832573525 Sources Sought Notice- DoD Cyber Awareness Challenge Training.pdf

Page 1 of 3 Pages

SOURCES SOUGHT NOTICE

Tracking Number: 832573525

The Defense Information Systems Agency (DISA) is seeking sources for Department of Defense (DoD) Cyber Awareness Challenge Training.

CONTRACTING OFFICE ADDRESS:

DITCO-Scott PS8331 2300 East Drive Bldg 3600 Scott AFB, IL 62225-5406

INTRODUCTION:

This is a SOURCES SOUGHT NOTICE to determine the availability and technical capability of small businesses (including the following subsets: Small Disadvantaged Businesses, Certified 8(a), Service-Disabled Veteran-Owned Small Businesses, HUBZone Small Businesses and Woman- Owned Small Businesses) to provide the required products and/or services.

DISA is seeking information from potential sources for the DoD Cyber Awareness Challenge Training.

The DoD Cyber Awareness Challenge Training program requires labor for the following functions:

Cyber Training Developers that have experience with Sharable Content Object Reference Model/Experience Application Programming Interface (SCORM/xAPI), Adobe Captivate or similar e-learning authoring tools, SharePoint, and 508 Compliance.

Contractor labor is needed to annually develop and update the Cyber Awareness Challenge training course.

The anticipated Period of Performance is:

Base Period: February 10, 2026 – February 9, 2027 Option Year One: February 10, 2027 – February 9, 2028 Option Year Two: February 10, 2028 – February 9, 2029 Option Year Three: February 10, 2029 – February 9, 2030 Option Year Four: February 10, 2030 – February 9, 2031

The anticipated Place of Performance is at the vendor’s location or via telework.

DISCLAIMER:

THIS SOURCES SOUGHT NOTICE IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS

NOT A REQUEST FOR PROPOSAL. IT DOES NOT CONSTITUTE A SOLICITATION AND

SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT. RESPONSES

IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER NO OBLIGATION

TO AWARD A CONTRACT AS A RESULT OF THIS NOTICE. NO FUNDS ARE AVAILABLE

Page 2 of 3 Pages

TO PAY FOR PREPARATION OF RESPONSES TO THIS NOTICE. ANY INFORMATION

SUBMITTED BY RESPONDENTS IS STRICTLY VOLUNTARY.

CONTRACT/PROGRAM BACKGROUND:

Contract Number: GS35F007BA Task Order: HC102820F0730 Contract Vehicle: GSA Multiple Award Schedule (MAS) (formerly IT Schedule 70) Incumbent and their size: Tapestry, Small Business Method of previous acquisition: Small Business set-aside Period of performance: July 15, 2020 – July 14, 2025

REQUIRED CAPABILITIES:

1. The DoD Cyber Awareness Challenge training develops and updates the Cyber Awareness Challenge training course. This one-hour online course provides an “awareness level” on a variety of cybersecurity topics relevant to the DoD. Describe and provide an example of your company’s experience developing online cybersecurity awareness courses with a comprehensive subject matter covering the depth and breadth of cybersecurity topics applicable to the average employee/end user aligned to DoD Policy and best practices. List specific examples of cybersecurity training products if possible.

2. The DoD Cyber Awareness Challenge training is designed for a broad audience and mandatory for all DoD network users (approximately 5 million). The Cyber Awareness Challenge is currently delivered to the public and to government users in Learning Management Systems (LMS). Describe and provide an example of your company’s experience delivering training to a large number of users (3 million or more) and the different formats used for delivery. For reference, the delivery formats currently being used include SCORM 1.2, SCORM 2004, HTML, and downloadable versions.

3. The DoD Cyber Awareness Challenge training implements different features into the course to enhance the training experience for the users. Some features include the Knowledge Check option (AKA test out feature), voice over / live narration, and case studies to enhance the learning experience. Describe and provide an example of your company’s experience delivering training with engaging course designs that are logical, easy to navigate, relatable to the end user, and user friendly, to enhance end user engagement and increase course effectiveness. List specific examples of cybersecurity training products when possible.

SPECIAL REQUIREMENTS:

N/A

SOURCES SOUGHT:

The North American Industry Classification System Code (NAICS) for this requirement is 611430 with the corresponding size standard of $15,000,000.

Page 3 of 3 Pages

In order to make a determination for a small business set-aside, two or more qualified and capable small businesses must submit responses that demonstrate their qualifications. Responses must demonstrate the company’s ability to perform in accordance with FAR clause 52.219-14, Limitations on Subcontracting.

To assist DISA in determining the level of participation by small business in any subsequent procurement that may result from this Sources Sought Notice, provide information regarding any plans to use joint ventures (JVs) or partnering. Please outline the company's areas of expertise and those of any proposed JV/partner who combined can meet the specific requirements contained in this notice.

SUBMISSION DETAILS:

Responses should include:

1) Business name and address;

2) Name of company representative and their business title;

3) Small Business Socio-economic status (if small);

4) CAGE Code;

5) Prime contract vehicles; to include ENCORE III, SETI, NIH CIO-SP4, NASA SEWP V, General Service Administration (GSA): OASIS, ALLIANT II, VETS II, STARS III, MAS (including applicable SIN(s), groups or pools), or any other Government Agency contract vehicle that allows for decentralized ordering. (This information is for market research only and businesses with a valid cage that lack prime contract vehicles are still encouraged to respond to this notice.)

Businesses who wish to respond must send a response via email NLT 4:00 PM Eastern Daylight Time (EDT) on October 3, 2025 to Carrie Bair, carrie.e.bair.civ@mail.mil and Kenric Phillips, kenric.l.phillips.civ@mail.mil. Interested businesses should submit a brief capabilities statement package addressing the specific questions above (no more than five pages) demonstrating the ability to perform the services listed under Required Capabilities.

Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. All submissions become Government property and will not be returned. All government and contractor personnel reviewing submitted responses will have signed non-disclosure agreements and understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as pursuant to 41 USC 423. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.

For information on DISA’s requirements, you can find current information on our home page:

www.disa.mil – that includes current forecast and the current acquisition strategies. If there is no information regarding the requirement you may be inquiring about, then there is no additional publicly available information. Please continue to review www.disa.mil.

mailto:carrie.e.bair.civ@mail.mil mailto:kenric.l.phillips.civ@mail.mil http://www.disa.mil/