DESCRIPTION This is a Request for Information (RFI) to gauge Industry interest in participating in a Missile Defense Agency (MDA) pilot of the Defense Industrial Base (DIB) Enterprise Mission Assurance Support Service (eMASS) system. DIB eMASS is a tool being developed by MDA primarily to assist small and mid-sized businesses in implementing and complying with Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012 “Safeguarding Covered Defense Information and Cyber Incident Reporting,” which includes and implements National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Rev.1 “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations.” Specifically, DIB eMASS assists in the preparation of the System Security Plan (SSP) and Plan of Action and Milestones (POAM) documents required by DFARS clause 252.204-7012. The purpose of the DIB eMASS pilot is to test the developed database system and gather constructive feedback from potential system users. In order to qualify as a participant in the DIB eMASS pilot, a company must meet the following minimum requirements: Be a current prime contractor of a MDA contract that includes DFARS clause 252.204-7012. In the performance of the MDA contract, utilize an information management system to develop, store and/or transmit Controlled Unclassified Information (CUI). Have the ability to use DoD PKI certificates or, at a minimum, obtain a medium level certificate to access the system. Responses to this RFI are voluntary and will be used by MDA for the sole purpose of evaluating candidates to participate in testing the DIB eMASS pilot system. There is no guarantee that a company submitting a response to this RFI will be selected to participate in the pilot. BACKGROUND MDA recognizes that most large defense contractors already possess the tools and resources necessary to prepare the SSP and POAM documentation required by DFARS clause 252.204-7012; the same may not be true for most small and mid-sized businesses in the DIB. To help support the documentation requirements under DFARS 252.204-7012, MDA is developing the DIB eMASS system to provide a standardized tool for use by any size company to prepare the mandated SSP and POAM documentation. Given limited resourcing for small and mid-size companies, MDA is seeking volunteers from those companies to help test the MDA DIB eMASS pilot at no cost to the Government. The DIB eMASS pilot is planned to begin in the March – April 2020 timeframe and will continue through September 2020. The pilot will require participants to enter their SSP and POAM documentation into the eMASS system to test the utility of the developed database. The use of the DIB eMASS application is provided at no cost to the pilot tester participant. MDA will require feedback from all participants in regards to the utility and effectiveness of DIB eMASS for preparing and managing their company SSP and POAMs. RESPONSE PARAMETERS Interested parties are requested to e-mail a response document to
[email protected] . Submitted responses should be in Microsoft Word or searchable Portable Document Format (.pdf), and include the following information: a. A brief profile of your company, including Company Name, Point-of-Contact, Address, Telephone Number, Email Address, CAGE Code, Facility Clearance Level, and socio-economic information (e.g., Large/Small Business (SB), Small Disadvantaged, Woman-Owned SB, etc.). b. The MDA contract number on which your company is a prime contractor, and the following information regarding the contract: (1) a brief description (2-3 sentences) of the contract scope; (2) the contract type (e.g., firm-fixed-price, cost-plus-fixed fee, cost-plus-incentive fee, time & materials); (3) the contract period of performance, including options; (4) the name and telephone number of the MDA contracting officer. c. Clear and concise responses to the following questions: QUESTION 1: What methodology is your company currently using to prepare the SSP and POAM documentation required by DFARS clause 252.204-7012? Is your company satisfied with your current methodology? QUESTION 2: In exchange for cost-free access and use of the DIB eMASS system to assist you in preparing the SSP and POAM documentation required by DFARS clause 252.204-7012, would your company be interested in participating in the DIB eMASS pilot on a voluntary basis at no cost to the Government? If not, are there any circumstances under which your company would be willing to participate? QUESTION 3: Participation in the MDA DIB eMASS pilot will require a formal contractual arrangement between your company and MDA, i.e. a modification to your current MDA contract. Do you have any recommendations regarding special contract terms and conditions that should be considered or included in a contract modification to add the pilot participation to your MDA contract? QUESTION 4: Does your company have any concerns about participating in the DIB eMASS pilot? If so, what are the concerns? ADDITIONAL INSTRUCTIONS All questions concerning this RFI must be submitted via e-mail to
[email protected]. Responses are requested by close of business on March 12, 2020. Industry is encouraged to provide responses which do not contain proprietary information. If proprietary information is included in a response, then the respondent is responsible for adequately marking the proprietary information on a paragraph-by-paragraph basis. MDA may use third party, non-Government (contractor) support personnel to receive, process and/or compile responses, including the review of any marked or unmarked proprietary information. Submission of a response to this RFI constitutes the participant’s acknowledgement and agreement that the information provided in the response, including any marked or unmarked proprietary information, may be disclosed to these non-Government support personnel. Approved for Public Release 20-MDA-10384 (19 Feb 20)