HighBond Compliance Risk Management Softwareview on SAM.gov

THIS IS NOT A REQUEST FOR PROPOSALS, AN INVITATION FOR BIDS, OR A REQUEST FOR QUOTATIONS. FURTHER, IT DOES NOT REPRESENT A COMMITMENT BY THE GOVERNMENT TO PAY FOR COSTS INCURRED IN PREPARATION AND SUBMISSION OF DATA OR ANY OTHER COSTS INCURRED IN RESPONSE TO THIS ANNOUNCEMENT. This is a Source Sought Notice (PUR260167) with the intent to award a sole source purchase order to Carahsoft Technology Corporation (CARAHSOFT), under the authority of FAR 13.106-1 based on their unique technical qualifications as the only known provider of the brand name “HighBond Compliance Risk Management Software”. The National Transportation Safety Board (NTSB) knows of no other sources for this requirement. Notice is provided as information to the marketplace, market research, and is an invitation for any other qualified companies to express their interest in and demonstrate their capability to provide the required software. The NTSB is an independent Federal agency with the primary missions of investigating civil aviation accidents in the United States and significant accidents in the other modes of transportation -- railroad, highway, marine, pipeline, and commercial space -- and issuing safety recommendations aimed at preventing future accidents. The NTSB has a requirement to subscribe to HighBond Compliance Risk Management Software and support as a key component in the agency's information security and risk management programs. The NTSB requires FEDRAMP compliant risk management and audit software to facilitate the management of the annual Federal Information Security Modernization Act (FISMA) review process. The period of performance is from 9/27/2026 – 9/26/2027. HighBond cloud software product assists the OCIO staff with managing systems risks and preparing for assessments and audits to facilitate the implementation of the Federal Information Security Management Act (FISMA) requirements Agency wide. It is the only known risk management software product that does not require a development process prior to use which allows immediate use by the NTSB. HighBond provides a governance, risk and compliance platform that is unique to the NTSB environment. In addition, this product is FedRamp-authorized Cloud compliant. NTSB, like all federal agencies, must use cloud-based products authorized by FedRamp. The HighBond product is-FedRamp Moderate meaning it's already approved to handle (CUI) or Controlled Unclassified information. The NTSB has Moderate systems that contain (CUI) Controlled Unclassified Information. This is the only known FedRamp authorized product that maps directly to NIST SP 800-53 r5 controls and FISMA reporting requirements that are assessed annually by the Third-Party Assessor. The NTSB is required each year to manage and maintain the following documentation: Security Assessment Reports, System Security Plans (SSP) and the Plan of Action & Milestones (POA&M). These documents are critical for NTSB to meet FISMA annual reporting requirements such a…