Notice of Intent

NOTICE OF INTENT

Independent Assessor Support Services – ICE Datacenter – RD Direct Pro

Rural Development Technology Office (RD TO) Cybersecurity Division (CSD) requires Independent Assessor Support which is essential for the Assessment and Authorization (A&A) of Intercontinental Exchange (ICE) Owned Datacenters. This support provides an objective evaluation of IT systems against security requirements, verifies security control test results, summarizes residual risks, and involves senior management in the security lifecycle. Leveraging independent assessors enhances cybersecurity, mitigates vulnerabilities, and ensures compliance with federal standards. This acquisition is to provide Cybersecurity Division (CSD) with Independent assessor support for the ICE Owned Datacenter facilities which are essential for the Independent Assessment and Authorization (A&A) and includes, but are not-limited to:

• Travel to/from datacenter


• Control Assessment Plan (CAP)


• Security Assessment (onsite testing)


• Vulnerability Scans (Database scans, web App scans)


• Penetration Testing Methodology


• Penetration Testing Authorization Letter


• Rules of Engagement


• Penetration Test Report


• Assessment Findings (input in CSAM)


• Plans of Action and Milestones


• Security Assessment Report (SAR)


• Risk Assessment Report


• Residual Risk Report

Place of Contract Performance includes the following locations:

1. 
   
   
   
   1. 
      
      
      
      1. USDA Rural Development 1400 Independence Ave SW Washington DC, 20250
      
      
      2. USDA Rural Development 4600 Goodfellow Boulevard Federal Center St. Louis, MO 63120
      
      
      3. Customer Site Location
      
      
      4. Outside the Continental United States (OCONUS) employees are not authorized; this includes Contractor employees telework locations
      
      
      
      
   
   
   
   

Set-aside Status: Competition among USDA STRATUS BOA Holders