Inactive

Sources Sought Synopsis The Federal Retirement Thrift Investment Board (FRTIB) is issuing this sources sought synopsis as a means of conducting market research to identify parties having an interest i... Sources Sought Synopsis The Federal Retirement Thrift Investment Board (FRTIB) is issuing this sources sought synopsis as a means of conducting market research to identify parties having an interest in and the resources to support this requirement for to conduct one or more external cyber reconnaissance analyses of some or all aspects of the FRTIB’s information technology footprint. The result of this market research will contribute to determining the method of procurement. The applicable North American Industry Classification System (NAICS) code assigned to this procurement is 541512. There is no solicitation at this time. This request for capability information does not constitute a request for proposals; submission of any information in response to this market survey is purely voluntary; the government assumes no financial responsibility for any costs incurred. If your organization has the potential capacity to perform these services (and/or provide these products), please provide the following information: 1) organization name, address, email address, website address, telephone number, and size and type of ownership for the organization; and 2) tailored capability statements addressing the particulars of this effort, with appropriate documentation supporting claims of organizational and staff capability. If significant subcontracting or teaming is anticipated in order to deliver technical capability, organizations should address the administrative and management structure of such arrangements. The government will evaluate market information to ascertain potential market capacity to: 1) provide services consistent in scope and scale with those described in this notice (see Appendix 1 below) and otherwise anticipated; 2) secure and apply the full range of corporate financial, human capital, and technical resources required to successfully perform similar requirements; 3) implement a successful project management plan that includes: compliance with program schedules; cost containment; meeting and tracking performance; hiring and retention of key personnel and risk mitigation; and 4) provide services under a performance based service acquisition contract. Based on the responses to this sources sought notice/market research, this requirement may be procured through any method the Agency deems appropriate, including full and open competition, and multiple awards may be made. Telephone inquiries will not be accepted or acknowledged, and no feedback or evaluations will be provided to companies regarding their submissions. Submission Instructions: Interested parties who consider themselves qualified to perform the above-listed services are invited to submit a response to this Sources Sought Notice by March 25, 2020 at 12:30pm EST. All responses under this Sources Sought Notice must be emailed to matthew.hamilton@frtib.gov. If you have any questions concerning this opportunity, please contact: Matthew Hamilton matthew.hamilton@frtib.gov. Appendix 1: Purpose and Objectives Background The Federal Retirement Investment Board (FRTIB) is an independent Federal government agency in the Executive Branch created by the Federal Employees’ Retirement System Act of 1986 (FERSA). The Thrift Savings Plan (TSP) is a retirement savings and investment plan for Federal civilian employees and members of the uniformed services that offers its participants the same type of savings and tax benefits that many private corporations offer their employees under I.R.C.§401(k) plans. As of February 29, 2020, the TSP had over 6 million participants and approximately $611billion in assets. The TSP is the largest participant-directed defined contribution plan in the world. The mission of the FRTIB is to administer the TSP solely in the interest of the participants and beneficiaries. In fulfilling this mission, the FRTIB strives to offer high quality services and benefits, while maintaining low administrative costs. The Federal Acquisition Regulation (FAR) informs the Agency’s procurement activities; however, as a non-appropriated fund agency and as fiduciaries to the TSP, it is not bound by the FAR. The FRTIB has various Offices that perform the various functions needed to run the plan and the agency. The Office of Technology Services (OTS) is tasked with operating, managing, securing, improving and transforming the organization’s information technology (IT) assets. There has been an increased focus in OTS operations over the past few years, specifically in the following areas: internal and external IT audit activity, initiatives such as assessments and authorizations, various validations such as network penetration testing, and implementing guidance from Federal cybersecurity practices. While the FRTIB has made improvements to its IT environment, the FRTIB has identified a requirement for to assess its IT footprint external to FRTIB's IT network that would enable the Agency to identify, respond to, and/or mitigate IT vulnerabilities to FRTIB’s systems. Objective The FRTIB’s Office of the Executive Director (OED) requires a vendor to discover, analyze, and visualize hidden relationships external to FRTIB's IT network. This shall be done upon request by issuing a series of task orders. Each task order will allow the FRTIB to better understand its cyber preparedness and act upon make recommendations to mitigate vulnerabilities to FRTIB’s infrastructure. Requirements This requirement is to provide the Executive Director (ED) with by-request reporting that includes some or all of: A network analysis to: Identify potentially suspicious activity Identify public facing infrastructure entry points Determine potential perimeter security misconfigurations associated with the FRTIB Externally map critical Information Technology Assets Vulnerable technology identification and exposure analysis to: Collect data and develop and run queries, develop observations, cross reference current state and notify of immediate concerns Draft vulnerabilities remediation recommendations Identify known vulnerabilities and available exploits against specific technologies Define potential attack vectors for initial entry into FRTIB Personnel identification and exposure analysis to: Identify and geo-locate potentially high risk personnel affiliated with FRTIB and personnel who present elevated risk from a cyber adversarial perspective Target affiliation analysis to: Identify potential high priority risk affiliations and external relationships Define visible and non-visible connections between FRTIB and affiliates