GSA to Release MAS Solicitation Refresh #18 in December
This month, GSA plans to release Multiple Award Schedule (MAS) Solicitation Refresh #18. This Refresh includes some pretty significant updates that contractors should be aware of. We’ll highlight the notable changes below, so you are prepared for the Refresh and subsequent Mass Modification when it's released:
Cyber-Supply Chain Risk Assessment: This is a relatively significant update. In this Refresh, GSA will add language related to a Performance Requirement Cyber-Supply Chain Risk Assessment. This means that the government could perform a cyber-supply chain risk assessment of awarded contractors at any time during their period of performance (4 option periods consisting of 5 years each).
Minimum Sales Requirement: GSA has updated the minimum sales requirement from $25,000 in the first 2 years and $25,000 every year after, to $100,000 in the first 60 month option period (5 years) an $125,000 for each option period thereafter. This will give contractors more flexibility to meet their sales, but this requirement is also becoming an official part of a Contracting Officer’s determination of whether contracts are approved to be extended into the next option period.
Update on Joint Venture (JV) attachment: Refresh #16 included much anticipated guidance on how JVs fit in the MAS program, and this Refresh is updating the mandatory attachment with a few key changes you can find here.
FASCA orders: GSA, DoD, and NASA have issues an interim rule to the Federal Acquisition Regulation (FAR) to implement supply chain risk information sharing consistent with Federal Acquisition Supply Chain Security Act (FASCA) of 2018. To address this, a clause and provision will be added to the solicitation regarding FASCA orders.
To read up on all the updates in Refresh #18 and learn more about the changes above, check out our blog.
Couldn't make it to last month's webinar? Watch it here on demand. In this webinar, we’ll show you the benefits of a Contractor Teaming Arrangement (CTA) and information you will need to know moving into a CTA.
Winvale Wins Virginia Values Veterans (V3) Phoenix Award
In October, Winvale was humbled and honored to receive the Phoenix Award at the Values Veterans (V3) Awards Ceremony. The V3 Phoenix Award is presented to a V3 Certified Organization with the most impactful employee testimonial and demonstrated support of going above and beyond to aid Veteran employees and military spouses to work and thrive in Virginia. We are so grateful for our veteran employees, partners, and clients, and we will continue to make it our mission to support the veteran community! You can read more in our press release here.
Doing Business with GSA The General Services Administration (GSA), Office of Small Business Utilization is hosting this 30-minute webinar for all small businesses looking for additional information and guidance on GSA and our opportunities. The webinar will include an overview of the GSA Multiple Award Schedule Program, Public Buildings Service, Federal Acquisition Service, Governmentwide Acquisition Contracts, the Forecast of Contracting Opportunities, the Small Business Administration’s Subcontracting Network (SubNet), Section 889 guidance, and more.
CRITICAL INFORMATION
GSA Adds New Modification to eMod
A new modification is now available on eMod. With the new Close Contract for New Awards modification, contractors will be able to notify new and potential customers that their relevant contract is no longer accepting new orders.
This new option will aid streamlined and MAS Consolidation Phase 3 contract holders likely more than any other as their now closed contract will read as "closed" on elibrary and be removed from GSA Advantage! and eBuy completely.
This addition may also help in cases of Supply Chain issues if customer demand becomes a problem. If potentially closing the contract may be the answer, talk to your Contracting Officer to discuss your options.
The Modification Guide has been updated with step-by-step instructions and just about everything you may need to know about the process. If you have any questions, please reach out to either us here at Winvale or the eOffer Help Desk at 1-866-472-9114 or eoffer@gsa.gov.
QUICK TIPS
Keeping an Eye on the Proposed Cybersecurity FAR Rules
In 2021, Executive Order (EO) 14028 “Improving the Nation’s Cybersecurity” was issued to enhance cybersecurity and software supply chain integrity. This EO highlights best practices to ensure a robust IT infrastructure that fosters a more secure cyberspace when partnering with the government.
This fall, the Federal Register published two proposed cybersecurity Federal Acquisition Regulation (FAR) rules to partially implement Executive Order 14028. FAR Case 2021-017 Cyber Threat Incident Reporting and Information Sharing, and FAR Case 2021-019 Standardizing Cybersecurity Requirements for Unclassified Federal Information Systems. These proposed rules address changes that ensure contractors authenticate, monitor, and validate user identities and trustworthiness, conduct proper reporting, and follow other protective requirements.
It’s important to understand government regulations that may affect how your company operates. If you are an IT provider, we highly suggest staying updated with any changes associated with EO 14028. To learn more about the two new proposed FAR Rules, visit our blog.
EMERGING BUSINESS OPPORTUNITIES
Sources Sought for Identity Governance and Administration Solution
The Identity, Credential, and Access Management Office (ICAMO), Federal Bureau of Investigation (FBI) is soliciting information for a future
acquisition for a vendor to provide an enterprise Identity Governance and Administration (IGA) solution to provide capabilities and support for the FBI’s enterprise Identity, Credential, and Access Management (ICAM) Infrastructure. This mission contributes to a vision to provide a
secure and trusted environment of enterprise ICAM capabilities where people, applications, devices, systems, and platforms can securely access all authorized resources based on mission need. Responses are due no later than January 19, 2024, 12:00 p.m. ET. More information can be found under Notice ID 1549.
Sources Sought for Remediation Services IDIQ
The Department of the Interior, Indian Affairs is in the early stages of considering whether to put in place one or more single award task order contracts (SATOCs) or multiple award task order contracts (MATOCs) to support environmental sampling and remediation services requirements, including both credentialed and non-credentialed professional services. These contracts will fall under NAICS Code 562910 - Remediation Services and are planned to be used primarily for assessing and mitigating risks in federally owned facilities. Responses are due no later than January 8, 2024, 5:00 pm EST. More information can be found under Notice ID DOIAFBO240014.
FREQUENTLY ASKED QUESTIONS
Q: What specific cybersecurity measures should GSA Schedule Contractors prioritize to maintain contract compliance?
A: GSA Schedule contractors should prioritize a range of cybersecurity measures to uphold contract compliance. Key elements include implementing Multi-Factor Authentication (MFA), Employee Training, Regular Cybersecurity Audits, and Zero Trust Models. These practices help mitigate vulnerabilities and align with the cybersecurity requirements outlined under FAR Clause 52.204-21.
Q: How often should GSA Schedule contractors conduct cybersecurity assessments to ensure ongoing compliance?
A: Regular cybersecurity assessments are essential for GSA Schedule contractors to ensure ongoing compliance. The frequency of assessments may vary based on factors such as the nature of the organization, changes in the threat landscape, and regulatory updates. However, it is generally advisable to conduct assessments at least annually.
Q: How can GSA Schedule contractors create a cybersecurity-aware culture among employees?
A:Fostering a cybersecurity-aware culture among employees is an important step for any company, especially government contractors. This involves conducting regular cybersecurity training sessions, promoting awareness of social engineering tactics, and encouraging employees to report any suspicious activities promptly. By integrating cybersecurity into the organizational culture, contractors create a proactive defense against cyber threats and contribute to the overall cyber hygiene necessary for maintaining GSA Schedule Contract compliance.
Need to Talk?
CONNECT WITH US
Richmond, VA
Winvale, 3951 Westerre Parkway, Suite 250, Richmond, VA 23233, United States, (202) 296-5505
.png?upscale=true&width=520&upscale=true&name=Selling%20to%20the%20Government%20%E2%80%93%20Proposal%20%26%20GovOpp%20Best%20Practices%20(38).png)
