SOLICITATION NOTICE
D -- RFI - Audit Readiness Information System
- Notice Date
- 5/31/2012
- Notice Type
- Presolicitation
- NAICS
- 541511
— Custom Computer Programming Services
- Contracting Office
- Defense Logistics Agency, DLA Acquisition Locations, DLA Contracting Services Office - Philadelphia, 700 Robbins Avenue, Philadelphia, Pennsylvania, 19111-5096, United States
- ZIP Code
- 19111-5096
- Solicitation Number
- RFI-ARIS
- Point of Contact
- Matt Ryan, Phone: 215-737-2253
- E-Mail Address
-
matthew.ryan@dla.mil
(matthew.ryan@dla.mil)
- Small Business Set-Aside
- N/A
- Description
- The Defense Logistics Agency (DLA) Contracting Services Office located at Philadelphia is seeking to acquire a computer-based management information system to support the Defense Agencies Initiative (DAI) in determining if the system is compliant with federal laws, regulations and policies, including A123, Federal Information Systems Control Audit Manual (FISCAM), Defense Information Assurance Certification & Accreditation Process (DIACAP), Statement on Standards for Attestation Engagements, No.16 (SSAE-16) and related regulatory requirements). The information is needed in real-time or near real-time about potential vulnerabilities/violations and will help establish risk mitigation strategy. The system shall provide the ability to monitor critical configurations, segregations of duties and personally identifiable information (PII). The system shall provide DAI with the ability to generate meaningful and timely reports on it activities. Specific actions: 1) Provide the ability to: •· - Identify conflicts in the segregation of duties •· - Establish internal control and reports •· - Preventing unintentional access 2) Identify applicable laws, regulations, and policies (LRPs) and link them to current ERP configurations to include: •· - Ability to view a compilation of a broad range of LRPs applicable to an ERP system •· - Creating an assessment/inspection profile for each performance objective, detailing the frequency, test measures, and responsibilities of the assessment/inspection •· - Preparing and maintaining surveillance checklists for procedures and processes •· - Defining objective and quantifiable inspection checklists 3) Manage, identify and monitor key/core system configurations, access tail and business process-specific setup to include: Ability to: monitor foundational configurations, process-based configurations, changes to critical data elements, monitor access to PII, and monitor information assurance violations. 4) Implement program-specific audit readiness objectives to include: •· - Flexibility to include custom program-specific rules for inspection •· - Ability to upload relevant documentation/mitigation plan/waiver pertaining to each vulnerability •· - Generate scheduled assessment/inspection reports •· - Entering findings, observations and conclusions 5) Identify and track corrective actions to include: •· - Documenting non-conformances and corrective actions associated with assessments/inspections - Examining and tracking of remedial and corrective action •· - Provide e-mail alerts to the Government •· - Managing resulting actions, including verification of actions taken 6) Provide comprehensive reports to: •· - Track quantity trends statically and graphically •· - Create audit reports for sing-off by responsible parities •· - Organizing reporting data by filtering/sorting by period, quality index, user, etc. 7) Crate real time 'help desk' for authorized users 8) Assist the government in establishing the installation and configuration to include the performance objectives/standards and functional assessment plans. 9) Provide the Government with SME expertise to advise on recent requirements and developments related to audit readiness preparations 10) Implement the audit capability by specific organizations within DAI 11) Provide training needed to operate and maximize capabilities of the system. The DLA Contracting Services Office in Philadelphia is seeking information from interested contractors who can provide the services required. If interested and capable of providing service, please respond to this notice with your company name and contact information. This notice is strictly a Request for Information. Proposals in response to this notice will not be accepted. An award will not be made as a result of this Request for Information.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/DLA/J3/DSCP-PB/RFI-ARIS/listing.html)
- Record
- SN02762589-W 20120602/120531235756-3688e99849ab2e777cbfdb54acfde098 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |