RFI M68909-25-7601 Cyber Demo Q and A 05NOV2024.pdf

PDF 75 KB Posted

Attached to
Cyber Risk Assessment Tools Industry Day
Solicitation number
M68909-25-I-7601
Issued by

About this file

This document is a Question and Answer (Q&A) related to a Request for Information (RFI) for a Cyber Demo event, Solicitation Number M68909-25-I-7601, issued by the United States Marine Corps.

The RFI outlines details for the upcoming Cyber Demo event, including that attendance in person is not mandatory and the online platform to attend or demonstrate virtually will be Microsoft Teams. The available bandwidth is limited to 25 MB/s, and the demonstration will take place in a conference room with a 90-inch display television. Contractors will not be able to install software for the demonstration, but they will be able to use tools to verify security controls according to provided system documentation. The demonstrations will be one-on-one with MCTSSA to protect contractor proprietary information. The Q&A also addresses how the test environment may differ from the operational environment, with reduced system operators and network traffic.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Question Answer 1 If selected to present a demonstration, can we present via an online platform or do we need to be there in person? Attendance in person is not mandatory. The online platform to attend or demonstrate virtually will be

Microsoft Teams.

2 Will there be internet connectivity? Yes, but bandwidth is limited to 25 MB/s.

3 Will demonstration be in a lab or conference room? It will be in a conference room with a 90 inch display television.

4 Can software be installed for demonstration? No, there is no system for the software to be installed.

5 What are the authoritative sources for verifying the baseline security controls implemented by the system owner? System documentation provided by the program office at MCSC or PEO-LS.

6 Is it only static documentation for security controls that are implemented, or would we be able to actively scan/install tools on the system for verification?

Both. Tools can be used to verify security controls are implemented according to system documentation.

7 How does the environment differ when the system is under test versus in an operational environment? When not in an operational environment, there may not be system operators or representative network traffic flowing through the system.

8 Referencing the 30 minute demonstrations, will the Government meet with contractors one-on-one (i.e. Government and one contractor at a time) to ensure protection of contractor proprietary information and intellectual property?

Yes. Contractor Demonstrations will be one-on-one with MCTSSA to protect contractor proprietary information and intellectual property.

Questions

File details come from the government source that posted it. Updated .