The request for information asks vendors seven questions on how DoD's RMF process can be changed to "reimagine" its overall approach to cyber risk management.