Cross-Domain Solutions for automated file transfer across security classifications

This Tender is invited by the Issuer. Overview The Department of the Prime Minister and Cabinet (PM&C) is seeking market information on Cross-Domain Solutions (CDS) to securely automate file transfers between PROTECTED and SECRET environments through a Request for Information (RFI). Information Requested The RFI should address two solution options: A one-way low-to-high service that transfers files from PROTECTED to SECRET A bi-directional service that supports controlled transfers in both directions Both options should support automated and scheduled file transfer, integration with content and malware scanning tools such as OPSWAT, configurable approval workflows, audit logging, notifications, transfer validation, and robust exception and error handling. Suppliers should explain how encrypted or compressed files are decrypted or unpacked, inspected, reassembled and transferred, and where human review or approval is required. Pricing The response must include indicative pricing for both options, separately identifying implementation, solution configuration, integration, documentation, testing, security accreditation support, licensing, maintenance and ongoing support costs. Users and Their Needs Operational users need simple status visibility, notifications, approval queues where required, and clear remediation steps for rejected, quarantined or failed transfers. Technical and security teams need configurable policies, integration with file shares and scanning services such as OPSWAT, comprehensive audit logs, monitoring, role-based administration, and evidence to support security assessment and accreditation. For the bi-directional option, users need controlled return transfers and automated validation while retaining any required human approval for release to the lower-classification environment. A desirable capability is the ability for authorised systems to initiate transfers through a secure web API. Technical and Business Constraints The solution will operate across PROTECTED and SECRET security domains and must be suitable for security assessment and accreditation. It must enforce directional transfer controls, content inspection, auditability, least privilege and separation of duties. The solution must integrate with existing file transfer processes, file shares and scanning tooling, including OPSWAT or an equivalent service. It must support operational requirements, including urgent and out-of-hours releases. Suppliers should identify infrastructure, hardware, software, hosting, network, support and licensing dependencies; deployment lead times; data sovereignty considerations; and any constraints associated with encrypted, compressed or unsupported file types. Instructions to Tenderers Indicative milestones for this RFI process are: RFI published: 12/11/2026 RFI closes: 26/11/26 Clarification sessions or presentations: date to be confirmed RFI assessment and options paper: following evaluation of responses Potential RFQ or procurement activity: subject to approval and funding Enquiries For enquiries regarding this opportunity, contact: mattison.aquilina@pmc.gov.au