SAM #7571TE26R00001

HHS RFI for Automated Cryptographic Discovery and Inventory (ACDI) Tool Solutions

The U.S. Department of Health and Human Services (HHS), Office of the Chief Information Officer (OCIO), Office of Information Security (OIS), is seeking industry input on Automated Cryptographic Discovery and Inventory (ACDI) tool solutions to support cryptographic asset management and post-quantum cryptography (PQC) transition planning across HHS IT environments. - Government Buyer: - U.S. Department of Health and Human Services (HHS) - Office of the Chief Information Officer (OCIO) - Office of Information Security (OIS) - Products/Services Requested: - Automated Cryptographic Discovery and Inventory (ACDI) Tool - Commercial or commercially available solution - Includes software licenses, configuration, deployment support, documentation, and training - Must support on-premises, cloud, and hybrid environments - Must comply with federal cybersecurity standards and integrate with enterprise systems - Project Management Support - Technical Documentation Development - Software Deployment and Implementation - Testing and Validation - Reporting (bi-weekly on cryptographic discovery, vulnerabilities, and compliance) - Training Development and Delivery - Unique/Notable Requirements: - Solution must automate discovery, inventory, and risk assessment of cryptographic assets - Must support migration to post-quantum cryptography (PQC) - Compliance with OMB M-23-02 and federal cybersecurity standards - Integration with existing HHS enterprise systems - No specific OEMs, vendors, part numbers, or quantities are listed; HHS is seeking capability statements or white papers from interested parties.

Description

This Request for Information (RFI) is issued by the U.S. Department of Health and Human Services (HHS), Office of the Chief Information Officer (OCIO), Office of Information Security (OIS), for planning and market research purposes only. This RFI is NOT a Request for Proposal (RFP), Request for Quote (RFQ), or an Invitation for Bid (IFB), and does not commit the Government to issue a solicitation, award a contract, or pay any costs incurred in the preparation of a response. All information submitted in response to this RFI is voluntary.

The Government seeks information from industry regarding commercial or commercially available Automated Cryptographic Discovery and Inventory (ACDI) solutions to support enterprise cryptographic discovery and inventory management. Additionally, the Government requests feedback to the SOO to help us refine our objectivesAll information regarding this RFI, including the Government’s requirements and requested response information, can be found in the attached documents.

Questions regarding this announcement shall be submitted in writing via e-mail to Contract Specialist Jordan Neal at jordan.neal@hhs.gov and Contracting Officer Julie Rodriguez at julie.rodriguez@hhs.gov by June 1, 2026, at 12:00 PM ET. Verbal questions will NOT be accepted. Questions shall NOT contain proprietary, sensitive, or classified information. The Government does not guarantee that questions received after this date and time will be answered.

Interested parties are requested to respond with a capability statement or white paper. Responses are due no later than June 5, 2026, at 12:00 PM ET and shall be submitted via e-mail to Jordan Neal at jordan.neal@hhs.gov and Julie Rodriguez at julie.rodriguez@hhs.gov. Late responses will not be accepted.

All responses shall include the solicitation number and company name in the subject line of the e-mail submission. Proprietary information, if any, should be minimized and MUST BE CLEARLY MARKED. All submissions become Government property and will not be returned.

View original listing