RFI_JCC2-Readiness.pdf

DISTRIBUTION STATEMENT A - Approved for Public Release; Distribution Unlimited.

Request for Information (RFI) For Air Force Life Cycle Management Center (AFLMC)

Joint Cyber Command and Control (JCC2) Readiness Development Support

28 March 2025

1. Introduction This Request for Information (RFI) is for planning purposes and is published only to obtain information for use by the Air Force Life Cycle Management Center (AFLCMC), Joint Cyber Command and Control (JCC2), Joint Base San Antonio – Lackland AFB, Texas, for planning purposes only.

RFI does not constitute an invitation for Bids, Request for Proposal (RFP), Solicitation, Request for Quote (RFQ) or an indication that the Government will contract for the services provided by submitter. The Government will not reimburse respondents for any costs associated with the preparation or submission of the information requested. Response to this RFI is strictly voluntary and will not affect any potential offeror's ability to submit an offer should a solicitation be released. Any requests for a solicitation package will be disregarded.

The Government does not intend to award a contract based on this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of preparing submissions in response to this RFI and the Government's use of such information.

The determination of a procurement strategy based upon the information submitted is solely within the discretion of the Government.

Submittals will not be returned to the sender. Respondents to this RFI may be requested to provide additional information/details based on their initial submittals.

2. Objective JCC2 is seeking industry input for advancing the Joint Cyber Command and Control Readiness (JCC2-R) application/capability. Decision makers, planners, analysts, readiness managers and operators at all JCC2 echelons will benefit from this capability. The system characteristics will include enhanced interoperability from cloud computing reference architectures, integrated infrastructure, leverage a cross-domain solution across security enclaves and containerized solutions. The cloud computing infrastructure, built on enterprise level services, will also include DevSecOps platform services to support Agile software development and production delivery efforts. The Agile development will provide immediate benefit through early delivery of incremental value as opposed to long development cycles experienced through waterfall development efforts. Using an Agile methodology to develop rapid IT acquisition techniques, JCC2-R will expand upon existing technology solutions to integrate with JCC2 capabilities, USCYBERCOM and Joint commanders have access to fuse information that is delivered at the pace of the operating environment empowering multi- domain decision-making.

3. Requested Information All respondents are requested to submit a white paper (no more than 10 pages total) that includes the following information:

1. Does your company have experience utilizing AWS GovCloud architecture, including support to software deployment, development and test in multi-domain environments?

2. Does your company have experience implementing cross domain solutions (CDS) and sharing data between mission partner systems in a multidomain AWS GovCloud environment?

3. Does your company have experience deploying and maintaining technology utilizing automated processes in a multi-domain AWS GovCloud environment?

4. The Prime contractor shall maintain and operate at a minimum Capability Maturity Model Integration (CMMI) Services or Development Level 4. Does your company meet this requirement?

5. Does your company have experience providing scalable enterprise system solutions across multiple DoD Services and Commands?

6. Does your company have experience developing, sustaining, and deploying previously developed software?

7. Does your company have experience integrating 3rd party software, analytics and/or visualization tools into a complex, scalable enterprise system?

8. Does your company have experience evaluating and transitioning core functionality of an established solution from OpenSource software to AWS resources (e.g., Relational Database Service [RDS], DynamoDB, ElastiCache, Memory DB, Document DB, Elastic Kubernetes Service [EKS])?

9. Does your company have experience using industry development best practices, NIST guidance, and DoD policies in the implementation of an Agile framework?

10. Does your company have experience utilizing DevSecOps as it pertains to support a DoD software Continuous Integration/Continuous Development (CI/CD) process?

11. Does your company have experience implementing containerization and container orchestration tools to modernize a complex enterprise application?

12. Does your company have experience regarding identifying, patching and versioning compliance as part of the DoD Information Assurance alerts/messages process and timelines?

13. Does your company have experience implementing controls and managing documentation needed in support of the Department of Defense (DoD) Risk Management Framework (RMF) governance?

14. Does your company have experience using methodologies used to develop and/or integrate (external USG or other organizations) advanced data analytics and artificial intelligence (AI)/machine learning (ML) capabilities into existing software?

15. Does your company have experience acquiring, integrating, and normalizing data from across multiple different data sources to include government-owned operational / intel data as well as publicly available information/commercially available?

16. Does your company have experience building and maintaining system models and implementing digital engineering best practices (ex: maintaining and utilizing an Authoritative Source of Truth to streamline generation of program documentation?

17. Does your company have cleared personnel with access to a secured facility (contractor personnel will require specific security clearances depending on required support)? (Please provide additional information.)

18. List any existing contract vehicles that would be available to the Government for the procurement of this solution. Describe the ordering/selection process for any GSA Multiple Award Schedule contracts, Government-wide Acquisition Contracts, Multi- Agency Contracts, or other contracts vehicles your company would need to use to support this effort.

19. Does your company have experience using government-approved methods of authentication (e.g., Public Key Infrastructure (PKI) based authentication, AccessIT, or other enterprise ICAM solutions)?

20. Has your company provided the services detailed in the attached PWS commercially to other Government agencies or to private sector companies? If provided to Government entities, please provide contract/agreement name and reference number.

4. Responses

This is not a solicitation but a Source Sought for market research purposes only. Interested parties are requested to respond to this RFI with a white paper that is Microsoft Office 2016 suite or PDF compatible. Diagrams should be in either a standard image, PDF, or Microsoft Office 2016 compatible format. Responses are due no later than noon CDT, 28 March 2025, to the POCs in Section 5.

Proprietary information, if any, should be minimal and MUST BE CLEARLY MARKED. To aid the Government, please segregate proprietary information. Please be advised that all submissions become the Government’s property and will not be returned.

The highest classification of the responses will be no higher than UNCLASSIFIED//

CONTROLLED UNCLASSIFIED INFORMATION (U//CUI)

5. Contracting Points of Contact (POCs):

Primary Point of Contact: Mr. Kevin Grant, Contracting Officer, kevin.grant.10@us.af.mil Secondary Point of Contact: Ms. Sydnia Johnson, Contracting Specialist, sydnia.johnson@us.af.mil

6. Industry Discussions JCC2 PMO representatives may, or may not, choose to schedule in person briefings with potential offerors. Such discussions and/or capability demonstrations would only be intended to get further clarification of potential capability to meet current sustainment and new emerging development requirements.

7. Questions Submit questions for this announcement to POC’s identified in Section 5 via email. Verbal questions will NOT be accepted. The Government does not guarantee any responses to questions received after NOON CDT, 28 MARCH 2025.

8. Summary THIS IS A REQUEST FOR INFORMATION (RFI) ONLY to identify industry sources that can provide JCC2 development and capabilities. The information provided in the RFI is subject to change and is not binding on the Government. The USG has not made a commitment to procure any of the items discussed, and release of this RFI should not be construed as such a commitment or as authorization to incur cost for which reimbursement would be required or sought. All submissions become USG property and will not be returned.