SOURCES SOUGHT
R -- Child Care Subsidy Program (CCSP)
- Notice Date
- 7/10/2018
- Notice Type
- Sources Sought
- NAICS
- 541611
— Administrative Management and General Management Consulting Services
- Contracting Office
- Department of Commerce, National Institute of Standards and Technology (NIST), Acquisition Management Division, 100 Bureau Drive, Building 301, Room B130, Gaithersburg, Maryland, 20899-1410, United States
- ZIP Code
- 20899-1410
- Solicitation Number
- NIST-170-18-SS16
- Archive Date
- 8/2/2018
- Point of Contact
- Wendy Paulo, Phone: 3019753976
- E-Mail Address
-
Wendy.Paulo@nist.gov
(Wendy.Paulo@nist.gov)
- Small Business Set-Aside
- N/A
- Description
- Sources Sought BACKGROUND On November 12, 2001, Congress enacted Public Law 107-67, Section 630. This legislation permits Federal agencies, at their discretion, to use appropriated funds (including revolving funds available for salaries and expenses) to assist their lower income employees with child care costs. The National Institute of Standards and Technology (NIST) has chosen to establish a Child Care Subsidy Program to provide financial assistance to NIST employees who meet specific income criteria. Potential vendors are asked to comment as to their ability to meet or exceed the specifications outlined below. Values listed in parenthesis represent currently expected minimum specifications; however, this list may be modified and/or expanded should a formal procurement be pursued. GENERAL REQUIREMENTS 1. FedRAMP a. The Federal Risk and Authorization Program (FedRAMP) is a risk management program for large outsourced and multi-agency information systems used by the U.S Government. FedRAMP authorizes and continuously monitors IT services that are used by multiple federal departments and agencies. This approach uses a "do once, use many times" framework that will save cost, time, and staff required to conduct redundant agency security assessments. b. The contractor shall have, at a minimum, an authorized FedRAMP security and privacy controls package at a moderate level, or an authorized Federal Government agency FISMA security and privacy controls package at a moderate level. c. The Prime Contractor must have FedRAMP authorization or an Authorization to Operate (ATO) letter issued by a Federal Government agency as proof of evidence that they have been assessed and authorized at the moderate level. If using an ATO letter, that letter shall clearly state that the Contractor has been authorized at a moderate level. d. If the Contractor is using subcontractors for this effort, each party that will store, process, transmit, or have any type of access to Personally Identifiable Information (PII_ or other sensitive information shall have the above stated FedRAMP authorization or Federal Agency-issued ATO letter stating the authorization at the moderate level. e. Within 5 days of contract award, the Contractor must supply evidence of a FedRAMP authorization or a valid ATO letter as proof. Either form of evidence must show authorization at a moderate level. If any subcontractor or consultant will have access to PII, the same evidence must be submitted for that party as well. 2. Website Security Requirements a. The Contractor must maintain a website that is secure for a Federal Agency. For the purpose of this acquisition, secure refers to all of the following: i. Internet Protocol Version 6 (IPv6) - The contractor shall have its services be accessible through both Internet Protocol Version 6 (IPv6) and IPv4. If not already compliant, the Contractor must provide the Government with a statement regarding its plans to implement IPv6, including timeframe. ii. Section 508 - The Contractor shall create and maintain a website with content and links that comply with Section 508 of the Rehabilitation Act. iii. Vulnerability Checks - Post contract award, the Government will perform on-going security assessments for continuous monitoring and will inform the Contractor of identified risks. The Government will determine the risk rating of identified vulnerabilities. The Contractor must exhort their best effort to respond to the Government with an action plan and schedule to mitigate security risks found within 30 days of notification of security risks. If an action plan is submitted, the Government will notify the Contractor if the action plan and schedule are acceptable. The Contractor must implement the action plan on schedule. This action plan is not a contract deliverable. The Contractor is strongly encouraged to work with NIST should vulnerabilities be identified. 3. Confidentiality a. The Contractor shall be responsible to maintain the confidentiality of all personally identifiable information (PII) that is provided. For the purpose of this acquisition, "confidentiality" means ensuring that only those who have a need to know have access to the PII. PII shall not be disclosed to any party that do not have a direct need to know without the prior written approval of the COR and the Contracting Officer. b. The Contractor and all members of the Contractor's team, including consultants and subcontractors, shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a. Reference the Federal Acquisition Regulation clauses 52.224-1 Privacy Act Notification and 52.224-2 Privacy Act. TASKS 1. Develop a Website The Contractor shall develop, host and maintain a website for the CCSP that is secure for a federal agency. Minimum requirements for the website: • Application form for NIST employees in accordance with Attachment 2; • Child Care provider form in accordance with Attachment 3; • Be live 24/7; • The website must link to the NIST Website; • Instructions on the application process; • Contractor points of contact; • COR name and contact information; • Information on customer support and how to reach a live representative; • The NIST Child Care Subsidy Program Business Care Analysis; The Contractor shall develop an alpha version of the website and provide this version to the COR for review and comment. 2. Develop Letter Templates for Acceptance and Rejection The contractor shall develop letter templates for acceptance, rejection, and the notification of recipient reaching the maximum subsidy with respect to the CCSP for the applicant and the child care provider. 3. Provide and Process CCSP Applications The Contractor shall receive and process all CCSP applications. The Contractor shall review all documentation provided by the applicant and make a recommendation to the COR that the applicant is or is not eligible for Federal assistance under the CCSP. Upon receipt of the COR's concurrence, the Contractor shall forward a written response to the applicant and the child care provider, via e-mail or U.S. mail, using the appropriate template provided under Task 3. The Contractor shall maintain an individual record for each applicant which includes all documents, information, applications, invoices, communication records, and any other documents pertinent to their case. 4. Customer Support The Contractor must have personnel available to respond to questions from NIST personnel about the program between the hours of 9:00 AM and 4:00 PM Monday through Friday. 5. Review of Monthly Invoices The Contractor must have an established invoicing process to receive, review, and pay invoices electronically for the CCSP program. Upon acceptance into the program, the Contractor must notify the provider to submit complete invoices, in arrears, to the Contractor. The Contractor shall review invoices and provide payment, if appropriate, based on the invoiced amount not later than 30 calendar days after the date of receipt of a complete invoice. The Contractor shall pay the child care subsidy tuition assistance directly to the child care provider, and not to the Federal employee. The Contractor shall: - Ensure that the child care provider submits a written invoice, on a monthly basis, to the Contractor; - Child care subsidy shall be submitted as weekly amounts and the invoices must be prepared using full week amounts unless the child leaves the program during a particular week. A full week amount consists of the weekly amount. 6. Reapplication The Contractor is not required to have applicants re-apply on an annual basis. The Contractor shall ensure that applicants re-certify no later than May 15th of each year. The Contractor must require that applicants submit their current federal income tax return, leave and earnings (L&E) statement, and a fee schedule from the child care provider. The Contractor shall notify each applicant with respect to recertification on an annual basis. Instruction to Responders: Companies that are capable of providing the services listed above are requested to email a 1-2 page summary describing their abilities to Wendy.Paulo@nist.gov no later than the response date for this sources sought notice. The report should include achievable specifications and any other information relevant to your product or capabilities. Also, the following information is requested to be provided as part of the response to this sources sought notice: 1. Name of the company(s) that offer the required supply. In addition, provide a point of contact for the company(s). 2. Business size status. 3. Rough estimate of pricing (if available, not required); and 4. Any other relevant information that is not listed above which the Government should consider in developing its minimum specifications and finalizing its market research.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/DOC/NIST/AcAsD/NIST-170-18-SS16/listing.html)
- Place of Performance
- Address: Contractor's Facility, United States
- Record
- SN04984394-W 20180712/180710230827-d0d2dc71ae43b583baa0a6c00c13c079 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |