TEMPEST Request for Information - Final v2.docx

Defense Counterintelligence and Security Agency (DCSA) Industrial Security (IS) Enterprise Security Operations (ESO) Request for Information (RFI) Sensitive Compartmented Information Facility (SCIF) Accreditation & TEMPEST Mitigation Technologies & Services

Reference Number: DCSA-RFI-TEMPEST-2025

1.0 Introduction:

This Request for Information (RFI) is issued by the Department of Defense (DoD) Defense Counterintelligence and Security Agency (DCSA) to gather information from industry regarding current and emerging technologies and services for mitigating the risks of compromising classified and sensitive information through electromagnetic emanations (TEMPEST). DCSA is performing early market research, and this information will be used to inform the development of future acquisition strategies and requirements related to TEMPEST mitigation.

This RFI is in preparation for a Reverse Industry Day planned for October 28th and 29th, 2025. While attendance at the Reverse Industry Day is not mandatory to respond to this RFI, interested parties are encouraged to indicate their willingness to participate. Details regarding the Reverse Industry Day will be released separately.

· Important Note: This is NOT a solicitation or a promise to issue a solicitation. The Government will not pay for any information submitted in response to this RFI.

2.0 Background:

The DoD maintains numerous secure facilities and systems for processing, storing, and transmitting classified and sensitive information. Compliance with TEMPEST standards is critical to protecting this information from unauthorized disclosure. The DoD is interested in identifying innovative and cost-effective solutions to enhance TEMPEST mitigation capabilities, adapt to evolving threats, and streamline the SCIF Accreditation process.

3.0 Information Requested:

Respondents are requested to provide comprehensive information addressing the following areas. Responses should be clear, concise, and directly relevant to the questions asked. Providing concrete, actionable information will be helpful in informing future enhanced SCIF Accreditation effectiveness and efficiencies.

3.1. Company Information:

· 3.1.1. Company Name, Address, and Website

· 3.1.2. Point of Contact (Name, Title, Phone Number, Email Address)

· 3.1.3. Company Size (Small Business, Large Business, etc.) and Socioeconomic Category (if applicable)

· 3.1.4. DUNS Number and CAGE Code

· 3.1.5. Brief description of your company's core capabilities and relevant experience in TEMPEST mitigation.

· 3.1.6. Specification of current contract vehicles in which your company participates that are related to this request. For example, GSA Federal Supply Schedule information, Government Wide Contract Vehicles (such as GSA OASIS+, NASA SEWP, DAI SIA3, or any others), if any. Please include any relevant information on contract ceiling, period of performance (including ordering period), and any relevant special features or terms.

· 3.1.7. Suggested NAICS and PSC for an effort related to the topic of this request.

3.2. Experience with Sensitive Compartmented Information Facilities (SCIF): Describe your organization’s experience with SCIF-related activities and your current role in SCIF operations.

· This should include details on the activities such as construction, oversight, management, or use.

· This should include details on current roles in SCIF operations.

3.3 TEMPEST Experience and Capabilities:

· Describe your company’s TEMPEST experience and capabilities, which should include information on assessment, testing, countermeasures, design review or CTTA services where your company has experience and/or capabilities.

· This should include information on your company’s knowledge of and experience with ICS 705/ICS 705-01 standards.

3.4. TEMPEST Technologies and Services:

· 3.4.1. Describe the specific TEMPEST mitigation technologies and/or services that your company offers, if applicable.

· This should include details on product specifications, performance capabilities, certifications (e.g., NSA certifications, testing lab accreditations), and any independent validation data.

· Focus not only on what you offer, but how it addresses current and emerging TEMPEST threats.

· 3.4.2. Describe any innovative approaches or unique capabilities that differentiate your company's solutions from those of competitors.

· 3.4.3. Address the following specific areas of interest:

· Advanced Shielding Materials: What are the latest advancements in shielding materials (e.g., metamaterials, composites) and their effectiveness against a wide range of frequencies? What are the challenges associated with integrating these materials into existing infrastructure?

· TEMPEST for Emerging Technologies: How can TEMPEST mitigation be effectively applied to emerging technologies such as IoT devices, 5G/6G networks, and cloud-based systems? What are the unique challenges and potential solutions?

· Software-Based Mitigation: What software-based techniques can be used to reduce electromagnetic emanations from electronic devices? What are the limitations of these techniques?

· Automated TEMPEST Testing: Are there automated testing solutions that can streamline the TEMPEST certification process and reduce costs? Describe their capabilities and benefits.

· Describe any other areas of TEMPET mitigation that your company believes is important or innovative that were not already addressed in this RFI.

· 3.4.4. What is the estimated cost (ballpark figures are acceptable, and providing this information is voluntary) for your TEMPEST technologies and/or services for a typical DoD deployment scenario (e.g., a SCIF, a data center, a tactical vehicle)? Break down the costs into equipment, installation, testing, and maintenance.

· 3.4.5. What is the lead time for delivering your TEMPEST technologies and/or services?

· 3.4.6. Do you offer any training or support services related to your TEMPEST solutions?

3.5. Research and Development:

· 3.5.1. Describe any ongoing research and development efforts related to TEMPEST mitigation.

· 3.5.2. What are the major challenges and future trends in the field of TEMPEST mitigation?

· 3.5.3. What are the potential breakthroughs that could significantly improve TEMPEST protection in the next 5-10 years?

3.6. Integration and Interoperability:

· 3.6.1. How easily can your TEMPEST solutions be integrated with existing DoD infrastructure and systems?

· 3.6.2. Are your solutions interoperable with other TEMPEST mitigation technologies from different vendors?

· 3.6.3. Address any potential integration challenges and how they can be overcome.

3.7. Sustainment & Life Cycle Costs:

· 3.7.1. What is the expected lifespan of your TEMPEST technologies and services?

· 3.7.2. What are the long-term maintenance and sustainment costs associated with your solutions?

· 3.7.3. Do you offer any warranties or guarantees for your TEMPEST technologies and services?

3.8. Reverse Industry Day Participation:

· 3.8.1. Is your company interested in participating in the Reverse Industry Day scheduled for October 28th and 29th, 2025?

· Dates: 28 and 29 October 2025

· Location: Russell Knox Building (RKB), 27130 Telegraph Road, Quantico, VA 22134

· Companies will not be reimbursed for costs associated with attendance. Attendance at the RID is not required for participation in any associated acquisition that may occur in the future.

· 3.8.2. If yes, what topics would you be interested in discussing during the Reverse Industry Day?

· 3.8.3. What specific questions or topics would you like the Government to address during the Reverse Industry Day?

· 3.8.4. Interested parties will be required to register to attend the Reverse Industry Day (RID). Please see the attachment to this RFI for the information on how to register for RID attendance.

3.9 Agency and Organization Training Needs:

3.9.1. What training or support would benefit your organization under a standardized DCSA SCIF oversight model?

3.9.2. How would your organization prefer to engage with DCSA’s new SCIF oversight approach (as a service provider, customer, training partner, or other role)?

4.0 Submission Instructions:

· Responses to this RFI should be submitted electronically to Cindy Hocott and Voun Chin at the following email addresses: Cynthia.L.Hocott.civ@mail.mil and Voun.Chin.civ@mail.mil

· The deadline for submission is 3 October 2025 before 5:00pm Eastern Time.

· Responses should not exceed 20 pages in length, excluding company brochures and marketing materials.

· Use a font size of 12 point and single-spaced.

· Submission file format: PDF

· Clearly label each section of your response to correspond to the sections outlined in this RFI.

· Mark any information that is considered proprietary or confidential with appropriate markings.

5.0 Disclaimer:

This RFI is for informational purposes only and does not constitute a solicitation. The Government does not intend to award a contract as a result of this RFI. The Government will not pay for any information submitted in response to this RFI, nor will the Government pay for participation in any resulting RID. Proprietary information will be handled in accordance with all applicable regulations. Participation in this RFI is voluntary and will not affect a vendor’s eligibility to participate in any future solicitations.

6.0 Attachments:

Attachment 1: TEMPEST DCSA Reverse Industry Day (RID) Announcement Attachment 2: TEMPEST RID Registration Form