SOURCES SOUGHT
D -- Attribute Based Access Control Solution - USDOJ ABAC Solution RFI
- Notice Date
- 12/12/2014
- Notice Type
- Sources Sought
- NAICS
- 518210
— Data Processing, Hosting, and Related Services
- Contracting Office
- Department of Justice, Offices/Boards/Divisions, Procurement Services Staff (PSS), Two Constitution Square, 145 N Street, N.E., Suite 8E.300, Washington, District of Columbia, 20530, United States
- ZIP Code
- 20530
- Solicitation Number
- DJJD-15-RFI-0909
- Point of Contact
- Tara M. Jamison, Phone: 202-307-1959
- E-Mail Address
-
tara.jamison@usdoj.gov
(tara.jamison@usdoj.gov)
- Small Business Set-Aside
- N/A
- Description
- U.S. Department of Justice Attribute Based Access Control Solution Request for Information. The U.S. Department of Justice (Department or DOJ), Office of the Chief Information Officer (OCIO), Access Control Program Office is required to deploy an enhanced Information Technology (IT) authorization solution across various networks, based on federal mandates. The required enhanced IT authorization solution will implement a logical Attribute-Based Access Control (ABAC) System that will dynamically grant and revoke user access rights applications and files using digital policies (rules) based on attributes (specific characteristics) that are assigned to users, applications, and files. The DOJ is in the planning stages for procurement of a solution and associated deployment support services that will meet the federal requirements. The DOJ is seeking a Commercial-off-the-Shelf (COTS) or Government-off-the-Shelf (GOTS) solution (hereafter referred to as "ABAC Solution") that adheres to the methodology described in NIST Special Publication 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations (NIST SP 800-162) and Recommendations for Implementing Federal Identity, Credential, and Access Management (FICAM). The Department currently uses a variety of different methods to enforce access control, dependent on the application and network domain. Access control infrastructures within DOJ vary widely, however, the majority of the applications enforce access control decisions internal to the application itself and are based on Role Based Access Control (RBAC) models or use Access Control Lists (ACLs). The DOJ seeks information from industry about how to move towards a more centralized access control model, with the access control decisions being made external to the application. Other features of interest include the ability to provision attributes of subjects (including Non-Person Entities (NPEs)), objects (metadata), and environmental conditions in order to enforce digital policy decisions based on those attributes and manage the digital policies and data tagging or marking (See RFI Section 3, Statement of Need).
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/DOJ/JMD/PSS/DJJD-15-RFI-0909/listing.html)
- Record
- SN03594890-W 20141214/141212234323-fae3bf251ce5b7845dfe5a86df1fdf4e (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |