RFI for DoD CIO for SWFT AI

The Department of Defense (DoD) Chief Information Officer (CIO) is conducting a Request for Information (RFI) to explore the use of automation and artificial intelligence (AI) for streamlining software cybersecurity risk assessments. The primary objective is to develop a voluntary procedure that allows companies to provide third-party Software Bill of Materials (SBOM) and independent software assessments to accelerate software adoption within the DoD environment. Companies interested in responding must submit a comprehensive 30-page document that includes company details, capability statements, recommended contract vehicles, feasibility feedback, potential risks, past performance, and estimated cost information. The RFI seeks industry perspectives on how AI could assist in DoD-led risk assessments, potential implementation challenges, and key considerations for evaluating AI solutions. Responses are due by 12 pm EST on May 20, 2025, and must be submitted electronically to specified email addresses.

The RFI does not have a specific set-aside designation and is open to both large and small businesses. The government emphasizes that this is a market research effort and does not guarantee a future solicitation or contract award. While specific award values are not disclosed, the RFI indicates an interest in exploring innovative approaches to expediting the Authorization to Operate (ATO) process for software systems. The scope of the project appears to be centered on developing automated methods for conducting cybersecurity risk assessments, with a focus on leveraging AI technologies to improve efficiency and accuracy. Interested firms are encouraged to provide detailed insights into their capabilities, technological approaches, and potential solutions that could address the DoD CIO's objectives for streamlining software security evaluations.