RFI HS0021-26-RFI-0001.pdf

DEFENSE COUNTERINTELLIGENCE AND SECURITY AGENCY

REQUEST FOR INFORMATION HS0021-26-RFI-0001

1. INTRODUCTION

The Defense Counterintelligence and Security Agency (DCSA) is issuing this Request for Information (RFI) for core platform capabilities requirements. This RFI is issued solely for market research and planning purposes. It does not constitute a Request for Proposal (RFP), solicitation, or commitment by DCSA to issue an RFP or to award a contract. Responses are voluntary, do not obligate the Government, and will not result in reimbursement.

2. RESPONSES

2.1 RESPONSE DUE DATE: Responses are due by 12:00PM EST on 16 January 2026 via email to the following DCSA personnel:

Ms. Daniela Garavito daniela.garavito2.civ@mail.mil Ms. Salima McCravey salima.a.mccravey.civ@mail.mil

Questions regarding this announcement shall be submitted in writing by e-mail only.

Questions shall not contain proprietary or classified information.

3. Core Platform Capabilities

DCSA seeking capability submission briefs from vendors that have the capability, expertise, and experience to provide the following services:

3.1 IT Service Management (ITSM)

• Incident Management: A system to log, track, and manage incidents to restore service as quickly as possible, including tools for intelligent routing, prioritization, and resolution.

• Problem Management: The ability to identify and resolve the root cause of recurring incidents to prevent future occurrences and minimize business impact.

• Change Management: A structured process for managing changes to the IT environment, from planning and approval to implementation and review, to minimize disruption and risk.

• Service Request Management: A user-friendly, self-service portal for employees to request IT services and products, with automated workflows for fulfillment and approval.

mailto:daniela.garavito2.civ@mail.mil mailto:salima.a.mccravey.civ@mail.mil

• Service Catalog: A centralized and modern catalog of all available IT and business services, with clear descriptions, Service Level Agreements (SLAs), and request procedures.

• Knowledge Management: A repository for creating, sharing, and managing knowledge articles and documentation to enable self-service, reduce ticket volume, and ensure faster issue resolution..

3.2 IT Operations Management (ITOM)

• Discovery & Service Mapping: The ability to automatically discover all IT assets and their dependencies and to create and maintain a comprehensive and accurate Configuration Management Database (CMDB). This must include creating visual maps of business services and their underlying IT infrastructure.

• Event Management: A system to consolidate, correlate, and prioritize events from various monitoring tools to identify and respond to critical incidents proactively.

• AIOps (AI for IT Operations): The use of artificial intelligence and machine learning to analyze operational data, predict potential issues, automate remediation, and shift IT operations from a reactive to a proactive posture.

3.3 Strategic Portfolio Management (SPM) / IT Business Management

(ITBM)

• Project & Portfolio Management (PPM): Tools for managing the entire project lifecycle, from ideation to completion, including resource, time, and budget planning. This includes capabilities to manage a portfolio of projects to ensure alignment with strategic goals.

• Demand Management: A structured process for capturing, evaluating, and prioritizing new business and IT demands to ensure resources are allocated to the most valuable initiatives.

• Resource Management: The ability to manage and optimize the allocation of human and financial resources across projects and operational activities.

• Facilities Management: A system for the DCSA workforce to manage and reserve facility assets, including office and desk space, and conference rooms. This capability should also allow for the tracking and management of Agency fleet vehicles.

• Applicant Tracking and Resource Management: A human resources service management capability to manage the entire employee lifecycle, from applicant submission and onboarding to subsequent HR work processes and employee services.

• Software and Hardware Management: A comprehensive solution for Software Asset Management (SAM) and Hardware Asset Management (HAM) to manage and optimize the purchase, deployment, maintenance, and utilization of all IT assets.

• Case Management: An automated workflow process supporting the assignment and completion of cases, work tasks and similar management activities that may be executed either sequentially or concurrently.

3.4 Non-Functional Requirements

• Performance: The platform must demonstrate high performance under expected workloads, including response times for key transactions, data processing speeds, and the ability to handle peak user concurrency without degradation.

• Scalability: The solution must be horizontally and vertically scalable to support our organization's growth in user numbers, data volume, and transaction throughput over the next 5-10 years.

• Availability & Reliability: The vendor must provide a guaranteed Service Level Agreement (SLA) for uptime (e.g., 99.9% or higher) and detail their disaster recovery and business continuity plans, including Recovery Time Objective (RTO) and Recovery Point Objective (RPO).

• Security & Compliance: The platform must adhere to industry-leading security standards, including robust role-based access control (RBAC), data encryption at rest and in transit, multi-factor authentication (MFA), and detailed audit logging. The vendor must provide evidence of compliance with security frameworks like ISO 27001, SOC 2, and IL5.

• Usability & Accessibility: The user interface must be intuitive, modern, and accessible to users of all ability levels, complying with standards such as WCAG 2.1. The platform should provide a consistent and positive user experience across all modules on both desktop and mobile devices.

• Maintainability & Upgradability: The vendor must describe the process for platform upgrades, including frequency, expected downtime, and the impact on customizations. The process should be designed to be seamless and minimize disruption.

• Data Management: The platform must provide robust data management capabilities, including data residency options, GDPR compliance tools, and clear policies for data backup, retention, and archival.

3.5 Integration Capabilities & Available Plugins

• Business Intelligence and Analytics and Agile & Development: Seamless integration with our existing technology stack is critical. The platform must provide a flexible and powerful integration framework, including a comprehensive REST API and pre-built connectors. Vendors should detail their capabilities.

4. Information Requested from Vendors

Please note that the government is still determining the acquisition strategy and best path forward, therefore, this RFI is solely for market research and market intelligence. Please limit your response to no more than three (3) pages, single spaced, using no smaller than Arial 12-point font, not including the title page.

1. Please provide examples, where possible, of your organization’s successful support of similar projects of this PWS’s scope/scale for a US Government agency.

For each example, please provide the following information:

a. Brief description of work performed

b. Number of Full Time Equivalents (FTEs) that supported the contract

c. Whether your company was the prime or a subcontractor

2. Percentage of the contract value your company performed

3. Solution Description: A detailed description of your proposed platform and how it addresses the capabilities listed in Section 3.0. Please specify whether your solution is a single, integrated platform or a suite of integrated products.

4. Licensing and Pricing Model: A thorough explanation of your licensing and pricing structure. Please provide information on different tiers, metrics (per user, per transaction, etc.), and any additional costs for implementation, training, and support. DCSA is particularly interested in flexible and affordable models.

5. Please identify whether you have a current DoD Top-Secret Facility Clearance.

6. Detail any existing Federal Supply Schedule or DoD/GWAC contract: (a) in which your company is currently a prime vendor, (b) that you believe would be relevant to this requirement, and (c) includes adequate labor categories to execute this requirement.

Capability Statement: 1 page maximum Please provide the following information:

1. Company Name:

2. Commercial and Government Entity (CAGE) Code:

3. Unique Entity ID (UEI):

4. Address (Including Telephone Number and Email Address):

5. Points of contact:

6. Size of business pursuant to North American Industry Classification System (NAICS) Codes:

NAICS Code NAICS Code Description Size Standard

541512 Computer Systems Design Services $34M

7. Based on the above NAICS Code, state whether your company is:

a. Small Business (YES/NO)

b. Woman Owned Small Business (YES/NO)

c. Small Disadvantaged Business (YES/NO)

d. 8(a) Certified (YES/NO)

e. HUBZone Certified (YES/NO)

f. Veteran Owned Small Business (YES/NO)

g. Service-Disabled Veteran Small Business (YES/NO)

8. Describe your company’s primary business product / service line.

5. SUMMARY

Respondents are solely responsible for properly marking and clearly identifying any proprietary information or trade secrets contained within their response. The Government will not be liable for, or suffer any consequential damages for, any proprietary information not properly marked and clearly identified. Proprietary information received in response to this RFI will be safeguarded and handled in accordance with applicable Government regulations.

Responses to this notice are not offers and will not be accepted by the Government to form a binding contract or agreement. Responses to the RFI will not be returned. Not responding to this RFI does not preclude participation in any future solicitation, if one is issued.

Specific responses to the approaches will not disqualify or have an impact on participation and evaluation on future solicitations.