RFI 25-I-7601 Cyber Tools Demo.pdf

NOTICE ID: M68909-25-I-7601 Cyber Risk Assessment Tools NAICS Code: 541512 Computer Systems Design Services PSC: DA01 IT and Telecom – Business Application/Application Development Support Services (Labor)

SYNOPSIS: Marine Corps Tactical Systems Support Activity (MCTSSA) Cyber Assessment Branch will host an Industry Day on 03 December 2024 at MCTSSA, Camp Pendleton, California, 92055 from 0830 to 1230 PST. The Industry Day is a four-hour event comprised of a general orientation session followed by an open communication between the Government and Industry to discuss commercial practices.

BACKGROUND: MCTSSA conducts engineering, developmental, and integrated test and evaluation, certification, and deployed technical support for United States Marine Corps and the Joint Service Command, Control, Computer, Communications, Cybersecurity, and Intelligence (C5I) systems. MCTSSA works closely with the other services to ensure Marine Air-Ground Task Force (MAGTF) systems integrate and operate flawlessly on land, air, sea, and cyberspace within the MAGTF and among services and coalition partners.

The Cyber Assessment Branch is seeking Cyber Risk Assessment Tools that assess the cyber survivability risk posture of Command and Control (C2) and weapon systems prior to deploying them in an operational environment.

The tools must:

1. Be capable of operating fully in an air-gapped environment, with no reliance on external connectivity.

2. Be able to accurately identify and document the baseline security controls implemented by the system owner.

3. Include capabilities to evaluate the effectiveness of the identified security controls against known threat groups that target Marine Corps command and control and weapons systems.

4. Be able to analyze the findings and recommend additional security controls or adjustments that could further strengthen the system's cyber posture.

5. Align with relevant standards and strategies, including:

- NIST Cybersecurity Framework

- NIST SP 800-53

- DoD Zero Trust Strategy and Roadmap

- NIST SP 800-207

- Any other relevant guidelines or best practices that pertain to cyber survivability and resilience.

6. Be suitable for short-duration assessments. These tools will not be used in a persistent environment and must be able to quickly deploy, gather results from the system under test, and disconnect from the system for follow-on analysis.

MCTSSA is particularly interested in understanding:

- The depth of the tool's analysis capabilities.

- How the tool identifies and categorizes existing security controls.

- The methodology used for evaluating the effectiveness against known threat groups.

- The process for generating actionable recommendations to enhance system security.

- How the tool aligns with and supports the implementation of the NIST frameworks and Zero Trust strategies.

INTENT: The goal of the Industry Day is to communicate MCTSSA’s requirements for upcoming contracting efforts by raising awareness, identifying technical challenges, and promoting potential partnering and networking, for large and small businesses. A general orientation session will be conducted, followed by an open discussion between the Government and Industry for providing and obtaining these services. Following the discussion, four companies will be given thirty minutes to provide a demonstration of their Cyber Risk Assessment technology to the Cyber Assessment Branch.

Companies interested in providing demonstrations must provide abstracts to Christopher Toft by 0900 PST, 12 November 2024. Abstracts will be vetted by the MCTSSA Cyber Branch to ensure demonstrations only cover tools that are new to the Cyber Branch. Demonstrations will not be held for tools the Cyber Branch already has or had seen before.

Vendors interested in providing a demonstration must submit a request via email and attach an abstract of the technology to Christopher Toft, christopher.toft@usmc.mil by 0900 PST, 12 November 2024.

The Government will not hear formal or unsolicited proposals during the Industry Day event.

ATTENDANCE: The MCTSSA Industry Day is unclassified and open to all interested contractors, large and small businesses, academia, as well as other government stakeholders who are U.S. Nationals.

Attendance will be limited to two representatives per company. Companies are encouraged to submit a capability statement (including their business size and recommend NAICS and PSC codes) to Christopher Toft, christopher.toft@usmc.mil and Marlanea M. Kirkbride, marlanea.kirkbride@usmc.mil by 0900 PST, 12 November; however, it is not a requirement for attendance.

REGISTRATION: Registration is required to attend the MCTSSA Industry Day.

Registration will close at 0900 PST on 12 November 2024.

Onsite registrations will not be permitted. Register by sending an email to Christopher Toft, christopher.toft@usmc.mil and Marlanea M. Kirkbride, marlanea.kirkbride@usmc.mil.

Registration to attend the MCTSSA Industry Day is non-transferrable.

GENERAL BASE ACCESS: For general base access the following forms of identification are required: Department of Defense Identification Card (Military ID, Retired Military ID, and Common Access Card (CAC)).

FOR THOSE REQUIRING A COMMAND SPONSORED VISIT REQUEST: Attendees who do not have the approved forms of identification for base access will be added to MCB Camp Pendleton Command Sponsored Event Visitor Roster and a National Crime Information Center background check will be conducted.

Provide the following information via encrypted email to christopher.toft@usmc.mil and marlanea.kirkbride@usmc.mil by 0900 PST on 12 November 2024:

First Name, Middle Name, Last Name, Name Suffix State of Issued Driver's License or ID Card State Credential Identifier/Passport Number Date of Birth (MM/DD/YYYY)

Approved Command Sponsored Event Visitor Roster will expedite attendees through MCB Camp Pendleton Main Gate without being required to obtain a day pass at the MCB Camp mailto:christopher.toft@usmc mailto:christopher.toft@usmc mailto:marlanea.kirkbride@usmc.mil

Pendleton Visitors Center. Individuals who do not submit the necessary information by 0900 on 12 November 2024, will not be included on the Command Sponsored Visit Request.

VIRTUAL ATTENDANCE USING MICROSOFT TEAMS: Attendees that are interested in virtually attending must send an email address to register no later than 0900 PST on 12 November 2024 to receive the invite via Teams.

All questions related to this event should be directed to the MCTSSA Contracting Office Industry Day Team. Submit your questions to Christopher Toft, christopher.toft@usmc.mil and Marlanea M. Kirkbride, marlanea.kirkbride@usmc.mil by 0900 PST on 01 November 2024.

PRIMARY POINT OF CONTACT:

Contract Specialist, Christopher Toft, christopher.toft@usmc.mil Contracting Officer, Marlanea M. Kirkbride, marlanea.kirkbride@usmc.mil