Notice ID: 75P00121F80070
Award Number: HHSN316201200018W
“This contract is to provide uninterrupted, continuous support for HHS’s end-to-end solution to comply with Federal Identity, Credential and Access Management (FICAM) requirements along with ongoing integration activities and security updates to complete the system’s FISMA authority-to-operate process.”
“The IAM@HHS Program provides HHS with comprehensive identity and access management solutions in compliance with the Homeland Security Presidential Directive 12 (HSPD-12), which outlines a Government-wide standard for secure and reliable forms of identification. IAM@HHS also combines the Office of Management and Budget, Electronic Authentication, Federal Information Processing Standards 201-2, and Federal Identity, Credentialing and Access Management (FICAM) requirements to create a large-scale, collaborative program that provides strategic direction and information for all initiatives related to identity and access management at HHS. Specific benefits of the standardized HSPD-12 credentials include secure access to Federal facilities and disaster response sites and multi-factor authentication, digital signature, and encryption capabilities.”
“The following services are currently provided by Deloitte and require careful evaluation by the Government in conjunction with the current contractor before transition to another contractor can occur:
- Public Key Infrastructure (PKI) support primarily for certificates encoded on HSPD-12 and related smart cards;
- Smart card management system (supports HSPD-12 identity smartcards);
- Enrollment and issuance station (support the badge issuance process); development and operational support of the identity management service and Simplified Sign On service;
- Security services supporting the C&A process; and infrastructure support for systems;
- Program management consulting, IV&V, subject matter expert, capital planning, and enterprise architecture support;
- Program management consulting, outreach and communications support Software acquisition and maintenance support for both Sun and Oracle products;
- Public Key Infrastructure (PKI) Certificate Authority (CA).
“The period of performance includes a six (6) month base period and two 12-month option periods.”
“Failure to continue Deloitte support with this gap contract would endanger the assets, resources, healthcare, and pandemic response activities that make up the HHS mission and business partners. Most specifically, if this is not awarded to the incumbent, current remediation to the HHS-wide architecture prevents corrective action in response to the latest SolarWinds hack among federal agencies most visible to the White House and the Cybersecurity and Infrastructure Security Agency and appropriate identity mechanisms will not be available for a potential nationwide vaccine credential project that supports the COVID-19 efforts for HHS…”
“Without Deloitte’s continued support, all HHS Identities and certificate authentication mechanisms for HHS would cease operation. Every HHS-related that website that is utilized by internal and external consumers would become inaccessible, literally HHS.gov would become a black screen to the public; PIV-enabled digital signatures of documents, and encrypted emails capabilities would also cease. In short, HHS would become completely non-operational.”
