Revvity Electronic Laboratory Notebook FedRAMP

About this archived opportunity

1.0 DESCRIPTION: The Department of Health and Human Services (HHS), National Institutes of Health (NIH), National Center for Translational Sciences (NCATS), Information Technology Resources Branch (ITRB), intends to procure the necessary services to obtain FedRAMP Moderate authorization for the Revvity Signals Electronic Laboratory Notebook (ELN), ensuring compliance with NARA/OMB mandates to transition all federal records to electronic format. The ELN will support NCATS' research mission by providing a secure, scalable, and interoperable platform for documenting and managing research data. This acquisition is for a twelve-month period of performance for FedRAMP authorization for the Revvity Signals ELN. The Contractor shall provide all necessary services, qualified personnel, material, equipment, and facilities, not otherwise provided by the Government, necessary for specific scientific SaaS cloud service providers (CSPs) to obtain FedRAMP Moderate authorization, as follows: Contract and Project Management The contractor shall provide project management to obtain FedRAMP authorization for the Revvity Signals Software Signals ELN, through the stage of submission to FedRAMP. General FedRAMP Authorization Support Provide comprehensive support through submission of the FedRAMP package to the FedRAMP PMO. Gap Remediation Based on the Gap Analysis, the Contractor shall manage the remediation of identified deficiencies Develop a plan for the implementation of appropriate security controls to address identified risks and vulnerabilities. Document the implemented security controls, including policies, procedures, and technical controls. Interoperability Assurance With direction from the Government, the contractor will be responsible for ensuring the interoperability of each SaaS application by ensuring the criteria as determined by federal staff are met. Prepare and Submit FedRAMP Moderate Package Once Remediation is completed and Interoperability is assured, the Government will contact the FedRAMP PMO and shall act as the sponsor for the authorization package. The SaaS provider will complete the FedRAMP Moderate package and prepare for the 3PAO assessment. The SaaS provider will submit a FedRAMP Moderate package to a FedRAMP-accredited third-party assessment organization (3PAO) for review and validation of the implemented security controls. Once the 3PAO assessment is complete, the SaaS provider shall work to address any remaining vulnerabilities or areas for improvement identified during the assessment. Based on the results of the security assessment, the SaaS provider may obtain FedRAMP Moderate authorization to operate (ATO) from the government agency that will use the SaaS application. The SaaS provider will maintain FedRAMP Moderate compliance and continuously monitor and improve the implemented security controls. The publicizing of this notice is in accordance with Revolutionary Federal Acquisition Regulation (RFO) 5.101(a). This will be procured as a new award, based on the Contracting Officer’s determination that only one source is available to meet the Government’s requirements. The applicable North American Industry Classification System (NAICS) code is 541511 – Custom Computer Programming Services, and the associated small business size standard is $34 million. 2.0 UNIQUE QUALIFICATIONS OF THE CONTRACTOR Revvity Signals Software Inc (Revvity), is the developer and sole proprietary owner of the Revvity ELN platform used by NIH. As the software owner, Revvity has exclusive access to the platform's source code, system architecture, and internal development environment, which is required to perform the security control remediation, interoperability configuration, and technical documentation necessary to achieve FedRAMP Moderate authorization. No other company, including resellers, integrators, or third-party consultants, has the technical access or authority to modify Revvity's platform to meet these requirements. An assessment of commercially available sources was completed during market research and confirmed that Revvity is the sole source capable of performing this work, as the effort requires direct access to and modification of Revvity's proprietary source code, system architecture, and internal development processes in order to achieve FedRAMP Moderate compliance. No other contractor has the requisite access or authority to perform the remediation and authorization work on Revvity's behalf. Accordingly, no existing multiple-award or Government-wide contract vehicle was identified that could fulfill this specific requirement, since award through such a vehicle would still require Revvity's direct participation and does not eliminate the sole-source nature of the requirement. For the reasons detailed above, Revvity, is uniquely qualified to provide comprehensive support services to submit the FedRAMP Moderate authorization package for Revvity ELN. 3.0 RESPONSE INSTRUCTIONS This notice is not a request

Related opportunities

• Safety Service Contract for Radioactive Material Counting LabDEPT OF DEFENSE
• Notice of Intent to Award a Sole Source - iLab Solutions Subscription Renewal for CCR Core FacilitiesHEALTH AND HUMAN SERVICES, DEPARTMENT OF
• AN41--523-26-4-1865-0151: 10X Xenium Analyzer Recertification and PM (VA-26-00073846)VETERANS AFFAIRS, DEPARTMENT OF