U.S. flag
          An official website of the United States Government  Main navigation
  

        

              Data Initiatives
                              Regulations
                                                                        Row 1
                                              FAR FAR
                              Smart Matrix Smart Matrix
                              Chapter 99 (CAS) Chapter 99 (CAS)
                              Row 2
                                              DFARS DFARS
                              DFARSPGI DFARSPGI
                              AFARS AFARS
                              DAFFARS DAFFARS
                              DAFFARS MP DAFFARS MP
                              DARS DARS
                              DLAD DLAD
                              NMCARS NMCARS
                              Row 3
                                              SOFARS SOFARS
                              TRANSFARS TRANSFARS
                              AGAR AGAR
                              AIDAR AIDAR
                              CAR CAR
                              DEAR DEAR
                              DIAR DIAR
                              DOLAR DOLAR
                              Row 4
                                              DOSAR DOSAR
                              DTAR DTAR
                              EDAR EDAR
                              EPAAR EPAAR
                              FEHBAR FEHBAR
                              GSAM/R GSAM/R
                              HHSAR HHSAR
                              HSAR HSAR
                              Row 5
                                              HUDAR HUDAR
                              IAAR IAAR
                              JAR JAR
                              LIFAR LIFAR
                              NFS NFS
                              NRCAR NRCAR
                              TAR TAR
                              VAAR VAAR
                              Tools
                                                                        Archives
                              Smart Matrix
                              Regulations Search
                              Acquisition Regulation Comparator (ARC)
                              Policy Network
                                                                        CAOC
                              CAAC
                              FAR Council
                              ISDC
 Breadcrumb
        Home
                            Regulations
                            General Services Acquisition Manual (GSAM)
                            510.002 Pre-Award Procedures.
        
                  GSAM
GSAM
Change Number: Change 178 GSAR Case 2020-G511 Effective Date: 03/25/2024
PartPart 501Part 502Part 503Part 504Part 505Part 506Part 507Part 508Part 509Part 510Part 511Part 512Part 513Part 514Part 515Part 516Part 517Part 518Part 519Part 520Part 521Part 522Part 523Part 524Part 525Part 526Part 527Part 528Part 529Part 530Part 531Part 532Part 533Part 534Part 535Part 536Part 537Part 538Part 539Part 540Part 541Part 542Part 543Part 544Part 545Part 546Part 547Part 548Part 549Part 550Part 552Part 553Part 570Part 571
Subpart510.0
Section510.001510.002
Leave this field blank
        
                  

                                
                  
        « PreviousNext »
510.002 Pre-Award Procedures.510.002 Pre-Award Procedures. 		    (a) Market research must be conducted in accordance with  523.104(a)(1). 				         				         					          (b) Ensure statement of work includes sustainability requirements in accordance with  523.104(a)(2). 				         				         					          (c)                   *Market research activities related to cyber-supply chain risk management for information technology, GSA-funded acquisitions*. 					           						             							              (1) The acquisition planning team must include the GSA Chief Information Security Officer (CISO), or representative, in market research activities and ensure that entities’ cyber-supply chain risk management capabilities are considered, as much as possible, before developing requirement documents for an acquisition and before soliciting offers if the acquisition is to acquire a-- 							               								                 									                  (i)                               *Federal Information Processing Standard (FIPS) 199 High-Impact Information System*. A high-impact information system could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals if there was a breach of security resulting in a potential loss of confidentiality, integrity, or availability; or 								                 								                 									                  (ii)                               *FIPS 199 Moderate-Impact Information System*. A moderate-impact information system could be expected to have a serious adverse effect on organizational operations, organizational assets, or individuals if there was a breach of security resulting in a potential loss of confidentiality, integrity, or availability. 								                 								                 									                  (iii)                               *FIPS 199 Low-Impact Information System*. This paragraph (c)(1) does not apply to acquisitions of low-impact information systems. 								                 							               						             						             							              (2)The acquisition planning team should: 							               								                 									                  (i)                               *Search the System for Award Management (SAM)*. As potential capable sources are identified, and when determining the acquisition strategy, consider searching SAM (  https://www.sam.gov) to review self-certifications, submitted in response to the provision at FAR 52.204-26 (or FAR 52.212-3(v) for commercial items or commercial services), as to whether the source provides covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument and whether the source uses covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services. 								                 								                 									                  (ii)                               *Review the Cyber-Supply Chain Risk Management Page*. The C-SCRM page on the GSA Acquisition Portal (  http://insite.gsa.gov/cscrm) is frequently updated to include guides, samples and templates, and other considerations to assist acquisition teams during market research related to C-SCRM. The page also includes helpful points of contacts within the agency that may be able to provide additional information. 								                 								                 									                  (iii)                               *Review GEAR*. As the acquisition team is determining the availability of certain commercial products or commercial services, the GSA Enterprise Architecture Analytics and Reporting (GEAR) application (  https://ea.gsa.gov/), which comprises the authoritative list of approved and denied Commercial-off-the-shelf (COTS) software within GSA, should be reviewed. 								                 								                 									                  (iv)                               *Review the FedRAMP Marketplace*. If the acquisition may include cloud services, the acquisition team should review the Federal Risk and Authorization Management Program (FedRAMP) Marketplace (  https://marketplace.fedramp.gov/) for potential cloud services solutions. 								                 								                 									                  (v)                               *Review Governmentwide Vehicles and Shared Services*. Consider Government-wide Acquisition Contracts (GWACs), Multi-Agency Contracts (MACs), or GSA Schedules that have already evaluated their awardees for Supply Chain Risk Management process and procedures at the master contract level and have incorporated relevant provisions and clauses. Additionally, shared services, such as Quality Service Management Offices (QSMOs), provide an online platform for acquiring high-quality, cost-efficient services that may help reduce the time and cost involved in sourcing and maintaining cybersecurity solutions. 								                 								                 									                  (vi)                               *Other Sources*. If a compliant supplier cannot be identified, the acquisition planning team should look for other ways to satisfy the requirement, including identifying other acquisition strategies, changing the requirement description, changing the requirement, insourcing, or determining another solution. 								                 							               						             					           				         				         					          (d)                   *Market research activities related to cyber-supply chain risk management for non-information technology, GSA-funded acquisitions. The acquisition planning team should*: 					           						             							              (1)                         *Search the System for Award Management (SAM)*. As potential capable sources are identified, and when determining the acquisition strategy, consider searching SAM (  https://www.sam.gov) to review self-certifications, submitted in response to the provision at FAR 52.204-26 (or FAR 52.212-3(v) for commercial items or commercial services), as to whether the source provides covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument and whether the source uses covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services. 						             						             							              (2)                         *Review the Cyber-Supply Chain Risk Management Page*. The C-SCRM page on the GSA Acquisition Portal (  http://insite.gsa.gov/cscrm) is frequently updated to include guides, samples and templates, and other considerations to assist acquisition teams during market research related to C-SCRM. The page also includes helpful points of contacts within the agency that may be able to provide additional information. 						             						             							              (3)                         *Review Government-wide Vehicles and Shared Services*. Consider Government-wide Acquisition Contracts (GWACs), Multi-agency Contracts (MACs), or GSA Schedules that have already evaluated their awardees for Supply Chain Risk Management process and procedures at the Master Contract Level and have incorporated relevant provisions and clauses. Additionally, shared services, such as Quality Service Management Offices (QSMOs), provide an online platform for acquiring high-quality, cost-efficient services that may help reduce the time and cost involved in sourcing and maintaining cybersecurity solutions. 						             						             							              (4)                         *Other Sources*. If a compliant supplier cannot be identified, the acquisition planning team should look for other ways to satisfy the requirement, including identifying other acquisition strategies, changing the requirement description, changing the requirement, or determining another solution. 	  **Parent topic:**  Part 510 - Market Research
« PreviousNext »
FavoriteX

      GSAM Parts
            Regulations GSAM Menu
  

        

              Index
                              501
                              502
                              503
                              504
                              505
                              506
                              507
                              508
                              509
                              510
                              511
                              512
                              513
                              514
                              515
                              516
                              517
                              518
                              519
                              520
                              521
                              522
                              523
                              524
                              525
                              526
                              527
                              528
                              529
                              530
                              531
                              532
                              533
                              534
                              535
                              536
                              537
                              538
                              539
                              540
                              541
                              542
                              543
                              544
                              545
                              546
                              547
                              548
                              549
                              550
                              552
                              553
                              570
                              571

      ×
        Data Initiatives
                                                              Regulations
                                                              Tools
                                              Archives
                                                              Smart Matrix
                                                              Regulations Search
                                                              Acquisition Regulation Comparator (ARC)
                                                              Policy Network
                                              CAO.gov
                                                        CAO Home
                                                              Council Member
                                                                    Large Agencies
                                                              Small Agencies
                                                              Council Defining Documents
                                                                    CAOC History
                                                              CAOC Charter
                                                              Civilian Agency Acquisition Council (CAAC)
                                                              Federal Acquisition Regulatory Council
                                                              Interagency Suspension and Debarment Committee (ISDC)
                                                              Search
 ˄ Top Sign up for FAR News

                            Share the FAR
                        Upper Footer Menu
  

        
      Useful Links
                              FAR Resources
                              Training
                              Acquisition Systems
            
                            **Contact Us/FAQs**
                        **Privacy and Security Notice**
                        **Accessibility Aids**
                        **Last Updated 03/29/2024**
 ACQUISITION.GOV
                An official website of the General Services Administration About GSA
                Accessibility support
                FOIA requests
                No FEAR Act data
                Office of the Inspector General
                Performance reports
                Privacy policy Looking for U.S. government information and services?
            Visit USA.gov
 «
    
    Tt