Cyber Security Unity

The purpose of this update is provide additional information in response to Question 2 from the RFI OCIO/OSY Q&As to ensure vendors have awareness of OCI mitigation opportunities. Question 2 and the updated response are provided below: Question 2. Is there a potential Organizational Conflict of Interest (OCI) between this requirement to provide "Contractor support in continuous operation and improvement of the current DOC enterprise-wide cyber security governance and oversight program" and the recently released (04-03-2017) NOAA National Cyber Security Center (NCSC) and the Enterprise Operations Center (ESOC) RFI? Response: Yes. A vendor that supports DOC-wide cybersecurity policy development and oversight could influence policy that affects which vendors are qualified to provide ESOC services. For example, a workforce development training policy could be influenced to favor specific certifications that are not commonly held by other vendors. **Additionally, vendors are notified that although a potential impaired objectivity type of OCI could arise between the policy development and oversight functions encompassed within the CSU requirement and ESOC operational requirements, at this juncture Department of Commerce believe those potential conflicts could be addressed through an adequate OCI mitigation plan. As a result, offerors interested in participating in the ESOC procurement would not be precluded necessarily from also participating in the CSU requirement provided an acceptable OCI mitigation plan that addresses how performance under both contract efforts will not overlap or intertwine, is included with offeror proposals. Additional information regarding OCI mitigation plan requirements would be included in solicitation documentation if the Department elects to move forward with a CSU procurement.** The Department of Commerce appreciates the effort each company who responded to this RFI put into preparing their responses. We are currently reviewing responses to determine appropriate acquisition strategy with tentative plans to release a solicitation by 4 th QTR FY17.