Cyber_Quest_25_Encl_5_Cyber_Security.docx
DOCX document 21 KB Posted
- Attached to
- Cyber Quest 2025 Broad Agency Announcement
- Solicitation number
- CQ2025-BAA
About this file
This document is Enclosure 5 - Cybersecurity from a Broad Agency Announcement (BAA) for the Cyber Quest 2025 experiment. The Cyber Quest 2025 BAA seeks emerging Cyber, Electronic Warfare, Intelligence, and Signal technologies to evaluate against critical capability gaps facing Army operational forces.
The cybersecurity requirements for candidate technologies include providing a system description, hardware/software lists, network/dataflow diagrams, vulnerability assessment results, a plan of action to remediate critical/high vulnerabilities, and Security Technical Implementation Guide (STIG) checklists. Vendors must submit these technical artifacts as part of their proposal package. The goal is to assess the cybersecurity posture of the candidate technologies within the Cyber Quest 2025 experimentation environment. All submission materials should be sent to the points of contact provided.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Cyber_Quest_25_Encl_4-Quad_Chart_Template.pptx | PPTX presentation | |
| Cyber_Quest_25_Encl_2-Submitters Guide.pdf | ||
| Cyber_Quest_25_Encl_6_Proposed CQ25 Data Flows.pptx | PPTX presentation | |
| Cyber_Quest_25_BAA.docx | DOCX document | |
| Cyber_Quest_25_Encl_3-White_Paper_Template.docx | DOCX document | |
| Cyber_Quest_25_Encl_1-Focus_Areas.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Enclosure 5 – Cybersecurity
Cybersecurity Requirements for Candidate Technologies
The artifacts listed under the following areas are required of each technology, in accordance with cybersecurity guidance from AFC.
1. Documentation.
0. System description.
0. Hardware List, including all physical and virtual assets.
0. Software List.
0. Ports, Protocols, & Services (PPS) List.
0. Network diagram. Follow the DISA-standard for network diagrams as shown in the Defense Information System Network Connection Process Guide, Version 6.0, dated 2020.
0. Dataflow diagram.
1. Vulnerability Assessment & Remediation.
1. Result (.pdf) file(s) from scans using the Army’s Assured Compliance Assessment Solution (ACAS) showing the scanning of all assets on the Hardware List.
0. Credentialed (aka privileged access) scans.
0. Vulnerabilities at the “Medium” or lower severity. Any “Critical” or “High” vulnerabilities will need a documented plan to remediate them.
1. Plan Of Action & Milestones (POA&M) showing the plan(s) to remediate all “Critical” and “High” vulnerabilities.
1. System Configuration Hardening.
2. For each asset on the Hardware List and Software List, provide result (.ckl) files for all applicable DISA Security Technical implementation Guide (STIG) checklists.
File details come from the government source that posted it. Updated .