Web File Manager

Request for Information (RFI) Market Research Introduction: _________________________________________________________________ The mission of the Air Force Office of Special Investigations (AFOSI) is to identify, exploit and neutralize criminal, terrorist and intelligence threats to the United States Air Force (USAF), Department of Defense (DoD) and United States Government. Command priorities involve the exploitation of counterintelligence activities for force protection; solving violent crimes that impact the USAF; combating threats to USAF information systems and technologies; and defeating and deterring acquisition fraud. AFOSI's strategic goals include the delivery of investigative and counterintelligence (CI) products that satisfy customer requirements and the employment of management systems that improve organizational effectiveness. AFOSI is seeking information on the application of technically effective (and industry best practice) Information Technology (IT) methodologies for the efficient and secure web file storage and management. The requirement basis for this effort is AFOSI Command's Initiative to more efficiently perform the above mentioned tasks while complying with Air Force Network (AFNet), security, and legal requirements. The intent of this RFI is to identify technical solutions capable of meeting the objectives describe below and to identify contractors and subcontractors capable of meeting this requirement. Requirements:_________________________________________________________________ Conceive, plan, design, test, implement, and deploy an IT solution that will securely store AFOSI's data, allowing sharing and management of files and documents on a Windows server through Microsoft Windows file explorer or a web browser over AFNet (Intranet) or via the Internet. The solution should include the following: - o File formats can be shared, open or edited online using Microsoft Windows file explorer or a browser - o Use Microsoft Active Directory (AD) permission (users and groups) - o Secure data in motion and data at rest - o Capable of 5 to 10 GB uploads and downloads with expansion possibilities - o Standard ports and protocols (SSL 443) - o Minimal user settings required - o Look like a standard network share (CIFS) via Microsoft Windows file explorer - o Software based (if possible) - o Work with existing AFOSI hardware and software - o Approved within DoD (preferred not required) - o Pass Information Assurance (IA) Security Technical Implementation Guides (STIGs) requirements - o Authenticates using DoD Private Key Infrastructure (PKI) via Common Access Card (CAC) (No username and password) - o Users can edit files online using their desktop Office application or directly just using their browser - o User does not need to download documents and upload them back to the server after editing, works automatically - o File locking while editing (preferred) - o Mapping web folders possible - o Supports mobile interface (touch screen technology) for tablets and smartphones - o Integration with OneDrive (Microsoft) cloud storage and online Office 365 file editor for future expansion Technical information: - o Windows Active Directory (AD) authentication - o Multiple files and folders uploaders with reusable and very large file size support - o Multiple files and directory download - o Microsoft Server 2008R2/2012/2012R2 - o Microsoft Windows 7, 8 and 10 Hardware and Software Requirements: Vendors shall include all hardware and software required for their solution in their response. The solution and system of record shall be compliant with all applicable DoD, Air Force and industry standard regulations and policies - o Beta Test - The solution shall be functional systems tested for a pre-selected regional field office by at least 25 users prior to full implementation. - o All solutions shall be fully compatible with AFNET. - o System shall be PKI CAC enabled - o Acquire and maintain Assessment and Authorization approval from Air Force Authorizing Official as required by DoDI 8510.01/DoDD 8500.01dated Mar 2014, if required - o Acquire and maintain a Certification of Networthiness (CoN). If previously CoN'd by another DoD entity, reciprocity will be leveraged. Cybersecurity Compliance - o Provide artifacts of evidence for compliance with DoDI 8500.01, DoDI 8510.01 and DoDI 8500.2 control requirements for the Mission Assurance Category II-Classified system. - o Provide a Security & Technical Implementation Guide report (that includes how the validation was performed) for all servers and network devices added to the NIPRNet. - o Provide a network packet capture of the equipment and software performing each user-acceptance activity (e.g. account creation, document posting, etc.) - o Provide a vulnerability scan of the added equipment that shows compliance with current vulnerability management requirements; and that the equipment is compliant with all Time Compliance Network Orders up to at least 5 days prior to government acceptance of project Phase 2. - o Two copies of all installation software with a checklist to get from bare metal to an installed state ready to accept recovery data from backup. Solution must meet DoDI 8500.01 and DoDI 8510.01 requirements. - o Obtain or produce evidence appropriate level of DoD-8570 Certification in order to be granted elevated privileges for implementation. Security Requirements Security requirements for the basic contracts will be as follows: Facility clearance required shall be Secret. All personnel performing work on this contract must have at least a secret clearance. Response to RFI THIS IS A REQUEST FOR INFORMATION ONLY. This RFI is issued solely for information and planning purposes. It does not constitute a solicitation (Request for Proposal or Request for Quotations) or a promise to issue a solicitation in the future. This RFI does not commit the Government to contract for any supply or service whatsoever. Furthermore, we are not at this time seeking proposals. Responders are advised that the U.S. Government will not pay for any information or administrative costs incurred in response to this RFI. All costs associated with responding to this RFI will be solely at the responding party's expense. All information received in response to this RFI that is marked PROPRIETARY will be handled accordingly. The Government shall not be liable for or suffer any consequential damages for any proprietary information not properly identified. Proprietary information will be safeguarded in accordance with the applicable Government regulations. Proprietary information or trade secrets should be clearly identified. Responses to this notice are not offers and cannot be accepted by the U.S. Government to form a binding contract or agreement. The Air Force will not be obligated to pursue any particular acquisition alternative as a result of this RFI. Responses to the RFI will not be returned. Not responding to this RFI does not preclude participation in any future solicitation, if one is issued. Specific Information of Interest: Responses to this notice will be used for market research to determine industry capabilities and thus help validate the Government's requirements for future solicitations. Interested companies should furnish the following information: Name and address of company, Point of Contact (Name, address, phone number, and e-mail). Interested companies should provide a "White Paper" (no more than 15 pages in length) describing their specific technical solution to the requirement and tentative schedule for implementation. Solution data should provide sufficient detail regarding processes, technologies, approaches and capabilities for the Government to meaningfully assess the solution's viability, risk, scope of development and procurement costs. The estimation of project costs shall include estimated costs for all products and services necessary for full development, testing and implementation of proposed solution to complete this effort. If applicable, please identify past and current products your company offers which most closely match the capabilities specified in this RFI. Please provide any available product brochures, specification sheets, and technical descriptions which describe your company's abilities to meet these capabilities. You are welcome to identify your company's past and current customers to which you provided similar products, including a customer/company name and point of contact, phone number and address/e-mail where they can be contacted. All responses should be submitted electronically in a Microsoft Office format and emailed to the points of contact: Ms. Jyla Wooten at Jyla.N.Wooten.civ@mail.mil and Ms. Hatasha Hanley at Hatasha.T.Hanley.civ@mail.mil. The subject line of the email should read as follows "RFI: Secure Web File Manager." Please submit all responses by July 21, 2016.