AAS_RFI_06JUNE2025.docx

Cyber Platforms and Systems (CPS) Program Management Advisory and Assistance Services

REQUEST FOR INFORMATION (RFI)

The Army Program Executive Office Intelligence, Electronic Warfare & Sensors (PEO IEW&S), PM DCO is seeking information from potential sources for experienced cyber-related advisory and assistance support services to augment PM DCO’s core Government personnel to support the missions of the PM DCO and its customers. PM DCO mission is to equip the United States (US) Army cyber defender and warfighter with advanced, agile, and flexible cyberspace infrastructure, platforms, and tools to quickly deliver effects. The PM DCO mission dictates a very unique set of cyber requirements, both operationally and tactically. Defensive cyberspace operations is defined as missions to preserve the ability to utilize blue cyberspace capabilities and protect data, networks, cyberspace-enabled devices, and other designated systems by defeating on-going or imminent malicious cyberspace activity. Defensive cyberspace operations include passive and active cyberspace operations intended to preserve the ability to protect data, networks, net-centric capabilities, and other Department of Defense (DoD) designated systems. Active cyberspace defense includes hunting for advanced internal threats, along with internal responses to those threats. Recognizing cyberspace as an operational domain, Army cyber defenders must be able to:

· Leverage intelligence/cyber intelligence, surveillance, and reconnaissance (ISR) and analytics to actively predict and conduct counter-reconnaissance (search and discover) against advanced cyber threats (to include insider threats) and vulnerabilities that do not trigger or generate warnings using routine detection measures.

· Outmaneuver adversaries by performing pre-approved, automated, agile, internal countermeasures that stop or mitigate cyberspace attacks; and when authorized, conduct response actions external to friendly networks in order to create effects that render the adversary’s offensive cyberspace operations capabilities ineffective.

· Conduct cyberspace defense mission planning and protection that identifies and assures the availability of tasked critical assets and infrastructure supporting Army, DoD, host nation, and civil authority actions or missions.

· Achieve survivability of networks, information technology platforms, and data through counter-mobility actions, dynamic movement of tasked critical assets, and security enhancement measures.

· Conduct mission assurance actions that dynamically re-establish, re-secure, re-route, reconstitute, or isolate degraded or compromised key terrain in cyberspace (KT-C).

· Conduct site exploitation and forensic analysis to determine technical and operational impacts of intrusions.

· Evaluate the defensive posture of tasked critical assets and KT-C using vulnerability assessment methods and threat emulation in order to recommend or direct changes to ensure operational readiness.

The objective of this contract is to provide strategic level program management advisory and assistance services to PdM CPS to facilitate evolving PdM CPS practices, with the intention of meeting critical milestones, delivering capabilities, and continuously improving performance.

This contract support will include identifying issues; sustaining capabilities; monitoring performance; testing technologies; recommending capabilities; managing facilities; providing real-time integration and development of capabilities; creating environments; and recommending solutions to enhance the mission effectiveness of military personnel; enhance supporting platforms, systems, components, or materials proposed to be acquired or developed by the DoD; and/or enhance current platforms, systems, components, or materials in use by the armed forces.

The scope of services includes support in each of the following task areas:

Task Area 1: General Support Task Area 2. Technical Management Support Task Area 3: Program Management Support The anticipated Period of Performance is 01 August through 31 July 2026.

The anticipated Place of Performance is at the Government facility, Fort Belvoir, Virginia (VA) and other designated locations such as Fort Eisenhower, Georgia (GA).

All responsible sources may submit a quotation and technical capabilities, which, if received within five (05) business days of publication of this notice, shall be reviewed by PEO IEW&S DCO. All RFI responses must be submitted to the Government point of contact at the email address shown below.

Kimberly M. Barnes (Primary) Kimberly.m.barnes3.civ@army.mil PEO IEW&S, DCO Acquisition Management Division 9351 Hall Rd, Building 1456 Fort Belvoir, VA 22060

REQUIRED CAPABILITIES: All cited experience/performance must be of similar complexity. Respondents should identify if experience was performed as a prime or subcontractor. If performed as a subcontractor, identify elements performed in the last 3 years.

For reference, please see Attachment 1 Performance Requirements Cyber Platforms and Systems Program Management Advisory and Assistance Services

1. (A) Has your company performed program management support in accordance with the DoDD 5000.01, DoDI 5000.02, and the Joint Capabilities Integration Development System (JCIDS) Information Technology Box process with specific emphasis on preparing required acquisition documentation, cost estimating, development and execution of contract strategies that comply with both Federal Acquisition Regulation (FAR) and Other Transaction Authority (OTA) as a prime contractor for the United States Army and/or other DoD Services in the following Performance Requirements listed in the PWS for PM DCO Program Management Support Services?

(B) If the answer is yes to part A, provide up to three contract number(s), period of performance, and the name of the customer/agency supported, funded contract value, ceiling contract value, number of FTEs and contract type to substantiate your response. The listed contracts shall demonstrate experience as required in the PWS for PM DCO Program Management Support Services.

2. (A) Has your company developed comprehensive Strategic Communications (Public Affairs / Public Relations) campaigns? Desired experience is for official DoD designated Acquisition Categories (ACAT) Programs of Record (POR) in accordance with the Army’s Public Affairs Office for the United States Army in the Performance Requirements or similar as listed in the PWS for PM DCO Program Management Support Services?

(B) If the answer is yes to part A, describe and provide an example of your company’s DoD corporate experience as it relates to Strategic Communications (Public Affairs / Public Relations) campaigns in no more than 2 pages.

3. (A) Has your company provided lifecycle management support for major DoD programs to include testing and evaluation? Choose an item.

(B) If the answer is yes to part A, provide up to three contract number(s), period of performance, and the name of the customer/agency supported, funded contract value, ceiling contract value, number of FTEs and contract type to substantiate your response. The listed contracts shall demonstrate experience as per the PWS.

4. Describe and provide an example of your company’s DoD corporate experience and technical approach in supporting requirements in the areas of Cyber Analytics, Cybersecurity and Cybersecurity Risk Management in the Performance Requirements listed in the PWS in no more than 2 pages.

Cyber Analytics. Includes computer security, computer and network administration, and auditing support using Cyber Analytics. This could include reviewing data patterns and applied algorithms and statistical analyses to ensure detected anomalies are meaningful.

Cybersecurity. Assist in the management and administration of the DCO Mission Network (DCO-MN), network performance and maintaining network security. This could include managing and administering the total DCO infrastructure, platforms, systems, applications/tools, performance, and maintenance over system security.

Cybersecurity Risk Management. Support the management of information and risks related to the use, processing, storage, and transmission of information or data and the systems and processes used for those purposes.

5. Describe and provide an example of company’s DoD corporate experience and technical approach in supporting requirements in the areas of Systems Integration in no more than 2 pages.

Systems Integration. Provide engineering subject matter expertise to the integration combining of components (e.g., systems, subsystems, applications, or parts thereof) of capabilities to create Family of Systems, Systems of Systems, and Interoperability between systems.

6. (A) Does your company have “direct” (meaning direct support to employees assigned to these organizations, not through another entity) experience supporting Cyber National Mission Forces (CNMF) with any one of the following cyber agencies within the past three years: US Cyber Command, Army Cyber Command, 24th Air Force, Marine Forces Cyberspace Command, 10th Fleet.

(B) If the answer is yes to part A, provide at least one, but no more than three contract number(s), period of performance, and the name of the customer/agency, funded contract value, ceiling contract value, number of FTEs and contract type to substantiate your response.

7. (A) Does your company have experience supporting programs providing capabilities to offensive and/or defensive operations as defined in Chapter 2 of Joint Publication 3-12 Military Operations in and through Cyberspace? (Experience does not include Department of Defense Information Network (DoDIN) support.)

(B) If the answer is yes to part A, provide up to three contract number(s), period of performance, the name of the customer/agency supported, funded contract value, ceiling contract value, number of FTEs and Contract type to substantiate your response.

8. Describe and provide an example of your company’s DoD corporate experience as it relates to all of the following cyber tools/technologies Elastic, Security Onion, Encase Investigator, Red Hat Enterprise Linux, Red Hat Enterprise Virtualization, Amazon Web Services, and Emerging Threat Pro in no more than 2 pages.

SPECIAL REQUIREMENTS:

· Active Top Secret (TS) Facility Clearance with Secret safeguarding capability with a minimum of two (2) cubic feet. (Provide a copy of the certification document generated from the Defense Security Service Portal / National Industrial Security System with your response.) (Reference PWS Section 12.1.1)

· In accordance with DoD Regulation 5200.2-R, Personnel Security Programs, all DoD Contractor personnel who have access to Federally controlled information systems must be assigned to positions which are designated at one of three information technology (IT) levels, each requiring a certain level of investigation and clearance, as follows:

· Critical Sensitive=IT-I for an IT position requiring a single scope background investigation (SSBI=T5) or SSBI equivalent. This designation encompasses privileged user accounts for networks and systems encompassed under this PWS, often referred to as "administrator" or "sys admin" accounts;

· Non-Critical Sensitive =IT-II for an IT position requiring a National Agency check with Law and Credit (NACLC=T3) or NACLC equivalent; and

· Non Sensitive=IT-III for an IT position requiring a (NACI=T1) or equivalent

· DoD 8570.01-M certified workforce supporting operating environments at a minimum of Mission Assurance Category (MAC) level III Army Risk Management Framework Experience

· Capability Maturity Model Integration (CMMI) Level 3 certified software development organization (Provide the name, number and date of the certification with your response.)

· For Managers, Engineers, Technicians, Administrators/Privileged Users, The following certifications must be maintained:

· Enterprise IAT Level 3

· Network IAT Level 2

· Systems IAT Level 1

· Current Project Management Professional (PMP)/Program Management Institute Acquisition Certified Professional (PMI-ACP) Level III or Federal Acquisition Certification–Program/Project Manager (FAC-P/PM) Senior Level certification or Defense Acquisition Workforce Improvement Act (DAWIA) Program Management Level III/Advanced certification

· Current Scaled Agile Framework (SAFe) Certified Agilist and Certified Scrum Master Silver Partnership or greater (Provide the partner level, number of SAFe program consultants (SPCs) and date of partnership with your response.)

· Certified at the ISO 9001, ISO 20000 and ISO 27001 levels (Provide the names, numbers and dates of the certifications with your response.)

The Capability Package must be clear, concise, and complete and shall include {in addition to the technical aspects above), at a minimum:

1. Identify the organization's name, address, telephone number, and point of contact {also with title, phone, fax, and e-mail) on packaging and title pages. The organization name should appear clearly on every page of your submittal and proprietary information must be clearly marked.

2. Organization size/ownership of business {i.e. large, small, small disadvantaged, 8{a) Disable-Veteran, Veteran, Woman-owned Business, Hub Zone)

3. Number of years in business

4. Cage Code

5. DUNS# & Tax ID#

6. Company Profile {Number of employees, annual sales history, locations and if CCR registered)

7. Identify if you are a GSA Schedule Holder

8. Affiliate Contractor {if potential sub) or subcontractors {if potential prime).

In addition, all responses should be unclassified and marked appropriately to ensure consideration of operational sensitivities.

A determination by the Government not to open the requirement to competition based upon the responses to this notice is solely within the discretion of the Government. Initial questions about the RFI may be submitted via email no later than 2:00 p.m., 18 JUNE 2025 to the DCO Acquisition Management Division, cited above. All questions, answers, information discussed, and any other information pertinent to this RFI will be posted to the Computer Hardware Enterprise Software and Solutions (CHESS) website (https://chess.army.mil/) and the System for Award Management (SAM) website (https://sam.gov/). Information denoted as intellectual property will not be posted.

THIS RFI IS FOR PLANNING PURPOSES ONLY AND IS NOT TO BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT TO PROCURE ANY ITEMS/SERVICES, NOR FOR THE GOVERNMENT TO PAY FOR THE INFORMATION RECEIVED. NO ENTITLEMENT TO PAYMENT OF DIRECT OR INDIRECT COSTS OR CHARGES BY THE GOVERNMENT WILL ARISE AS A RESULT OF SUBMISSION OF RESPONSES TO THIS RFI AND GOVERNMENT USE OF SUCH INFORMATION. NO SOLICITATION DOCUMENT EXISTS.