Privacy Professionalization Training
Request For Information (RFI) for Department of Veterans Affairs, Office of Information & Technology, VA Privacy Service, Privacy Professionalization Training Program
Introduction:
This is a request for information only. Do not submit a proposal or quote. As a part of the Department of Veterans Affairs (VA) Technology Acquisition Center (TAC) market research process, this request for information (RFI) will be used to assist VA in finalizing the Privacy Professionalization Training Program Performance Work Statement (PWS) and formulating an acquisition strategy. Additionally, there is no obligation on the part of the Government to acquire any products or services described in this RFI. Your response to this RFI will be treated only as information for the Government to consider. You will not be entitled to payment for direct or indirect costs that you incur in responding to this RFI. This request does not constitute a solicitation for proposals or the authority to enter into negotiations to award a contract. No funds have been authorized, appropriated or received for this effort. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. The Government does not intend to pay for the information submitted in response to this RFI.
The effort shall support the development and implementation of the Department-wide VA Privacy Training program. This includes a professionalization program tailored to VA privacy professionals and officers and comprehensive and job-specific privacy training courses and guidance materials for all personnel that handle personal information; are directly involved in the administration of personal information or information technology systems; or, have significant information security or privacy responsibilities.
Responses to this RFI are requested by 3:00 P.M. Eastern Time on June 30, 2016.
Questions and Critical Considerations for interested Contractors:
Responses to this RFI by interested parties will be used as part of market research by VA representatives to finalize the PWS and develop the acquisition strategy. In accordance with FAR 15.201(E), responses to this notice are not offers and cannot be accepted by the Government to form a binding contract. Any contract that might be awarded based on information received or derived from this RFI will be the outcome of a competitive process. This announcement is based upon the best information available, is subject to future modification, is not a request for proposal, and in no way commits the Government to award of a contract. The VA will not be responsible for any costs incurred by responding to this RFI.
This is a request for information (RFI) only. The page limit for RFI responses is 6 pages. It is requested that all companies interested in participating in this effort please note their interest and provide the following:
1) The Contract Vehicles of which they are a part of as well as their size status on each of these vehicles and associated NAICS
2) Its approach in performing the tasks and sub-tasks detailed in paragraph 5.2 Privacy Officer Professionalization, including a clear description of how the Offeror plans to review and assess the existing program in accordance with PWS paragraph 5.2.1 Privacy Officer Professionalization Framework, identify gaps, and provide a phased level strategy for execution throughout the remainder of contract performance.
3) Its approach for developing supplemental privacy guidance and instructions in accordance with paragraph 5.4 Technical Documentation. The description shall include a discussion of the Offeror's expertise in governmental privacy and information security and technical writing.
4) Its approach for developing training materials in accordance with PWS paragraph 5.3 Privacy Training Development and Support. The description shall include a discussion of the Offeror's expertise in developing webinars, student handbooks and instructor guides.
5) Its approach for developing an electronic privacy resource center (EPRC) in accordance with PWS paragraph 5.2.6 Privacy Officer Body of Knowledge, including a discussion of the Offeror's expertise in Microsoft SharePoint design.
6) Indication of their knowledge of the National Institute of Standards and Technologies Special Publication 800-53a Revision 4, Appendix J "Privacy Control Catalog"
7) Indication of their knowledge of the National Institute of Standards and Technologies Special Publication 800-122 "Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)" - specifically, as it relates to drafting and reviewing Privacy Threshold Analysis (PTAs) and identifying PII, understanding the confidentiality impact levels of PII and PII confidentiality safeguards
8) Indication of their knowledge of the requirements related to section 208 of the E-Government Act - specifically, as it relates to drafting and reviewing Privacy Impact Assessments (PIAs)
9) Indication of their knowledge of the requirements related to the Privacy of 1974 - specifically, as it relates to drafting system of records notices (SORN) and Privacy Act statements
10) Indication of their knowledge of the Fair Information Practice Principles
Justin Helfman
Contract Specialist
732-795-1119
justin.helfman@va.gov
