Focused Area of Interest - Comply to Connect.pdf

1. Focused Area-of-Interest – Comply-to-Connect (4 June 2024 – 18 June 2024)

1.1. For the period of 4 June 2024 to 18 June 2024 Air Force CyberWorx has a focused interest in exploring solu�ons that can support the Air Force’s requirement to meet Department of Defense Comply-to-Connect (C2C) requirements on both NIPRNet and SIPRNet by established DOD deadlines. The Air Force must meet Step 4 of DoD C2C policy by 31 December 2024 and Step 5 by 30 September 2025.

1.1.1. Proposals should address combina�ons of policy, process, and technology solu�ons to assess, develop strategy, implement, track/report, and verify, compliance.

1.1.1.1. Proposals should address fielding and integra�on of new technologies with exis�ng infrastructure to include planning and engineering support prior to and during the effort. This should include licensing, services, and support for the proposed period of performance and two (2) unfunded op�on years of service and support in mee�ng these objec�ves.

1.1.1.2. Proposals should address a plan to iden�fy knowledge and training gaps for base-level IT service providers processes to close them.

1.2. Submissions should follow same submission guidelines as outlined in the body of the CSO.

1.3. Addi�onal requirement informa�on:

There are approximately 103 Air Force bases currently in the process of implemen�ng Cisco ISE to meet DoD C2C requirements to cover an es�mated 495,000 users and 445,000 endpoints and these efforts will need to be accelerated and supported or new solu�ons that can be rapidly implemented and sustained into out-years, be iden�fied. Air Combat Command’s Headquarters Cyberspace Capabili�es Center (HQ CCC) is the Lead Command for implemen�ng DoD Comply-to-Connect (C2C) standards across the Air Force and requires assistance in developing, fielding, tracking-to-implementa�on, a Service-wide solu�on to bring both NIPRnet and SIPRNet into compliance with required DoD network security posture. HQ CCC requires engineering support to assist bases with scoping, scaling, license and hardware procurement, implementa�on, and integra�on of the solu�on within Air Force’s exis�ng Enterprise IT ecosystem. Addi�onally, HQ CCC requires the op�on to iden�fy 4-5 bases, that due to unique mission requirements or other circumstances, will be provided addi�onal onsite engineering support through implementa�on and integra�on phases. In addi�on, HQ CCC requires synchronous and asynchronous training op�ons to create the capability at base-level to sustain the proposed end solu�on(s).

There are approximately 83 addi�onal Air Force bases (AFDW, AETC, etc.) and mul�ple Air Na�onal Guard and Air Force Reserve Bases currently implemen�ng other C2C solu�ons that may not be fully compliant/capable of mee�ng DoD C2C standards. Vendor should propose addi�onal op�onal/unfunded capabili�es to support HQ CCC in the ability to provide similar hardware, so�ware, technical support, and training to those bases on a flexible, ‘as required’ and fundable basis. Those bases will need a strategy and solu�on to close gaps between their exis�ng planned solu�ons and full compliance, or transi�on to new solu�ons in order to implement a fully compliant C2C solu�on by the end of FY25 to comply with DoD mandates.