Request for Information for Department of Defense Special Access Programs Information Technology (SAP-IT) Description: This Request for Information (RFI) is issued solely for information-gathering purposes and seeks information for the development of an Enterprise Information Technology System for Special Access Programs (SAP) by the Department of Defense Chief Information Officer (DoD-CIO). The developed system aims to facilitate secure collaboration between multiple SAPs and potentially with external entities, adhering to stringent cybersecurity and data protection standards. Responses to the RFI will not be returned. Responses to this RFI are not offers and cannot be accepted by the Government to form a binding contract. A response to this RFI is necessary to assist the Government in determining the potential levels of interest, adequate competition, market maturity and technical capabilities within the Large and Small Business Communities to provide the required capabilities. The Government does not intend to award a contract based on this RFI or reimburse any costs associated with the preparation of responses to this RFI. It will also not consider any solutions that are proprietary. Background: The SAP IT Office is responsible for all aspects of IT across the Department of Defense (DoD) for Special Access Programs. The DoD Components and Special Access Programs (SAPs) historically purchased and managed IT assets based on individual program needs. This led to inconsistent capabilities, disjointed, disconnected, fragmented IT infrastructure, a disadvantaged cyber workforce, and duplicated IT assets, configurations, and costs. Key Performance Requirements: Provide a reliable, resilient, and cybersecure SAP ecosystem conforming to federal and DoD IT standards and security policies, to include zero-trust. Achieve security categorization in accordance with ISO 27001, FIPS 199, and FIPS 140-3 as well as meeting Protection Level Three (PL-3) requirements. Support High/High/High impact levels for confidentiality, integrity, and availability. Offer a modern user interface with a standard suite of productivity software applications. Provide a secure voice, video, and data collaboration environment that includes physical and virtual devices while still restricting data access to only individuals with the appropriate credentials. Leverage orchestration and automation to the greatest extent possible to streamline IT operations across systems reducing human error, increasing efficiency, and improving customer experience. Deliver cross-domain solutions that meet current and near future National Security Agency requirements. Offer fine grain access protections that apply an open standard for object-level encryption to keep data protected, such as Trusted Data Format (TDF). Supply a robust Identity, Credential, and Access Management (ICAM) solution that also can import information from one or more entitlement databases. Accommodate a minimum starting community of 4000 users with scalable growth over the first five years. Offer a technical solution as well as a methodology to import legacy data from legacy systems while retaining the tagging and security of the data. Overall, the RFI seeks ideas and concepts that address the specified requirements to develop a secure, scalable, and compliant Enterprise Information Technology System for Special Access Programs within the Department of Defense. Response Instructions: RFI responses shall be submitted online which conform to the format below and provide the following information. Section 1 - Cover Letter. The cover letter must include the following information: Company name Company business size with socioeconomic classification based on North American Industry Classification Code. Company point of contact and contact information (name, address, phone number, email address, and fax number) Date submitted Commercial and Government Entity (CAGE) Code Section 2 - Market Research Questions. These questions are designed to gather detailed information from potential vendors about their capabilities, experiences, and specific solutions that align with the requirements outlined in the RFI. Describe your overall solution architecture and management approach to guaranteeing service levels, particularly in terms of performance and availability. Explain how your solution supports secure voice, video, and data collaboration across physical and virtual devices, ensuring data access is restricted based on credentials. Provide details of your ICAM solution, including capabilities to integrate with one or more entitlement databases and support for fine-grain access protections like object-level encryption. Detail your understanding of the unique security and access requirements associated with SAP and Controlled Access Program (CAP) environments. Describe your approach to integrating with SAP CAP environments to ensure seamless interoperability and secure data exchange between the Enterprise Information Technology System and existing SAP CAP infrastructures. Describe your methodology for importing legacy data from existing systems while retaining data security and tagging integrity. Describe a pricing model for your IT services, specifying whether it is based on per user, per region, per usage, or another unit cost metric. Describe how your pricing model accommodates scalability in terms of user growth, including any volume discounts or tiered pricing structures. Submission Instructions Responses to this RFI must total no more than 5 pages, with text no smaller than 10 point; however, text included in graphics, tables, and figures can be no smaller than 9 point. The cover page (1 page limit) and cover letter (2 page limit) are not included in the total page count. Material submitted in excess of the 5-page limit and the page limitation exclusions may be considered. The submissions must be in sufficient detail and clarity to provide the information needed to assess your company’s ability to provide a solution. Final written responses and information are requested on or before August 23, 2024. Late-filed comments may be considered to the extent practicable. Submit your company’s written response to: Chris Pinover
[email protected] Primary Point to Contact: Chris Pinover
[email protected] Questions Questions regarding this announcement shall be submitted in writing by e-mail with subject field “RFI for SAP IT Enterprise” to
[email protected]. Verbal questions will NOT be accepted. The Government does not guarantee that questions received after August 8, 2024, will be answered.