Develop and sustain CASTLE KEEP in Army commercial cloud solutions

RFI Pursuant to Revolutionary Federal Acquisition Regulation Overhaul RFO FAR 15.101(c) DISCLAIMER This is a Request for Information (RFI) issued in accordance with RFO FAR 15.101(c). The Government does not intend to award a contract on the basis of this RFI or otherwise pay for the information requested. Responses to this RFI will be treated as information only and shall not be construed as a proposal. This is not a Request for Proposal (RFP), nor does it constitute a solicitation and shall not be construed as a commitment by the Government. Responses in any form are not offers and the Government is under no obligation to award a contract from this announcement. No funds will be made available to pay for the preparation of responses to this announcement. Any information submitted to this notice is strictly voluntary and will not be returned. Not responding to this notice does not preclude participation in future solicitations. INTENT Background: HQDA G-2. CASTLE KEEP is a customer-facing portal that provides automated workflow services and Sensitive Compartmented Army SCI program reporting, metrics, analysis, and information sharing within the Army SCI community in accordance with DoDM 5105.21 requirements. This is non-personal services contract to provide Software Development and Software Sustainment Support of the Department of Army (DA) SSO s CASTLE KEEP. The Army Contracting Command Aberdeen Proving Ground (ACC-APG) is issuing this RFI to conduct market research. The intent of the RFI is to identify parties having an interest in bidding on and the resources to support solicitations for G2 s CASTLE KEEP s sustainable solution for the SSO/SSR community to develop and sustain CASTLE KEEP in Army Commercial Cloud Solutions Provider (AC2SP). The Government retains ownership to software and application tools; upon completion this contract all information will be turned over to the U.S. Government and is U.S. Government property. The identified questions are to encourage competition and exchanges of information. Any voluntary response received will be reviewed to assist the Government in arriving at the most suitable approach. The Government is seeking responses to this RFI that describes vendors existing capabilities. Small Business Participation: This RFI is issued on an unrestricted basis (Full and Open) to maximize industry responses. The Government highly encourages submissions from all business sizes and socioeconomic categories (e.g., Small Business, SDVOSB, 8(a), WOSB, HUBZone). Infrastructure Assessment: Vendor shall simulate the realistic threat exploitation techniques within the legacy, existing, and emerging software system's cybersecurity in the mission context of the representative operating environment. Vendor shall apply the cybersecurity testing process with blue teams of Government and Vendor equivalent organizations and red teams of the certified Government and Vendor equivalent organizations during Developmental/Operational Test & Evaluation (D/O T&E).The Blue team assesses the operational network vulnerability with findings for the independent technical review of the network security posture and implements the mitigation techniques for integration into the community security solution to increase the cybersecurity readiness posture. The Blue teams evaluate the security threats/risks in the operating environment and study the network environment and its current state of security readiness. The Red teams simulate the potential adversary's exploitation capabilities against an enterprise's security posture to enhance the enterprise IA/Cybersecurity via demonstration of the impacts of the successful attacks and the needed countermeasure by the blue teams in the operational environment. Cyber Integration: Vendor shall coordinate with Government Agencies and industry partners to support interoperability and integration of other capabilities, maintain adequate certified personnel to meet requirements, and provide q…