USACE - NWW RMF & WWBI - MRAS

The U.S. Army Corps of Engineers (USACE), in collaboration with the General Services Administration (GSA), is conducting a comprehensive market research initiative to identify capabilities pertinent to the ongoing support of the Risk Management Framework (RMF) and Authorization for the Walla Walla Business Intelligence (WWBI) Program. The primary goal of this undertaking is to ensure that WWBI remains compliant with all Department of Defense (DoD), U.S. Army, and USACE cybersecurity mandates while aligning with the broader USACE Civil Works Business Intelligence Data Strategy. This effort underscores a strategic focus on managing and leveraging data as a critical asset, ensuring that it adheres to principles such as visibility, accessibility, trustworthiness, interoperability, and security.

At the heart of this contract is the requirement for continued support in maintaining RMF compliance for WWBI's multiple web application modules. These modules include After Action Review (AAR), Asset Management Requirements Identification and Prioritization (AMRIP), Conference Room Scheduler (CRS), and several others that are integral to USACE's Civil Works mission. The contractor will be responsible for ensuring these applications not only meet compliance standards but also promote data sharing and analysis within a cloud-smart environment. This involves modernizing applications hosted on-premises by CIO/G6 at the NWW data center while utilizing an Oracle 19c database framework.

The scope of work extends beyond mere compliance; it encompasses comprehensive cybersecurity support requirements including documentation management, continuous monitoring, vulnerability management, and reporting across various frameworks such as RMF and Continuous Monitoring. The contractor must actively manage security controls specific to WWBI, maintain accurate records in the Enterprise Mission Assurance Support Service (eMASS) system, execute continuous monitoring plans through regular system security scans, lead vulnerability remediation efforts, and update RMF documentation quarterly.

Moreover, adherence to Cybersecurity Maturity Model Certification (CMMC) 2.0 program requirements is essential. This involves complying with security controls outlined in NIST SP 800-171 and DFARS 252 standards. Through these efforts, the selected contractor will play a pivotal role in safeguarding sensitive information within WWBI while enhancing its operational effectiveness in alignment with strategic objectives set forth by USACE's Civil Works mission.