D -- CONSULTING SERVICES FOR E-AUTHENTICATION RESEARCH

SOCIAL SECURITY ADMINISTRATION IS SEEKING A COMPANY WHO SPECIALIZES IN CONSULTING SERVICES FOR E-AUTHENTICATION RESEARCH The Social Security Administration (SSA) is seeking to provide enhanced Internet services to our public. These services require high levels of assurance for our authentication protocols. We must know and trust the identity of customers presenting themselves to us across the Internet. While our e-authentication goal is to protect the data housed in our records, we note that there must be a balance between data protection and usability. The e-authentication solutions employed at SSA must comply with OMB Memorandum M-04-04 and the National Institute of Standards and Technology (NIST) Special Publication 800-63. SSA is seeking vendors qualified to provide the following types of consultant services: 1. Survey the Government: Facilitate meetings between SSA and other Federal Agencies to discuss e-authentication issues such as registration/identity proofing and credential issuance for OMB level 2 and 3 solutions. Report on OMB level 2 and level 3 solutions employed by other government agencies, especially those similar in nature to SSA?s Internet service offerings. 2. Survey of Private Sector and State/Local Government e-Authentication Solutions: Benchmarking with private sector organizations (including financial institutions) and state/local government agencies with similar public-facing Internet authentication solutions. The solutions should closely align with a level 3 assurance as per the Office of Management and Budget?s (OMB) Memorandum M-04-04. 3. Survey of Technology Solutions: Survey current technologies that meet level 3 single factor and/or multi-factor criteria as defined by the National Institute of Standards and Technology (NIST) Special Publication 800-63. Research vendor solutions, technical dependencies and costs of solutions. 4. Conduct Focus Groups: Prepare focus group questionnaires and obtain OMB clearance of questions. Determine demographic and geographic composition of focus groups with assistance from SSA. Conduct focus groups nationwide. 5. Prepare for Deployment: Present findings and recommendations to SSA for deployment of level 3 solution. Assist SSA in drafting a statement of work for government-to-citizen level 3 solution. (Note: assistance in drafting a statement of work could result in the drafter being prohibited from responding to any future solicitation due to organizational conflict of interest rules). Assist SSA in developing technical review criteria and in conducting the technical review of proposals submitted in response to government-to-citizen level 3 solution. SSA is looking for a company with previous experience helping clients implement OMB and NIST level 2 or 3 or similar authentication solutions. If you believe that you have the capability to successfully perform the above noted tasks, you are asked to provide a capability statement and GSA schedule number (if applicable) to SSA. Please submit your response in writing directly to Kim Baldwin Sparks at [email protected] no later than Wednesday, March 12, 2008. NO PHONE CALLS WILL BE ACCEPTED.