CESO ITSS Sources Sought Notice.pdf

Page 1 of 4 Pages

SOURCES SOUGHT NOTICE

Tracking No. 642468319

The Defense Information Systems Agency (DISA) is seeking sources for Compartmented Enterprise Services Office (CESO) Information Technology (IT) Services Support

CONTRACTING OFFICE ADDRESS: DITCO-NCR, PO BOX 549, Fort Meade, MD 20755-0549

INTRODUCTION:

This is a SOURCES SOUGHT NOTICE to determine the availability and technical capability of small businesses (including the following subsets: Small Disadvantaged Businesses, Certified 8(a), Service-Disabled Veteran-Owned Small Businesses, HUBZone Small Businesses and Woman-Owned Small Businesses) to provide the required products and/or services.

The Compartmented Enterprise Services Office (CESO) of DISA is seeking information from potential sources for: IT and programmatic support of its systems and products in establishing modern cloud-based service operations with general and overarching performance requirements for operating and improving capabilities, as well as developing, prototyping, and researching new technologies to achieve CESOs execution objectives. This requirement is key to achieving a vision of a robust product-oriented program with improved user experiences and agile capability delivery.

The anticipated Period of Performance is 1 November 2024 through 31 October 2029.

The anticipated Places of Performance are DISA CESO locations in: Ballston, VA; Rosslyn, VA;

and\or Ft. Meade, MD.

DISCLAIMER:

THIS SOURCES SOUGHT NOTICE IS FOR INFORMATIONAL PURPOSES ONLY. THIS

IS NOT A REQUEST FOR PROPOSAL. IT DOES NOT CONSTITUTE A SOLICITATION

AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT.

RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER

NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS NOTICE. NO

FUNDS ARE AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS

NOTICE. ANY INFORMATION SUBMITTED BY RESPONDENTS IS STRICTLY

VOLUNTARY.

CONTRACT/PROGRAM BACKGROUND:

Contract Number: FA8240-15-C-3501 Contract Vehicle: Open Market Incumbent and their size: Maximus Federal Consulting, LLC (Large business)

Page 2 of 4 Pages

Method of previous acquisition: Sole Source/Direct Award Period of performance: 2 July 2020 to 1 July 2025

Contract Number: HC1028-20-D-0001 / HC1028-22-F-0815 Contract Vehicle: GSM-O II indefinite delivery / indefinite quantity (ID/IQ) contract Incumbent and their size: Leidos, Inc. (Large business) Method of previous acquisition: Single-Award ID/IQ task order Period of Performance: 19 September 2022 – 18 September 2024

Contract Number: HC1028-22-C-0006 Contract Vehicle: Open Market Incumbent and their size: Georgia Tech Research Institute (Large business) Method of previous acquisition: Sole Source/Direct Award Period of Performance: 1 March 2022 – 28 February 2025

REQUIRED CAPABILITIES:

The DISA CESO team supports the Department of Defense (DoD) and the Intelligence Community by taking on the assigned responsibility to evolve and standardize Special Access Program (SAP) IT systems and processes so that subsequent IT modernization throughout the services and industry partners can be achieved more efficiently. Below are the key areas and critical requirements needed to achieve this assignment.

1) CESO must ensure a seamless transition from the current SAP IT operations to a new commercial cloud environment. Describe and provide an example of your company’s experience establishing a modern Secure Web Services (SWS) operation as part of a state-of-the-art automated platform capable of supporting a rapidly expanding customer population.

2) Describe and provide an example of your company’s capability to support product evaluations, interface testing, integration, development and preparation and documentation of test plans and procedures, test reports, acceptance testing, and demonstrate Government- or Commercial-off-the-Shelf (GOTS or COTS) products.

3) Describe and provide an example of your company’s capability to provide System Engineering and Software Development services for DoD Component command products such as joint database application environments, Cloud desktop environments and/or development of custom enterprise email or notebook systems that will effectively support developmental, operational, technical and systems architecture and design while providing cost-effective solutions to technical problems.

4) Describe and provide an example of your company’s experience effectively performing Information Assurance and Cybersecurity Services that ensured: (1) compliance with all Federal and DoD policies and guidance; (2) Body of Evidence (BOE) and Enterprise

Page 3 of 4 Pages

Mission Assurance Support Service (eMASS) Authorization to Operate (ATO) documentation and procedures were effectively utilized under appropriate collected governance guidelines; (3) appropriate risk assessments were conducted; and (4) that information was protected and effective protective technology is developed and utilized.

5) SAP IT Ecosystem requirements have been identified by the DoD Chief Information Officer (CIO) and assigned to four functional areas: 1) Infrastructure Layer, 2) Network Connectivity Layer, 3) Secure Desktop Services Layer and 4) Application Layer.

Examples of unique capabilities in these areas are shown in the table below, which are excerpts from sections of the DoD CIO’s Requirements document. This document describes “foundational Information Technology infrastructure, network connectivity, desktop services, and applications requirements necessary to support the DoD Special Access Programs Initiatives.” The DoD Deputy Chief Information Officer for Special Access Programs led community efforts to develop the requirements for the future DoD SAP IT ecosystem environment. Work products developed by your company will need to be consistent with the guidance in this document.

Layer Unique # Capability Description Priority Infrastructure N-1-1 Infrastructure The system shall utilize Defense

Information systems Network (DISN) Services as the primary network transport method. DISN shall provide redundant and physically diverse connectivity to increase network resiliency.

MVP-1

Network Connectivity

N-1-11 Network Transport and Management

The system shall provide authoritative network time services for all interconnected networks.

MVP-1

Secure Desktop Service Layer

SD 1-1 Service Desk The system shall provide a modern service desk application that implements IT service management (to include telephony) and video teleconference in accordance with the IT Infrastructure Library (ITIL) standard, e.g., Service Now.

MVP-1

Application Layer

A-1-1 Assured File Transfer

The system shall support ingesting files via low-to-high data transfers.

MVP-1

Describe and provide examples of your company’s experience working with TS/SCI and/or SAP Ecosystem requirements as described in the table above.

SPECIAL REQUIREMENTS:

A Top-Secret (TS\SCI) clearance, with SAP eligibility, must be available for all persons as part of this task with the ability for specific system administration persons to be able to pass a polygraph. Please provide your current facility clearance level.

Page 4 of 4 Pages

SOURCES SOUGHT:

The North American Industry Classification System Code (NAICS) for this requirement is 541512 with the corresponding size standard of $34M.

In order to make a determination for a small business set-aside, two or more qualified and capable small businesses must submit responses that demonstrate their qualifications.

Responses must demonstrate the company’s ability to perform in accordance with FAR clause 52.219-14, Limitations on Subcontracting.

To assist DISA in determining the level of participation by small business in any subsequent procurement that may result from this Sources Sought Notice, provide information regarding any plans to use joint ventures (JVs) or partnering. Please outline the company's areas of expertise and those of any proposed JV/partner who combined can meet the specific requirements contained in this notice.

SUBMISSION DETAILS:

Responses should include:

1) Business name and address.

2) Name of company representative and their business title.

3) Small Business Socio-economic status (if small).

4) CAGE Code and UEI.

5) Prime contract vehicles; to include ENCORE III, SETI, NIH CIO-SP4, NASA SEWP V, General Service Administration (GSA): OASIS, ALLIANT II, VETS II, STARS III, MAS (including applicable SIN(s), groups, or pools), or any other Government Agency contract vehicle that allows for decentralized ordering. (This information is for market research only and businesses with a valid cage that lack prime contract vehicles are still encouraged to respond to this notice.)

Businesses who wish to respond must send a response via email NLT 4:00 PM Eastern Daylight Time (EDT) on February 7, 2024 to Marissa Russo, marissa.l.russo.civ@mail.mil, and Alyssa Todaro, alyssa.m.todaro2.civ@mail.mil. Interested businesses should submit a brief capabilities statement package addressing the specific questions above (no more than five pages) demonstrating the ability to perform the services listed under Required Capabilities.

Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. All submissions become Government property and will not be returned. All Government and contractor personnel reviewing submitted responses will have signed non-disclosure agreements and understand their responsibility for proper use and protection from unauthorized disclosure of proprietary information as pursuant to 41 USC 423. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.

mailto:marissa.l.russo.civ@mail.mil mailto:alyssa.m.todaro2.civ@mail.mil