RFI_Cybersecurity Engineering and Technical SME Support Services (CETSSS)_2024-05-10.pdf

Request for Information (RFI) – Capacity Building (CB) Cybersecurity Engineering and Technical SME Support Services (CETSSS)

Agency: Cybersecurity and Infrastructure Security Agency (CISA)

Market Research Agency: General Services Administration (GSA), Federal Acquisition Service (FAS), AAS Army on behalf of Cybersecurity and Infrastructure Security Agency

(CISA)

Notice Type: Posted Date:

Request for Information May 9, 2024

NAICS: 541512 Computer Systems Design Services; Please include any suggested NAICS and PSC codes in the response.

GSA Reference: Acquisition ID 47QFRA24K0008

I. GENERAL INFORMATION:

The General Services Administration (GSA), Federal Acquisition Service (FAS), AAS Army is issuing a Request for Information (RFI) on behalf of the Cybersecurity and Infrastructure Security Agency (CISA).

II. OBJECTIVE:

The purpose of this RFI is to assist the Government in conducting market research.

focused on identifying industry partners that can provide enterprise technical support services to the programs within the Capacity Building Subdivision of CISA as described in the objectives below. This information will be used for market research only. The Government is not obligated to release a future solicitation based on this market research.

Interested respondents shall refer to the details of the response to this RFI under Section VI.

III. BACKGROUND:

The U.S. Department of Homeland Security (DHS) Cybersecurity Infrastructure Security Agency (CISA) leads the national effort to understand, manage, and reduce risk to the cyber and physical infrastructure that Americans rely on every hour of every day. In its role as the nation’s cyber defense agency and the national coordinator for critical infrastructure security, CISA works with critical infrastructure partners every day to address the evolving threat landscape.

The risks it faces are complex and geographically dispersed, and they affect a diverse array of stakeholders, including Federal Civilian Executive Branch (FCEB) agencies; private sector companies; and state, local, tribal, and territorial (SLTT) governments. CISA spearheads a national effort to ensure the defense and resilience of cyberspace. It is building the national capacity to defend against and recover from cyberattacks. It works with federal partners to bolster their cybersecurity and incident response postures and safeguard the FCEB networks that support the nation’s essential operations and it partners with the private sector and others to detect and mitigate cyber threats and vulnerabilities before they become incidents.

The federal enterprise depends on information technology (IT) systems and computer networks for essential operations. CISA, through its Cybersecurity Division (CSD), works with each FCEB agency to promote the adoption of common policies and best practices that are risk-based and able to effectively respond to the pace of ever-changing threats.

CSD leads efforts to protect the federal “.gov” domain of civilian government networks and to collaborate with the private sector to increase the security of critical networks. The CSD mission is to understand evolving threat activity as it affects national critical functions and high-value assets, ensuring stakeholder access to essential data on the risk posture of key information systems.

Provisioning critical, enterprise-wide cybersecurity services and programs is a critical component of CISA’s mission to ensure the security of federal networks. Maturity in cybersecurity varies by agency with Federal Government facing common, significant challenges in securing information technology (IT) from cybersecurity risk.

Figure 1 below provides an overview of the current CB organization, mission, and programs that the identified tasks will primarily support. CB’s is charged with supporting and partnering with multiple stakeholders across the FCEB as well as continual collaboration within CISA and its Divisions and Subdivisions. Support services shall address, as needed, the technical and engineering needs of the entire CSD organization as they are prioritized and evolve over the period of performance (PoP). Over the PoP of this TO it is anticipated that the CB organization will evolve, missions will grow, and priorities will change. The contractor shall be flexible and agile in adjusting to a complex and evolving cybersecurity organization in their ability to support change effectively and efficiently.

Figure 1. Organization Chart

IV. PURPOSE:

As described in section III, the CISA and CSD has evolved to include an extensive set of programs and shared services. The implication of this expansion is that CSD and CB require a fully integrated management solution that leverages extensive synergies across net new cyber and technical functional areas. CB has publicly messaged how we intend on holistically meeting expanded need through a functionally aligned modular approach for a broad set of Services (i.e., Data Services, Deployment and Advanced Engineering and Operational support). This management approach must be able to align to the new structure and expanded directives provided to CISA. CB requires an expanded and varied set of Cybersecurity Technical and Engineering support areas. These services include a full range of cybersecurity technical and engineering subject matter expertise (SME) support services to meet mission goals and improve agency performance including systems engineering, architectural design and development, technical project management, enterprise development and developer expertise, data analysis and data engineering, and enterprise product development and general product management subject matter expertise.

The management approach and construct MUST be cross-cutting along the expanded variety of cybersecurity and engineering domains discussed in section V below. Many of these domains and objectives are in direct support of a mission, a program or entity within our organization, but it is critical to understand that the government requirements are dynamic and, as such, the support may be cross utilized in and across CSD.

V. REQUIREMENT OBJECTIVES AND TASK AREAS:

The following provides initial requirement objectives to include, but not limited to the following.

PROVIDE FISMA AND CYBERSTAT SUBJECT MATTER EXPERTISE

The contractor shall support the CB Oversight and Enablement (O&E) mission Federal Information Security Modernization Act (FISMA) and Cyberstat activities. Specifically, the contractor shall provide technical support and maintenance to implement methods of tracking measures of performance and efficiencies. Advise the government leads and stakeholders on cybersecurity performance data topics. Develop and implement a process to capture products and services customer feedback and impacts of product delivery and resulting actions on the cybersecurity mission.

PROVIDE HIGH VALUE ASSET PROGRAM MANAGEMENT OFFICE (HVA PMO)

SUBJECT MATTER EXPERTISE

The contractor shall support the government and High Value Asset (HVA) program office with data analytics support for FISMA and general reporting support. Specifically, the contractor shall provide technical support and maintenance to implement methods of tracking measures of performance, efficiency, and success of the HVA Program and provide an annual HVA performance measures report. The contractor shall support communication of complex data to a variety of stakeholders, tailored to the audience and produce communication materials (reports, briefings, demos, presentations) for data projects, tailored to stakeholder audience. Participate in data forums and exchanges, communicating data priorities and details.

PROVIDE TECHNICAL CYBER SUPPORT TO THE FEDERAL ENTERPRISE

IMPROVEMENT TEAM (FEIT)

CB’s FEIT group is charged with defining federal enterprise-level strategic efforts and supporting agencies in developing and implementing tailored cybersecurity improvement plans.

FEIT brings together and extends capabilities and functions from across CSD to assist with analyzing, prioritizing, and mitigating the most pressing cybersecurity risks for the benefit of all civilian agencies. Through dedicated agency portfolio teams and targeted technical and programmatic consultation, the FEIT will work directly with agencies and drive proactive improvement based on CISA analysis.

The contractor shall assist CSD/CB in providing Agencies with a clear understanding of the most pressing cybersecurity risks and a prioritized set of actions to help guide them toward mitigating those risks.

PROVIDE CSSO CLOUD & SHARED SERVICES SUBJECT MATTER EXPERT

SUPPORT

Within CSSO the Cloud, Logging, and Mobile (CL&M) Section research, develops, pilots, and manages new and advanced cybersecurity shared services offerings, partnering with external stakeholders (e.g. Intra-agency, Inter-agency, and Critical Infrastructure). The CL&M Section consists of a Section Chief, Service Managers, Project Managers, and Operations Managers with plans to add additional technical engineering and operations support as the workload increases and/or as new initiatives or pilots are identified for CB to plan and execute. The current initiatives and planned service offerings include Cloud, Logging, and Mobile Cybersecurity Shared Services. The contractor shall be expected to support the Cloud, Logging and Mobile offerings immediately. In the near to mid-term, the contractor should expect to support an expanded set of cyber services being brought to the broader FCEB. The contractor shall provide technical engineering and cybersecurity subject matter expertise to include, but not be limited to the following:

• Plan and execute technical exchange or IPT meetings in conjunction with CL&M initiatives

(e.g., ongoing, and upcoming pilots, workshops in mobile initiatives, Secure Cloud, M365, Google Workspace, and Logging activities)

• Validate capabilities, develop concept of operations, and functional requirements for the sustainment, advancement, and evolution of current and/or new cybersecurity shared service offerings.

• Assist in development of technical artifacts and requirements documentation for ongoing or planned CL&M services (e.g., SCuBA, Logging, Mobile)

• Assist in developing Reference Architectures for current and proposed service offerings.

• Advise and assist in the development of service delivery models.

• Develop analysis of alternatives, trade studies and support business cases for proposed service offerings.

PROVIDE CYBER THREAT INTELLIGENCE SUBJECT MATTER EXPERTISE

The CSSO has matured their information sharing initiatives and platforms into an enabling capability, enhancing the .gov networks. CSSO requires threat analysis and operations SME support as well as technical planning and requirements development support to mature the Threat

Intelligence Enterprise Service (TIES), develop technical and operational reference documentation, and assist in agency and CISA-internal engagements. Specifically, the contractor shall assist the government in active collaboration with industry partners and stakeholders via community and governance forums, such as OASIS, to refine and enhance CISA’s CTI priority standards and implementations. This would help the government align initiatives to promote widespread adoption of CISA CTI standards and capabilities across the cybersecurity community and advocate for and contribute to the evolution and integration of technical standards and taxonomies in CISA's capabilities, services, and programs to include upcoming versions of STIX/TAXII and MISP.

PROVIDE DEPLOYMENT AND SYSTEM ENGINEERING (CDM & CB PROGRAM

ENGINEERING SUPPORT)

The contractor shall support a variety of CB Programs, providing engineering expertise across a number of domains. The contractor shall assist the government functional leads in engaging CISA and FCEB agencies in support of IT Software deployments and implementations. Support includes providing technical input and insight related to CDM and other program engineering requirements and activities. by providing deployment, implementation and testing engineering and technical expertise. Support includes providing technical input and insight related to artifacts and deliverables coming from service offerings, review of implementation plans from an engineering or agile perspective, future capability and requirements definition, review of SELC deliverables (as applicable).

PROVIDE PROGRAMMATIC TEST ENGINEERING SUPPORT

The contractor shall play an important role in helping the government develop Program-level requirements and test documentation as well as maintain traceability between functional and system level documentation. This includes, but is not limited to the following:

• Supporting Operational Test and Evaluation (OT&E) certification activities by reviewing test results and certification recommendations as well as developing other artifacts to demonstrate that OT&E risks have been mitigated.

• Assisting in coordination of testing activities with CDM PMO, FFRDCs and other Test Authority Organizations

• Supporting the development and maintenance of the program level Requirements Traceability Matrices (RTM)

• Working with CDM DEFEND portfolio teams, integrators and end users to plan and prepare for all testing activities.

PROVIDE KNOWLEDGE MANAGEMENT CDM TOOL SUPPORT AND TRACKING

The CDM Solution maintains a degree of consistency across the Agencies by leveraging a similar set of Commercial Off-the-Shelf (COTS) tools. These tools have been reviewed by the CDM PMO to identify that they meet the capabilities of, or in conjunction meet, the requirements specified in CDM Technical Capabilities Requirements Document, Volumes 1 and

2. The contractor shall support the CDM PMO in the management of the tool approval process as well as the tracking and management of CDM tool procurements.

PORTFOLIO TESTING ARTIFACT TRACKING AND SUPPORT

The contractor shall assist in the review, maintenance, and validation of CB technical programmatic artifacts to support systems engineering and testing activities. The support shall be cross cutting and utilized by CDM and the various CB program teams, as necessary, in order to review program documentation, provide comments, and participate in government team reviews (as required). Support includes, but is not to the following:

• Update of major Testing Program Documentation updates on an annual basis (or as required by activity).

• Provide test support to the CDM Requirements Management Board (RMB) and other requirements management for major program documentation updates and development of program documentation.

• SELC Planning Artifacts (CONOPS, etc.)

• Functional Requirements and Capabilities Documentation

• Validate DEFEND and CB Program technical deliverables.

o Integrated Master Schedules (IMSs) o Implementation Plans o System Design Documentation o Plan for Transition to Agency Production Operations o Requirements Traceability Matrices (RTMs).

PROVIDE DATA ENGINEERING SUBJECT MATTER EXPERTISE

The contractor shall assist CB and various CSD functional leads in providing oversight on large scale cyber programs. The contractor shall also assist in the development and optimization of data solutions and contributing to CISA’s ongoing cloud-based projects and investments. The contractor shall engage both internal and external CB and CSD partners and collaborate with cross-functional teams to integrate data solutions into potential shared services programs. The contractor shall be familiar with data pipelines, architectures, and data sets and have experience working with big data technologies to solve complex data processing challenges. The contractor shall expect to contribute to broader CISA initiatives associated with implementations of AI solutions.

PROVIDE DATA ANALYTICS – PREDICTIVE ANALYTICS AND VISUALIZATIONS

SUPPORT

The contractor shall produce data analysis products for stakeholder cybersecurity performance products and reports, including but not limited toward risk and management insights and performance, organizational metrics, and scorecards. The contractor shall communicate complex data information to a variety of stakeholders, tailored to the audience. This support includes, but is not limited to the following:

• producing communication materials (reports, briefings, demos, presentations) for data projects, tailored to stakeholder audience.

• Participating in data forums and exchanges, communicating data priorities and details.

Advise CISA/CSD/CB colleagues and stakeholders on cybersecurity performance data topics.

• Developing and implementing a process to capture products and services customer feedback and impacts of product delivery and resulting actions on the cybersecurity mission.

The contractor shall conduct data analysis, processing, and data cleansing activities using innovative tools and approached to organize qualitative and quantitative data for analysis. This support includes conducting data cleansing activities to detect, prevent, and correct data errors.

Specific support includes, but is not limited to the following:

• Conduct research to identify potential opportunities to apply mathematical and/or statistical analysis in order to frame cyber risk measurement problems and build risk models and indices based on Federal Agency data.

• Provide research and technical analysis expertise to develop government wide cybersecurity metrics, covering statistical data gathering methods, data analysis correlation/aggregation algorithms, and dashboard reporting.

• Support data modeling and data management activities.

PROVIDE DATA ANALYTICS – PREDICTIVE ANALYTICS AND VISUALIZATIONS

SUPPORT

The contractor shall support the Oversight and Enablement organization and High Value Asset program office with data analytics support for FISMA and general reporting support.

Specifically, the contractor shall provide technical support and maintenance to implement methods of tracking measures of performance, efficiency, and success of the HVA Program and provide an annual HVA performance measures report. The contractor shall support communication of complex data to a variety of stakeholders, tailored to the audience. This support includes, but is not limited to the following:

• Produce communication materials (reports, briefings, demos, presentations) for data projects, tailored to stakeholder audience.

• Participate in data forums and exchanges, communicating data priorities and details.

• Advise government leads and stakeholders on cybersecurity performance data topics.

Develop and implement a process to capture products and services customer feedback and impacts of product delivery and resulting actions on the cybersecurity mission. Specific FISMA activities include:

o Analyze the FISMA submission data to identify trends, common issues, agency challenges, and risks across the Federal enterprise. CFO act agencies – Quarterly, Non- CFO – biannually.

o Perform analysis of the FISMA metric by agency and establish dashboards for reporting. CFO act agencies – Quarterly, Non-CFO – biannually.

PROVIDE TECHNICAL WRITING SUPPORT

Capacity Building requires assistance in capturing, distilling, and communicating information to both internal and external stakeholders. The contractor shall provide technical editing and writing expertise to various teams within CB/CSD. While the support will be focused on the external strategic communications, technical artifacts associated with service offerings and agency engagements and general cybersecurity capabilities documentation, the contractor should keep abreast and possess an understanding of the many facets of CSD and CB. This support will be cross assigned to various tasks within and redirected as requirements ebb and flow.

PROVIDE DEVELOPER SUPPORT .GOV PROGRAM

The contractor shall provide agile software development services to deliver functioning code, design artifacts, and other product documentation to help CISA achieve its vision of a modern and secure suite of .gov products, in alignment with the DOTGOV Act of 2020.

The services shall include all aspects of software development, including ongoing planning, user research, human-centered design, prototyping, development and coding, documentation, testing, configuration, deployment, and operations support. In alignment with Agile principles, CISA requires that the development process be collaborative and iterative, with open, regular, and frequent communication between CISA, any CISA partners, and the contractor. CISA has designated a Product Owner for the ongoing development of the .gov products. The contractor shall work with the Product Owner, who will liaise with other stakeholders, weigh business needs, set the direction, make prioritization decisions for the backlog, and support the development team. CISA requires that the contractor work closely with the Product Owner and to co-develop a product roadmap, user stories, and issue tickets for the Product Owner to prioritize for action. The product backlog is at https://github.com/orgs/cisagov/projects/26/views/27. Individual issues and user stories may be modified, added, retracted, or reprioritized by the Product Owner at any time, in coordination with the contractor team.

SECURE CLOUD FOR BUSINESS APPLICATIONS PROGRAM

The Secure Cloud Business Applications (SCuBA) project provides guidance and capabilities to secure agencies’ cloud business application environments and protect federal information that is created, accessed, shared, and stored in those environments. SCuBA will help secure Federal Civilian Executive Branch (FCEB) information assets stored within cloud environments through consistent, effective, modern, and manageable security configurations. The contractor shall provide SW development support for the various SCuBA tools that guide agencies in adopting technologies for cloud deployments and assist the FCEB in maintaining configuration baselines for the Microsoft and Google cloud suite.

More information can be found at: Secure Cloud Business Applications (SCuBA) Project | CISA

PROVIDE LOGGING MADE EASY (LME) SUPPORT

LME is a centralized, open source log management solution provided by CISA to support entities and organizations who lack the resources to acquire comparable solutions. It serves as a security information and event management capability for those organizations currently lacking one, arming the most vulnerable members of the cybersecurity community with a critical capability that will alert administrators of potentially harmful activity on their systems.

The contractor shall provide software (SW) development support to include, but not limited to the following:

• Analysis of network traffic

• Analysis of advanced logging mechanisms and log management solutions across Windows, MacOS, and Linux https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project#:%7E:text=The%20Secure%20Cloud%20Business%20Applications%20%28SCuBA%29%20project%20provides,created%2C%20accessed%2C%20shared%20and%20stored%20in%20those%20environments.

• Ability to perform log aggregation and analysis (e.g., Elasticsearch. Logstash, and Kibana), as well as data ingestion, parsing, and visualization

• Script development (e.g., PowerShell, bash, and/or Python) for automating tasks, and extracting insights from log data.

• Support for SBOM development and releases.

• Architect logging requirements for standard Security Information and Event Management

(SIEM) solutions that support LME. (e.g., Windows Sysinternals (Sysmon, sigcheck, windows event logs), Windows Group Policy Objects, WEF framework and WEC configuration, and elastic ELK stack)

• Research, monitor and develop release approaches to vulnerabilities, patches, and planned releases from tools generated for LME that address the threat landscape including recommending areas for security development, future tool modifications based on industry advances, elastic security rule updates, and user feedback analysis.

PROVIDE SERVICENOW DEVELOPMENT, OPERATIONS, AND MAINTENANCE

SUPPORT

CB requires workflow planning and software development support to execute and mature oversight, reporting, and shared service functions and workflows. Execution of this task will require using capabilities and custom workflows within ServiceNow, which is currently available for internal workflow development through CD’s Mission Enablement instance and/or external workflow development through OCIO’s instance. If requested workflows do not meet requirements, the contractor shall recommend other such ServiceNow capabilities or workflow amendments as necessary. In the near term, the contractor shall support the planning and development efforts of the CSSO Service Delivery Organization (SDO) ServiceNow portal and associated operations and maintenance efforts. It is expected that during the period of performance, the contractor shall be required to support the expanded ServiceNow portal for all of CB and CSD.

PROVIDE CSSO SERVICES CENTER OF EXCELLENCE SERVICE ANALYSIS AND

EVALUATION SUPPORT

The contractor shall support the Cybersecurity Services Center of Excellence (CS-COE) with intaking all service ideas and conducting an initial triage analysis into validating the appropriateness of the idea for leveraging a service delivery model for deployment. The contractor shall support the in-depth analysis of technical, risk, governance, and customer information to determine the best roadmap of future service offerings to various customer segments, including Federal Government, SLTT, and critical infrastructure. The contractor shall also execute customer and technical analysis work to assess the impact of delivered services.

PROVIDE PRODUCT MANAGEMENT

The contractor shall advise and assist the government in launching, developing, planning service portfolios and shared services.

PROVIDE ENTERPRISE SOLUTION DEVELOPMENT (MAESTRO, JIRA, BI,

CONFLUENCE)

The contractor shall support solution and/or tool development for CB/CSD. This support includes the planning, requirements gathering and use case/CONOPS development prior to solution building. These solutions and/or tools may be oriented around automation of organizational and programmatic processes, providing insight into solutions for agency needs.

CB currently utilizes many of these enterprise tools to support:

• Configuration control boards for large scale programs (CDM, pDNS, etc)

• Request for Services on CDM DEFEND

• Risk Management

• Requirements Management Boards.

The contractor shall work with the government to expand these enterprise applications and solutions to cover a growing set of internal requirements and look to develop enhancements and automation to streamline workflows and data management and oversight.

VI. RFI RESPONSE:

As described at the 17-April Industry Day, CISA and CB are driving toward a more modular approach to our various contract efforts anticipated in the coming years. This approach aims to adopt agile methodologies to effectively address Agencies’ rapidly evolving needs and identify and capture cost savings for CISA and Agencies without affecting quality.

Due to the complexity and variety of the need, the government anticipates the possibility of teaming arrangements to be formed to meet these requirements. Responses should be tailored in the following format and include the following information: Note: The RFI response shall be split into three Sections.

Section 1 - CONTRACTOR INFORMATION: this information is for administrative.

Interested parties are requested to provide the following as a minimum:

• Contractor name and facility address (list all relevant or significant office locations)

• UEI number, CAGE code, and NAICS code

• Socio-economic status (i.e., HUBZone, Service-Disabled-Veteran-Owned, Woman-

Owned, 8(a), Small Business, Large Business, etc.)

• Facility clearance level

• POC name, phone, and email

• Website URL

• List of any GSA Vehicles, such as GWACs (i.e., Alliant 2, VETS 2, etc.) or GSA

Multiple Award Schedule that your company has access to, and that can support Cybersecurity Engineering and Technical SME Support Services requirement.

Section 2- CORPORATE EXPERIENCE: this information shall address the questions below as they relate to interested parties corporate experience with the requirement. Please provide your response to the following:

1. Does your company have experience in providing enterprise level cybersecurity support consistent with the purpose and requirements objectives identified above? (Note commercial experience is acceptable)

• Describe relevant efforts, similar in size, scope, and complexity. In order to meet the government’s requirements, the contractor requires a wide variety of subject matter experts, cyber operations, and engineering expertise.

• Highlight large scale deployments and implementation experience, DEVSECOPS and product management expertise in developing complex SW solutions, cyber capability and tool expertise, and significant data analytics and engineering capabilities.

2. Please provide examples and/or existing contracts where your company has either developed or implemented large data solutions to meet cybersecurity requirements and/or challenges.

• Highlight any unique customizations or solution design expertise applied to these implementations.

3. Please identify any existing Government contract vehicle(s) (GWAC, Federal Supply Schedules, BPA, etc.) that your company currently holds which could support the Cybersecurity Engineering and Technical SME Support Services requirement. Please include a brief narrative why, in your determination, that vehicle would meet the needs of this potential requirement.

Section 3- QUESTIONS: this information asks questions as they relate to the requirement.

1. What is a recommended acquisition approach the Government should consider addressing this requirement?

2. Is there any other information deemed relevant by the contractor for the Government’s consideration for this requirement?

3. Due to the complexity and variety of the need, the government anticipates the need to leverage based on agency priorities various technical disciplines and have access to a variety of SMEs across IT and cybersecurity disciples, please provide examples of your demonstrated experience.

VII. CONTRACTOR NOTIFICATION AND SUBMITTAL INSTRUCTIONS:

This RFI is for information and planning purposes only and is not to be construed as a commitment by the U. S. Government. No award will be made as a result of this RFI. All information is to be submitted at no cost or obligation to the Government. Any information that the Contractor (Interested parties) considers proprietary should be clearly marked as such.

All submissions become Government property and will not be returned, including any proprietary information. The Government may consider additional communications with submitting companies utilizing the contact information provided in the Corporate Overview to further the Government’s market research for the Cybersecurity Engineering and Technical SME Support Services (CETSSS)

Submission instructions and information retention:

• All responses are to use Times New Roman font, with a 12-point font, one-inch margins, and single spaced in all sections in Microsoft Word.

• Section 1: Contractor Information section shall be no longer than 1 page in length.

• Section 2: Contractor Experience section shall be no longer than 2 pages in length.

• Section 3: Response to questions should be no longer than 6 pages in length.

• All information submitted shall be UNCLASSIFIED and marked as such, on each page.

• Any information that the Contractor considers “proprietary” should be clearly marked as such, on each page.

• All submissions become Federal Government property and will not be returned (including any proprietary information).

• Submissions that exceed 9 pages may be dismissed (excluding Cover Page and Table of

Contents).

• The Government may consider additional communications with interested parties that respond to this request for information utilizing the contact information provided in the Corporate Overview to further the Government’s market research for the Strategic Cybersecurity Acquisition and Buying Services requirement.

RFI responses shall be submitted no later than 5:00pm ET on 29 May 2024, via email to Diana Zoppi at diana.zoppi@gsa.gov and Aaron Maddox at aaron.maddox@gsa.gov.

Questions may be submitted no later than 5:00pm ET on 15 May 2024.

Contractors who do not respond to this RFI are not excluded from any resulting solicitation(s).

mailto:diana.zoppi@gsa.gov mailto:aaron.maddox@gsa.gov

VI. RFI RESPONSE: