Description
The NATO Allied Command Transformation (ACT) is seeking a Secure Cloud Service (SCS) to serve as a pre-accreditation validation environment, enabling iterative security testing, architecture refinement, and the generation of auditable evidence aligned with NATO Security Policy and NIST SP 800-53 Rev.5. The SCS will deliver a first level of operational cloud capability to priority Communities of Interest (COIs). Two prototypes will be delivered to address two different technologies. The contract will be awarded to one or two vendors as a fixed-price contract with a base period of performance from the award date through 15 July 2027, and one option period may be added. The estimated total contract value is approximately EUR 20,000,000.00.
• The SCS will prioritize representative capability validation over full operational scale.
• The cloud architecture will be deployed as a distributed off-premises cloud across at least four sites in three NATO countries.
• The primary objectives are to develop and validate two types of cloud architecture, demonstrate a federated, distributed, zero-trust-aligned cloud architecture, generate accreditation artifacts and audit-ready evidence, establish a direct, dedicated secure connection, migrate and validate priority COI application workflows, and deliver a Confidentiality, Integrity, and Availability (CIA) cloud environment.
• The scope of work includes security architecture and zero-trust implementation, data-centric security and cryptographic key management, secure direct connection and headquarters infrastructure, development of two cloud architecture configurations, delivery of four priority COIs, application migration testing, security audit, documentation, and accreditation support, and continuous monitoring, operations, and sustainment.
Attached files
Contact
Lee Ann Carpenter