PA-1528 (Document) RFI SIL and SCIF Services Clean 20251006 v2_posted_SAM.pdf

REQUEST FOR INFORMATION

Sensitive Compartmented Information Facility (SCIF) Management and Oversight Services supporting a Systems Integration Lab (SIL) environment

1.0 Description

U.S. Space Force (USSF) Space Systems Command (SSC), in support of the North American Aerospace Defense Command (NORAD) Cheyenne Mountain Complex-Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) Program Office, is seeking information from interested vendors who can provide management and operational concept requirements for a secured facility supporting Systems Integration Laboratory (SIL) and services within the Colorado Springs, Colorado area for the NCMC-ITW/AA development environment.

2.0 THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is solely for information and planning purposes to identify potential sources for the management and operational requirements for a Sensitive Compartmented Information Facility (SCIF), and potential Special Access Program Facility (SAPF), support for the System Integration Lab (SIL) supporting the NCMC-ITW/AA Development Environment. This requirement includes but is not limited to; the provision of reliable and secure communications, internet, and support for 150 to 250 workstations providing the best value to SSC System Delta 85’s (SYD 85) mission.

Furthermore, the USSF is seeking proposals, nor will they accept unsolicited proposals.

Interested vendors responding to this RFI are advised that the Government will not pay for any information or administrative costs incurred in response and all costs associated with responding to this RFI will be solely at the interested party’s expense. Not responding to this RFI does not preclude future participation in any future request for proposal (RFP), if any is to be issued.

3.0 Background

NORAD is a United States and Canada bi-national organization charged with the missions of aerospace warning, aerospace control and maritime warning for North America. Aerospace warning includes the detection, validation, and warning of attack against North America whether by aircraft, missiles, or space vehicles, through mutual support arrangements with other commands. Aerospace control includes ensuring air sovereignty and air defense of the airspace of Canada and the United States, which entails a shared awareness and understanding of the activities conducted in U.S. and Canadian maritime approaches, maritime areas and internal waterways. NCMC-ITW/AA and Legacy Space Command and Control (LSC2) systems provide NORAD/USNORTHCOM, USSTRATCOM, and USSF command structures with information management, decision aids, and connectivity required to monitor, assess, plan, and execute assigned strategic, space operations, and missile defense missions.

3.1. The NCMC-ITW/AA development environment aims to improve defensive capabilities through enhanced technology integration, simulation, collaboration, integration, and testing across various stakeholders. A key component is the SIL, designed to:

• Integrate diverse technologies: Facilitate seamless integration of disparate systems, applications, and data sources within the NCMC-ITW/AA development environment architecture.

• Provide a realistic simulation environment: Enable the creation and execution of realistic simulations and scenarios to evaluate the performance and effectiveness of integrated solutions.

• Enhance cybersecurity posture: Ensure a secure environment for testing and evaluating security controls and identifying vulnerabilities in integrated systems.

• Enable collaboration: Foster collaboration between government, industry, and academic partners in the development and deployment of innovative solutions.

• SIL will support various activities, including:

• Technology demonstrations: Showcasing integrated solutions to stakeholders.

• Interoperability testing: Verifying the ability of different systems to work together seamlessly.

• Performance evaluation: Measuring the performance and scalability of integrated solutions under various conditions.

• Security assessments: Identifying and mitigating security vulnerabilities in integrated systems.

• Training and education: Providing a platform for training and education on the use of integrated solutions.

4.0 Problem Set

Management services are needed to provide secure and reliable access to the existing NCMC- ITW/AA development environment for assigned and authorized personnel. Access to the integration and development environment is critical for the sustainment and enhancement of the NCMC-ITW/AA. The existing NCMC-ITW/AA development environment is a system that provides resources for sustainment of mission systems for NCMC-ITW/AA with pre-dated security controls. The proposed NCMC-ITW/AA development environment shall describe improved onsite management and oversight capabilities, and extend test and development capabilities providing remote contractor access to a software (SW) development and compilation environment while providing improved development testing capabilities within the Test Development Facility (TDF) located at Peterson Space Force Base (PSFB), CO. This includes the ability to ingest and replay synthetic environments and models for experimentation purposes.

A critical component of this effort is providing reliable and secure communication, internet, and workstation access for all authorized personnel within secured facility. SCIFs aim to consolidate contractor resources and enhance security, cost-effectiveness, and mission effectiveness.

4.1 Availability Date for Services: NLT 26 June 2026

4.2 Security Requirements: Responses shall be Unclassified.

5.0 Requested Information

The Government is seeking to identify potential vendors who have demonstrated experience in the objectives below essential for supporting service requirements within the Colorado Springs, CO area; to establish and maintain secure operations in support of the existing NCMC-ITW/AA development environment and ensuring secure and reliable access for authorized personnel. This requirement supporting the NCMC-ITW/AA development environment operations must be operational beginning 26 June 2026.

5.1 Objective 1: Facility Establishment and Operation

• Establishing and Operating SILs: Describe your firm's experience in establishing and operating SILs.

• Establishing and Operating SCIFs/SAPFs: Describe your firm's experience in establishing and operating SCIFs/SAPFs supporting SILs, to include your firm’s experience establishing connections to Department of War (DOW) systems from non-government facilities.

• System Integration/Configuration Management: Describe your approach to system integration, configuration management, and maintenance, referencing AFMAN 32- 1084.

• Timelines. Provide proposed timelines for achieving Authority to Operate (ATO), Authority to Connect (ATC), and SCIF/SAPF accreditation. Please be clear where the experience has achieved results or are in experience in ongoing or planning efforts only.

• Integrating Diverse Technologies: Describe your experience integrating hardware, software, and network components, including integrating and replaying synthetic environments for experimentation purposes.

• Security and Compliance: Detail your experience implementing and maintaining ICD/ICS 705 security controls in secured SIL environments, particularly those related to accessing, handling, and safeguarding classified information. Explain your knowledge of Risk Management Framework (RMF), Cybersecurity Maturity Model Certification (CMMC) requirements, ICD/ICS 705, and DoDM 5205.07 (17 Jan 2025)/AFMAN 16-703v3, and 32 CFR Part 117 National Industrial Security Operations (NISPOM) guidelines. Describe your approach to managing sensitive data, including encryption, access control, and auditing. Describe your experience supporting synthetic environments within an RMF High environment and the challenges you foresee to maintaining ATO. References: NIST SP 800-53, CM-6 b, NIST SP 800-53 Revision 4, CM-6 b, NIST SP 800-53 Revision 5, CM-6 b, NIST SP 800-53A, CM-6.1 (iv).

• NCMC-ITW/AA development environment Access and Infrastructure: Describe your approach to maintaining the hardware and software infrastructure required for secure and reliable NCMC-ITW/AA development environment access, including communication, internet, and workstation access for all authorized personnel.

• Maintenance and Support Capabilities: Address your firm's capabilities for overall maintenance and support of SCIFs within a SIL environment. If applicable, address your experience with depot maintenance activities, including processes, quality control, and knowledge of warehouse management principles critical for maintenance, such as inventory control, parts cataloging, and supply chain optimization.

• Secure Communications: Describe your approach to establishing a communications pipeline (1GB or larger) sufficient to support 150-250 workstations in a secure environment, including your experience working, with commercial providers, U.S.

government agencies, and U.S. service branches. (Defense Counterintelligence and Security Agency (DCSA), and USSF Space Operations Command’s (SpOC) 21st Communications Squadron.) Include the anticipated timeframe to obtain this connection.

5.2 Objective 2: Security and Compliance

• Physical Security Controls: Describe your firm’s experience implementing and maintaining security controls in SCIF/SAPF SIL environments, focusing on accessing, handling and safeguarding classified information. Clearly distinguish between achieved results and ongoing/planned efforts.

• RMF, CMMC, and SAPF Compliance: Detail your firm’s understanding and application of RMF, CMMC, and DODM 5205.07, AFMAN 16-703v3, and 32 CFR Part 117 National Industrial Security Operations (NISPOM) guidelines. Please specify the methods used to ensure compliance, including gap assessments, continuous monitoring, security control implementation (aligned with NIST SP 800-53), System Security Plan (SSP) development and maintenance, security audits, and security awareness training.

• Sensitive Data Management: Describe your approach to managing sensitive data within SIL secure environments. Include details on data encryption (at rest and in transit), role-based access control (least privilege), auditing and logging, data loss prevention (DLP) measures, and secure data disposal procedures.

• Synthetic Environment Support (RMF High): Outline your experience supporting synthetic environments within an RMF High environment. Identify challenges you anticipate in maintaining ATO and describe your mitigation strategies. Focus on rapid environmental changes, complex dependencies, continuous monitoring, and consistent security configurations.

• Infrastructure Support: Detail your approach to maintaining secure and reliable NCMC-ITW/AA development environment access, as well as communication, internet, and workstation access for authorized personnel. Include details about secure network architecture, UL 2050 intrusion detection/prevention systems, vulnerability scanning, patch management, configuration management, and hardware/software lifecycle management.

• Classified Connectivity: Confirm your firm’s understanding and adherence to the requirement that classified network connectivity is only permitted to facilities with a valid Facility Security Clearance (FCL) issued by DCSA or a DOW Component, in compliance with NIST SP 800-53 (CM-6 b) and related guidance. Confirm your firm's commitment to terminating leased circuits to unapproved locations, including DOW vendors, foreign entities, or federal mission partners without a signed DOW CIO-approved sponsorship memo.

5.3 Objective 3: Integration, Collaboration, Innovation, and Cost-Effectiveness Describe your experience with facilitating collaboration among government, industry, and academic partners in a SIL/SCIF environment.

• Facilitating Collaboration: Describe your firm’s experience facilitating collaboration among government, industry, and academic partners in a SIL/SCIF environment

• Fostering Innovation: Explain your approach to fostering innovation and experimentation within the secure SIL environment.

• Emerging Technologies: Detail your firm's capabilities in identifying and evaluating emerging technologies relevant to the NCMC-ITW/AA development environment and developing practices for maintaining NCMC-ITW/AA development environment-related technologies.

• Cost-Effectiveness: Critically describe your strategies for achieving cost-effectiveness, including leveraging existing infrastructure, reducing recurring costs (e.g., contractor workspace), and optimizing resource utilization. Provide specific examples of how you have achieved cost savings in similar projects.

6.0 Additional Contractor Queries

In addition to addressing the objectives and questions outlined in Sections above, please provide information on the following:

• Business Volume: What is the approximate annual revenue or contract volume your company handles?

• Cost Type Contracts: Describe your firm's experience managing Cost Type contracts, including examples of successfully completed projects.

• CMMC Compliance: Is your firm currently CMMC compliant? If so, please specify your CMMC Maturity Level.

• NIST 800 Self-Certification: Does your company self-certify to NIST 800 standards?

If so, please specify which standards and your process for maintaining compliance.

• DoDI 8140 Compliance: Is your company compliant with DoDI 8140 requirements for cybersecurity workforce certification? Please describe how you ensure your workforce meets these requirements.

• Location and Support: Describe the location of your team and how you plan to provide daily operational and maintenance support for the SCIF/SAPF SIL, including ensuring secure NCMC-ITW/AA development environment access and reliable communication, internet, and workstation access for 150-250 workstations.

• Experience with NCMC-ITW/AA development environment: Please detail any experience your firm has with the NCMC-ITW/AA development environment, related technologies, or stakeholders.

• Maintenance Feasibility: Provide an initial assessment of the feasibility and cost-effectiveness of conducting maintenance activities at the proposed facility.

• Leveraging Existing Infrastructure: If applicable, describe how your firm could leverage existing infrastructure to reduce costs and accelerate implementation for the purpose of establishing System Integration Labs (SILs) and SCIFs: Including experience establishing connections to DOW systems from non-government facilities.

7.0 Responses

7.1 Interested parties are requested to respond to this RFI with a white paper, due no later than 06 November 2025, 1400, Mountain Time. Responses shall be limited to 10 pages and submitted via e-mail to Ms. Heather Baldwin at heather.baldwin.4@spaceforcemil, Capt. MaKayla Hansen at makayla.hansen.2@spaceforce.mil, Mr. Matthew Sheridan at Matthew.Sheridan.5@spaceforce.mil, Capt. Joshua Maldonado-Santiago at joshua.maldonado_santiago.1@spaceforce.mil, and Mr. Nyles Duffield at nyles.duffield@spaceforcel.mil.

7.2 Proprietary information, if any, should be minimized and MUST BE CLEARLY MARKED. To aid the Government, please segregate proprietary information. Please be advised that all submissions become Government property and will not be returned. Any CUI information must be submitted via DOD SAFE.GOV to Ms. Heather Baldwin at heather.baldwin.4@spaceforce.mil, Mr. Matthew Sheridan at Matthew.Sheridan.5@spaceforce.mil, and Mr. Nyles Duffield at nyles.duffield@spaceforcel.mil

7.3 The white paper shall provide administrative information, and shall include the following as a minimum:

7.3.1 Name, mailing address, overnight delivery address, (if different from mailing address), phone number, fax number, and e-mail of designated point of contact, and CAGE Code, DUNS Number.

7.3.2 Recommended contracting strategy and contract type. Specifically, address how your firm can support a long-term service contract.

mailto:heather.baldwin.4@spaceforcemil mailto:makayla.hansen.2@spaceforce.mil mailto:Matthew.Sheridan.5@spaceforce.mil mailto:joshua.maldonado_santiago.1@spaceforce.mil mailto:nyles.duffield@spaceforcel.mil mailto:heather.baldwin.4@spaceforce.mil mailto:Matthew.Sheridan.5@spaceforce.mil mailto:nyles.duffield@spaceforcel.mil

7.3.3 Recommended roll-out strategy.

7.3.4 Recommend staffing plan. Include a comprehensive staffing plan with specific roles, expertise levels, and responsibilities directly mapped to SIL/SCIF tasks and deliverables. Highlight experience with managing personnel with necessary security clearances for accessing classified systems.

7.3.5 Recommend Level of Effort (LOE). Provide a granular breakdown of the estimated LOE, clearly mapping hours to specific tasks, phases, and personnel.

This breakdown should ensure transparency and alignment with proposed activities, including SCIF establishment and maintenance, as well as communication, internet, and workstation access provision, NCMC-ITW/AA development environment access, and SIL establishment. Please include timelines/schedules for these efforts to address the Objectives 4.1, 4.2, and 4.3.

7.3.6 Rough Order Magnitude (ROM): Provide a ROM for this effort, clearly delineating costs associated with Objectives 4.1, 4.2, and 4.3, to include but not limited to:

• SIL establishment

• SCIF/SAPF establishment

• NCMC-ITW/AA Development Environment access (including ATO/ATC maintenance).

• Communication, internet, and workstation access provision (including ongoing maintenance and security).

• Annual estimates to sustain and maintain the NCMC-ITW/AA Development Environment secure access and communications, internet, and workstation provisioning the SIL.

7.3.7 Is your company on any existing multiple award IDIQs or other vehicles SSC SYD 85/BMN would be able to utilize for this effort? If yes, please include the contract number, Period of Performance, contract ceiling, and the Government Contracting Officer Contact information.

7.3.8 Business type (large business, small business, small, disadvantaged business, 8(a)-certified small disadvantaged business, HUBZone small business, woman-owned small business, very small business, veteran-owned small business, service-disabled veteran-owned small business) based upon North American Industry Classification System (NAICS) code 541513, Computer Facilities Management Services, and all Other Professional, Scientific, and Technical Services. “Small business concern” means a concern, including its affiliates, that is independently owned and operated, not dominant in the field of operation in which it is bidding on Government contracts, and qualified as a small business under the criteria and size standards in 13 CFR part 121. A small business concern for the purposes of this procurement is generally defined as a business, including its affiliates, averaging no more than $35 million dollars in annual receipts. Respondents are cautioned, however, that this is a general description only. Additional standards and conditions may apply. Please refer to Federal

Acquisition Regulation FAR 19 for additional detailed information on Small Business Size Standards. The FAR is available at https://www.acquisition.gov/browse/index/far

7.3.9 If the above NAICS appears to be incorrect, please suggest an alternative NAICS code for consideration.

7.3.10 The facility security clearance of the respondent.

8.0 Industry Discussions

SSC SYD 85 representatives may or may not choose to meet with potential firms. Such discussions would only be intended to get further clarification of potential capability to meet the requirements, especially any development and certification risks, including those associated with establishing and maintaining the SIL, SCIF/SAPF, and providing secure and reliable communication, internet, and workstation access.

9.0 Questions

Questions regarding this announcement shall be submitted in writing via e-mail to Ms. Heather Baldwin at heather.baldwin.4@spaceforce.mil and Capt. MaKayla Hansen at makayla.hansen.2@spaceforce.mil. Questions will be answered by posting answers in response to this RFI; accordingly, questions will NOT contain proprietary or classified information. The Government does not guarantee that questions received after 24 October 2025, 1400, Mountain Time, will be answered.

10.0 Summary

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY to identify sources that can establish and operate a System Integration Lab (SIL) in support of the NCMC-ITW/AA Development Environment, including the provision of reliable and secure communication, internet, and workstation access that will provide the best value to the SSC SYD 85’s mission.

The information provided in the RFI is subject to change and is not binding on the Government. The Government has not made a commitment to procure any of the items discussed, and release of this RFI should not be construed as such a commitment or as authorization to incur cost for which reimbursement would be required or sought. All submissions become Government property and will not be returned.

https://www.acquisition.gov/browse/index/far mailto:heather.baldwin.4@spaceforce.mil mailto:makayla.hansen.2@spaceforce.mil