ASAALT Improving eMASS Capabilities

Active

Contract Opportunity

Improving eMASS Capabilities

Request for Information

Assistant Secretary of the Army for Acquisition, Logistics & Technology

Office of the Deputy Assistant Secretary of the Army for Data, Engineering, and Software

Purpose: This Request for Information (RFI) seeks industry feedback on approaches being considered to improve Enterprise Mission Assurance Support Service (eMASS) capabilities with automation. The eMASS is a government owned web-based application with a broad range of services for comprehensive Risk Management Framework implementation. Features include dashboard reporting, NIST SP 800-53 rev 4 and rev 5 security controls scorecard measurement, and the generation of various system security authorization artifacts. The eMASS provides an integrated suite of authorization capabilities to approve, document, and monitor the security posture of a system or a portfolio of systems. The Army seeks written feedback on approaches for improving the automation of eMASS capabilities and close some of the process gaps identified in some of the current manual processes. The Army also seeks feedback on potential impacts (e.g., cybersecurity, cost, operational, other) from the proposed approach on improving eMASS.

Intent

This is not a Request for Proposal (RFP), Request for Quotation (RFQ), or an invitation for a bid, nor does its issuance obligate or restrict the Government to an eventual acquisition. All information received in response to this RFI will be used only to assess impact of draft Army policy. Depending on industry feedback to this RFI, the Army may follow-up with future engagement opportunities; to include question and answer sessions, one-on-one engagements, roundtables and/or requests for additional written information. See attachments for the draft Army Policy and RFIs for industry response.

Scope and Assumptions

eMASS is a web-based Government off-the-shelf (GOTS) solution that automates a broad range of services for comprehensive, fully integrated cybersecurity management, including controls scorecard measurement, dashboard reporting, and the generation of Risk Management Framework (RMF) for Department of Defense (DoD) Information Technology (IT) and DoD Information Assurance Certification and Accreditation Process (DIACAP) Package Reports. eMASS provides an integrated suite of authorization capabilities and prevents cyber attacks by establishing strict process control mechanisms for obtaining authorization to operate decisions. The Army is requesting feedback in the following functionalities: Completeness, Accuracy, Time Reduction, Human Effort, Inventory, Precision, Change Detection and Consistency.

This RFI Contains the Following Components

1. TAB A – Cyber Focal Request for Information for Industry Response


2. TAB B – eMASS Process Guide

Response Guidelines

Interested parties should review “TAB A: Cyber Focal Request for Information for Industry Response; and TAB B: eMASS Process Guide.” Please include the following in response:

1. Organizational Name, Address, and Country of Business (if organization has experienced name changes, please list all previous names used).


2. Organization representative name, business title and contact information.


3. Industry NAICS Codes (North American Industry Classification System) and business size for each NAICS code.


4. Relevant contract vehicles and contracts held (vehicle, agency, and expiration date) - please highlight U.S. Army and DoD contracts clearly.


5. Year organization was established/founded.


6. Organization ownership (public, private, joint venture). Provide information regarding Foreign Ownership, Control, or Influence (FOCI) issues associated with your organization/and or offering(s).


7. Business Classification/Socio-Economic Status (e.g., large, small, 8(a), women-owned, hub-zone, Small Disadvantaged Business (SDB), Service-Disabled Veteran-owned).


8. Location of corporate headquarters.


9. Locations of facilities Outside of Continental United States (OCONUS), if applicable.


10. Location where currently incorporated.


11. Overview of products and services provided.


12. Overview of OCONUS experience with specific locations discussed, if applicable.

Responses are due by December 16th, 2024 to enable the Government to organize findings. Submissions should be made via email with Subject Line “Army Cyber Focal RFI” to: CyberFocal-Team@army.mil

Disclaimer

This RFI is issued solely for information and planning purposes. This RFI is not a solicitation and is not to be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Responses will not be considered as proposals, nor will any award be made because of this request. Federal Acquisition Regulation (FAR) clause 52.215-3, “Request for Information or Solicitation for Planning Purposes”, is incorporated by reference. The Government does not intend to reimburse respondents for any costs associated with the submissions of their responses to this RFI; respondents to this RFI are solely responsible for all expenses associated with responding. Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received in response to this RFI that is marked “Proprietary” will be handled accordingly. Please be advised that all submissions become Government property and will not be returned nor will receipt be confirmed. In accordance with FAR 15.201(e), responses to this RFI are not offers and cannot be accepted by the Government to form a binding contract.

Responses from this RFI will be used to formatively shape broad Army guidance for acquiring software solutions. Response content may be aggregated and anonymously published into summary documentation to facilitate such guidance. Any publications resulting from this RFI will be non-attributional, and RFI respondents’ consent for their responses to be used for such purposes.

Attachments/Links