NHLBI - RISK MANAGEMENT FRAMEWORK SERVICES TASK ORDER 2 (TASK AREA 2)

BPA的目标是采购网络安全服务，以执行与NIH RMF实施相关的任务，最终实现和维护NHLBI和合作实体信息系统的操作权限（ATO）。通过一揽子采购协议（BPA）， NHLBI计划利用承包商资源创建系统网络安全文件和工件，独立评估这些文件和工件并实施ATOs，并提供改进NHLBI网络安全计划的服务。NHLBI计划将任务1、3、4、5和6授予一家供应商。任务2将授予一个单独的供应商，以保持在该BPA内进行的评估的独立性。一个供应商不能同时获得两个任务订单。NHLBI可以利用这些服务来实现提高信息系统安全性的目标，并确保符合适用的联邦、机构和NIH安全标准和最佳实践。多个承包商将通过BPA为每个任务订单提供公平的机会流程。通过本BPA提供服务的承包商应充分熟悉将通过本BPA发出任务订单的各种ic、OD和项目的任务

The objective of the BPA is to procure cybersecurity services to perform tasks associated with implementation of the NIH RMF with the ultimate outcome of achieving and maintaining NHLBI and partnering entities information systems’ Authorities to Operate (ATO). Through the Blanket Purchase Agreement (BPA), the NHLBI plans to use Contractor resources for creating system cybersecurity documents and artifacts, for independently assessing those documents and artifacts and implementing ATOs, and for providing services that improve the NHLBI cybersecurity program. NHLBI plans to award Task 1, 3, 4, 5, and 6 to one vendor. Task 2 will be awarded to a separate vendor to maintain independence in the assessments conducted within this BPA. A vendor cannot be awarded both task orders. NHLBI may utilize these services to achieve the objective of improving the security of information systems and ensuring compliance with applicable federal, agency, and NIH security standards and best practices. Multiple Contractors will provide services through the BPA utilizing a fair opportunity process for each task order award. The Contractors providing services through this BPA shall develop a thorough familiarization with the missions of the various ICs, OD, and programs that will issue task orders through this BPA