RECOVERY - Health IT and HIPAA Security Content Automation

RECOVERY - This Sources Sought notice is issued for information and planning purposes only. Any procurement that may result from this notice will be funded, in whole or in part by the American Recovery and Reinvestment Act of 2009 (ARRA). No solicitation is currently available, and no unsolicited proposals will be entertained as a result of this Sources Sought notice. As a result of this market research, if at least two qualified small businesses are identified, the resulting competitive procurement will be conducted as a small business set-aside. The North American Industry Classification System (NAICS) code for this requirement is 541690; the small business size standard is $7 million. The National Institute of Standards and Technology (NIST) is seeking to identify those sources with the requisite qualifications and capabilities necessary to provide technical expertise and consultation in specified areas of Health Information Technology (HIT) security. General tasks include the use of the Security Content Automation Protocol suite of specifications to support the development of security baseline configurations and content to provide security configuration profiles and virtual test images, enabling greater HIT and Health Insurance Portability and Accountability Act (HIPPA) Security Rule technical automation. The tasks to be completed include Project Planning and Management; HIT Security Baseline Configurations; group and map configurations; develop security configuration profiles for common platforms used in healthcare environments; and develop virtual images containing the healthcare specific configuration profiles. HOW TO RESPOND TO THIS SOURCES SOUGHT NOTICE The following information must be included in responses to this sources sought notice: 1. Description of each related project(s) completed by the company as a prime contractor or as a significant subcontractor within the past three (3) years, including as much of the following information as possible: (a) A brief description of the technical requirements of the project; (b) The specific information on the company's experience in providing the type of services required in this notice; and (c) The name address and contact/phone number of customer organization for which the work was done. 2. Indication of whether your company has an active registration in the Central Contractor Registration (www.ccr.gov); 3. Indicate whether your company has any GSA Federal Supply Schedule Contracts for similar work. NIST encourages responses from all responsible sources, including but not limited to small businesses. Interested sources that believe they possess the capabilities necessary to undertake this project should submit responses to this notice by electronic mail to Mr. Peter Staples, Contractor/Senior Acquisition Specialist, at peter.staples.nist.gov, with cc: to Ms.Wanza B. Jonjo, at wanza.jonjo@nist.gov. Responses must be sent to arrive in inboxes listed above no later than 3:00 p.m. on January 29, 2010.