SOURCES SOUGHT NOTICE

622775913

The Defense Information Systems Agency (DISA), on behalf of the Portfolio Acquisition Executive for Command, Control, Communications, & Enterprise (PAE C3E) and the DISA SD2 Business Systems Portfolio Program Management Office, is seeking sources for the administration and management of the new All-Domain Adaptive Platforms and Technologies Support (ADAPTS) Indefinite-Delivery/Indefinite-Quantity (ID/IQ) Single Award contract. The ADAPTS ID/IQ contract will provide support for DISA’s Services Platforms and analytical and business intelligence capabilities. ADAPTS Task Orders will support sustained operations, continuous software integration, platform-as-a-service (PaaS) engineering, and unified operational visibility across the DISA Connect customer access portal, ServiceNow, Salesforce, Workday, and Palantir platforms.

CONTRACTING OFFICE ADDRESS:

DISA/DITCO-NCR

6910 COOPER AVE,

FT. MEADE, MD 20755

INTRODUCTION:

This is a SOURCES SOUGHT NOTICE to determine the availability and technical capability of large and small businesses (including the following subsets: Small Disadvantaged Businesses, Certified 8(a), Service-Disabled Veteran-Owned Small Businesses, HUBZone Small Businesses and Woman-Owned Small Businesses) to provide the required products and/or services.

The Government anticipates awarding an IDIQ contract with an estimated value of $500 million, with an overall ordering period of up to ten years, consisting of:

The anticipated period of performance is:

The anticipated place of performance for this contract will be the Contractor’s site and at DISA Headquarters (6910 Cooper Ave, Fort Meade, MD, 20755). Travel in and around the primary place of performance may be required throughout the period of performance. Additional travel within the Contiguous United States may be required to support the requirements. Classified access and access to the Secret Internet Protocol Router Network will be available at DISA Headquarters Acquisition Building (6914 Cooper Ave, Fort Meade, MD 20755).

DISCLAIMER:

THIS SOURCES SOUGHT NOTICE IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS NOT A REQUEST FOR PROPOSAL. IT DOES NOT CONSTITUTE A SOLICITATION AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT. RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS NOTICE. NO FUNDS ARE AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS NOTICE. ANY INFORMATION SUBMITTED BY RESPONDENTS IS STRICTLY VOLUNTARY.

CONTRACT/PROGRAM BACKGROUND:

The ADAPTS ID/IQ requirement is a new requirement. However, portions of this requirement are currently being executed under the following, and the remainder of the requirement is new and not previously supported.

Contract Number: HC104719D2023 / HC104723F2000 Contract Vehicle: DISA Systems Engineering, Technology, and Innovation (SETI) ID/IQ Incumbent and their size: Business Computers Management Consulting Group, LLC (Small Business) Method of previous acquisition: Fair Opportunity Competition Among SETI ID/IQ Contract Holders Period of performance: April 3, 2023 through April 2, 2028

REQUIRED CAPABILITIES:

Interested vendor responses must demonstrate their technical capability to perform as the ADAPTS ID/IQ contract administrator and manager. Address each question directly with specific details and references or past project examples. Respondents should provide relevant examples of prior experience, methodologies, tools, governance frameworks, and lessons learned applicable to these capabilities.

1. Lead Systems Integrator (LSI) Experience Describe your firm’s corporate experience acting as a LSI managing cross-function teams and multiple subcontractors responsible for configuring, deploying, and sustaining on the referenced platforms. Provide at least one (1) past project where you successfully coordinated support across at least three (3) distinct platform ecosystems (e.g., Salesforce, ServiceNow, and Palantir).

2. Platform Management Describe your firm’s approach for securing, governing, managing application development, configuration changes, integrations, and data exchanges across the following platforms: ServiceNow, SalesForce, Palantir (Foundry/Gotham/Maven Smart System), and Workday. For the two Platforms that have recommended certifications for development support (ServiceNow and SalesForce), describe your firm’s current certification posture and demonstrated ability to maintain or obtain ServiceNow Certified Systems Administrator (CSA) certifications, and Salesforce Certified Platform Developer (Platform Developer I) certifications. Include the approximate count.

3. Secure Cloud Engineering and Development, Security and Operations (DevSecOps) Describe your experience deploying, securing, and maintaining enterprise applications in Department of Defense/Department of War Impact Level 6 or higher cloud environments. Include any experience implementing DevSecOps pipelines, automated testing, and secure code deployment.

4. Cross-Domain Solutions and Data Integration Briefly detail your experience implementing Cross-Domain Solutions, Application Programming Interface gateways, and automated data integration pipelines between disparate enterprise software-as-a-service/PaaS platforms.

5. Multi-Tenant Data Layer Architecture and Data Management Describe your organization’s experience designing, implementing, operating, and integrating data-layer capabilities for a multi-tenant, platform-based environment with numerous internal and external data interfaces. Address your approach to managing high volumes and varied types of data exchanges, including data ingestion, transformation, storage, access control, interoperability, data quality, interface monitoring, and error handling.

6. Platform Lifecycle Management Please describe the firm’s ability to support the Government’s use of the ServiceNow, Salesforce, Palantir, and Workday platforms by delivering scalable, maintainable, and governed platform capabilities. Specifically, address the firm’s ability to:

· Execute defined application-development, configuration, integration, and enhancement efforts when required;

· Limit the introduction and accumulation of technical debt, including unnecessary customization, duplication, integration complexity, and maintainability risk;

· Apply platform-native capabilities and recognized industry best practices, where appropriate;

· Establish or support governance processes for evaluating proposed applications, enhancements, and technical solutions; and

· Balance mission urgency and delivery timelines with cost, maintainability, interoperability, security, and long-term platform sustainability.

SPECIAL REQUIREMENTS:

1. Confirm whether your firm currently possesses a final Top Secret Facility Security Clearance issued by the Defense Counterintelligence and Security Agency. If not, detail your realistic timeline and capability to meet this requirement at the time of proposal submission, as dictated by individual Task Orders.

2. Confirm that your firm can provide 100% U.S. citizens holding active, favorably adjudicated Secret, Top Secret, or Top Secret/Sensitive Compartmented Information clearances. Secret will be required at the IDIQ level and Top Secret and above could be required for specific task orders, depending on the need. Describe your internal risk mitigation strategy and pipeline for recruiting, clearing, and onboarding personnel to ensure zero lag in contract transition.

3. Cybersecurity Maturity Model Certification (CMMC): The Contractor must achieve and maintain CMMC Level 2 certification (self) at the time of award and for the duration of the contract, ensuring that federal contract information and controlled unclassified information are adequately safeguarded.

State your company’s current progress toward achieving CMMC Level 2 (self) compliance.

Specifically, address:

a) Whether your firm has completed a Joint Surveillance Voluntary Assessment or a third-party assessment by a Certified Third-Party Assessment Organization or C3PAO.

b) Your current Supplier Performance Risk System score.

c) If not currently certified, provide your realistic milestone plan and timeline to achieve full CMMC Level 2 certification prior to the anticipated contract award date.

SOURCES SOUGHT:

The North American Industry Classification System Code for this requirement is 541512 (Computer Systems Design Services), with the corresponding size standard of $34.0 Million (Small Business Administration Size Standards Table).

In order to make a determination for a small business set-aside, two or more qualified and capable small businesses must submit responses that demonstrate their qualifications. Responses must demonstrate the company’s ability to perform in accordance with FAR clause 52.219-14, Limitations on Subcontracting.

To assist DISA in determining the level of participation by small business in any subsequent procurement that may result from this Sources Sought Notice, provide information regarding any plans to use joint ventures (JVs) or partnering. Please outline the company's areas of expertise and those of any proposed JV/partner who combined can meet the specific requirements contained in this notice.

SUBMISSION DETAILS:

Responses should include:

1) Business name and address;

2) Name of company representative and their business title;

3) Small Business Socio-economic status (if small);

4) Commercial and Government Entity (CAGE) Code;

5) Prime contract vehicles; to include ENCORE III, SETI, NIH CIO-SP4, NASA SEWP V, General Service Administration (GSA): OASIS, ALLIANT II, VETS II, STARS III, MAS (including applicable SIN(s), groups or pools), or any other Government Agency contract vehicle that allows for decentralized ordering. (This information is for market research only and businesses with a valid CAGE that lack prime contract vehicles are still encouraged to respond to this notice.)

6) Responses to the Required Capabilities and Special Requirements, listed above.

Businesses who wish to respond must send a response via email NLT 4:00 PM Eastern Daylight Time (EDT) on November 30, 2026 to michelle.l.rand.civ@mail.mil, elizabeth.a.bono.civ@mail.mil, and shawn.m.dostie.civ@mail.mil. Interested businesses should submit a brief capabilities statement package addressing the specific questions above (no more than ten pages) demonstrating the ability to perform the services listed under Required Capabilities and Special Requirements.

Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. All submissions become Government property and will not be returned. All government and contractor personnel reviewing submitted responses will have signed non-disclosure agreements and understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as pursuant to 41 USC 423. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.

For information on DISA’s requirements, you can find current information on our home page: www.disa.mil – that includes current forecast and the current acquisition strategies. If there is no information regarding the requirement you may be inquiring about, then there is no additional publicly available information. Please continue to review www.disa.mil.

Page 2 of 4 Pages

Page 1 of 5 Pages