Inactive

Amendment A001 - The purpose of Amendment A001 to Sources Sought DEMS_Sources-Sought_FEB-2021 is to extend the deadline for responses to Thursday, February 18, 2021. -----End Amendment A001 The United... Amendment A001 - The purpose of Amendment A001 to Sources Sought DEMS_Sources-Sought_FEB-2021 is to extend the deadline for responses to Thursday, February 18, 2021. -----End Amendment A001 The United States Coast Guard (USCG) has a requirement to acquire a Digital Evidence Management System to support our Coast Guard Investigative Service. The attached Statement of Work provides a detailed description of the requirement; the USCG anticipates acquiring Software as a Service (SaaS) to meet the requirement. Interested/Qualifying vendors shall respond to this Sources Sought and provide a description of its SaaS product to include an affirmative statement that it currently meets at least the minimum security requirement of SOW Section 2.0 (FedRAMP JAB P-ATO authorized with an Authority to Operate (ATO) rated for impact level moderate). Vendors shall include a copy (or hyperlink) to this ATO from FedRAMP for verification. Interested vendors who cannot currently meet this minimum requirement will not be considered as capable to fulfill the requirement and will not be considered. In addition, interested/qualified vendors shall provide answers to the following questions in their response to this sources sought notice. Are you in process or can you meet the requirements for a Provisional Authority to Operate (P-ATO) for DoD IL 4? If you cannot meet the requirements for a Provisional Authority to Operate (P-ATO) for DoD IL 4, what DoD IL can you expect to achieve in the first 6-12 months after contract award with government sponsorship? Describe the data protections put in place when sharing with partner agencies (i.e. DOJ, state and local) including while the information is in transit. What digital rights management do you attach to that data to ensure that it is only shared with those who have a need to know and maintain chain of custody? Can the mobile app work in a Mobile Device Manager (i.e. Blackberry or Microsoft InTune) and provide all needed functionality to the agents? How does the data flow to/from the internet into an IL4 environment with the device operating in a Mobile Device Manager? Does your SOC have the ability to perform the CSSP functions that are marked as non-government in Table 1 of DoD Memo dated Nov 15, 2017, “Department of Defense Cybersecurity Activities Performed for Cloud Service Offerings”? Will you provide access to your environment to the DoD Red Team for assessments? How do you ensure data uploaded from the public or partner agencies is not malicious? Vendor responses to this Sources Sought shall be delivered via email (with attachments) to the Contracting Officer Michael.A.Bumgardner@uscg.mil with a copy to Marlecia.N.Ocheni@uscg.mil. The deadline for vendor responses is [date/time – ex: Friday, February 16, 2021, 5:00 PM EST]