Vendor Risk Assessment Tools

TITLE: Vendor Risk Assessment (VRA) Tools to Support Cyber and Supply Chain Risk Management Type of Contract: The Government will award a Firm-Fixed Price (FFP) contract. This is a non-personal services contract to provide subscriptions of Interos and BitSight to the Office of Policy and Compliance (OPC). GSA plans to conduct a total small business set-aside , and to award a FFP NTE contract. Period of Performance The period of performance will be for one (1) twelve-month base period and two (2) twelve-month option periods. Base Period: September 15, 2021- September 14, 2022 Option 1: September 15, 2022- September 14, 2023 Option 2: September 15, 2023 - September 14, 2024 The General Service Administration (GSA), Federal Acquisition Service (FAS), Integrated Technology Category (ITC), and Office of Policy and Compliance (OPC) requires tool subscriptions to assist in identifying cyber risks within GSA’s supply chain, supply chain illumination, and associated technical and industry support. GSA requires the tools for immediate assistance in the identification and monitoring of critical infrastructure, information and communications technology (ICT) and ICT services and solutions, and their extended supply chains to assess connections and interdependencies of the defense supply chain ecosystem, as well as the Government’s industrial base of vendors for critical technologies. Specifically, the Government intends to purchase Interos and BitSight subscriptions to aid with supply chain illumination. See attached Brand Name Justification for Other Than Full and Open Competition (JOFOC).