Combined Synopsis/Solicitation - Glow Discharge Mass Spectrometer (GDMS)

No AI summary available for this file.

NIST's Inorganic Chemical Metrology Group (ICMG) requires a Glow Discharge Mass Spectrometer (GDMS) to develop new Standard Reference Materials (SRMs) for the semiconductor industry. This RFP seeks a GDMS instrument for elemental analysis of high-purity solid materials, capable of analyzing conductive, semiconductive, and nonconductive solids. The instrument must meet detailed technical specifications, including a wide mass-to-charge range, low detection limits, and continuous mass resolving power. Optional specifications, such as lower detection limits and depth profiling, will receive additional consideration. The contract includes delivery, installation, user training, and optional annual service/maintenance for up to four years, with a minimum 12-month warranty. Cybersecurity and privacy requirements, consistent with federal standards like FISMA, are also mandated.

The Cybersecurity and Infrastructure Security Agency (CISA) has released instructions for the Secure Software Development Attestation Form, mandated by OMB M-22-18 and M-23-16, which aims to ensure that software used by federal agencies is developed securely. This form requires software producers to attest to their adherence to secure software development practices derived from the NIST Secure Software Development Framework (SSDF). The attestation covers software developed after September 14, 2022, or significantly modified/continuously updated since then. Exemptions include software developed by federal agencies, freely obtained open-source software, third-party components, and freely available public software. Producers must attest to practices such as securing development environments, maintaining trusted source code supply chains, ensuring code provenance, and using automated vulnerability checking tools with a disclosure program. The form must be signed by a CEO or designee, or a third-party assessment can be submitted. Failure to attest may result in agencies ceasing to use the software, with potential criminal penalties for false information. Agencies can grant extensions or waivers if a producer cannot attest, provided a mitigation plan is submitted.