Deloitte has been awarded a new task to provide uninterrupted and continuous support to ensure that the identity, credential and access management systems at HHS meet all requirements. The task was awarded using CIO-SP3.
Awardee Name: DELOITTE CONSULTING LLP
Contract Duration: 12 months
Total Contract Value: $21,775,537.36
Action Obligation: $11,639,052.75
Funding Agency: OFFICE OF THE ASSISTANT SECRETARY FOR ADMINISTRATION (ASA)
Funding Office: PROGRAM SUPPORT CENTER ACQ MGMT SVC
Contract Award Number: HHSN316201200018W
Task/Delivery Order Number: 75P00120F80071
“The purpose of this contract is to provide uninterrupted and continuous support for the legacy HHS end-to-end solution to comply with Federal Identity, Credential and Access Management (FICAM) requirements and complete in-flight integration activities and security updates for the system to complete the Authority to Operate update process.”
“The IAM@HHS Program provides the U.S. Department of Health and Human Services (HHS) with comprehensive identity and access management service in compliance with the Homeland Security Presidential Directive 12 (HSPD-12), which outlines a government-wide standard for secure and…”
“Deloitte owns the system the Smart Card Management System that provides HSPD-12 compliant credentials and ICAM services throughout the Department. The enterprise architecture incorporates HHS-owned code that contours the Deloitte owned and managed system to federate among the OPDIVs physical and logical access provisioning systems, generating the mandated unique identifier required to issue signing and authentication certificates to the HHS issued PIV Card. Because of the proprietary nature of the ecosystem, Deloitte is the only awardee capable of providing the continued services at the high-availability required to ensure the HHS mission is unimpeded. Without the PIV card, and subsequent and ancillary services throughout HHS, that cross-federate to the mandated GSA Federal Public Key Infrastructure Bridge, absolutely no electronic information exchange could be executed without substantial risk of exposure to cyber hacks, endangering the assets, resources, healthcare and pandemic response activities that comprise the HHS mission and business partners.”
“The incumbent employs a GSA-approved, proprietary card enrollment and issuance solution, without partner. Therefore another contractor would need to supply and transition to a new solution for HHS to provision PIV compliant cards without breaking the current HHS HSPD-12 architectural ecosystem. Transition to another HSPD-12 provider prior, without strategically planned Department-wide transition would not be fiscally responsible and presents risks that may cause irreparable harm, particularly with respect to the complexities of introducing a new Card Management System.”
“Deloitte Consulting LLP is the only contractor with the ability to support the issuance of the HSPD-12 PIV cards as well as the enterprise simplified sign on and supporting systems currently configured and deployed at HHS that provision both physical and logical access to HHS resources. Transition of information stored within the current CMS to another solution will require extensive planning, mapping, and testing, to preserve management of over 180,000 issued cards. Additional risks include; extensive data migration or full cardholder re-enrollment to support…”
“A current fully competitive solicitation is in process but will likely not be ready for final award by 9/30/2020. For that reason, the period of performance for this sole source bridge will include a 6-month base period, to allow time for transition.”
