Tools_Acquisition_and_Capability_Integration.pdf

United States Cyber Command

(USCYBERCOM)

Request for Information

Tools Acquisition and Capability Integration

Version 1.0

23 Feb 2018

2 Request for Information Tools Acquisition Capability Integration Version 1.0 23 Feb 2018

USCYBERCOM

Request for Information

Tools Acquisition and Capability Integration 23 February 2018

United States Cyber Command (USCYBERCOM) is seeking information from industry to assist with the development and planning of the USCYBERCOM Tools Acquisition and Capability Integration (TACI) efforts. This is a Request for Information (RFI) notice only. This is not a Request for Proposals (RFP).

No solicitation is available at this time.

1. Overview and Procurement Description:

This RFI is requesting responses from both large and small businesses, including those small businesses that meet the following attributes: Small Disadvantaged Businesses (SDBs), Historically Underutilized Business Zones (HUBZone) Firms, Certified 8(a), Service-Disabled Veteran-Owned Small Businesses (SDVOSBs) and Women Owned Small Businesses (WOSBs). USCYBERCOM is seeking information on Industry’s ability to acquire, integrate, test and deliver operational cyber tools and capabilities. The contractor shall be required to manage all aspects of the tool development, integration and delivery.

2. Scope of Effort Through the responses provided, the Government intends to obtain the following information:

a. Industry’s capabilities to meet the acquisition and technical characteristics described in Section 3.

b. Industry input and suggestions on structure requirements and acquisition approaches in a way that would maximize innovative approaches and solutions while minimizing cost.

c. Feedback on refining and improving the proposed acquisition and technical characteristics.

d. Acquisition recommendations, including contract type, contract structure, strategies to maximize competition and strategies to maximize small business participation.

3. Acquisition and Technical Characteristics The Government intends to procure the integration of offensive and defensive cyber tools. This effort will enable the prime Contractor, via a single award Indefinite Delivery, Indefinite Quantity (IDIQ) contract vehicle to manage the requirements refinement, development, test and evaluation, systems engineering, integration, transition, training and maintenance of cyber tools.

This effort requires the prime contractor to procure sources that will provide a diverse set of offensive and defensive cyber tools. In order to ensure timely development of tools as well as innovative and creative tools, the prime contractor shall maintain a large variety of available subcontractors and tool developers.

Effective integration of tool development requires the following elements to be met:

a. The prime contractor shall maximize signature variation of each tool through the use of a large subset of tool developers and subcontractors.

b. The contractor shall maintain a “bench” of available tool developers and continually incorporate new tool developers into their portfolio and perform all requisite activities to prepare developers for participation in this effort and future tool development tasks.

c. A significant percentage of this effort will be unclassified tool development that may be performed in unclassified facilities. However, in order to support the integration, test and

3 Request for Information Tools Acquisition Capability Integration Version 1.0 23 Feb 2018 maintenance of all of developed tools, the prime contractor shall have a TS Facility Clearance with TS/SCI cleared personnel.

d. The prime contractor shall synchronize with Government Subject Matter Experts (SME’s) to obtain potential new sources for tool development.

e. The prime contractor shall manage the transition of tool development activities from external sources (e.g., GFE tools).

The prime contractor shall perform the following Program Management, Systems Engineering and Integration/Transition functions:

a. Systems Engineering (SE) for tools, to include, at a minimum: architecture management, SE Analysis and Design, Requirements Management, and Configuration Management.

b. Program Management, to include management of all cost, schedule and performance activities.

c. Test and Evaluation of developed tools, to include at a minimum: Test Environment

Development, Test Planning, Test Execution, and Test Reporting.

d. Tool Integration and Transition, transiting operational control of tools to the Government in a timely manner, per an agreed delivery schedule.

e. Tool Training implementation, maintenance and update on delivered training packages from the developers

f. Tool Maintenance and Sustainment, to include maintaining a repository of available tools.

4. Requested Information All requested information is intended to facilitate the Government’s market research efforts and assist the Government’s in determining the acquisition approach. Please ensure submissions included responses to the following information requests:

a. Identification and Interest o Company Name and Address o Name of Company Representative and Business Title o Business Category(ies) (e.g., Large Business, Small Business, SDBs, HUBZone, 8(a), SDVOSB, WOSB, involvement in a mentor and/or protégé program, etc.)

o Explain your company’s potential interest in this effort (e.g., Prime, subcontract, teaming arrangements, Joint Ventures etc.).

o Explain your company’s ability to meet the classification and security requirements of this effort.

b. Corporate experience providing similar management of development and integration services.

c. Corporate capabilities to meet the requirements of this effort. This should include a description of existing subcontractor relationships, potential subcontractor relationships, and the processes used to find and integrate new tool development vendors.

d. Recommended Acquisition Approaches:

o Recommended incentives that could maximize delivery schedules for tools and maximize signature diversity.

o Potential factors that would differentiate superior approaches to meeting the requirements of this effort o Risks that the Government should be aware of with meeting this requirement.

o Other acquisition recommendations related to this effort

e. Recommended Technical/Management Approaches:

o Recommended approaches for maximizing signature diversity o Other Technical and Management recommendations related to this effort

4 Request for Information Tools Acquisition Capability Integration Version 1.0 23 Feb 2018

5. Industry Discussions Representatives of USCYBERCOM may choose to meet with potential offerors and hold one-on-one discussions. Such discussions would be intended to obtain further clarification of RFI response and the potential capability to meet requirements.

6. Questions Questions regarding this announcement shall be submitted in writing by email to proposal_submission@cybercom.mil and shall be clearly marked “QUESTIONS in response to the Tools Acquisition and Capability Integration RFI”. Verbal questions will not be accepted. Answers to questions will be posted to FedBizOpps. The Government does not guarantee that questions received after March 12, 2018 will be answered. The Government will not reimburse companies for any costs associated with the submissions of their RFI responses.

7. Response Guidelines Interested parties are requested to respond to this RFI with a white paper. White papers should be in Microsoft Word for Office, Adobe PDF, or compatible format and shall not exceed 10 pages, excluding cover, title, and table of contents pages. A page is defined as each face of an 8 ½ by 11 inch sheet with information contained within a one-inch margin on all sides. Text shall be Times New Roman and no less than 10-point font. The response should not exceed a 5MB email limit for all items associated with the RFI response.

Reponses must specifically address the requested information in Section 4 and based on the operational concepts described in Section 3 of this document. FedBizOpps will be the sole repository for all information related to this RFI.

Companies that wish to respond to this RFI should send responses, clearly marked “RESPONSES to Tools Acquisition and Capability Integration RFI” via email “time stamped” no later than March 12, 2018, 4:00PM Eastern Time to proposal_submission@cybercom.mil. In the subject line of the email please label in the following format: “TACI_RFI Responses_Company Name_DDMMYYYY The Government may or may not choose to meet with potential respondents. Such meetings and discussions would only be intended to obtain further clarification of potential capabilities.

8. Disclaimer This RFI is not a RFP and is not to be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Responses will neither be considered as proposals nor will any award be made as a result of this RFI. All information contained in the RFI is preliminary as well as subject to modification and is in no way binding on the Government. Federal Acquisition Regulation (FAR) clause 52.215-3, “Request for Information or Solicitation for Planning Purposes”, is incorporated by reference in this RFI. The Government does not intend to pay for information received in response to this RFI. Respondents to this invitation are solely responsible for all expenses associated with responding to this RFI. This RFI will be the basis for collecting information on available capabilities and is issued solely for information and planning purposes. Proprietary information and trade secrets, if any, shall be clearly marked on all materials provided in response to this RFI. All information received that is marked “Proprietary” will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. In accordance with FAR 15.201(e), responses to this RFI are not offers and cannot be accepted by the Government to form a binding contract.

5 Request for Information Tools Acquisition Capability Integration Version 1.0 23 Feb 2018

9. Attachments There are no attachments with this RFI.