2025.12.08 COF_RFI.pdf

RFI TRANSCOM-26-D001

REQUEST FOR INFORMATION (RFI)

FOR

UNITED STATES TRANSPORTATION COMMAND (USTRANSCOM)

Cyberspace Operations Forces and Support (COF)

TRANSCOM-26-D001

1. Purpose

This RFI is being issued for informational and planning purposes. Information gathered from this RFI will be considered to determine the most beneficial procurement approach for this requirement. The information requested will be used within USTRANSCOM to facilitate decision making and will not be disclosed outside the agency.

This announcement is not a Request for Proposal (RFP) or solicitation of any kind.

USTRANSCOM is not seeking or accepting unsolicited proposals for this requirement. This notice should not be construed as a commitment of any type by the Government to take or not take any action. Please note USTRANSCOM will NOT be responsible for any costs incurred by interested parties in responding to this RFI.

2. Background

The incumbent contract information, provided below, is for USTRANSCOM’s current COF requirement.

Incumbent Contract Number: HTC711-22-F-D053 Incumbent Contractor: CSIOS Corporation Incumbent Contract Type: Firm Fixed Price (FFP) Incumbent Award Value: ~$35.5 million Incumbent Contract Acquisition Strategy: Small Incumbent Contract Period of Performance: 01 Sep 2022 – 30 Sep 2026

3. Scope

The scope of the contract effort is to provide a broad range of COF capabilities to support the USTRANSCOM, Air Mobility Command, and Army Transportation Command (ARTRANS) missions. The major associated activities that the contractor shall perform include: cybersecurity boundary defense; infrastructure support; intrusion detection monitoring and incident management; cyber threat analysis; security tool suite administration; cybersecurity forensic analysis; data integration, playbook generation and detection engineering for Security Orchestration, Automation, and Response (SOAR), Security Information and Event Management (SIEM), heuristic/analytic lifecycle management, cybersecurity dashboards/visualizations development, cybersecurity data integration into common operating picture (COP), continuous improvement and optimization, cyber operational planning, cyber operations mapping, exercise planning, readiness reporting, spectrum management, and satellite communications (SATCOM).

The contractor shall provide all deliverables related to these services.

The anticipated NAICS for this effort is 541513 - Computer Facilities Management Services.

The Small Business Administration small business size standard for NAICS code 541513 is $37.0 million annual average receipts (total or gross income) over the past three years. The acquisition strategy (to include contract vehicle) for this requirement has not yet been determined. The contract type has not yet been determined. The anticipated period of performance is 1 Oct 2026 – 30 Sep 2031 (Base + four 1-year options).

4. Description

USTRANSCOM seeks to issue a contract or task order for the requirement listed above. The purpose of these requirements is to provide a range of IT services to include cyber security solution operations and maintenance; cyber operational planning: cyber security solution software management, system administration, integration, technical testing and evaluation, analysis and guidance; and all deliverables related to these services.

The draft Performance Work Statements (PWS) (Attachment 1) includes additional details.

5. Industry Day Questions

We request interested parties to submit the following information in the format of a White Paper as outlined below. Again, this information will support market research activities within USTRANSCOM. The White Paper should be concise (no more than 5 pages for each requirement, 15 pages total), 12 pt Times New Roman font, and address only the information requested below (title pages, cover letter, etc., will not count against the page limit).

A. Company Information (General)

B. Business size and Socio-economic information C. Identify any Federal and DOD contract vehicles your company has under which this requirement could be awarded D. Any suggestions or recommendations (including a brief explanation “why?”) for this acquisition, to include suggested:

• Acquisition strategy

• Contract Vehicles

• NAICS

• Contract Type(s)

• Commerciality

• PWS and technical information,

• Any other information you feel is value-added.

E. Industry Insight: Bring us your ideas.

• What have you seen be successful for other commands or commercial entities?

• What were the challenges or issues encountered?

• Innovative Acquisition Strategies and Contract Vehicles used

• Previous solicitation methods and evaluation criteria that promote streamlining

G. Cyber Operations Forces Capabilities: Generally, describe your company’s abilities and interest in fulfilling USTRANSCOM’s COF requirement. Specifically address the information in subparagraphs 1) through 4) below.

1) Knowledge of/experience with planning, coordination, and synchronization of Defensive Cyberspace Forces, Defensive Cyberspace Operations, and C4S (Command, Control, Communications, and Computer Systems) support. Planning experience should include development of defined DoD products and documents including CONOPs, CONEMPs, Orders, and all Adaptive Planning and Execution (APEX) defined formats. C4S support should include experience with tactical/satellite communications, spectrum management, and analysis of operational support requirements. Developing mission thread analysis, mission relevant terrain – cyber (MRT-C), and task/critical asset lists. Across all areas, provide summary of experience with cross-Combatant Command and inter-agency coordination for operational planning and support activities.

2) Knowledge of/experience as a Cybersecurity Service Provider to include knowledge of applicable Federal and DoD cybersecurity directives, guidelines and best practices. Provide evidence of demonstrated capability as a Cybersecurity Service Provider to include extensive strategic, operational, and technical direct experience and insight into CSSP community best technologies, processes, and practices and thorough understanding of evaluation criteria.

Demonstrated knowledge management proficiency to support an 'always-ready-for-inspection' evidence library with document control. Demonstrated evidence of initiatives for CSSP continuous improvement and optimization.

3) Knowledge of/experience with providing cybersecurity services for DoD components IAW DODI 8530.01 to include vulnerability management, cyber incident detection, information security continuous monitoring, cyber incident handling, and insider threat monitoring. Must include capability to staff positions 24/7 with current TS/SCI eligible and DODM 8140.03 qualified personnel. Provide evidence of demonstrated experience monitoring/responding to incidents within client/server, cloud, DevSecOps Ecosystem, and hybrid environments. Provide evidence of proficiency with DoD-approved cybersecurity solutions and services such as (but not limited to) Security Event and Incident Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Endpoint Detection and Response (EDR), Endpoint Protection Platform (EPP), cloud application security solutions, native cloud security services, and Intrusion Detection/Prevention System (IDS/IPS).

4) Knowledge of/experience with of a broad understanding of cyber threat and adversary tactics, tools, and procedures (TTPs) as applicable to the DoD or the Federal Government.

Experience correlating intelligence data to cybersecurity events, collaborating with law enforcement/intelligence community writ large. Knowledge of cyber threat and proactive cybersecurity defenses to make recommendations to strategically enhance enterprise security posture. Demonstrate capability of developing analytics/heuristics to detect or counter cyber adversary TTPs. Provide summary of experience with cross-Combatant Command and inter-agency coordination for operational planning and support activities

6. Response Instructions

Responses to this RFI must be submitted to the TCAQ-DS at transcom.scott.tcaq.mbx.TCAQ- DS@mail.mil no later than 1000 CT, 22 December 2025. Please reference: TRANSCOM-26- D001 COF in your subject line.

Please follow the instructions below to request a one-on-one session.

1. In the body of your company’s RFI response e-mail, indicate if a one-on-one session is requested. Request deadline is 1000 CT, 22 December 2025.

2. A request does not guarantee a one-on-one session. The date of the sessions, number of one-on-one sessions, and time constraints may be adjusted due to the number of requests.

All responses to the RFI will be reviewed and utilized for market research.

7. Point of Contact (POC)

Contract Specialist:

Jonathan Severin

Contracting Officer:

Meggan A. DeBrobander

Attachment:

2025.12.08 COF PWS (Draft)

mailto:transcom.scott.tcaq.mbx.TCAQ-DS@mail.mil mailto:transcom.scott.tcaq.mbx.TCAQ-DS@mail.mil