Version 1.0 Page 1 of 4

Area of Interest (AOI) for User Activity Monitoring (UAM) Centralization

Prototype Other Transaction (OT)

*Any submissions that are received by the Agreements Officer after the suspense date/time listed above will be deemed late and not evaluated. It is the sole responsibility of the performer to ensure that its submission is received in the inbox listed above before the deadline specified.

This AOI may result in the Government awarding a prototype OT in accordance with 10 U.S.C. § 4022. This AOI, and any OT awarded from this AOI, is not subject to the Federal Acquisition

Regulations (FAR) or its supplements.

Project Number DISA-OTA-27-R-UAM

Commercial Solutions Opening Number HC108425S0001

AOI Title UAM Centralization Prototype OT

Issued By Defense Information Systems Agency (DISA) | www.disa.mil Defense Information Technology Contracting Office (DITCO)

Submission Instructions To respond to this AOI, please refer to paragraph 5 of the AOI and the Commercial Solutions Opening, section 3.1, General Guidelines and section 3.2, Phase 1 Solution Briefs.

*Solution Briefs Due Date/Time (Suspense) 22 October 2026, 5:00 p.m., CDT

Submit Solution Brief To

DITCO OTA Team:

disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil Agreements Officer: Joe Santel Agreements Specialist: Ariah Graham http://www.disa.mil/ mailto:disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil

Version 1.0 Page 2 of 4

1. BACKGROUND

UAM is a technical capability utilized within the Department of War (DoW) to observe and record the actions and activities of any individual, at any time, on Government devices accessing Government information or National Security Information (NSI) to detect insider threats and to support authorized investigations. Agencies that operate or have access to classified networks have the responsibility to maintain appropriate safeguarding and monitoring of the classified information shared on networks in accordance with Federal laws, regulations, and policies. The current UAM capabilities within the DoW are fractured and lack interoperability. Individual DoW agencies and organizations independently deploy and manage their UAM software on separate localized infrastructures. This creates operational silos, redundant maintenance efforts, duplicate cybersecurity efforts often requiring multiple Authorizations to Operate (ATO), and critical capability gaps. DISA is leading an effort to develop a modernized UAM capability that is an integrated and interoperable netcentric solution that would enable organizations to access UAM services and provide support services to maintain UAM platforms across multiple networks and site locations. A modernized UAM capability must be able to support deployment on several DoW networks including Non-classified Internet Protocol Router Network (NIPRNet), Secret Internet Protocol Router Network (SIPRNet), Joint Worldwide Intelligence Communication System (JWICS), and Special Access Program (SAP) networks. Additionally, it is expected that a new UAM capability would support the DoW Fourth Estate Components, the Office of the Secretary of War (OSW), all Defense Agencies and DoW Field Activities, and all Combatant Commands.

2. PROBLEM STATEMENT

The existing UAM infrastructure across the DoW is decentralized which has led to critical capability gaps, duplicative resources, and system inefficiencies. To improve the UAM capabilities and reduce these inefficiencies, DISA seeks to deploy a modernized UAM capability that consolidates resources and infrastructures in a centralized and scalable format that provides DoW components the authority to maintain strict data isolation in a secure, multi-tenant environment. DISA requires a hybrid cloud and on-premises solution that utilizes Artificial Intelligence (AI) and/or Machine Learning (ML) to modernize UAM systems while strictly adhering the technical requirements specified by agency-specific and DoW policies and organizational needs. This UAM infrastructure must be centralized and support secure multi-tenancy or multi-environments, enabling individual organizations to maintain exclusive control over their own data, policies, triggers, customizable reporting, and dashboards within a unified environment. Additionally, it must cover both the Contiguous United States (CONUS) and Outside the Contiguous United States (OCONUS) locations. The emerging technologies used to enhance the mission effectiveness of the UAM capability should support the reduction of overarching labor and hardware requirements, simplify policy creation and updates at the organization level, and ensure users have access strictly to their organization’s data and policies/trigger configurations. This UAM capability will be provided on the SIPRNet with the ability to flex, adapt, and expand based on each DoW component’s organizational and mission need, with the potential in the future to create centralized multi-tenant environments for NIPRNet, SAP, and JWICS.

Version 1.0 Page 3 of 4

3. DESIRED SOLUTION ATTRIBUTES

A fully functional prototype must include the unique or innovative capabilities, functions, and/or features included in Attachment 1 – Desired Solution Attributes and the accompanying Appendix A – Standards, References, & Policies.

4. INTELLECTUAL PROPERTY AND DATA RIGHTS

The IP strategy is designed for a hybrid solution that utilizes both Commercial Off-The-Shelf products and custom-developed components. The Government seeks to maximize control over programmatic and security data (Unlimited Rights) while accepting standard commercial licensing for the core UAM software and balancing technical data rights using Government Purpose Rights. The Technical Data Package (TDP) consists of the complete software source code developed at Government expense and all key technical documentation. To ensure the DoW maintains total sovereign control, the U.S. Government requires Unlimited Data Rights to the TDP and all software developed as part of the program.

5. AWARD INSTRUMENT

This AOI solicitation will be awarded in accordance with the Commercial Solutions Opening (CSO) procedures detailed within the DISA CSO HC108425S0001, posted to SAM.gov on 8 January 2025. The CSO outlines the guidelines for submitting solution briefs, pitches, and proposals and how the Government will evaluate responses to this AOI. The CSO can be found at: https://sam.gov/opp/98c4a509d78f4f95ae21586d7004fd0e/view

As identified in paragraph 3.2 of the CSO, the Affirmation of Business Status Certification is attached to this AOI as Attachment 2 – Affirmation of Business Status Certification.

6. SOLICITATION NOTES

In addition to the general guidelines included in the CSO, the following guidelines apply to this

AOI.

• To align with the target schedule, proposals with a performance period of three (3) months or less are ideal. This timeframe is preferred to ensure rapid development and deployment of the proposed solution, allowing for a timely transition from the prototype phase to full implementation if the prototype has been determined successful by the Government.

The primary goal is to identify and select the best possible solution for the Government's needs.

As such, all submissions are strongly encouraged for consideration, regardless of the proposed performance period or target cost. The Government will evaluate each proposal based on its merits, innovation, feasibility, and its potential to rapidly enhance warfighter capability and mission readiness.

https://sam.gov/opp/98c4a509d78f4f95ae21586d7004fd0e/view

Version 1.0 Page 4 of 4

7. CERTIFICATION REQUIRED

In accordance with 32 CFR part 170, the Cybersecurity Maturity Model Certification (CMMC) Program applies to this prototype project. CMMC Level 2 (Self) is required for this prototype project. CMMC Level 3 (C3PAO) may be required in a follow-on production OT or contract.

Please note that DoW guidance issued on July 13, 2026, has suspended CMMC Phase II third-party certification requirements. During this period, cybersecurity compliance will be enforced through self-assessments against the NIST SP 800-171 Revision 2 standard.

Performers are required to have CMMC Level 2 (Self) prior to the award of a prototype OT for each performer information system that will process, store, or transmit Federal contract information (FCI) or controlled unclassified information (CUI) during performance of the prototype OT.

Performers are responsible for all costs and actions necessary to achieve and maintain this compliance.

While a third-party (C3PAO) assessment is not required for this prototype award, proposals from performers who have voluntarily completed such an assessment may be viewed more favorably, as it demonstrates a mature cybersecurity posture and reduces programmatic risk.

8. FOLLOW-ON PRODUCTION

Performers are advised that any prototype OT agreement awarded in response to this AOI may result in the award of a follow-on production contract or transaction without the use of further competitive procedures. The follow-on production contract or transaction will be available for use by one or more organizations in the DoW and, as a result, the magnitude of the follow-on production contract or agreement could be significantly larger than that of the prototype OT. As such, any prototype OT will include the following statement relative to the potential for follow-on production: "In accordance with 10 U.S.C. § 4022(f), and upon a determination that the prototype project for this transaction has been successfully completed, this competitively awarded prototype OT may result in the award of a follow-on production contract or transaction without the use of competitive procedures.”