VA RFI: Controlled Unclassified Information (CUI) Self-Inspection and Incident Management program support

Notice ID: 36C10B24Q0064

The Department of Veterans Affairs (VA) Technology Acquisition Center (TAC) is seeking information concerning the availability of capable contractors to provide the implementations and monitoring of Controlled Unclassified Information (CUI) Self-Inspection and Incident Management programs.

The Contractor shall provide the resources necessary to accomplish implementation of the CUI program for the Department of VA, Office of Privacy and Records Management (OPRM) as described in this Performance Work Statement (PWS). Specifically, the Contractor shall tailor VA specific CUI policy based on the NARA policy, stand-up executive steering committee, sustain CUI working group, develop CUI training, review IT systems, conduct self-inspections and prepare monthly status reports.”…

The CUI policy is currently being developed for all Federal agencies by the Executive Agent, the National Archives and Records Administration (NARA). The Contractor shall review the policy guidance issued to Executive Branch departments and in coordination and consultation with Government personnel, tailor the guidance for the development of the VA CUI Directive and VA CUI Handbook concerning markings, safeguarding, dissemination and decontrol of CUI that, to the extent practicable and permitted by law, regulation, and Government-wide policies, shall remain consistent across categories and subcategories of CUI throughout the Executive Branch. VA does not currently have an electronic marking tool. The requirement is to review VA IT systems & toolsets to identify systems impacted by CUI and the contractor is to develop a plan will utilize an existing COTS solution. Additionally, the Contractor shall develop and finalize a CUI process guide (standard operating procedure).

The Contractor shall review the NARA (Executive Agent for CUI) policies quarterly, and apply updates and tailoring to the VA policy, communications plans, training, CUI Directive and CUI Handbook as required. Moreover, the Contractor shall maintain the current VA CUI Decision Matrix in order to ensure senior VA leaders provide the critical decisions according to a CUI milestone or event…

More here.

🔊 Listen to Story