Contracts

RPI Group announces partnership with Camp Lejeune North Carolina Public Works Division

RPI Group is proud to announce that in partnership with Camp Lejeune North Carolina (CLNC), Public Works Division (PWD) we have successfully achieved a USMC-wide, “Type” Authority to Operate/Authority to Connect (ATO/ATC) for Industrial Control Systems/Operational Technology (ICS/OT).  Our innovative approach relies on securing and accrediting an architecture rather than a specific hardware (H/W) or Software (S/W) solution.  Our vendor and network agnostic approach is a first for the USMC and supports not only legacy but new ICS/OT systems operating on the Marine Corps Enterprise Network (MCEN). 

RPI Group is excited about the next phase of the operation where we will work with CLNC PWD to implement this architecture throughout the base.  Securely hosting these ICS/OT systems on the MCEN will results in a significant cost avoidance across the USMC in energy reduction through load shedding and peak shaving as well as reduce maintenance costs through the use of predictive maintenance and other process improvements.  As a USMC-wide “Type” authorization RPI Group can leverage this solution in support other USMC commands, programs and installations in their efforts to better secure ICS/OT devices on their network.  This is another example of how RPI Group works with customers to develop customized, innovative solutions to their unique Cybersecurity and Authorization requirements.

RPI Group, Inc. Part of Team Selected by MARCORSYSCOM to Modernize MAGTF Logistics Support Systems

September 2018 – RPI Group is part of a team led by Tactical Edge, Inc. that was recently awarded a prime contract award with Marine Corps Systems Command (MARCORSYSCOM). The contract award, worth up to $49 million split over 5 years, was awarded to modernize three of the systems within the Marine Air-Ground Task Force (MAGTF) Logistics Support Systems (MLS2) software suite. This effort will focus on consolidating the three systems that make up the MLS2 software suite, into a single baseline utilizing a single Platform-as-a-Service (PaaS) approach to reduce the total lifecycle sustainment costs while improving data quality and end-user capabilities.

The effort kicked off on September 5, 2018, with development, Information Assurance (IA), management, and support work being performed at multiple sites around the world. The three systems that make up the MLS2 software suite include Common Logistics Command and Control System (CLC2S), Transportation Capacity Planning Tool (TCPT), and the Storage Retrieval Automated Tracking Integrated System (STRATIS). STRATIS is also supported via a Secure Wireless (Air Fortress) infrastructure, enabling flexible warehouse management capabilities. Together, these systems provide a variety of Logistics-focused functions to the warfighter, including request management, supply and asset management, transportation planning, warehouse management, and secure wireless networking.

Leading the effort for RPI Group will be Retired Marine Master Sergeant William Rybczynski. With over 30 years of experience supporting and leading Cybersecurity efforts in the Marine Corps, Mr. Rybczynski has a wealth of knowledge to share. According to Mr. Rybczynski: “RPI Group is excited to be a part of this robust team supporting the warfighting mission. Ensuring the continued operation of this software suite allows the Marine Corps to have a robust system that provides information critical to both leadership and the individual Marine. We are proud to be a part of an incredible team focused on maintaining and maximizing the effectiveness of the MLS2 suite.”

RPI Group, Inc. Wins 5-Year ID/IQ Navy Contract for Technical Services

RPI Group, Inc. (RPI), as a member of the UEC Prime Team, joins four other companies who were awarded a combined $949,900,000 indefinite delivery/indefinite quantity (ID/IQ) supply contract from the Space and Naval Warfare Center (SPAWAR) Atlantic. The contract is for Cyber Mission Systems, Kitting and Supplies. The work includes procuring systems that provide wireless communications, detection, collection and exploitation of electrical and electronic equipment to support the warfighter. 

Related services such as sustainment, maintenance and disposal may be procured under the scope of this contract. The contract is a five-year award with a 24-month option period. Work will be performed worldwide and is expected to be completed by August 2023.  If the option is exercised, work would continue through August 2025. 

Wayne Biemolt, Director of Business Development of RPI, stated, “RPI is honored to be included on the UEC team and selected for what is our first award in the Charleston marketplace. We stand ready to begin this new relationship with UEC and look forward to supporting SPAWAR by delivering secure wireless and cyber warfare capabilities to the warfighter.”

MCB Camp Lejeune – ICS Accreditation

Background

Marine Corps Base (MCB) Camp Lejeune currently has multiple Industrial Control Systems (ICSs) that require accreditation including: Building Control Systems like EMCS, high voltage electrical SCADA systems, and water/wastewater SCADA systems. For the last few decades, these systems were primarily standalone systems using proprietary control protocols that were not accredited and could not securely connect to traditional/shared information technology (IT) networks. Today, these ICSs are required to be connected to IT networks; however, caution must be exercised since these systems typically use insecure Internet Protocol (IP) devices that greatly increase the likelihood of cyberattacks.

To date, the Marine Corps has accredited ICSs with little success. Past challenges have included:

·       Finding and retaining IT and OT ICS experts capable of accrediting ICSs.

·       Procuring devices that are Federal Information Processing Standard 140-2 (FIPS 140-2) validated – not just FIPS 140-2 compliant.

·       Finding a balance between IT/OT confidentiality, integrity, and availability priorities. IT prioritizes confidentiality and integrity over availability. OT prioritizes availability and integrity over confidentiality. Designing a system that addresses all three is challenging.

 

In October of 2017, MCB Camp Lejeune hired RPI Group, Inc. (RPI) to support their ICS Accreditation efforts after using the same standalone system for the last few decades. The mission is to connect the ICS with the IT network while maintaining secure control to minimize the likelihood of cyberattacks.

Project Description

RPI Group, in support of Marine Corps Base (MCB) Camp Lejeune, has designed a “Type” accreditation package for the ICSs that will operate securely on any network, ensure the system securely and cryptographically isolates the subsystems, and accredit all ICS/operational technology systems.  This proposed system architecture is based on two design requirements: it must provide a single management tool providing redundancy to each physical server and it must use an encrypted virtual private network to ensure and cryptographically isolate ICS/OT devices and subsystems.

RPI Group has built an ICS/OT network based on shared virtualized environment with specific ICS/OT system firewalls (hubs), and FIPS 140-2 validated IPSec tunnels (spokes) to connect the ICS/OT devices to the IT network. This Hub-and-Spoke network along with the associated firewalls and end-point connection devices will require ongoing vulnerability scanning, patching and maintenance to be performed by RPI personnel.

 

Camp Lejeune has spent the summer of 2018 working with the MCEN A&A team to  complete a “Type” accreditation for these ICS/OT systems that can be used across the MCEN.    The work will include finalizing controls, completing the System Security Plan, the Incident Response Plan, and the Contingency Plan, and lastly, the building/piloting of an off-network test platform.

RPI Group Capabilities

RPI Group Cybersecurity personnel have over 75 years of combined experience supporting the Warfighter and Operational Environments. This includes both DoD and commercial network security and risk assessments/audits, NIST RMF support, secure network architecture and design, and secure wireless solutions.   RPI Group provides SME support in the engineering of innovative and cost-effective solutions for securing ICS/OT systems and in developing policies and procedures to establish organization compliance with governing directives.  RPI Group has many years of experience directly supporting the Marine Corps and the Marine Corps Enterprise Network (USMC/MCEN) Authorizing Official (AO) and Certification Authority (CA) in RMF package review, policy writing, risk mitigations, and conducting risk assessments.

RPI Group delivers quality services with experienced technical cybersecurity professionals in support of complex enterprise IT programs. Our experts are leaders in the cybersecurity field and are continually called on to engineer unique solutions to complex problems and to conduct IT security assessments and audits with high levels of national and corporate security implications. We bring vast enterprise technology experience to bear on all efforts, continually exceeding all assigned program goals and deliverables. Being experts in all four areas of the A&A process (supporting AO, CA, advising customers, and providing Validation services) gives RPI Group a unique perspective into the A&A process and is a great benefit to our customers.

RPI Group, Inc. Awarded Six-Year Contract with VRE

Fredericksburg, VA – RPI Group, Inc. (RPI) was awarded a six-year IDIQ contract worth $1 million with Virginia Railway Express (VRE) to install new security cameras and access control equipment and to ensure integration of the installed equipment with the existing systems architecture. VRE is initiating a modernization of its security camera and access control systems as recommended by a recent Threat and Vulnerability Assessment (TVA), also performed by RPI.

RPI was awarded their first contact with VRE in July of 2016 to perform a risk and security assessment of the VRE bandwidth and network infrastructure, develop a plan to optimize and enhance their critical infrastructure, and provide security training for their end users. This was the first risk and security assessment of this scope and magnitude that was undertaken by VRE. The security camera and access control systems is one of two follow-up task orders.

VRE is a commuter train service that links the District of Columbia and Northern Virginia. The Northern Virginia Transportation Commission (NVTC) and the Potomac and Rappahannock Transportation Commission (PRTC) are transportation districts established under Virginia law and jointly own this service. An Operations Board consisting of members from each of the jurisdictions within the VRE service area governs the development and operation of VRE and serves as an advisory board to the VTC and PRTC governing boards.

VRE began its operations in 1992 and carries an average of approximately 19,000 weekday trips on two lines. The primary mission of VRE is to provide commuter-oriented passenger rail service between outlying suburbs and the Washington-Arlington-Alexandria urban core. Some tourists and “day-trippers” also ride the trains. The service is heavily oriented towards that core area in the morning peak and in the opposite direction in the evening peak.

RPI Group, Inc. Provides Assessment Services to PRTC

Fredericksburg, VA - November 15, 2017 - RPI Group, Inc. (RPI) Cybersecurity is currently providing Risk and Security Assessment Services to the Potomac and Rappahannock Transportation Commission’s (PRTC) Bandwidth and Network Infrastructure.

The PRTC is a multi-jurisdictional agency representing Prince William, Stafford, and Spotsylvania Counties and the Cities of Manassas, Manassas Park and Fredericksburg.

PRTC provides commuter bus service along the busy Virginia I-95 and I-66 corridors to points north (OmniRide & Metro Direct), and local bus services in Prince William County and the cities of Manassas and Manassas Park (OmniLink & Cross County Connector). PRTC also offers OmniMatch, a free ridesharing service. Operated by PRTC in partnership with the Northern Virginia Transportation Commission (NVTC), the Virginia Railway Express (VRE) provides commuter rail service along the Manassas and Fredericksburg lines, connecting to transit providers at stations in Virginia and the District of Columbia.

RPI is utilizing a 3-phase assessment approach. Phase One will capture a comprehensive understanding of PRTC’s network topology, data processes and infrastructure. The result of this first phase of data collection will support Phase Two capital budgeting recommendations that provide an optimal investment strategy to offset vulnerability gaps, implement remediation priorities and sustain improvements to the organization’s infrastructure and overall cybersecurity posture. Phase Three will deliver a training and education program that provides PRTC personnel with information about current best practices in cybersecurity, social engineering threats and countermeasures and raising awareness of risky network and online behaviors resulting in an educated and informed staff.

 

RPI Wins Wireless Assessment

Fredericksburg, Virginia – October 25, 2017 - RPI Group, Inc. (RPI) has partnered with Cyberkong (CKI) to complete a wireless security assessment for one of CKI’s commercial clients. RPI will deliver two Enterprise Wireless Security Assessments and subsequent reporting to ensure this organization is utilizing wireless networking technology securely. With the recent discovery of a flaw in the Wi-fi Protected Access 2 (WPA2) security standard, it is critical for organizations to validate the integrity of their wireless networks. Additionally, it is critical that any systems that have been patched for this vulnerability are tested to confirm that the patch has been implemented correctly.

CKI provides resilient solutions and cybersecurity for critical assets and infrastructures to government agencies, armed forces, and commercial industries. Their federal and commercial experience, highly skilled workforce, strong management plans, and dynamic security landscape complement the services of RPI enabling the partners to provide their clients with the highest service and engagement possible.

RPI Group, Inc. Awarded Energy Management Control System Support Services Contract

Camp Lejeune, NC - RPI Group Inc. (RPI) has been awarded a prime contract to provide Energy Management Control System (EMCS) Support Services to the Public Works Division (PWD) at Camp Lejeune in North Carolina. RPI will be providing technical assistance with the Risk Management Framework (RMF) for DoD IT and the Marine Corps Certification and Accreditation Support Tool (MCCAST V2) for achieving and maintaining Authorization to Operate (ATO) for EMCS.

RPI is strategically teamed with Johnson Controls (JCI) to provide knowledge, training and support to assist the PWD program in the understanding, operation, maintenance, management and utilization of the EMCS. This was a two-year capture effort has led to a new capability for RPI that should be marketable to other DoD and commercial organizations. 

Johnson Controls is a “global diversified technology and multi industrial leader serving a wide range of customers in more than 150 countries.” They are joining RPI to provide “innovative solutions to drive the future of urban efficiency” and cybersecurity.

RPI Group, Inc. Awarded United States Air Force’s Imagery Compilation and Exploitation (ICE) Prime Contract

RPI Group, Inc. is extremely proud to announce its newly awarded Prime contract award providing Air Force Operations & Maintenance (O&M) Services for the United States Air Force’s Imagery Compilation and Exploitation (ICE) contract.

This single award, multi-year contract has an initial contract ceiling value of approximately $22 million, inclusive of a base year and 4 one-year options. RPI’s responsible placement of Enterprise Engineers and Systems Analysts across the United States is illustrative of its robust technical and business capabilities to the U.S. Air Force (USAF) and the Warfighter.

“Our ICE award is a testament to the many successful years of front-line leadership, reliability and resolve of our high performing contract teams. This complex and unique work for the ICE contract demonstrates the exceptional and multifaceted capabilities RPI has sharpened through years of development and experience,” said Mr. Robert Pleban, RPI’s President & CEO. “Our greatest asset lies in the dedicated talents of our technical teams. The 24/7/365 ICE commitment to USAF operational continuity is best illustrated by the program’s superb results over the past few years. Our employee’s cooperation and synergy with our government and commercial partners is a perfect example of the one team, one fight objective.  RPI’s commitment to put our client and employee welfare at the forefront of our business goals facilitates the successful synergy to create consistent, dynamic and effective solutions.”

RPI Group, Inc. Win TRADOC Contract

May 2017 – Denver, Colorado - The RPI Group and Team RPI Training Members, to include StormWind Studios, will work with the United States Army Training and Doctrine Command (TRADOC) to provide specialized, scenario-based virtual training to 96 TRADOC Information Assurance (IA) and Information Technology (IT) military and civilian employees.

TRADOC “recruits and trains Soldiers, develops leaders and shapes the Army by building and integrating formations and capabilities.” Their goal is to consistently improve the Army through designing, acquiring and building its future.

The courses that RPI Group will provide include Microsoft 70-697: Install, Configure, and Support Windows 10, CompTIA Security+ (SYO-401), Certified Information Systems Security Professional (CISSP), Information Technology Infrastructure Library (ITIL) Foundation and other Cybersecurity courses that support the US Army IA Best Business Practices. 

StormWind Studios® delivers game changing Epic LIVE®, Instructor-Led training that combines state of the art "Hollywood-style" computer generated imagery (CGI) with award-winning instructors, and the most current content available, to create a stunning form of virtual-sensory learning that visually captivates students and increases retention.

Personnel who have completed the virtual training sessions will be tracked, where applicable, using PEARSON VUE’s Asset Management System (AMS) for online practice tests to demonstrate mastery in the subject matter in order to prepare themselves for professional certification. Pearson VUE’s AMS solution will be used to manage TRADOC’s learning resources to ensure students are ready for their certification exam by connecting the student’s exam practice test to the distribution of their exam voucher. This methodology ensures that only students demonstrating competent knowledge and familiarity of the exam objectives (by successfully meeting the practice test thresholds) are provided an exam certification voucher. 


 Founded in 2001, RPI Group Inc. (RPI) is a privately-held, service-disabled veteran owned small business (SDVOSB) providing a variety of tailored services to the National Security Community, the U.S. DoD and the commercial marketplace. RPI brings together an accomplished team of national security, systems engineering and cyber experts with the experience, relationships, and qualifications to support a wide range of clients.  RPI’s core capabilities include:  Cyber Security & Secure Wireless Solutions, Network Architecture & Engineering, Training & Certification Testing, Hydro-Acoustic Research & Development, and Acquisition & Systems Engineering and Technical Assistance (SETA).   RPI is headquartered in Fredericksburg, VA with offices in Lexington Park, MD; Dahlgren, VA; Charleston, SC; Huntsville, AL; San Diego, CA and Denver, CO.

Contact
Johnna Hetrick, Marketing Director
10718 Ballantraye Dr. Suite 410
Fredericksburg, VA   22407
jhetrick@rpigroupinc.com
Ph: 540.898.8700

 

RPI Group, Inc. Selected for Validation and Wireless Support for Blount Island Command

January 2017 – Jacksonville, Florida - RPI Group, Inc. (RPI) has been selected to provide Validator and Wireless subject matter expert (SME) support to the Blount Island Command (BIC). BIC is a United States Marine Corps Logistics Command located in Jacksonville, Florida. As the hub of the Marine Corps’ prepositioning programs, Marine Corps Support Facility Blount Island serves as the home of BIC and its worldwide mission supporting Marine expeditionary forces.

RPI will perform Information Technology (IT) Validation services on four BIC communications projects to include their enterprise network. Additionally, RPI is providing SME support to tune the BIC Air Fortress secure wireless network. This support includes testing, repairing, and installing government funded and provided wireless assets. Furthermore, the Command’s Air Fortress network is beingdocumented and maintained to ensure base wide coverage and to meet government compliance regulations.

RPI will be providing this work via a Consulting Services Contract with BIC. During the period of performance, this contract is available for Marine Corps Organizations/Commands to use that have related cybersecurity, IA, C&A, or wireless requirements.

RPI is awarded a contract to perform a risk and security assessment of the VRE

RPI Group was competitively awarded a contract to perform a risk and security assessment of the Virginia Railway Express (VRE) bandwidth and network infrastructure. This assessment includes a plan to develop, optimize and enhance VRE’s critical network infrastructure, assess the security for critical networks/systems, and provide customized security training for VRE’s end users.
 
VRE began operations in 1992 and carries an average of approximately 19,000 weekday trips on two lines. In January 2014, VRE’s Operations Board adopted System Plan 2040 which calls for expansion of service, requiring the addition of railcars, expansion of station and yard facilities, as well as expanding operations to meet the goal of doubling ridership by 2040.
 
The primary mission of VRE is to provide commuter-oriented passenger rail service between outlying suburbs and the Washington-Arlington-Alexandria urban core. Some tourists and “day-trippers” also ride the trains. The service is heavily oriented towards that core area in the morning peak and in the opposite direction in the evening peak.
 
A risk and security assessment of this scope and magnitude has never been undertaken by VRE. The RPI Group proposal for this effort was ranked first among seven qualified offerors ranging from other small businesses to large businesses with 10,000+ employees. 
 
This work is in addition to the ongoing support RPI is providing for the VRE installation of the federally-mandated Positive Train Control (PTC) wireless network.  RPI conducted an in-depth site survey and provided VRE with a recommended solution that would ensure a rugged, reliable, and secure wireless network required for PTC operations.
 
Craig Hartburg, the Director of Operations & Security at RPI Group states, ‘“We are excited about the opportunity to serve alongside of VRE to protect and improve their network which is a critical part of the Virginia transportation infrastructure.” 
 
Founded in 2001, RPI Group Inc. is a privately-held, service-disabled veteran owned small business providing a variety of tailored services to the National Security Community and the Defense Department. RPI is headquartered in Fredericksburg, VA with offices in Lexington Park, MD, Dahlgren, VA, Huntsville, AL, San Diego, CA and Denver, CO. RPI brings together an accomplished team of national security, systems engineering and cyber experts with the experience, relationships, and qualifications to support a wide range of clients. 

RPI Group, Inc. Is Awarded VRE Contract

RPI Group was competitively awarded a contract to perform a risk and security assessment of the Virginia Railway Express (VRE) bandwidth and network infrastructure, develop a plan to optimize and enhance VRE’s critical network infrastructure, and provide security training for VRE’s end users.

VRE began operations in 1992 and carries an average of approximately 19,000 weekday trips on two (2) lines. In January 2014, VRE’s Operations Board adopted System Plan 2040 which calls for expansion of service, requiring the addition of railcars, expansion of station and yard facilities, as well as expanding operations to meet the goal of doubling ridership by 2040.

The primary mission of VRE is to provide commuter-oriented passenger rail service between outlying suburbs and the Washington-Arlington-Alexandria urban core. Some tourists and “day-trippers” also ride the trains. The service is heavily oriented towards that core area in the morning peak and in the opposite direction in the evening peak.

A risk and security assessment of this scope and magnitude has never been undertaken by VRE. The RPI Group proposal for this effort was ranked first among seven qualified offerors ranging from other small businesses to large businesses with 10,000+ employees. 


Craig Hartburg, the Director of Operations & Security at RPI Group states, ‘“We are excited about the opportunity to serve alongside of VRE to protect and improve their network which is a critical part of the Virginia transportation infrastructure.” 


Founded in 2001, RPI Group Inc. is a privately-held, service-disabled veteran owned small business providing a variety of tailored services to the National Security Community and the Defense Department. RPI is headquartered in Fredericksburg, VA with offices in Lexington Park, MD, Dahlgren, VA, Huntsville, AL, San Diego, CA and Denver, CO. RPI brings together an accomplished team of national security, systems engineering and cyber experts with the experience, relationships, and qualifications to support a wide range of clients. 


Additional Links

VRE | http://www.vre.org/