RFI USAFE-AFAFRICA/A6 Risk Management Framework (RMF) Process Efficiencies
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The 764th ESS Contracting Squadron, on behalf of USAFE-AFAFRICA/A6, has issued a Request for Information (RFI) to identify commercial solutions for improving Risk Management Framework (RMF) Process Efficiencies. The government is particularly interested in automation and AI solutions that drive process improvements and mature technologies while maintaining full compliance with NIST SP 800-53 Revision 5 and DoDI 8510.01. This RFI is for planning and market research purposes only and is not a solicitation. White papers are due May 27, 2026.
Purpose & Need
The RMF process is complex and often bureaucratic, leading to lengthy timelines for achieving an Authority to Operate (ATO). USAFE-AFAFRICA faces challenges due to rapid growth in approved systems and the transition to NIST SP 800-53 Revision 5. The government seeks solutions to prototype and demonstrate efficiencies across all RMF steps, encompassing both process improvements and technological innovations.
Scope of Interest
Solutions should demonstrate end-to-end objectives within 12 months and be implementable within 12 months of a potential contract award. The scope includes addressing unclassified, SECRET, and SECRET//REL systems. Desired characteristics include addressing all RMF steps, analyzing 720 baseline controls, novel capabilities, and specifically reducing RMF Step 4 from 90 to 45 days. Proposed technology should ideally have an existing ATO, interim authority to test (IATT), or Common Criteria certification.
Information Requested
Interested parties are requested to submit a white paper (limited to 12 pages) addressing:
- Company Information: CAGE, UEI, size, certifications, contract vehicles.
- Technical Solution Overview: Description, mapping to RMF steps, automation/AI approach, and how Step 4 reduction will be achieved.
- Maturity & Compliance: Technology Readiness Level (TRL), ATO/Common Criteria status, FedRAMP, DoD Impact Level, and relevant past performance.
- Implementation Approach: Demonstration plan, milestone schedule, personnel needs, and use of consultants.
- Pricing Construct: Rough Order of Magnitude (ROM) estimate, pricing model, and suitable contract vehicles.
- Recommended Acquisition Approach: Preferred pathway and contract type.
Contract & Timeline
- Type: Request for Information (RFI) / Sources Sought
- Set-Aside: None specified
- Questions Due: May 13, 2026, 1400 CEST
- White Papers Due: May 27, 2026, 1400 CEST
- Published: May 1, 2026
- Place of Performance (Implied): Ramstein AFB, Germany
Contact Information
Questions and white papers should be submitted via email to Mr. Corey Chopko (corey.chopko@us.af.mil), Ms. Ina Hemmer (ina.hemmer.de@us.af.mil), and Capt Kevin Sheedy (kevin.sheedy.3@us.af.mil).