RFI_SWFT_AI.pdf

PDF 120 KB Posted

Attached to
RFI for DoD CIO for SWFT AI
Solicitation number
RFISWFTAI001
Issued by

About this file

This is a Request for Information (RFI) issued by the Department of Defense (DoD) Chief Information Officer (CIO) seeking industry input on using automation and artificial intelligence (AI) to streamline software cybersecurity risk assessments. The RFI aims to expedite the Authorization to Operate (ATO) process by developing a voluntary procedure where companies can provide a third-party Software Bill of Materials (SBOM) and independent software assessment to accelerate software adoption in the DoD environment.

Responses are due by 12 pm EST on 20 May 2025, submitted electronically to specified email addresses. Firms must provide a maximum 30-page response including company details, capability statements, recommended contract vehicles, feasibility feedback, potential risks, past performance, and rough order of magnitude cost information. The RFI specifically requests industry perspectives on how automation and AI could assist in DoD-led risk assessments, potential implementation challenges, data needs, and key considerations for evaluating AI solutions. The government encourages responses from both large and small businesses and emphasizes this is solely a market research effort with no guarantee of future solicitation or contract award.

View the file

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Subject: Request for Information (RFI) – Software Fast Track (SWFT) Automation & Artificial Intelligence (AI)

Background: The DoD CIO is the Principal Staff Assistant (PSA) and advisor to the Secretary and Deputy Secretary of Defense for information technology (IT), including national security systems (NSS), information resources management (IRM) matters. The DoD CIO is responsible for all matters relating to information, information technology, and the DoD information environment including command, control, and communications (C3), electromagnetic spectrum, network operations, IT portfolio management, information assurance (IA), cybersecurity, and positioning, navigation, and timing (PNT).

In an effort to expedite the Authorization to Operate (ATO) process for the DoD adoption of Software in our environment, we have developed a voluntary procedure in which a company can provide a 3rd party produced Software Bill of Materials (SBOM) along with an independent 3rd party assessment of their software for the Department to evaluate and adopt Software faster.

Purpose: This RFI is issued solely for market research and planning purposes in accordance with FAR Part 10. This RFI does not constitute a Request for Proposal (RFP), Invitation for Bid (IFB), or a Request for Quote (RFQ), and does not commit the Government to issue a solicitation or award a contract. The Government will not reimburse respondents for any costs incurred in preparation of a response to this notice.

The Government is seeking input from industry to better understand current capabilities, innovative solutions, and business practices that can support accelerating the delivery of capabilities to the warfighter through SWFT initiatives.

The Government encourages responses from “all” sources, including Large Businesses (Other than Small Business) and Small Businesses.

Scope: The Department of Defense (DoD)Chief Information Officer (CIO) is soliciting information and ideas on accelerating the delivery of capabilities to the warfighter, by streamlining the risk assessment and authorization process for software-enabled products and services, through a SWFT initiative.

Objective: DoD seeks industry perspectives for the use of automation and artificial intelligence to assist DoD-led risk assessment for expedited cybersecurity authorizations. Risk assessment assistance will utilize supplier SBOM, SWFT artifacts and attestations, and DoD-specific knowledge (e.g., mission impact determinations).

Requested Information: The government requests industry’s input regarding the set of questions below as it pertains to the objectives of this RFI.

1. What are the possible ways that automation or AI could assist to streamline DoD-led SWFT risk assessments under the DoD defined Risk Management Framework (RMF)?

2. What are potential challenges in the implementation of automation or AI for high trust situations related to cybersecurity authorization official responsibilities?

3. What are the data needs for these SWFT automation and AI capabilities, including supplier SBOM, DoD, or third-party sources?

4. What are the considerations that DoD should prioritize when evaluating automation and AI solutions for DoD-led SWFT risk assessments and determinations?

Format: Responses to this RFI request should reference " Software Fast Track (SWFT) - Automation & Artificial Intelligence (AI)" and shall include answers to the above questions and the following information in this format:

• Company name, DUNS/UEI, CAGE Code, and point of contact

• Capability statement demonstrating relevant experience

• Recommended contract types, contract vehicles (e.g., GSA MAS, GWACs, etc.), and business size status

• Feedback on the feasibility of the work described

• Potential risks, challenges, or innovations

• Past performance examples (if applicable)

• Rough Order of Magnitude (ROM) cost info

Firms must respond using the format outlined in this RFI. There is a maximum page limitation of thirty (30) typed pages that are single spaced using 12-inch Times New Roman font within an 8.5 by 11 paper.

No hard copy submissions will be accepted. Cover letters and extraneous materials (brochures, etc.) will not be considered. The Government will not consider any submissions to any person other than Ms. Leanne Condren or submissions after the date specified below.

Response Due Date: All responses to this RFI are to be submitted by 12 pm Eastern Standard Time (EST), on 20 May 2025. Responses will be accepted via electronic means only to:

whs.mc-alex.ad.mbx.eosd-psb-branch-mailbox@mail.mil and leanne.m.condren.civ@mail.mil.

mailto:whs.mc-alex.ad.mbx.eosd-psb-branch-mailbox@mail.mil mailto:leanne.m.condren.civ@mail.mil

File details come from the government source that posted it. Updated .