Universal Service Administrative Co.

Buyer seeks information on Supply Chain Risk Management software tools, preferably available as Software-as-a-Service. The tool should assess vendor security practices, provide alerts on cybersecurity incidents, collect vendor questionnaires, and assist in building vendor risk profiles. Buyer requires integration capabilities with procurement processes and the ability to obtain software and hardware bills of materials. The tool will support cybersecurity supply chain risk management in compliance with Federal standards.

• 11/15/2024 - RFI Release Date
• 12/4/2024 - Questions Due
• 12/6/2024 - Answers to Questions Released
• 12/16/2024 - Proposal Due Date

• Assess and rate security practices of vendors and their products
• Provide timely alerts on cybersecurity incidents affecting vendors
• Collect customizable questionnaire responses from vendors
• Assist in vendor deep dives from open source information
• Obtain software and hardware bills of materials from vendors
• Integrate with procurement processes via API
• Provide on-demand vendor security evaluations
• Generate security scores with explanation of methodology
• Scan potential vendor's attack surface for vulnerabilities
• Build vendor risk profiles