Request for Information (RFI): USA Storage 3.0

Statement of Objectives (SOO)

This Statement of Objectives (SOO) is provided in support of a Request for Information (RFI) to conduct market research for enterprise Storage as a Service (USAStorage 3.0). The goal is to identify commercial capabilities and solution approaches for modernizing, scaling, and securing enterprise storage for the Executive Office for United States Attorneys (EOUSA) and its 94 district offices nationwide.

• Support approximately 15,000 users across 250 office locations.

• Accommodate an initial data footprint of nearly 20 petabytes, with indefinite scalability and an approximate 2% month-over-month growth.

• Enable data access from multiple geographic locations at the nearest logical point to the user.

• Support Continuity of Operations (COOP) for remote users and processes.

• Architecture: Geo-dispersed, FedRAMP-approved Government Cloud hosting; SMB functionality for access via office, remote, VPN, and COOP environments; deduplication and compression.

• Identity & Access: Integration with EOUSA enterprise identity services (OKTA); PIV-based authentication; Active Directory management for permissions; enterprise-scale authorization and role-based access controls.

• Security & Compliance: Operation within U.S.-based Government Cloud regions; all data, backups, and metadata remain in the U.S.; contractor personnel must be U.S. citizens based in the continental U.S.; FIPS 140-2 encryption; compliance with DOJ security and privacy requirements.

• Availability: High availability and resilience; 99.8% target service availability; 12-hour recovery time objectives for district-level or backend infrastructure failures.

• Data Management: Full data lifecycle management with tiered storage (hot, warm, cold, archive); retention enforcement; WORM capabilities; litigation hold; long-term evidentiary preservation; support for AI integrations, vectorization, and LLM workloads.

• Migration: Migration of existing data (approx. 18 billion files, 20 PB) within a 24-month period, minimizing disruption and ensuring data integrity.

• Audit & Logging: Comprehensive audit logging per FISMA and NIST guidelines; integration with EOUSA-approved SIEM platforms; analytics and reporting capabilities.

• Support: Enterprise-grade operational support by U.S. Citizens; 24x7 incident response and phone support; system monitoring; ongoing sustainment.

• Migration activities: 36 months total (6 months design/dev/test, 24 months execution, 6 months stabilization).

• Performance will be within FedRAMP-approved Government Cloud environments.

• This is an RFI for market research purposes only and does not constitute a solicitation.

• Detailed questions and response instructions will be provided in a separate RFI document.

• Responses are voluntary and will not be returned.

• Proprietary information must be clearly marked.

Questions & Answers / Clarifications

This document contains supplemental questions related to the EOUSA Storage Project RFI and a Draft Requirements Document. It seeks to gather information from potential vendors to inform future solicitations.

• Quote Submission: Vendors are asked if they would submit a quote based on the provided information.
• Commercial Capability: Confirmation is requested on whether the company provides the service/product commercially and has the capability to perform all required services in the Draft Requirements Document.
• Experience: Vendors must indicate if they have similar or previous experience with the work outlined and if the Draft Requirements Document is sufficient for RFP response.
• Company Information: Questions cover appropriate NAICS codes, business size, applicable socio-economic categories, estimated subcontracting needs, and required lead time for contract performance.
• Technical & Security: Inquiries are made about the capability to provide personnel with requisite security clearances, realistic RFQ preparation time, and any restrictions on submitting an offer.
• Solution Details: Questions probe common risks, integration risks, necessary technical information for proposals (cost, performance, schedule), data requirements for Confidentiality, Integrity, and Availability (CIA) and Supply Chain Risk Management (SCRM), hardware/software infrastructure dependencies for cloud and software solutions, minimum operational requirements, and differentiators.
• Cloud Offerings: For Cloud Service Offerings (CSO), vendors are asked about FedRAMP authorization.

This RFI supplemental aims to gather detailed feedback to refine future solicitations, potentially impacting requirements, submission details, and evaluation criteria. Vendors are encouraged to provide URLs for capability statements and detailed project information, including customer POCs, contract values, and performance periods.