Inactive

The National Institute of Standards and Technology is looking to expand and enhance NIST’s portfolio of family-friendly programs, which currently includes on-site childcare centers, alternative work s... The National Institute of Standards and Technology is looking to expand and enhance NIST’s portfolio of family-friendly programs, which currently includes on-site childcare centers, alternative work schedules, family-friendly leave, and family medical leave, with a childcare subsidy program. The direct financial benefit to staff would serve as an incentive for recruiting and retaining both lower salaried and entry-level administrative and technical staff. Upon award, the contractor would be required to furnish all personnel, facilities, materials, and services necessary to execute professional and administrative services for the NIST CCSP. Requirements Functional Requirements Attend kick-off meeting upon award, via conference call or video conference Develop a website – The Contractor shall develop, host, and maintain a website for the CCSP that is secure for a federal agency. Minimum requirements for the website: Application form for NIST employees in accordance with Attachment 2; Child Care provider form in accordance with Attachment 3; Be live 24/7; The website must link to the NIST Website; Instructions on the application process; Contractor points of contact; COR name and contact information; Information on customer support and how to reach a live representative; The NIST Child Care Subsidy Program Business Care Analysis; The following language: If you are contributing to a Dependent Care Flexible Spending Account (DCFSA): In accordance with Section 129 of the Internal Revenue Code, an employee can generally exclude from gross income up to $5,000.00 of benefits received under a Dependent Care Assistance Program each year. This would include DCFSA and the NIST Child Care Subsidy Program. Subsidy amounts from both of these programs may not exceed the $5,000.00 limit. For further guidance please refer to the following link: Office of Personnel Management - Benefits Administration Letter Develop Letter Templates for Acceptance, Rejection, and getting maximum subsidy Attend meet-and-greets with NIST employees during Marketing period Provide and Process CCSP Applications Provide Customer Support Review of Monthly Invoices Reapplication/Recertification of customers Reporting Requirements The amount of childcare subsidy disbursed in a given month; The number of children enrolled whose parents receive the childcare subsidy; The number of federal employees from NIST who qualified for and received subsidy; The total family income of each family that receives a childcare subsidy; The amount of the weekly childcare subsidy for each recipient The name and address of each childcare provider that provides services for the childcare subsidy recipients; The number of total applicants for the month; The number of applications in process; The number of new childcare subsidies approved; The number of applicants who were ineligible with reason; The length of time an applicant remains in the program; The reason why a NIST employee left the program; The percent of NIST employees in each career path enrolled in the CCSP; The number of applicants who reapply and are no longer eligible, to include child’s name and amount previously received; The number of applicants who were denied assistance due to lack of NIST funds; The remaining balance of NIST’s funds; and The time NIST funds reach 75% of subsidy. Return Applicant Files to NIST IT/Reporting Requirements An independent assessment performed of the security/privacy protections of any part of this system, including data centers, that has access to or stores the Child Care Subsidy Personally Identifiable Information (PII) data. If a cloud IaaS system is used it has FedRAMP authorization at a Moderate or High level. If an independent data center is used, it has a current independently assessed SOC2 report available for review. Auditing and Incident Response processes that include customers being alerted to any possible incidents and logging with sufficient information to perform forensics on any incident. Centrally managed IT components ensuring secure configuration baselines and routine patching for all operating systems and applications. Access is restricted to those with a need to know, and all personnel who have access to the Child Care Subsidy PII data have strong background investigations performed (e.g. criminal, financial etc.), and are trained on secure handling of sensitive PII. Access Controls to the Child Care Subsidy PII data meets or exceeds industry best practices for access and identification control including, but not limited to, connectivity to servers and databases, 2-factor remote accesses for administration, secure configurations for any devices accessing the system, and strong physical security for any place where the data is accessed. The application supports multifactor authentication for users and/or supports integration with customer federation services for Single-Sign capability. Processes in place for scanning on a continual basis for vulnerabilities and proper configurations for all aspects of the system must be in place, as well as processes for timely mitigation of findings. All data that contains PII is encrypted in transit using TLS 1.2 and encrypted at rest in all places the PII is stored. Contracting Office Address Department of Commerce, National Institute of Standards and Technology, Acquisition Management Division, 100 Bureau Drive, Building 301, Room B121, Mail Stop 1640, Gaithersburg, MD, 20899-1640 NIST is seeking responses from all responsible sources. Small businesses are defined under the associated NAICS code for this effort, 518210, as those domestic sources having $35.0M in sales. Please include your company’s size classification and socio-economic status in any response to this notice. Instructions to Responders: Interested parties that have the capabilities to meet the Government’s basic requirements are requested to email capabilities statement of no more than 10 pages, describing their abilities to meet all requirements to monica.brown@nist.gov no later than the response date of June 18, 2020 12:00pm for this sources sought notice. The report should include relevant information to your capabilities including any requirements that cannot be met or is deemed close to but not meeting an identified requirement. Also, the following information is requested to be provided as part of the response to this sources sought notice: Name of company(ies), their addresses, and a point of contact for the company (name, phone number, fax number and email address) that provide the services for which specifications are provided. Indication if the company(ies) are small business and social economic category(ies). Indication of whether the services required are currently on one or more GSA Schedule (i.e. Multiple Award Schedules [MAS]) contracts and, if so, the GSA MAS contract number(s). Indication if the company(ies) can provide all, or some, of the services. Any other relevant information that is not listed above which the Government should consider in developing its minimum specifications and finalizing its market research.