Security and Privacy

The Department of Education’s Federal Student Aid (FSA) is conducting market research to identify qualified Service Disabled Veteran Owned Small Businesses (SDVOSB) under NAICS code 541519 to provide comprehensive security and privacy support services. The contract scope encompasses a wide range of security functions at both system and enterprise levels to ensure FSA's IT solutions remain compliant with federal security regulations and guidance. Key tasks include managing plans of actions and milestones (POA&Ms), conducting system security assessments and authorizations both ongoing and every three years, policy and procedure development, security training, documentation maintenance, compliance reviews, specialized security assessments, and overseeing an internal SharePoint-based On-Line Security Center. Additional responsibilities involve administration and enhancements of the Operational Vulnerability Management Solution (OVMS or OpenFISMA), incident response support, vulnerability scanning, penetration testing, and integrating new security tools, ensuring a robust and compliant security program aligned with FSA’s business needs. Interested companies must confirm their certification as an SDVOSB through the Small Business Administration and registration in the System for Award Management (SAM) under the specified NAICS code. In their submissions, companies are required to provide a capabilities statement that demonstrates their expertise in supporting the outlined security functions, including specific experience working with the OpenFISMA system. Responses must adhere to a five-page maximum and be submitted by 4:00 p.m. EST on December 9, 2013. The place of performance for this contract is Washington, DC, and the solicitation identifies two contract specialists as points of contact for further information.