REQUEST FOR INFORMATION (RFI) The Executive Office of the President (EOP), Office of Administration (OA), Procurement Contracting Management Division (PCMD) is seeking information to assist in the procurement of a cyber awareness / cybersecurity training tool. THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. THIS IS NOT A REQUEST FOR PROPOSALS (RFP). NO SOLICITATION IS AVAILABLE AT THIS TIME. 1. Overview The EOP, OA, Office of the Chief Information Officer (OCIO) is responsible for information and cybersecurity compliance, cyber intelligence, data safeguarding, and education to the approximately 5,000 staff. As threats rise and security incidents become increasingly a part of day-to-day events, the OCIO desires to evolve their training approach. 2. Disclaimer: This RFI is not a Request for Proposal (RFP) and is not to be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Responses will not be considered as proposals nor will any award be made as a result of this synopsis. PCMD is seeking information from industry to assist with the development and planning of a potential new requirement. Additionally, in accordance with Federal Acquisition Regulation (FAR) 10.002(b)(2)(i), this RFI is issued to determine market capabilities to meet requirements and will also be used to determine the availability and technical capability of small businesses to provide the required products and/or services under the anticipated North American Classification System Code (NAICS): 541511, Custom Computer Programming Services. This RFI is for planning and informational purposes only. This RFI is not a Request for Quotation (RFQ) or Request for Proposal (RFP) and no solicitation is available at this time. This RFI does not constitute a solicitation and shall not be construed as a commitment by the Government. Responses in any form are not offers and the Government is under no obligation to award a contract/order as a result of this RFI. No funds are available to pay for preparation of responses to this RFI. Any information submitted by respondents to this RFI is strictly voluntary. Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received in this RFI that is marked “Proprietary” will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified. Not responding to this RFI does not preclude participation in a future solicitation, if one is issued. 3. Scope of Effort The objectives of the RFI are to get a broad overview of what is available in the marketplace, to gain familiarity with the current market for a particular supply or service, and to gather information in a formal, structured, and comparable way. Therefore, the technical specifications are merely an expression of the intent, not a restrictive list of must-meet requirements and the project details outlined here are subject to revision. Please note that while a response to this RFI is not a pre-requisite to participating in any resulting procurement process, potential respondents are encouraged to respond to the RFI. 4. Technical Characteristics The OCIO is seeking information for a potential procurement of a training solution and wishes to create a meaningful, modern, and ongoing program around user and admin cyber security education. The solution would deliver current, relevant, and engaging cyber awareness content such that customers retain the information and can apply knowledge toward safeguarding the enterprise and their personal data (home and family). 5. Information Requested Please reference the attached Excel template for guidance on how to provide responses to the questions posed below. In addition, please provide point of contact information and a brief (no more than two-page) summary of your organization and team. Current and Relevant Cyber Security Content. Please describe how the solution gathers its content, and the frequency. What is the source of cyber security information, news, and intelligence? Information Retention. How does the solution ensure students (customers) retain the instruction and content? How is the success rate measured? Features. Please describe the features the tool/solution offers. Briefly describe how customers interact with it. Reporting/Dashboards. How is compliance captured and made available in reports? Describe reporting, dashboarding, metrics mechanisms for the tool, internally as well as any interfacing with third-party tools, e.g. a learning management system. Describe how or if the is data aggregated or individualized, and any auditing or governance around the data. Please describe how pre-defined as well as ad-hoc reporting would be performed. Provide a sample report or dashboard as desired. Platform and Integration. Please describe the platform, its method of content delivery (e.g. web-based, streaming media, etc.), how it integrates with other third-party applications inclusive of methods. Please provide a list of third-party applications that have successfully integrated with the platform. Additionally, identify any restrictions or limitation on integration with Learning Management Systems, as applicable. System Architecture. Please describe the system architecture of the solution, including whether it is software as a service/cloud, on premise, hybrid, etc. If on premise, what minimum hardware and software requirements should the OCIO consider? Describe any security frameworks/authorizations apply to the product for continuous authorization to operate. Maintenance. Please describe how the tool is maintained and what is involved in its upkeep, availability, securing, enhancing, etc. Pricing / Licensing. How is the tool licensed or priced? How does licensing change with the number of users? Is the solution sold directly or through resellers? Any other key factors affecting price? Records retention. Please describe what distinct customer training data (attributes) are captured and how that data can be distinguished uniquely. 6. Response Guidelines Interested parties are requested to respond to this RFI using the template provided. Submissions cannot exceed 5 pages (within the technical character limitations of the Excel cell (excluding graphics of a sample report / dashboard, Q4)), single spaced, 12-point type with at least one-inch margins on 8 ½ inch by 11-inch page size. The response should not exceed a 5 MB e-mail limit for all items associated with the RFI response. Responses must specifically describe the contractor’s capability to meet the requirements outlined in this RFI. Oral communications are not permissible. The Excel-formatted template is the required submission method. Companies who wish to respond to this RFI should send responses via email no later than April 21, 2021 at 2:00 PM EDT. Industry Discussions: OA representatives may choose to meet with potential offerors and hold one-on-one conversations. Such discussions would only be intended to obtain further clarification of potential capability to meet the requirements. Questions: Questions regarding this announcement shall be submitted in writing by e-mail to
[email protected] . Verbal questions will NOT be accepted. Answers to questions will be posted to beta.sam.gov. The Government does not guarantee that questions received after April 12, 2021 at 2:00 PM EDT will be answered. The Government will not reimburse companies for any costs associated with the submissions of their responses.