Zero Trust Automated Threat-Based Cyber Assessment Solutions

Background
The Zero Trust Portfolio Management Office (ZT PfMO) within the DoD Chief Information Officer (CIO) is responsible for coordinating and advancing the Department of Defense's (DoD) transition to a Zero Trust cybersecurity architecture. This initiative aims to modernize the DoD's capabilities in preventing malicious actors from exploiting data and resources.

Current cybersecurity assessment methods are often manual and slow, necessitating a shift towards continuous, automated, and threat-based assessments that provide real-time insights into risk.

Work Details
The RFI seeks information on automated Zero Trust Threat-Based Cyber Assessment (TBCA) solutions that can emulate adversarial activities to evaluate the state of Zero Trust implementations on UNCLASSIFIED and SECRET networks. Solutions must validate compliance with DoD Target Level Zero Trust activity outcomes, reduce costs associated with post-TBCA assessments, and support continuous monitoring for configuration drift.

The ZT PfMO is looking for solutions that can operate in various environments (on-prem, cloud, hybrid), be ready for production use by the end of Q2 FY26, and be procured by DoD Components. Industry input is requested on strategies for onboarding solutions, impact levels for effective assessments, suitable threat frameworks, benefits for Purple/Blue/Red teams, evolution of TBCA tools to minimize manual assessments, existing government testing environments, total cost of ownership estimates, continuous analysis capabilities, consideration of advanced ZT activities, readiness timelines for deployment, and reporting capabilities.

Period of Performance
The contract will be performed with a target readiness for production use by the end of Q2 FY26.

Place of Performance
The geographic locations include various environments such as on-premises, cloud, and hybrid setups.