DISA Risk Management Framework (RMF) Assessment & Authorization (A&A) Support Services for Defense Red Switch Network (DRSN) Internet Protocol (IP)

Request for Proposal

The Defense Information Systems Agency (DISA) is seeking proposals for services for the Defense Red Switch Network (DRSN) Internet Protocol (IP) Transport in support of Risk Management Framework (RMF) Assessment & Authorization (A & A).

CONTRACTING OFFICE ADDRESS:

DISA/ DITCO

2300 East Drive, Building 3600

Scott AFB, Illinois 62225-5406

INTRODUCTION:

The Defense Information Systems Agency/IE31 is seeking proposals for services required to support DRSN in Risk Management Framework (RMF) Assessment & Authorization (A & A). This service will assist DISA and the DRSN Program Office to obtain an Authority to Operate (ATO) for the new DRSN IP transport. It allows for the successful management and monitoring of IA and Assessment & Authorization activities, providing senior leaders and the PMO with the status and issues relating to DRSN TDM to IP Transition.

CONTRACT/PROGRAM BACKGROUND:

Contract Number: N/A

Contract Type: N/A

Incumbent and their size: N/A

Method of previous acquisition: N/A

REQUIRED CAPABILITIES:

The effort includes the application of the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Rev 4 Risk Management Framework to bring Assessment & Authorization (A & A) packages and supporting Body of Evidence current for Authorizing Official (AO) approval.

•b) This requirement includes developing new A & A Network Operations Center (NOC) packages for Ft. Meade and Scott AFB using the NIST RMF Workflow/Xacta 2.0, the automated tool that is used to process ATO packages by the 25AF AO.

Developing new A & A Master Site Model A & A package to enable the 42 DRSN sites to apply hybrid and site-specific security controls as identified in the NIST SP 800-53 Rev 4 is required.

SPECIAL REQUIREMENTS

•1. Must have Top Secret clearance.

•2. Sensitive Compartmented Information (SCI) access eligibility for some personnel

•3. Final IT-I (privileged level systems access) eligibility

•4. Top Secret Facility Clearance (FCL) from the Defense Security Service (DSS) Facility Clearance Branch (FCB) at time of award

•5. All personnel performing on or supporting this DISA effort shall be U.S. citizens

Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. All government and contractor personnel reviewing RFI responses will have signed non-disclosure agreements and understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as described 41 USC 423. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.

.