OSD - NGA RMF System of Record - MRAS

The National Geospatial-Intelligence Agency (NGA) is seeking professional services, software licenses and maintenance, and customer support and training for their Risk Management Framework (RMF) system of record. The NGA requires these services to ensure the successful completion of the NGA NIST Risk Management Framework, including project management, technical support, strategic direction and guidance. The contract will have a base period of 1 year with 4 option years, starting in October 2024. The work will primarily be focused on improving workflows, tradecraft, training, technical troubleshooting, configuration, optimization, and operational analysis related to the use of the RMF system. The contractor will also be responsible for security control management, training and tradecraft support, documentation and reports, and may be required to travel to other NGA facilities.

The current RMF system of record used by NGA is XACTA Information Assurance Manager (XIAM) products provided by Telos Corporation. The contractor will need to transition from the current system to a new one within the first year of the contract. Technical support will be provided to enable the use of the RMF system within NGA development and operational environments. The contractor will also be responsible for integrating security controls and implementing process improvements within the NGA enterprise. Training and tradecraft support will include deskside support for NGA users, classroom instruction, and recommendations for maximizing efficiency of the RMF system. Documentation and reports will be provided on a monthly basis, including progress against project plan, ongoing assessment results, management and technical issues, and man-hour and budget expenditures.

The work will primarily be performed at NGA Campus East (NCE), NGA Campus West (NCW) facilities, and government-approved off-site Sensitive Compartmented Information Facility (SCIF) Space for the Contractor. Telework options may be authorized upon approval. All contractor personnel are required to have a Top Secret clearance with SCI access, and foreign nationals are prohibited from working on classified and unclassified portions of the contract. The contractor will be responsible for maintaining security requirements, including signing non-disclosure agreements and completing required training. Monthly progress meetings and reports, quarterly change management board meetings, and a final report and evaluation will be required as part of the contract.