Inactive Total Small Business Set-Aside (FAR 19.5)

This 2nd modification is to submit a set of questions proposed to the Government with the respective answers. This modification is issued to remove the notice a future solicitation may potentially be ... This 2nd modification is to submit a set of questions proposed to the Government with the respective answers. This modification is issued to remove the notice a future solicitation may potentially be sought as a BPA or with multiple vendors. This is seeking a single vendor / source for a possible solution. This is a RFI. Please see the attached document for additional details regarding this RFI. NFC is seeking an automated solution and contract support for implementation of offered solution to de-identified and obfuscate Personally Identifiable Information (PII) when preparing to transmit/load data from Production Environments to various Test Environments. NFC's definition of de-identified/obfuscate is to protect the confidential (PII) data by altering enough physical characteristics to prevent pinpointing the identity of the unique person/entity. Altered data must contain enough of the original characteristics to guarantee successful testing and development. NIST definition of Personally Identifiable Information (PII) is "Any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information." (SP800-122) The contractors will work in concert with NFC personnel, to facilitate the configuration of the offered solution, processes and access as needed. Support contractors must have technical and functional expertise in implementing, integrating, and developing de-identified/obfuscated test data. Subject Matter Experts (SMEs) must be an expert in configuring the proposed solution to deidentify/obfuscate solutions that transform data and transmit/load altered data into test environments across a wide variety of database types. Contractor must possess a thorough understanding of federal security requirements for hardware, software, and PII data. NFC's focus will be the purchase and integration of a solution that will allow production data, inclusive of PII, to be masked (de-identified/obfuscated) for use in test environments. The de-identified/obfuscated data must be able to crosswalk back to production data so that comparisons can be run between production and test processes. The contractor will be required to provide expert advice regarding software configuration and setup as well as integration solutions for the various environments. This automated solution must seamlessly extract data from NFC's CA Mainframe IDMS Database, DB2 for Z/OS, SQL Server, Oracle databases (see Appendix B for NFC list of application data in the attached document), perform obfuscation and load to test environment. All actions must occur systemically without manual intervention. All final submissions are to be received electronically via email to dale.neal@usda.gov 5:00pm EST on November 18, 2021. The Government will be accepting questions related to this RFI and they are due no later than 1:00pm EST on October 29, 2021.