PhishMe Next Gen Campaign

THIS AMENDMENT IS BEING ISSUED TO ATTACH QUESTIONS AND RESPONSES TO THE RFQ. THIS AMENDMENT IS BEING ISSUED TO CHANGE THE RESPONSE DUE DATE TO MAY 20, 2022. CMS phishing awareness is a requirement by the Department of HHS. All agencies must have an active phishing awareness program that includes regular training exercises designed to reduce the risk cyber threats and data breaches that may cause harm to CMS and CMS stakeholders. CMS is searching for a service to improve their phishing awareness training. ISPG would like to consider opportunities to expand the scope of phishing simulations to include other attack surfaces such as SMS (text) through government issued mobile phones. This is a Request for Quotation prepared in accordance with FAR Part 13, as supplemented with additional information included with this notice. THIS ANNOUNCEMENT CONSTITUTES THE ONLY SOLICITATION; A SEPARATE WRITTEN SOLICITATION WILL NOT BE ISSUED. QUOTES ARE BEING REQUESTED. The Centers for Medicare and Medicaid Services intends to award using Simplified Acquisition Procedures (Dollar Threshold of $250,000), a fixed-price purchase order at a fixed labor rate. CMS phishing awareness is a requirement by the Department of HHS. All agencies must have an active phishing awareness program that includes regular training exercises designed to reduce the risk cyber threats and data breaches that may cause harm to CMS and CMS stakeholders. CMS is searching for a service to improve their phishing awareness training. ISPG would like to consider opportunities to expand the scope of phishing simulations to include other attack surfaces such as SMS (text) through government issued mobile phones. The period of performance will be approximately June 01, 2022 until no later than May 31, 2023. The North American Industry Classification System Code (NAICS) is 517311. A detailed Statement of Work is attached. This Request for Quotes (RFQ) is being set aside for small business concerns only. Responses must be sent electronically in MS Word format to ginaking@cms.hhs.gov no later than 12:00pm on May 20, 2022. Responses shall be no more than 10 pages and shall include the following: 1) Contractor's plan to perform the Statement of Work; 2) Qualifications - relevant experience to perform the required services; and 3) fully loaded labor rates. Brief resumes may be included as part of the 10 pages. All responses will be evaluated on a lowest price most technically acceptable basis using the following Evaluation Criteria: 1) Technical Understanding and Approach: a) Proficiency in understanding naming conventions, electronic filing, document tagging/indexing, b) Basic understanding of Laserfiche in order to convert documents properly and 2) Personnel Qualifications and 3) have professional highspeed scanner, and 4) Price. The government intends to award an order to the responsible offeror whose quotation offers the lowest price and is technically acceptable. Interested parties must be able to affirm no conflicts of interest with parties involved in Medicare claims processing in light of the work identified in this Statement of Work. In the event that the vendor/government identifies a conflict or the appearance of a conflict, the vendor shall be responsible for providing a mitigation strategy that satisfies the government. In the event that the conflict cannot be resolved, the order cannot be awarded or an existing order may need to be terminated. Your quote must include the following additional information: 1. Company Name, Address 2. Contact Person, name, telephone number, e-mail address 3. Business Size Classification, i.e. Small Disadvantaged, 8(a ), woman-owned 4. DUNS Number 5. Tax ID Number Questions should be referred to: ginaking@cms.hhs.gov in writing only no later than 12:00pm on May12, 2022.