The General Services Administration has announced plans to clarify certain definitions and implement changes to a special item number for identity protection and data breach response services on the Professional Services Schedule, Nextgov reported Friday.
GSA proposed to clarify the definitions of “enrollee” and “impacted individual” and eliminate data breach analysis services from SIN 520-20 to address overlap with “breach forensic services” on the Risk Assessment and Mitigation Services SIN.
The agency said such changes intend to address “ambiguity resulting in higher pricing exceeding commercial rates offered for same or similar services,” according to the document.
Other proposed changes to SIN 520-20 include clarifications on system security plan requirements and more examples of additional services under the second section.
The planned changes are scheduled to take effect Aug. 29, according to the report.