(Amended) REQUEST FOR INFORMATION (RFI) - Security Vulnerability Scanning Software for IRS COBOL Applications

(AMENDED 06/16/2021) Sources Sought – THIS REQUEST FOR INFORMATION (RFI) IS RELEASED PURSUANT TO FEDERAL ACQUISITION REGULATION (FAR) PART 10, MARKET RESEARCH. The Department of Treasury, Internal Revenue Service (IRS) IT Cybersecurity and Application Development (AD) areas are seeking information on potential solutions for software security scanning tools based on national security demands. The primary goal is the ability for the tool to perform application security testing (AST) on source code written in various versions of the COBOL programming language, both inside and outside the Continuous Integration / Continuous Delivery (CI/CD) DevOps pipeline. A large portion of the agency’s current software application portfolio is written in COBOL. This RFI/Sources Sought is issued solely for information and planning purposes only and shall not be construed as either a solicitation or the obligation on the part of Government. This is NOT a solicitation for proposals, proposal abstracts or quotations. This notice is for market research purposes only. Please refer to the attached RFI for a overview and detailed description of the requirement. No reimbursement will be made for any costs associated with providing information in response to this announcement or any follow-up information requests. Respondents will NOT be notified of the results of the analysis. All data received in response to this Sources Sought synopsis that is marked or designated as corporate or proprietary information will be fully protected from release outside the Government. The Government shall not be liable for or suffer any consequential damages for any proprietary information not properly identified. Proprietary information will be safeguarded in accordance with all applicable Government regulations. All documentation shall become the property of the Government and will not be returned. Questions in response to this Sources Sought Notice may be submitted electronically to Sandra R. Anderson @ [email protected] on or before Monday, June 21, 2021 5:00 PM Eastern Daylight Time (EDT ). The Government reserves the right to respond to some, all or none of the questions submitted. Vendors that meet the requirements described in this announcement are invited to submit their capability statements/RFI responses. The deadline for responses to this RFI is 5:00PM EDT, Monday, June 28, 2021. Responses should be forwarded via email to both the primary and secondary points of contacts listed below. Responses shall not exceed 10 pages and shall not contain any brochures, advertising or any other type of extraneous, graphic literature or documents that have not been requested and are not relevant or essential in demonstrating the company’s ability to provide the required services. Vendors may provide links to relevant websites, as appropriate. Vendors shall reference “ RFI -Internal Revenue Service - Security Vulnerability Scanning Software for COBOL ” in the subject line of their response as well as in the subject line of any other e-mail correspondence referencing this notice. ** THE GOVERNMENT WILL NOT RESPOND TO PHONE CALLS. ** Thank you for your interest. Contracting Office Address: Internal Revenue Service 5000 Ellin Road Lanham, MD 20706 Primary Point of Contact: Peter Lockwood, Supervisory Information Technology Specialist [email protected] Secondary Point of Contact: Adanna Ezeala-Harrison, Information Technology Specialist [email protected]