Authentication Services for FISMA Support

INTRODUCTION AND BACKGROUND

This is a Sources Sought Notice (SSN) issued by the Treasury Common Services Center (TCSC), Acquisition Services, on behalf of the Bureau of the Fiscal Service (Fiscal Service), Identity, Credentialing & Access Management (ICAM) Division. The purpose of this notice is to obtain industry information and identify 8(a) sources that are both capable of and interested in providing commercial Engineer and Project Management Services for the execution of Authentication Services for Federal Information Security Modernization Action (FISMA) Support as described herein. This information is being sought for acquisition planning purposes only.

SCOPE AND OBJECTIVES

Fiscal Services is seeking to identify Contractors who can provide highly skilled and technical contractual support for Information System Security Officer (ISSO) duties and audit liaison for the Authentication Services General Support System (AS GSS). Subject Matter Expert (SME) Contractor support shall include assistance in the development, maintenance, and oversight of the Authentication Services FISMA system, including Security Controls, Continuity of Operations, plans, and related exercises surrounding access to Fiscal Service IT resources.  

Contractor resources also support the management and response to user access issues and problems within the ICAM Division for the AS GSS system and its sub-components. The Contractor shall perform all Authentication Services; FISMA related tasks generally assigned to an Information System Security Officer and all related Identity, Credentialing, and Access Management Security audit tasks include:  

• Provide, monitor, and manage the AS GSS as an Information System Security Officer (ISSO).  This includes the creation, management, and maintenance of all FISMA lifecycle tasks, deliverables, and continuous monitoring indicator tasks within the Government, Risk, and Compliance (GRC) tool.
• Review, develop and maintain documentation of ICAM processes, procedures, and operations pertaining to providing and managing user access to Fiscal Service IT Resources via the AS GSS.
• Provide expert guidance, training, and assistance with the closure of issues discovered during Vulnerability Scanning. 
• Perform Audit Liaison activities for the various Audits and Assessments that are conducted against Authentication Services and Central Authentication and Identity Assurance (CAIA) fronted applications. This includes the Schedule of the Federal Debt, Consolidated Financial Statement, Office of Inspector General (OIG) and Government Accountability Office (GAO) audits.
• Support and Maintain ICAM Organization and Identity Administration functions:
  • ICAM Operations and Help Desk
  • Respond to ICAM program and daily operational needs
  • Maintain and monitor the PKI, LDAP, SSO, Splunk, Vault and CAIA service for ICAM
  • Liaison with the AS application and service users
  • Liaison with other FS and FRB ISSO’s and System Owners
• Authentication Services Business Continuity and Disaster Recovery Support
• User Provisioning Administration, reconciliation and reporting:
  • Create and maintain Authentication Services in-boundary and service user Policies, Standards and Procedures.
  • Review and act upon issues seen on the Authentication Services transaction Logs via Enterprise Log Management (Splunk).
  • Manage and review access reconciliation and recertification policies, standards and procedures for all aspects of the AS GSS.
• The Contractor shall participate with ongoing cloud migration initiatives, assisting with all access and security controls to ensure optimal security posture and compliance with National Institute of

• Standards and Technology (NIST), Treasury and Fiscal Service IT Security Standards and Business Line Security Requirements (BLSRs).

• The Contractor shall provide training for personnel on IT related subjects centering on NIST regulatory requirements.
• Conduct the ICAM Technical Support (DTS) Contract Status Meeting
• Develop ICAM Technical Support (DTS) Contract Status Report 
• Perform Fiscal Service Authentication Services FISMA ISSO Duties and Reporting
• Inventory Record of Government Furnished Property