RFI for Shredding Services / CUI Destruction

Request for Information (RFI) Shredding Services / CUI Destruction 1. INTRODUCTION This Request for Information (RFI) is being issued to help the First Responder Network Authority (FirstNet Authority) better understand vendor demographics, buying practices, cost drivers, contract structure and best practices related to procuring Shredding Services and adequate Controlled Unclassified Information (CUI) destruction. This is not a request for proposal, request for quotation, or an invitation for bid, nor does its issuance obligate the Government to an eventual acquisition. All information received from this RFI will be used for market research purposes only. The Government does not intend to make any award based on responses to this RFI nor otherwise reimburse vendors for the preparation of any information submitted or Government use of such information. Acknowledgement of receipt of responses will not be made, nor will respondents be notified regarding the outcome of the information received. All submissions become Government property and will not be returned. 2. BACKGROUND The FirstNet Authority is a Government bureau charged with the with the responsibility to ensure the building, deployment, and operation of a Nationwide Public Safety Broadband Network (NPSBN) designed to meet the information and communications technology needs of first responders and public safety users. The FirstNet Authority is an independent authority within the National Telecommunications and Information Administration (NTIA), within the Department of Commerce (DOC). The FirstNet Authority is investigating the Shredding Services / CUI Destruction market to better understand what is currently available, future innovative solutions, and potential savings opportunities under a departmental award. FirstNet Authority requires single-step paper document destruction and shredding services. The method of destruction should comply with the below cited mandates. Executive Order 13556 “Controlled Unclassified Information” establishes a program for managing CUI across the executive branch. The Information Security Oversight Office (ISOO) CUI regulation designating, safeguarding, disseminating, marking, decontrolling, and disposing of CUI requires that agencies destroy CUI "in a manner that makes it unreadable, indecipherable, and irrecoverable," (32 CFR 2002.14(f)(2)). The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-88, Revision l: Guidelines for Media Sanitization (December 2014) (NIST SP 800-88, rev 1) also prescribes the destruction methods approved for Classified National Security Information (32 CFR 2001.47), unless the CUI category's authority mandates other destruction methods (CUI Specified categories). Agencies must also use the destruction methods specifically required by law, regulation, or Government-wide policy for CUI Specified categories. 3. RFI INSTRUCTIONS Responses shall be submitted in Microsoft Word format and should not exceed four (4) pages, including attachments, with font not smaller than 12 pt. The attachment should include a comprehensive product/service offerings sheet, with pricing, if available. Responses are to be submitted via e-mail to [email protected] no later than 3/11/2021 at 10:00 am Mountain. 4. RFI TOPIC AREAS Section 1: Vendor Demographics The FirstNet Authority is interested in understanding the profile of the companies responding to this RFI. Responses shall include: Name and address of the company; Name, title, and telephone number of the primary point of contact; Number of years of corporate experience; DUNS Number and primary NAICS code; Business classification / socioeconomic status (ex. Small, 8(a), HUBZone, etc.) Listing of any schedules / government wide acquisition contracts (GWACs) you hold for the requested Shredding / CUI Destruction services and appropriate contract numbers. Section 2: Shredding Services / CUI Destruction Offerings For each of the relevant Shredding Services / CUI Destruction services you offer, please provide the following information: Product/service name; Product/service information or general description; Product/service specifications; How is this product/service sold to Government customers? Section 3: Shredding Services / CUI Destruction Capabilities For each of the relevant services you offer, identify the extent to which the following capabilities are available: Brief vendor description of documented method(s) for securely collecting materials pending for destruction to prevent any unauthorized access or tampering. Brief vendor description of documented method(s) for a single-step destruction that comply with the following: Use of cross-cut shredders that produce 1mm x 5 mm (0.04 in. x 0.2 in.) particles (or smaller); OR Pulverize/disintegrate paper using disintegrator devices equipped with a 3/32 in (2.4 mm) security screen. Equipment meeting CUI single-step paper destruction standards per NSA’s Paper Shredders destruction guide at: https://www.nsa.gov/Resources/Media-Destruction-Guidance/ Comply with DOC CUI Guide, Section 14. Destruction [§ 2002.14(f)] https://ocio.commerce.gov/sites/ocio.commerce.gov/files/media/files/2019/doc_cui_guidelines_v2_-_august_2019.pdf Brief vendor description of processes to account for and track consolidated sensitive materials from collection to destruction. Brief vendor documentation that illustrates accountability and tracking on consolidated sensitive materials handling from collection to destruction.? Vendor capability to provide shredding / destruction services to the FirstNet Authority’s offices at Reston, VA and Boulder, CO. Vendor capability to provide shredding / destruction services to FirstNet Authority’s offsite users located in CONUS, Puerto Rico, and Guam. Are you NAID certified? https://naidonline.org 5. REFERENCES NARA Destroying CUI: https://www.law.cornell.edu/cfr/text/32/2002.14; NIST SP800-88: Guidelines for Media Sanitization: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf; Classified National Security Information (32 CFR 2001.47) : https://www.law.cornell.edu/cfr/text/32/2001.47 ; NSA’s Paper Shredders destruction guide: https://www.nsa.gov/Resources/Media-Destruction-Guidance/; DOC OPBM-NP-18-0001, CUI Guidelines, DESTRUCTION [§2002.14(f)] (see attached).