Revvity Electronic Laboratory Notebook FedRAMPview on SAM.gov

1.0 DESCRIPTION: The Department of Health and Human Services (HHS), National Institutes of Health (NIH), National Center for Translational Sciences (NCATS), Information Technology Resources Branch (ITRB), intends to procure the necessary services to obtain FedRAMP Moderate authorization for the Revvity Signals Electronic Laboratory Notebook (ELN), ensuring compliance with NARA/OMB mandates to transition all federal records to electronic format. The ELN will support NCATS' research mission by providing a secure, scalable, and interoperable platform for documenting and managing research data. This acquisition is for a twelve-month period of performance for FedRAMP authorization for the Revvity Signals ELN. The Contractor shall provide all necessary services, qualified personnel, material, equipment, and facilities, not otherwise provided by the Government, necessary for specific scientific SaaS cloud service providers (CSPs) to obtain FedRAMP Moderate authorization, as follows: Contract and Project Management The contractor shall provide project management to obtain FedRAMP authorization for the Revvity Signals Software Signals ELN, through the stage of submission to FedRAMP. General FedRAMP Authorization Support Provide comprehensive support through submission of the FedRAMP package to the FedRAMP PMO. Gap Remediation Based on the Gap Analysis, the Contractor shall manage the remediation of identified deficiencies Develop a plan for the implementation of appropriate security controls to address identified risks and vulnerabilities. Document the implemented security controls, including policies, procedures, and technical controls. Interoperability Assurance With direction from the Government, the contractor will be responsible for ensuring the interoperability of each SaaS application by ensuring the criteria as determined by federal staff are met. Prepare and Submit FedRAMP Moderate Package Once Remediation is completed and Interoperability is assured, the Government will contact the FedRAMP PMO and shall act as the sponsor for the authorization package. The SaaS provider will complete the FedRAMP Moderate package and prepare for the 3PAO assessment. The SaaS provider will submit a FedRAMP Moderate package to a FedRAMP-accredited third-party assessment organization (3PAO) for review and validation of the implemented security controls. Once the 3PAO assessment is complete, the SaaS provider shall work to address any remaining vulnerabilities or areas for improvement identified during the assessment. Based on the results of the security assessment, the SaaS provider may obtain FedRAMP Moderate authorization to operate (ATO) from the government agency that will use the SaaS application. The SaaS provider will maintain FedRAMP Moderate compliance and continuously monitor and improve the implemented security controls. The publicizing of this notice is in accordance with Revolutionary Federal Acquisition Regulation (RFO) 5.101(a). This will be procured …