Attachment 1. IDCS RFI Initial Capability.xlsx

XLSX spreadsheet 27 KB Posted

Attached to
Integrated Defensive Cyberspace System (IDCS) Secure Platform Architecture for Real-Time Threat Analysis and Network Defense (SPARTAN)
Solicitation number
FA8307-25-R-B057
Issued by

About this file

This file is a Request for Information (RFI) for the Integrated Defensive Cyberspace System (IDCS) Secure Platform Architecture for Real-Time Threat Analysis and Network Defense (SPARTAN) solicitation. The RFI seeks to identify potential vendors with expertise in cloud infrastructure, software development, DevSecOps, cybersecurity, data management, and network interoperability for the Department of the Air Force. The document comprehensively surveys vendor capabilities across eight key areas, including cloud expertise, software development, security compliance, data analytics, networking, testing, company capabilities, and system support.

The solicitation targets vendors who can develop, field, and sustain an enterprise-wide systems-of-systems platform for cyberspace domain protection, with a focus on modular, resilient, and cloud-based systems. Ideal respondents will have experience with AWS GovCloud, cross-domain solutions, DevSecOps processes, DoD information networks, and compliance with security standards like RMF and Zero Trust architecture. The government is particularly interested in companies with demonstrated ability to deliver adaptive solutions, integrate with existing Air Force cyber defense systems (ACD, CDA, CVA/H), and support rapid prototyping and system maturation.

View the file

Other files

Show all 11

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Part I-Business Information

Field TitleResponses
Company/Institute Name:
Address:
Point of Contact:
CAGE Code:
Phone Number:
E-mail Address:
Web Page URL:
Business size/Category under NAICS 541512

NADEAU, THOMAS P CTR USAF AFMC AFLCMC/HNCJ: NADEAU, THOMAS P CTR USAF AFMC AFLCMC/HNCJ:

i.e. large, small disadvantaged, veteran owned, woman owned, etc.

A statement as to whether your company is domestically or foreign owned (if foreign, please indicate the country of ownership
Is your company part of an existing Governmentwide Acquisisiton Contract (GWAC) Vehicle, IDIQ or other Contract Vehicle. If so, please provide all.
Does your company have an adequate accounting system?
What contract type/s do you think is appropriate for the work to be accomplished?
Does your company have the ability to work on site, in San Antonio, Texas?
Based on NAICS Code 541512 state whether your company is:
Small Business(Yes / No)
Woman Owned Small Business(Yes / No)
Small Disadvantaged Business(Yes / No)
8(a) Certified(Yes / No)
HUBZone Certified(Yes / No)
Veteran Owned Small Business(Yes / No)
Service Disabled Veteran Small Business(Yes / No)
System for Award Management (SAM)(Yes / No)

Part II-Capability Survey

I. Cloud Expertise & Infrastructure:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience with AWS GoA3:D67vCloud architecture, including software deployment, development, and testing in multi-domain environments?
Does your company have experience implementing cross-domain solutions and data sharing between mission partners in AWS GovCloud?
Does your company have experience with automated deployments and maintenance in a multi-domain AWS GovCloud environment?
Does your company have experience modernizing legacy software to cloud-based IaC platforms?
Does your company have experience synchronizing data across hybrid cloud and on-premises architectures?
Does your company have experience updating geographically separated hardware remotely?
Does your company have experience managing networked systems with inter and intra-domain connections between cloud and Base Area Network assets?
Does your company have experience developing and deploying virtualized network elements for specific OSI layers?
Does your company have expirence integrating software assocaited with an Enterprise level System of Systems operating on a Global scale?
II. Software Development & DevSecOps:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience sustaining, integrating, developing, and deploying multi-vendor software?
Does your company have experience integrating 3rd party software, analytics, and visualization tools into complex enterprise systems?
Does your company have experience with industry best practices, NIST guidance, DoD policies, system hardening, and Agile frameworks?
Does your company have experience with Enterprise-level DevSecOps, CI/CD processes for DoD software?
Does your company have experience implementing containerization and orchestration tools for enterprise application modernization?
Does your company have experience with secure coding and software development practices?
Does your company have experience with enterprise-level agile software development methodologies and tools?
Does your company have experience managing code repositories and maintaining configuration control of code version baselines ?
III. Security & Compliance:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience with identifying, patching, and versioning compliance for DoD Information Assurance alerts/messages?
Does your company have experience implementing DoD RMF controls and documentation?
Does your company have experience managing a system-of-systems architecture within a Zero Trust environment?
Is your company CMMC Level 3 compliant?
Does your company have experience implementing hardware/software Supply Chain Risk Management (SCRM) strategies?
Does your company have experience supporting a platform meeting Cyber Survivability Risk Catagory 4 requirements?
Does your company have experience with highly complex security architectures for large-scale systems?
Does your company have experience developing YAML files for secure and integrated Kubernetes clusters with zero trust principles?
Does your company have experience delivering updates/patches/rollbacks to containers across multiple security domains?
Does your company have experience developing cybersecurity capabilities?
Does your company have expirence supporting OCONUS locations?
IV. Data Management & Analytics:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience developing/integrating advanced data analytics and Artificial Intellegence/Machine Learning (AI/ML) capabilities into existing software?
Does your company have experience acquiring, integrating, and normalizing data from multiple sources?
Does your company have experience with Defensive Cyber Operations systems and capabilities?
Does your company have experience sharing and retrieving data from a Big Data Platform?
Does your company have experience parsing unstructured data into specified formats?
Does your company have experience with SchemaONE or Elastic Common Schema?
Does your company have experience deploying/managing a (Spell Out) SOAR?
Does your company have experience with automated data compression techniques for network communication across dispersed assets?
V. Networking & Interoperability:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience with DoD Information Networks?
VI. Testing & Operations:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience with integration testing, automation, regression testing, and test environment development?
Does your company have experience supporting an Enterprise-level Security Operations Center (SOC) or Network Operations Center (NOC)?
Does your company have experience responding to emergent technology requirements impacting real-time security operations?
VII. Company Capabilities & Clearances:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have an active facility clearance?
Does your company have a cleared facility in San Antonio, TX?
Does your company have experience working within a team of vendors ?
Is your company have CMMI Level 4?
Does your company have experience with Air Force networking, cybersecurity, zero trust, Identity, Credential and Access Mangement (ICAM), data, and/or acquisition policies?
Ability to obtain network access to NIPR, SIPR, and higher security networks?
Does your company employ foreign nationals?
Does your company have any affiliation with foreign goverment?
VIII. System Support:ResponsesComments
(Provide specific details)Examples

(Include specific instances, dates, entities, and names)

Yes or No
Does your company have experience managing an enterprise level consolidated helpdesk for software and hardware?
Does your company have experience managing ServiceNOW!
Does your company have experience managing an Agile Management suite of applications?
Does your company have expirence creating a Cost and Software Data Report (CSDR) In accordance with DAFR clause 252.234-7004 utilizing any of the following Data Item Descriptions: Contractor Business Data Report DI-FNCL-81765B, Software Resources Data Reporting DI-MGMT-82035A, Technical Data Report DI-MGMT-82165, Cost and Hour Report (FlexFile) DI-FNCL-82162, Quantity Data Report DI-MGMT-82164, Maintenance and Repair Parts Data Report DI-MGMT-82163?

Any Additional Comments or Feedback

Values

Yes
No

File details come from the government source that posted it. Updated .