Request for Information Questions and Answers with out Vendor Names

Number
of
Industry Question
Questions
Government Response
1 Please confirm the industry questions deadline. The RFI schedule table lists Confirmed. Questions are due by 5:00 PM EDT on October 20, 2026. RFI “5:00 PM EDT on 10/20/2029,” while the SAM.gov response date is responses remain due on October 29, 2026.
10/29/2026. We assume the questions cutoff is 5:00 PM EDT on 10/20/2026; please confirm.
2 Will responses be accepted from teams? If so, should Attachment A list the Yes. Team responses are acceptable. Attachment A should identify the proposed prime contractor and list known teammates or subcontractors, prime only, or all teammates?
including their expected roles. A formal teaming agreement is not required for this RFI.
3 For SOC scope, should industry assume a contractor-operated SOC, CBP/OIT SOC augmentation, or either model?

Industry should assume a contractor-operated SOC as part of the BPTOC service. The contractor will coordinate with CBP and OIT cybersecurity organizations and use Government-designated tools and processes, as applicable. CBP welcomes feedback on the recommended division of responsibilities.

CBP anticipates providing access to Government-designated tools, 4 Which systems of record are expected for ticketing and operational awareness today (for example ILSS, ServiceNow, Tririga, or other), and will interfaces, and environments required for performance, subject to security, licensing, ticketing, vulnerability-management, availability, and access GFE tool access be provided during transition?
requirements. Expected systems may include ILSS, ILSS Maximo, ServiceNow, TRIRIGA, Tenable Security Center, Nessus, Qualys, SolarWinds, Splunk, and other Government-designated tools. The final solicitation will identify required Government-furnished versus contractorfurnished tools, applicable licenses, API or interface access, test environments, and transition arrangements. The final solicitation will also identify the authoritative systems of record for incident status and operational availability reporting and address whether, and under what conditions, contractor-hosted components may be permitted. 5 Are endpoint counts, site counts, or portfolio volumes available even as notional ranges for ROM staffing?

Final endpoint counts, applicable system scope, endpoint-counting methodology, and any associated pricing basis will be identified in a future solicitation. The requirement has not been finalized. Final endpoint counts,