisition Regulation: 6.301-1 - - Only One Responsible Source and No Other Supplies or Services Will Satisfy Agency If approved, the signed Justification and Approval (J&A) for Other Than Full and Open Competition will be updated and posted on this notice on SAM.Gov in accordance with FAR 6.305(a). THIS SYNOPSIS IS NOT A REQUEST FOR COMPETITIVE PROPOSALS. However, interested parties may identify their interest and capability to respond to this notice. Responses to this notice shall contain sufficient information to establish the interested parties' bona-fide capabilities for fulfilling the requirement. All offerors must have an active registration in the System for Award Management (SAM) www.sam.gov. A determination by the Government not to compete this proposed contract based upon responses to this notice is solely within the discretion of the Government. The information received will normally be considered solely for the purposes of determining whether to proceed on a non-competitive basis or to conduct a competitive procurement. All responses must be received by the closing date and time of this announcement and must reference the posting number (RCCS-22-40014). Responses may be submitted electronically to Matthew Wetzel, Contracting Officer, Matthew.Wetzel@hq.dhs.gov. US Mail and Fax responses will not be accepted.