The government is looking for information on whether industry can provide due diligence research about federal contractors. A sources sought notice specifies that the needed research will be based on publicly or commercially available information.
Several laws and regulations require agencies to conduct risk management for information and information systems, but because agencies have some flexibility in how they apply the guidelines, “there is not a one-size-fits-all solution,” the notice reads.
The General Services Administration is collaborating with agencies to establish a common set of risk indicators. Part of the market research related to that is to assess industry’s capability to help.
Responses to the RFI are due Feb. 16, 2015. Click here to read the full notice.
