NSA Cybersecurity Directorate - Raise the Bar 4.0 Requirements guidance targeting Cross Domain Solution (CDS) design and implementation.

This is a sources sought synopsis only and does not constitute a solicitation announcement. This is not a request for proposals, solicitation announcement, or a quote and in no way obligates the Government to award any contract. This sources sought is for information and planning purposes only and is not to be construed as a commitment by the Government. This sources sought notice has been issued to survey the market and assist the United States Coast Guard (USCG) in determining possible sources for consideration. All firms responding to this sources sought notice are advised that their response to this notice is not a request to be considered for a contract award. The USCG is conducting market research to seek sources that have the capability of increasing the cyber resiliency for the L3Harris Common End User Terminal (CEUT) to ensure the hardware, (and associated MARCOM software), can meet the latest Cross Domain Solution (CDS) requirements put forth by the National Cross Domain Strategy & Management Office (NCDSMO) Description of Supplies/Services. This acquisition will require a contractor to take the requisite steps to get the L3 Common End User Terminal (CEUT) certified to the National Security Agency (NSA) Raise the Bar 4.0 standard. This effort involves the following steps at a minimum each of which has schedule and cost implications. a) Fill out the required Raise the Bar forms for the NSA. b) Participate in technical meetings with the customer and the NSA to explain the system architecture and design. c) Arrange for an independent Lab Based Security Assessment, (LBSA), of the hardware and software associated with the CDS solution (currently L3H CEUT and MARCOM software). d) Make updates to the L3 hardware and L3 software, (should they be needed), to be compliant with the 4.0 standard. e) Go through a second round of LBSA testing (if necessary). f) Make adjustments to the required Raise the Bar forms and resubmit for approvals. Responses: Responses to this notice should include company name, address, telephone number, and point of contact (POC). Please respond to the following questions: 1. Is your business a large or small business and how many employees? 2. What North American Industry Classification System (NAICS) code does your company use for this type of service? 3. If small, does your firm qualify as a small, emergent business, or a small, disadvantaged business? 4. If disadvantaged, specify under which disadvantaged group and is your firm certified under Section 8(a) of the Small Business Act? 5. Is your firm a certified Hub Zone firm? 6. Is your firm a Woman-Owned or operated business? 7. Is your firm a certified Service-Disabled Veteran-Owned? 8. Is your product listed on a General Services Administration (GSA) schedule? 9. Do you have other government agencies using the product, and if so which agencies, POCs and contract numbers? 10. If possible, provide POCs for civilian users for general usage of product questions. After the review of the responses to this sources sought announcement, and if the USCG still plans to proceed with the acquisition, a solicitation announcement will be published on the SAM.gov website. Responses to this sources sought synopsis are not adequate responses to any future solicitation announcement. All interested offerors will have to respond to the solicitation in addition to responding to this sources sought synopsis. Responses to this sources sought synopsis are NOT a request to be added to a prospective offerors list or to receive a copy of the solicitation.