SOURCES SOUGHT NOTICE

THIS IS A SOURCES SOUGHT NOTICE ONLY. THIS IS NOT A SOLICITATION FOR PROPOSALS, QUOTATIONS, OR BIDS, AND IS NOT TO BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT TO ISSUE A SOLICITATION

OR OTHERWISE AWARD A CONTRACT.

Title Enterprise Electronic Security Systems (ESS) — Nationwide Operations, Maintenance, Integration, and Lifecycle Support

Project Number 7571MN27R00005

NAICS Code 561621 — Security Systems Services (except Locksmiths)

Small Business Size Standard

$25.0 million average annual receipts

Agency U.S. Department of Health and Human Services (HHS), Program Support Center (PSC), Real Estate, Logistics, and Operations (RLO), Physical Security, Emergency Management, and Safety (PSEMS)

PSC CODE R425 (Support- Professional: Engineering/Technical) Response Date/Time

11/04/2026 12:00 PM EST

Point of Contact Bryan Daines, Contracting Officer (CO) bryan.daines@hhs.gov

No phone calls will be taken

1. Purpose

This is a Sources Sought Notice issued in accordance with Federal Acquisition Regulation (FAR) Part 10, Market Research, and Health and Human Services Acquisition Regulation (HHSAR) 310.001. HHS/PSC is conducting market research to identify qualified sources capable of providing enterprise-wide electronic security systems (ESS) support services nationwide. The information obtained through this notice will be used by the Government to make appropriate acquisition decisions, including but not limited to: the method of procurement, the appropriate acquisition vehicle, small-business set-aside determinations under FAR 19.502-2 (the "Rule of Two"), and whether the requirement should be bundled or consolidated.

This notice does not obligate the Government to issue a solicitation or to award a contract, and the Government will not pay for any information submitted in response to this notice. Responses will not be returned, and respondents will not be notified of the results of this market research.

2. Background

HHS/PSC/PSEMS is responsible for the oversight, standardization, and support of electronic security systems deployed at HHS-owned, leased, or operated facilities nationwide. The Department currently operates an enterprise Physical Access Control System (PACS) using Lenel OnGuard integrated with the HID SAFE platform, and a Video Management System (VMS) using Milestone XProtect, supporting approximately 35 active facilities including major National Capital Region locations and facilities within all 10 HHS Regions/Hubs.

mailto:bryan.daines@hhs.gov

3. Anticipated Scope of Work

The Government anticipates a single-award, hybrid Indefinite-Delivery, Indefinite-Quantity (IDIQ) contract covering the following, nationwide:

• Engineering, design, integration, and installation of electronic security systems

• Preventive and corrective (remedial) maintenance

• 24/7 emergency response and service-call support

• System administration and configuration management for enterprise platforms, including Lenel OnGuard and Milestone XProtect

• Modernization, upgrade, and end-of-life replacement of system components

• Cybersecurity, supply-chain risk management, and FedRAMP-aligned cloud service support (when cloud services are proposed)

• Logistics and spare-parts inventory management

• Supported systems include: Physical Access Control Systems (PACS), Video Surveillance/Video Management Systems (VSS/VMS), Intrusion Detection Systems (IDS), duress alarms, intercoms, turnstiles, gate arms, and elevator-control interfaces

Anticipated Acquisition Details

Element Planning Basis

Contract type Single-award, hybrid IDIQ; FFP for recurring O&M; FFP or authorized T&M for supplemental/task-order work

Period of performance 12-month base period (anticipated Feb. 7, 2027 – Feb. 6, 2028) plus four 1-year option periods through Feb. 6, 2032

Facility coverage at award

Approximately 35 active facilities

Potential ordering universe

Approximately 699 HHS-owned, leased, or operated facilities nationwide across 10 regions/hubs

Planning-level estimated value

Approximately $17.4 million over the base period and four option periods (planning estimate only; not a guaranteed minimum or ceiling)

This information reflects current acquisition planning and is subject to change. It does not represent a commitment, guaranteed quantity, or guaranteed funding level.

4. Applicable Standards and Requirements

Interested sources should be prepared to address, at a minimum, the following in their response:

• Current authorization/certification status as a Lenel OnGuard Value Added Reseller and Milestone Systems Partner (Platinum level or higher)

• Experience with HSPD-12/FIPS 201-compliant PACS and FICAM architecture

• Nationwide service delivery capability across 10 or more geographic regions

• Experience performing recurring firm-fixed-price O&M on enterprise-scale, multi-site federal (or comparable large private-sector) ESS contracts

• Cybersecurity capability consistent with NIST SP 800-53, FedRAMP (for any cloud-hosted components), and federal supply-chain risk management requirements (Section 889)

• Appropriate state/local licensing (e.g., security alarm dealer licensing) in jurisdictions where work would be performed

5. Small Business Participation

The Government is conducting this market research in part to determine whether a total small-business set-aside, partial set-aside, or other socioeconomic set-aside is appropriate under FAR 19.502-2, or whether the requirement should proceed as an unrestricted/full-and-open competition. All respondents are asked to clearly identify their small-business status (small business, 8(a), HUBZone, service-disabled veteran-owned, woman-owned, etc.) under NAICS 561621, and whether they could perform the complete nationwide requirement independently, with a teaming arrangement, or as a subcontractor.

6. Information Requested (Capability Statement Only — No Pricing)

Interested firms are requested to submit a response not exceeding 10 pages (excluding cover page and corporate documentation) that addresses the following:

A. Capability Statement

1. Company name, address, UEI, CAGE code, and socioeconomic/small-business status under NAICS 561621

2. A narrative description of your firm's experience and technical capability relevant to the scope in Section 3, including:

o Enterprise ESS integration, installation, and lifecycle O&M experience o Experience with Lenel OnGuard, Milestone XProtect, and/or HID SAFE specifically o Nationwide or large multi-site service delivery experience (describe geographic reach and surge capacity) o Cybersecurity, FedRAMP, and supply-chain risk management experience

3. Relevant past performance references (up to 3), including contract number, customer, period of performance, dollar value, and brief description of scope and relevance

4. A description of your firm's current manufacturer authorizations/certifications (Lenel VAR status, Milestone partner tier, etc.)

5. Whether your firm could perform the complete nationwide requirement as a prime, or would require teaming/subcontracting, and if so, in what capacity

B. Set-Aside / Competition Feedback

1. In your firm's assessment, are there at least two (or more) responsible small businesses capable of independently performing a requirement of this nationwide scope and complexity at a fair market price?

2. Any comments on whether the described scope and geographic reach would be better suited to a total set-aside, partial set-aside, or unrestricted competition

7. Submission Instructions

Responses must be submitted electronically to the Point of Contact (bryan.daines@hhs.gov) listed above no later than 11/04/2026 12:00 PM EST. Responses should be submitted in PDF or Microsoft Word format. Oral responses will not be accepted. Please reference the notice title and number in the subject line of your submission.

8. Disclaimer

This notice is for information and planning purposes only and does not constitute a solicitation. Responses to this notice are not offers and will not be accepted by the Government to form a binding contract. The Government will not pay for any costs incurred in responding to this notice. All information received in response to this notice that is marked as proprietary will be handled accordingly.

THE CONTRACT TYPE NEEDS A RATIONALE

Tip of the Day:

Naming the contract type is not the same as justifying it.

The acquisition-planning record should explain why the proposed contract type fits the requirement and the risk being assumed by the Government.

This is particularly important for:

• Cost-reimbursement contracts;

• Time-and-materials contracts;

• Labor-hour contracts; and

• Other covered non-fixed-price arrangements.

The file should explain:

• What uncertainties exist;

• Why a fixed-price arrangement is or is not appropriate;

• How cost and performance risk are allocated;

• Why the selected contract type is appropriate;

mailto:bryan.daines@hhs.gov

• How contractor performance and expenditures will be managed; and

• What special determinations or approvals apply.

HHS Reminder — EO 14402

Current HHSAM Part 316, as revised by HHSAM Note 2026-09, establishes HHS procedures for the applicable EO 14402 Individual or Batch D&F for covered non-fixed-price contracts/orders, including assisted acquisitions.

RFO FAR Parts 16 and 52 were updated July 1, 2026, to implement EO 14402.

Takeaway:

The more acquisition risk the Government accepts, the stronger the documented rationale should be.

References:

• RFO FAR Part 7

• RFO FAR Part 16

• HHSAM Part 316

• HHSAM Note 2026-09

• Applicable EO 14402 Individual or Batch D&F template

THE CONTRACT TYPE NEEDS A RATIONALE