HHS/ASPR - Multi-Factor Authentication Services - MRAS

The Department of Health and Human Services (HHS), specifically the Administration for Strategic Preparedness and Response (ASPR), is seeking multi-factor authentication (MFA) services to enhance the security of its enterprise-wide systems. The objective is to validate user identity and reduce the risk of sensitive data breaches while balancing usability and cost-effectiveness. ASPR has approximately 1,500 users that require MFA services. The contractor will provide professional services, technical expertise, equipment, and materials to implement a comprehensive MFA solution in a phased approach. The work will be performed remotely at the contractor's facility or by telework, with occasional meetings at ASP Headquarters in Washington, D.C.

The contractor will be responsible for program management, including developing a program management plan, participating in post-award conferences and kickoff meetings, and providing regular updates on contract progress. They will also provide technical and program expertise to implement MFA solutions for ASPR's enterprise-level information systems. This may include alternative methods of MFA provisioning such as software-based solutions or password-less authentication. The contractor will also provide technical support, training, and user behavior analytics to monitor performance and troubleshoot issues.

The period of performance for this contract is 12 months with two option periods of 12 months each. The contractor will be required to comply with security requirements, including protecting sensitive information, complying with privacy regulations, and ensuring the confidentiality, integrity, and availability of government information and systems. They must also comply with Section 508 accessibility requirements and any applicable laws or regulations related to controlled unclassified information (CUI) or encryption.

Overall, this opportunity presents a significant contract for a contractor experienced in providing MFA services to government agencies. The work is focused on enhancing cybersecurity measures within HHS/ASPR's systems and requires expertise in program management, technical implementation, and compliance with security regulations.