RFI -AMHE Enterprise Support & OT/Cybersecurity Serviceability

Amendment 0001 is posted to extend the due date to 4/25/2025 at 1:00EST and to add the AMHE equipment and cooresponding service locations that may be included in any resulting solicitation for services. See attached document: RFI: AMHE Enterprise Support and OT/Cybersecurity Serviceability Description: This is a Request for Information (RFI) synopsis. This RFI is for planning purposes only and is NOT a request for any Quotations, Proposals, or Invitation for Bids, nor does it restrict the Government to any specific acquisition approach. Each interested party is responsible for adequately marking proprietary or competition sensitive information contained in its response. In accordance with FAR 15.201(e), responses to this notice are not offers and cannot be accepted by the U.S. Government to form a binding contract. Responses will be reviewed by the U.S. Government solely for informational purposes and will not be disclosed to the public for any purpose. The Government will not reimburse any interested parties for any monies spent on providing a response to this RFI. Synopsis: The Defense Logistics Agency (DLA) is the Department of Defense and Whole of Government Logistics Support Agency. DLA Distribution maintains worldwide distribution and logistics operations to support Whole of Government and Department of Defense customers. DLA Distribution J7 Acquisition Operations is seeking responses and information in regards to (1) the possibility of a DLA enterprise-wide (CONUS & OCONUS) support contract that will include preventive and corrective maintenance needs for Automated Material Handling Equipment (AMHE) and (2) the intention to include cybersecurity related DoD 8140 certifications into future AMHE requirements. We are seeking a better understanding of how to meet both the on-going maintenance and cybersecurity needs of our equipment, how industry may help DLA achieve this mission, and what best-practices can be learned and implemented into future contracts to support this equipment. Enforcing cybersecurity on DLA AMHE includes, but is not limited to (1) implementing security controls to protect to DLA equipment and data in line with federal directives & industry best practices, (2) maintaining system, infrastructure and configuration documentation in line with the system's RMF (Risk Management Framework) assessment, (3) limiting access of privileged system functions to personnel certified in accordance with DoD Directive 8140.03, and (4) ensuring system operators are certified to support their specific system. For more information on DoD's RMF, see DoDI 8510.01, - Risk Management Framework (RMF) for DoD Information Technology For a brief explanation of the 8140 DoD Directives, please see Factsheet at: https://dl.dod.cyber.mil/wp-content/uploads/8140/pdf/unclass-dod_8140_factsheet.pdf Written responses are requested to be sent electronically to DLA Distribution J7. Once responses are received, a virtual discussion is planned to further understand the potential impact that the cybersecurity 8140 requirements may have on future AMHE contracts, while also gauging the viability of implementing an enterprise-wide service contract for the maintenance needs of DLA AMHE equipment. The below list represents the types of systems and equipment DLA uses. A more detailed list is available, upon request from the contract specialist, that includes detailed equipment information. Automated Storage/Retrieval Systems (AS/RS): PLC controlled storage and/or retrieval systems that include: Vertical Lift Modules (VLMs) AutoStore Systems and the like Man aboard Stacker Cranes Automated Weight and Offering Systems (AWOS): PLC controlled equipment that automates weighing, dimensioning, and shipping quote systems that may include packaging, labeling, and routing. Dimension and Weigh System (DAWS) Ergonomic Systems: Automated systems such as lift/tilt tables, vacuum lifts, inverters and auto bagging equipment designed to enhance safe handling of material. Forklift/Lift Systems: Automated forklift and lift systems that are typically PLC controlled systems that control movement of large material items to or from storage. Carousels Conveyor Systems Pallet Stackers and Sorters Tote and Tow Lines Forklifts: Independent systems that are manually operated that can contain PLC software and data transmission capabilities. Manually Operated Forklifts (all classes) Packaging Systems: Automated systems that are typically PLC controlled to wrap, bundle, unitize, or label material. Robotics: Systems designed to automate one or more functions typically done by warehouse personnel in the movement, packaging, storage, or shipment of material. Automated/Vision Guided Vehicles (AGVs) Automated Mobile Robots (AMR) Weigh and Span Systems: PLC controlled automated in-line or DCS systems that provide control checks and quality monitoring on weight and dimensional data of material to include scales and Cubiscan-type systems. Questions we are seeking a response to, include the following:[KG1] [KG2] As an AMHE maintenance service provider, does your organization have the capabilities of performing an enterprise-wide (CONUS & OCONUS) maintenance service contract? As an AMHE maintenance service provider, do you have the certifications and capabilities to performing 8140 cybersecurity related maintenance and service of equipment? If your company does not have the in-house 8140 certifications, do you currently work with subcontractors that maintain these certifications? If not, are you willing to find subcontractors that would work with you on a DLA Enterprise-wide service contract requiring 8140.03 certified professional and cyber deliverables? What experience does your organization have in working to provide AMHE maintenance administration regionally and/or across a large enterprise? Does your organization have any experience with projects requiring risk management framework (RMF) deliverables? What are industry best practices to meet the maintenance service needs of Automated Material Handling Equipment while also servicing any cybersecurity requirements of the same equipment? What is the estimated cost per employee to comply with 8140 requirements? What is the estimated cost difference between servicing AMHE equipment with corrective and preventive maintenance and the additional cost of cybersecurity related maintenance? What types/brands of AMHE equipment is your company well versed in maintaining? What is your business size in accordance with the SBA? If required, can your company provide positive past performance information?