IRS Sources Sought: Privacy, Governmental Liaison and Disclosure (PGLD) Tabletop Exercise (TTX) FY24

Notice ID:  RFI5000190778

The Internal Revenue Service (IRS) has a requirement for contractor support to perform an independent assessment of its incident/breach response playbook by conducting a tabletop exercise.  For information purposes, the services described shall be in accordance with the Internal Revenue Service (IRS) Performance Work Statement (PWS) entitled, “Privacy, Governmental Liaison and Disclosure (PGLD) Tabletop Exercise (TTX).

IRS, Privacy, Governmental Liaison and Disclosure (PGLD) Office seeks contractor support to perform an independent assessment of its Incident/Breach Response Playbook by conducting a tabletop exercise.

Annually, during the period of June 1 through August 30 (3-months), the contractor will: A. Develop, in concert with the Incident Management/Cybersecurity team, a data breach scenario.

The contractor shall, develop drill material, based on the agreed upon scenario. Tabletop design will focus on specific plan elements.

• The objectives and key issues shall drill down on specific items identified during the historical IRS breach/incident/event reactions and potential areas needing attention in the Playbook, other guidance, or absence of guidance.
• Facilitation will include managing the exercise process, challenging drill participants to engage and providing key insights based on the contractor’s experience within this space.
• Conduct a rehearsal/briefing with IRS leadership.
• Facilitate 7-hour, hybrid in-person/virtual tabletop exercise session, including a 1-hour break, with key IRS executives and other key participants.
• The contractor shall execute the exercise with the necessary staff to provide the structure, knowledge and facilitation support that will allow SME participants to achieve the desired objectives.

The period of performance shall be for one (1) base year of 12 months and four (4) 12- month option years.

Read more here.

🔊 Listen to Story