DHS Draft RFP: Office of the Chief Information Security Officer (CISOD) Policy and Executive Operations Support

Sol ID: 70RTAC24R00000020

This was posted to GSA eBuy on VETS 2

This RFP is issued in support of the DHS Headquarters (HQ), Office of the Chief Information Officer (OCIO), to provide Policy and Executive Operations support as outlined in the Statement of Work (SOW). DHS seeks to establish a single task order for Policy and Executive Operations support.

The Government’s requirement is for services to support and assist the federal staff within all CISOD organizational units. The requirement also includes cybersecurity policy, assistance for Cybersecurity related missions as required meeting DHS, OCIO, and CISOD strategic plans, mission goals and objectives. The services shall be non-personal and not inherently Governmental in accordance with established Federal regulation and agency policy. The Contractor(s) will support sub-organizational units within the CISOD which include: Policy, Business Operations, and Cybersecurity Service Delivery Branches.

This section defines the broad assumptions and constraints, which the Contractor shall consider in developing its technical solution. Task specific assumptions and constraints are included within each functional task as applicable.

• Services shall be consistent with industry best practices and shall conform to applicable DHS published policies and practices, Technical Reference Model (TRM), and Systems Engineering Life Cycle (SELC), FISMA law and Risk Management Frameworks.
• Services shall be compliant with the DHS Enterprise Security directives, HSEN architecture, Federal Information Security Management/Modernization Act (FISMA), and other applicable Federal, DHS and DHS security, acquisition, information systems and asset management laws, regulations, rules, and policies.
• Services shall be compliant with DHS Enterprise Security Operations: Governance Model
• Custom software and malware signatures shall be developed, tested, and vetted only in lab environments.
• Commercial and custom-developed software applications and systems shall receive an Authorization to Operate (ATO) prior to being installed on production environments.
• All changes to production CISOD systems shall follow the DHS Architecture Review Board (ARB) and DHS Infrastructure Change Control Board (ICCB) policies and procedures.
• Services shall be delivered in a multi-contractor environment where collaboration and cooperation are essential for achievement of the CISOD mission.

The period of performance for this task order   will be a twelve (12) month base period and four (4) twelve (12) month option periods

Access the document here:

DRAFT_Attachment 1_RFP 70RTAC24R00000020

🔊 Listen to Story