RFI Human Portable RNID Devices CT FEMA Attachment 1.pdf

Attachment 1

INTRODUCTION

The mission of the FEMA CBRN support Directorate is to prepare communities to anticipate and counter CBRN threats through detection, awareness, and operational support. To achieve these ends, The CBRN Test & Evaluation (T&E) Division conducts assessments through the Directed Testing (DT) Program to respond to inquiries from federal, state, local, tribal, and territorial (FSLTT) stakeholders on the performance and utilization of available CBRN detection systems. Directed tests can either provide exhaustive performance data on CBRN detection systems or focus on specific scenarios to assist in the fielding of disruptive capabilities to address an immediate need identified by operators.

To fulfill CBRN Support Directorate’s mission, the DT Program regularly assesses the performance of detection technologies in controlled and operational environments against CBRN threats under specified and relevant concept of operations (CONOPS). Starting in FY24, the DT Program initiated a survey of human portable radiation and nuclear (RN) identification (ID) systems to determine whether device capabilities can support more of the RN mission space for which they are traditionally considered. To conduct this inquiry, the Komodo Dragon (KD) test campaign uses multiple varied-approach phases to assess and compare individual instrument capabilities against all the instruments rather than just within their traditional product classification type.

The four phases include Replicative Assessment of Spectrometric Equipment (RASE), Characterization Test (identifying and characterizing critical device factors that influence operational usability), Operational Assessment (assessing operator use in a controlled environment), and Operational Test (testing operator use in an operational environment). Each phase will be separately announced and solicit participation from providers.

The first phase, RASE, was successfully completed in FY24

KD CT, will include Replicative Assessment of Spectrometric Equipment (RASE) and will give preference to vendors/devices with replay tools1, incorporate a cyber security assessment, and start in the 2nd quarter of FY27. Additional RASE information is available on GitHub at https://github.com/LLNL/RASE#readme-ov-file. Replay tools allow CBRN T&E to process spectral data to determine the identification capabilities of the instrument. It should be noted by vendors that CBRN T&E plans to use injected data with the replay tool. Vendors should note there will be environmental and potentially destructive tests conducted during KD CT. Vendors may choose to opt out of potentially destructive tests without being excluded from other tests, with no data set being provided to the vendor for those tests. For the cybersecurity assessment, CBRN T&E will request copies (binary) of all communication software and mobile device applications used to configure, operate, or provide reachback/transmit detector information. Cyber testing will also include a vendor questionnaire to establish the baseline cybersecurity posture of the device(s) along with technical interchange meetings (TIMs) to clarify responses. Where applicable, CBRN T&E will perform a cooperative vulnerability penetration assessment on the device(s). CBRN T&E will also request a Software Bill Of Materials (SBOM) to establish supply chain risk/vulnerabilities associated with the supporting software developed for the SUT operations.

1 A replay tool is vendor provided standalone software that processes recorded data with the same detection and/or identification algorithms as embedded in their instrument so as to generate analysis results (e.g., alarms, identifications) that reproduce those presented to the operator https://github.com/LLNL/RASE#readme-ov-file

The final KD products will inform FEMA’s and other FSLTT agencies’ future procurement of human portable RN ID devices and address requests from front line operators.

The purpose of this RFI is to assist the KD test team in understanding the current state of human portable RN ID devices—spectroscopic personal radiation detectors (SPRDs), radioisotope identification devices (RIIDs), spectroscopic backpack radiation detectors (SBRDs), and other technologies that weigh less than 22 lbs (10 kg) and provide a response within two minutes of being exposed to a radiation source. The KD CT test will require 6 units of each device submitted for all testing during a this phase. Alternatively 3 units of each device may be submitted if a vendor chooses not to participate in potential destructive testing. For the CT phase, the KD team will review responses to this RFI and invite vendors to participate in the CT and cyber assessment.

The KD test team is interested in learning of commercial off the shelf (COTS), Government off the shelf (GOTS), and prototype [total device technology readiness level (TRL) 7 and above according to https://www.dhs.gov/xlibrary/assets/product_realization_chart.pdf] human portable RN ID devices that offer performance capabilities that meet and/or exceed the ANSI and IEC requirements under which they are typically categorized. For each phase of the KD test campaign, the DT Program intends to pursue Bailment Agreements with providers to secure systems for its tests. Participating vendors will be provided with the data sets collected during KD as they pertain to their instruments.

COMPANY-TO-COMPANY NON-DISCLOSURE AGREEMENT (NDA)

Responses to this RFI will be reviewed by technical experts within DHS and other federal agencies. DHS uses support contractor personnel to assist in the review of RFI responses. The support contractors are bound by NDAs with the Government. Nonetheless, the Federal Acquisition Regulation (FAR) at Subpart 9.505-4(b) requires that whenever a Government contractor gains access to proprietary information of other companies in performing advisory and assistance services for the Government, the companies must agree to protect the information from unauthorized use or disclosure for as long as it remains proprietary and refrain from using the information for any purpose other than that for which it was furnished.

The FAR further requires that the contracting officer obtain copies of these agreements and ensure that they are properly executed.

Accordingly, any submission in response to this RFI that contains proprietary information must include a signed company-to-company NDA with the following companies:

1) Mayvin, Inc.

NDA requests should be directed to

CWMD_NDA@mayvin.com https://www.dhs.gov/xlibrary/assets/product_realization_chart.pdf mailto:CWMD_NDA@mayvin.com

2) Johns Hopkins University

Nat Yi 240-228-2957

Nat.Yi@jhuapl.edu

3) I3PG

Patricia Pleasanton, FSO

813-760-1411

PPleasanton@i3pg.net

The Government does not dictate the form or content of the NDA; that is a business decision between the companies. However, a sample NDA is included as an Attachment (See Attachment 1). Use of the sample agreement, or one substantially similar to the sample, will expedite signature. It is important for all respondents to understand that without signed NDAs with all above-named contractors, your RFI submission cannot be reviewed. It is the vendor’s responsibility to provide these signed NDAs in order to be responsive to this RFI. The companies named above are under no obligation or compunction to agree to other more onerous company-provided NDAs, and potential responders that submit onerous NDAs for signature assume the risk that the above-named companies will not agree to such terms.

IMPORTANT NOTE: If your response to this RFI does not contain proprietary information, and is not marked as such, there is no requirement for the company-to-company NDAs.

mailto:Nat.Yi@jhuapl.edu mailto:PPleasanton@i3pg.net