JWCC Draft Performance Work Statement (PWS)

The Defense Information Systems Agency (DISA) is soliciting information through a Request for Information (RFI) regarding the Joint Warfighting Cloud Capability Next (JWCC Next) initiative. This effort seeks to enhance the Department of Defense's (DoD) cloud capabilities beyond the current JWCC contract, emphasizing advanced cloud services and a multi-cloud strategy for improved flexibility and resource optimization. The JWCC Next aims to provide a range of cloud services including Anything as a Service (XaaS) across different classification levels and in various operational environments, ensuring services are resilient and globally accessible. DISA is interested in understanding industry capabilities related to AI, Machine Learning, cybersecurity, zero-trust principles, edge computing, and centralized management. Industry responses should outline how they would support the DoD's software modernization efforts, adherence to security standards, and complex environments. The RFI specifies the need for white paper submissions, highlighting that this is solely for information gathering and not a proposal for contract issuance. The deadline for responses is December 4, 2024, and any inquiries must be submitted in writing by November 22, 2024. This RFI reflects the DoD's continuous commitment to cloud innovation and operational readiness.

The document outlines a Request for Information (RFI) from the Department of Defense (DoD) regarding the Joint Warfighter Cloud Capability (JWCC) Next program. It seeks to gather insights from cloud service providers (CSPs) on tools and resources for developing responsible artificial intelligence (AI) and machine learning (ML) applications. The RFI includes questions about potential partnerships with NATO and other allies, data residency requirements, and existing offerings prioritized by the DoD. The document emphasizes the need for clarity in terminology related to cloud services and highlights that responses should help inform future contracts with SaaS and third-party providers, separate from prior agreements. It addresses cybersecurity compliance expectations and the government's interest in understanding industry capabilities to align future acquisitions with evolving operational needs. Additionally, it notes the RFI's intent to streamline responses by allowing references to existing documentation, indicating a focus on reducing redundancy. The overarching goal is to facilitate direct contracts with CSPs, enhancing collaboration while ensuring compliance with federal regulations and operational requirements. The projected timeline for contract awards is noted as potentially being within 2027, reflecting the preliminary stage of this acquisition initiative.

The Defense Information Systems Agency (DISA) is requesting information from industry regarding a new initiative called JWCC Next, aimed at expanding the Department of Defense's (DoD) capabilities in cloud services. This Request for Information (RFI) signals DISA's effort to enhance cloud modernization through a multi-cloud strategy, focusing on integrating advanced capabilities, including Anything as a Service (XaaS), across various classification levels. Key objectives include supporting the warfighter in diverse environments, enhancing cybersecurity measures, and fostering commercial partnerships to drive innovation. DISA seeks technical insight into multi-cloud strategies, AI and ML capabilities, Software-as-a-Service solutions, risk management approaches, edge computing services, and Zero Trust principles. Organizations interested in responding must submit white papers addressing outlined capabilities, adhering to specified guidelines, by December 10, 2024. The document emphasizes that this RFI is for information gathering and does not constitute a solicitation for proposals. Overall, the initiative reflects the DoD's commitment to modernizing IT infrastructure and ensuring operational resilience in a rapidly evolving digital landscape.

This document outlines instructions for completing a "Q&A" spreadsheet tab related to the "Draft Performance Work Statement (PWS) for JWCC Unified Cloud Marketplace." The primary purpose is to expedite the process of answering questions by standardizing the format of submissions. Respondents are required to populate specific columns: "Page" with the page number from the draft PWS, "Section/Paragraph" with the applicable section and paragraph number, and "Questions/Comments/Recommendations" starting with a topic reference. The document explicitly prohibits changing the specified format and aims to facilitate an organized and efficient review of inquiries regarding the draft PWS.

The Joint Warfighting Cloud Capability (JWCC) Next, now known as JWCC Unified Cloud Marketplace (UCM), is a critical Department of Defense (DoD) initiative to establish a secure, global, multi-vendor cloud infrastructure. This 81-page Performance Work Statement outlines the requirements for Cloud Service Providers (CSPs) to deliver extensible and secure cloud capabilities across all classification levels (Unclassified, Secret, Top Secret, TS/SCI) and Impact Levels (ILs 2, 4, 5, 6). Key objectives include providing highly available, resilient, and globally accessible cloud services, centralized management with distributed control, ease of use, service parity with commercial offerings, rapid elasticity, fortified security with Zero Trust principles, and advanced Artificial Intelligence/data analytics capabilities. The contract will serve all federal government customers for Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). The PWS details performance requirements across various tasks, including program management (identifying key personnel, program plans, reporting, and a service catalog), operations (modern cloud services, availability, resiliency, global accessibility, self-service, service parity, service delivery timelines, Edge Devices and Services, AI/advanced data analytics, advisory and assistance services, training, documentation, and the JWCC Next Console), fortified security, integration/interoperability, data transfer and portability, and centralized management and distributed control. It also includes sections on performance standards, incentives, place and period of performance, security requirements, government-furnished property, special considerations, Section 508 accessibility, and Cybersecurity Maturity Model Certification.