Security Information & Event Management System

THIS IS NOT A REQUEST FOR PROPOSAL. This is a Sources Sought for market research purposes in accordance with FAR Part 10 and in no way obligates the Government to award a contract. The Bureau of Engraving & Printing (BEP) has a requirement for a commercial-off-the-shelf (COTS) Security Information and Event Management (SIEM) system, which includes the software license, software maintenance, and implementation services necessary to perform audit processes and investigation of security events. This BEP is interested in obtaining information on the availability of a SIEM COTS software product/system that features the following salient characteristics: PRCOESS REQUIREMENTS - Log Management - Provide a central portal to collect and retain system logs for a desired period of time - Audit of Account and System Changes - Provide a set of reports detailing changes in account management, system configurations and Information Technology (IT) inventories - Analyses of Event Data - Ability to collect system logs and events from all of IT systems, perform automated log reduction and provide intuitive interface to analyze events of interest - Dashboards - Provide specialized dashboards suitable for various management levels - Compliance Reports - Provide an extensive list of reports to satisfy the Federal Information Security Management Act (FISMA) OPERATIONAL REQUIREMENTS - Security - Features role based management interface for implantation of access control; login screen for authentication; and password management capabilities - Audit Trail - Logging mechanism to record activities performed by each user to include login/logout activities - Data Currency - Ability to provide the latest logs, events and data - Performance - Ability to process all systems logs from BEP IT systems, supporting up to ten (10) concurrent system users - Capacity - Ability to host all logs from BEP IT systems for a period of one (1) year, storage capacity of at least 20 TB, and features internal safeguards - Data Retention - Ability to provide raw logs for a period of one (1) year and normalized logs for a period of ninety (90) days Only vendors that currently have a system/product(s) possessing the above characteristics are invited to respond to this Sources Sought Notice. Vendors whose products/systems possess the above characteristics are invited to submit the following information in a Capability Statement: - Product/System Summary - Product literature that includes a complete product description, technical characteristics/capabilities and any other important technical aspects - Non-binding commercial price list for the item, to include annual maintenance, license and renewal fees - All hardware requirements for installation and operation - Whether or not, a copy of the product/system can be made available or site testing, or demonstrated, prior to award of a contract - If software is available on GSA Schedule 70, and if so, the GSA Schedule Contract Number - For each salient characteristic identified above, annotate if your product does or does not meet the salient characteristic required - Reference list of customers using these products/systems Capability Statement responses shall also include the following: 1) the Sources Sought number; 2) company name, address, telephone number, and website address (if available); 3) the type of business (large or small); and 4) the name, telephone number, and e-mail address of a technical point of contact having the authority and knowledge to clarify responses with Government representatives. This Sources Sought Notice is for planning purposes only and shall not be construed as a Request for Proposal or Request for Quote or as an obligation on the part of the BEP for conducting a follow-on-acquisition. The BEP does not intend to award a contract on the basis of this Notice, or otherwise pay for the information requested. No entitlement or payment of direct or indirect costs or charges by the BEP will arise as a result of submission of responses to this Notice and BEP use of such information. The BEP recognizes that proprietary data may be part of this effort. If so, respondents are responsible for identifying proprietary components, interfaces and equipment, and clearly mark restricted or proprietary data and present it as an addendum to the non-restricted / non-proprietary information. See Federal Acquisition Regulation (FAR) 3.104.4; 52.215-1(e). In the absence of such identification, the BEP will assume to have unlimited rights to all technical data in the information paper. Vendors are requested to submit their Capability Statement (10 page limit) to the point of contact identified below no later than 12:00PM EST on 24 May 2011. Electronic submissions are encouraged.