Description
The U.S. Department of Health and Human Services (HHS) is seeking information from industry regarding commercial or commercially available Automated Cryptographic Discovery and Inventory (ACDI) solutions to support enterprise cryptographic discovery and inventory management. The ACDI tool should provide automated capabilities to discover cryptographic algorithms, protocols, certificates, and key management implementations across systems, applications, and network infrastructure. The tool will enable HHS to develop a comprehensive and accurate inventory of cryptographic assets, identify the use of vulnerable or quantum-vulnerable algorithms, and support informed planning for the migration to Post-Quantum Cryptography (PQC).
Some key features of the ACDI tool include:
• Automated discovery and inventory of cryptographic assets
• Identification of cryptographic algorithms, certificates, and key management implementations
• Support for discovery across various environments, including on-premises infrastructure, cloud environments, and applications
• Risk assessment and prioritization of remediation activities
• Integration with enterprise systems, such as asset management and security information and event management (SIEM) systems
• Support for continuous monitoring and compliance activities
The contractor will be required to provide a commercial or commercially available ACDI solution, including software licenses, configuration, deployment support, documentation, and training necessary to support enterprise cryptographic discovery and inventory capabilities.