Defense Information Systems Agency (DISA) Auditing Support Services

This is a SOURCES SOUGHT NOTICE to determine the availability and technical capability of small businesses and large businesses (including the following subsets: Small Disadvantaged Businesses, Certified 8(a), Service-Disabled Veteran-Owned Small Businesses, HUBZone Small Businesses and Woman-Owned Small Businesses) to provide the required products and/or services.

The Program Executive Office (PEO) Cyber (ID)/Joint Enablers Division (ID2) / Identity, Credential, and Access Management (ICAM) Branch (ID22) is seeking informaiton from potential sources for audit support services to conduct a SSAE 18 Examination of DISA's DoD E-ICAM Solution. The DoD E-ICAM solution is an enterprise wide capability to centrally monitor, manage, secure, and audit identity, access, and authorization across DoD components.

The challenge faced by the DoD is to integrate and monitor data ingress and egress seamlessly between diverse vendor capabilities, to meet broad enterprise requirements, including the ability to audit who has access to what (and when) across diverse organizational boundaries.

This project consists of instantiating a Development, Test, and Prodcution environment built within the Microsoft Azure IL4 cloud hosted environment with built-in high availability / Continuity of Operations (COOP) natively avialable in cloud solutions. The production environment is scoped to all 3.8 million DoD Common Access Card (CAC) holders supporting onboarded DoD applications (Financial Management (FM) and non-FM. The anticipated Period of Performance is a one-year base period, plus four (4) one-year options.

The anticipated Place of Performance: Development and programmatic work shall be conducted primarily at the contractor's site. It is expected that the Contractor will spend 20% of this time at DISA Headquarters, Fort Meade, MD in meetings and discussing the schedules and other programmatic details with DISA program personnel.