UCIC SCRM

NOTICE OF INTENT TO SOLE SOURCE- UCIC SCRM This notice is being published in accordance with DFARS PGI 206-302-1, which states, "when utilizing the authority at FAR 6.302-1, the contracting officer shall post a request for information or a sources sought notice, and shall include the results of this inquiry in the justification required by FAR 6.303." The statutory authority for this notice of intent to sole source brand name requirement is 10 U.S.C.

3204(a)(S) as implemented by FAR 6.302-l(c)(l) - Only one Responsible Source and No Other Supplies or Services Will Satisfy Agency Requirements. The U.S. Army Corps of Engineers, Little Rock District (SWL), The Contractor shall provide highly specialized cyber supply chain risk management (C-SCRM) solutions and services, tailored to the unique requirements of the UCIC-MCX. The requested C-SCRM solutions and services must include:

• Automated C-SCRM tool that allows UCIC-MCX to manage an effective C-SCRM program. • Access to in-depth, highly detailed supply chain illumination date on suppliers, third parties, and assets, including both hardware and software. • Custom C-SCRM Risk analysis, and risk analysis reports for suppliers and assets that UCIC-MCX deems critical to the Civil Works mission. • C-SCRM tool that allows UCIC-MCX to continuously monitor selected suppliers and assets for events that impact the Civil Works risk posture (e.g., vulnerabilities, breaches, mergers and acquisitions, foreign influence, etc.).

Solutions and services for the base year plus 4 option years consist of the Fortress C-SCRM Platform, and cyber supply chain risk illumination and analysis data product including Trideum project management. *This is not a solicitation for competitive proposals; however, if any interested party believes that they can meet the above requirement, they may submit a capability statement to the point of contact listed in this Special Notice. All information furnished must be in writing and must contain sufficient detail to allow SWL