Focused Area of Interest- Comply to Connect_ Amend 001.pdf

1. Focused Area-of-Interest – Comply-to-Connect (4 June 2024 – 18 June 2024)

1.1. For the period of 4 June 2024 to 18 June 2024 Air Force CyberWorx has a focused interest in exploring solutions that can support the Air Force’s requirement to meet Department of Defense Comply-to-Connect (C2C) requirements on both NIPRNet and SIPRNet by established DOD deadlines. The Air Force must meet Step 4 of DoD C2C policy by 31 December 2024 and Step 5 by 30 September 2025.

1.1.1. Proposals should address combinations of policy, process, and technology solutions to assess, develop strategy, implement, track/report, and verify, compliance.

1.1.1.1. Proposals should address fielding and integration of new technologies with existing infrastructure to include planning and engineering support prior to and during the effort. This should include licensing, services, and support for the proposed period of performance and two (2) unfunded option years of service and support in meeting these objectives.

1.1.1.2. Proposals should address a plan to identify knowledge and training gaps for base-level IT service providers processes to close them.

1.2. Submissions should follow same submission guidelines as outlined in the body of the CSO.

1.3. Additional requirement information:

There are approximately 103 Air Force bases currently in the process of implementing Cisco ISE to meet DoD C2C requirements to cover an estimated 495,000 users and 445,000 endpoints and these efforts will need to be accelerated and supported or new solutions that can be rapidly implemented and sustained into out-years, be identified. Air Combat Command’s Headquarters Cyberspace Capabilities Center (HQ CCC) is the Lead Command for implementing DoD Comply-to-Connect (C2C) standards across the Air Force and requires assistance in developing, fielding, tracking-to-implementation, a Service-wide solution to bring both NIPRnet and SIPRNet into compliance with required DoD network security posture. HQ CCC requires engineering support to assist bases with scoping, scaling, license and hardware procurement, implementation, and integration of the solution within Air Force’s existing Enterprise IT ecosystem. Additionally, HQ CCC requires the option to identify 4-5 bases, that due to unique mission requirements or other circumstances, will be provided additional onsite engineering support through implementation and integration phases. In addition, HQ CCC requires synchronous and asynchronous training options to create the capability at base-level to sustain the proposed end solution(s).

There are approximately 83 additional Air Force bases (AFDW, AETC, etc.) and multiple Air National Guard and Air Force Reserve Bases currently implementing other C2C solutions that may not be fully compliant/capable of meeting DoD C2C standards. Vendor should propose additional optional/unfunded capabilities to support HQ CCC in the ability to provide similar hardware, software, technical support, and training to those bases on a flexible, ‘as required’ and fundable basis. Those bases will need a strategy and solution to close gaps between their existing planned solutions and full compliance, or transition to new solutions in order to implement a fully compliant C2C solution by the end of FY25 to comply with DoD mandates.

The below graphic covers the steps in the DoD Comply-to-Connect Framework. We are looking for solutions that assist or accelerate all the steps and/or build foundations and capability to move to higher steps.