DOD Sources Sought: George C. Marshall European Center for Security Studies Cloud Migration

Notice ID: HQ084724SS0002

Washington Headquarter Services Acquisition Directorate is seeking information on possible vendors that can provide Comprehensive Migration to a Hybrid Microsoft Environment at the George C. Marshall European Center for Security Studies. The George C. Marshall Center currently operates within a primarily on-premise Microsoft environment, encompassing services like Active Directory, Exchange, Windows 11, and Windows Server. This setup, under the domain marshallcenter.org, strictly adheres to US Department of Defense (DoD) security standards and is Impact Level 4 (IL4) compliant. The center’s IT infrastructure also includes an IL2 compliant Microsoft 365 (M365) tenant with 300 E3 licenses for staff and 250 E1 licenses for students. As a recognized DoD educational institution, the Center has recently been awarded a .edu domain and is in the process of upgrading to 400 M365 A5 licenses, significantly enhancing features for staff and providing extensive access for students. Despite these advancements, the current utilization of the M365 cloud services remains limited, primarily to Microsoft Teams and SharePoint for course management.

Scope:

1. Enhancement of Cloud Security: o Upgrade and secure the existing Microsoft cloud environment to meet or exceed DoD IL4 standards. o Implement necessary security measures to securely host Controlled Unclassified Information (CUI) in compliance with the most current DoD standards and guidelines. o Document security enhancements and processes for an Interim Authorization to Test (IATT) Assessment and Authorization (A&A) package. o Ensure the new hybrid operating environment aligns with and adheres to all relevant DISA and DoD guidelines. Complete all required checklists and documentation in accordance with the latest DISA Cloud Computing Security Requirements Guide (SRG).

2. Migration of Key Services: o Transition Active Directory and Exchange services to Azure/Entra and a cloud or hybridcloud Exchange environment. o Migrate to the marshallcenter.edu domain, integrating Common Access Card (CAC) authentication, multifactor authentication, and Single Sign-On capabilities.

More here.

🔊 Listen to Story