Notice of Intent

NOTICE OF INTENT Independent Assessor Support Services – ICE Datacenter – RD Direct Pro Rural Development Technology Office (RD TO) Cybersecurity Division (CSD) requires Independent Assessor Support which is essential for the Assessment and Authorization (A&A) of Intercontinental Exchange (ICE) Owned Datacenters.

This support provides an objective evaluation of IT systems against security requirements, verifies security control test results, summarizes residual risks, and involves senior management in the security lifecycle. Leveraging independent assessors enhances cybersecurity, mitigates vulnerabilities, and ensures compliance with federal standards.

This acquisition is to provide Cybersecurity Division (CSD) with Independent assessor support for the ICE Owned Datacenter facilities which are essential for the Independent Assessment and Authorization (A&A) and includes, but are not-limited to:

Travel to/from datacenter Control Assessment Plan (CAP) Security Assessment (onsite testing) Vulnerability Scans (Database scans, web App scans) Penetration Testing Methodology Penetration Testing Authorization Letter Rules of Engagement Penetration Test Report Assessment Findings (input in CSAM) Plans of Action and Milestones Security Assessment Report (SAR) Risk Assessment Report Residual Risk Report Place of Contract Performance includes the following locations: USDA Rural Development 1400 Independence Ave SW Washington DC, 20250 USDA Rural Development 4600 Goodfellow Boulevard Federal Center St. Louis, MO 63120 Customer Site Location Outside the Continental United States (OCONUS) employees are not authorized; this includes Contractor employees telework locations Set-aside Status: Competition among USDA STRATUS BOA Holders