US-FED-00000393833 - Develop and sustain CASTLE KEEP in Army commercial cloud solutions - Deadline September 22,2026

RFI Pursuant to Revolutionary Federal Acquisition Regulation Overhaul RFO FAR 15.101(c)DISCLAIMERThis is a Request for Information (RFI) issued in accordance with RFO FAR 15.101(c).The Government does not intend to award a contract on the basis of this RFI or otherwise pay for the information requested.Responses to this RFI will be treated as information only and shall not be construed as a proposal.This is not a Request for Proposal (RFP), nor does it constitute a solicitation and shall not be construed as a commitment by the Government. Responses in any form are not offers and the Government is under no obligation to award a contract from this announcement. No funds will be made available to pay for the preparation of responses to this announcement. Any information submitted to this notice is strictly voluntary and will not be returned. Not responding to this notice does not preclude participation in future solicitations.INTENTBackground: HQDA G–2. CASTLE KEEP is a customer–facing portal that provides automated workflow services and Sensitive Compartmented Army SCI program reporting, metrics, analysis, and information sharing within the Army SCI community in accordance with DoDM 5105.21 requirements.This is non–personal services contract to provide Software Development and Software Sustainment Support of the Department of Army (DA) SSO`s CASTLE KEEP.The Army Contracting Command Aberdeen Proving Ground (ACC–APG) is issuing this RFI to conduct market research. The intent of the RFI is to identify parties having an interest in bidding on and the resources to support solicitations for G2`s CASTLE KEEP`s sustainable solution for the SSO/SSR community to develop and sustain CASTLE KEEP in Army Commercial Cloud Solutions Provider (AC2SP).The Government retains ownership to software and application tools; upon completion this contract all information will be turned over to the U.S. Government and is U.S. Government property.The identified questions are to encourage competition and exchanges of information. Any voluntary response received will be reviewed to assist the Government in arriving at the most suitable approach. The Government is seeking responses to this RFI that describes vendors` existing capabilities.Small Business Participation: This RFI is issued on an unrestricted basis (Full and Open) to maximize industry responses. The Government highly encourages submissions from all business sizes and socioeconomic categories (e.g., Small Business, SDVOSB, 8(a), WOSB, HUBZone).Infrastructure Assessment: Vendor shall simulate the realistic threat exploitation techniques within the legacy, existing, and emerging software system`s cybersecurity in the mission context of the representative operating environment. Vendor shall apply the cybersecurity testing process with blue teams of Government and Vendor equivalent organizations and red teams of the certified Government and Vendor equivalent organizations during Developmental/Operational Test & Evaluation (D/O T&E).The Blue team assesses the operational network vulnerability with findings for the independent technical review of the network security posture and implements the mitigation techniques for integration into the community security solution to increase the cybersecurity readiness posture. The Blue teams evaluate the security threats/risks in the operating environment and study the network environment and its current state of security readiness. The Red teams simulate the potential adversary`s exploitation capabilities against an enterprise`s security posture to enhance the enterprise IA/Cybersecurity via demonstration of the impacts of the successful attacks and the needed countermeasure by the blue teams in the operational environment.Cyber Integration: Vendor shall coordinate with Government Agencies and industry partners to support interoperability and integration of other capabilities, maintain adequate certified personnel to meet requirements, and provide qualified staff for CASTLE KEEP software development and sustainment. Vendor shall lease workspace with NIPRNet and JWICS access to support three to four personnel.Multi–level Security: Vendor personnel performing work under this action must have an active Top Secret (TS) security clearance with eligibility for obtaining Sensitive Compartmented Information (SCI) (SI, TK, G, and HCS security clearance IAW DoD 5200.1–R at the time of award and must maintain the level of security required for the life of a contract. This action will require TSI/SCI, but future work related to this action may require a TS/SCI with Counterintelligence Polygraph (TS/SCI w/CI Poly) clearance. The security requirements are IAW the attached DD Form 254, Security Classification Specification. Personnel must perform within the security limitations of AR 381–10, USSID 18, and other security regulations. Any vendor personnel that will need access to SIPRNet terminals will require a TS/SCI clearance because all SIPR