Assured Compliance Assessment Solution (ACAS) for the Program Acquisition Executive (PAE) Cyber Sensing Portfolio Management Office

The Defense Information Systems Agency (DISA) is seeking sources for the next-generation Assured Compliance Assessment Solution (ACAS) for the Program Acquisition Executive (PAE) Cyber Sensing Portfolio Management Office. The solution should provide a comprehensive scanning capability for all devices connected to the DoW Information Network (DoWIN), including network-based, host-based agent, and agentless scanning capabilities. The solution should also assess compliance with security controls, configuration best practices, and patch management, and support various operating systems and device types. The key areas of support include: • Comprehensive scanning solution for all devices connected to the DoW Information Network (DoWIN) • Network-based, host-based agent, and agentless scanning capabilities • Assessment of compliance with security controls, configuration best practices, and patch management • Support for various operating systems and device types • Support for cloud deployment utilizing at least FedRAMP high with Impact Level 5 (IL5) in the cloud • Scanning capabilities for cloud assets, IoT, OT, container assets, and web applications