RFI 2 Commerciality_ BIM_ CMMC.pdf

Request for Information (RFI)

Title: Request for Information (RFI) to explore Commerciality, Capability, and Cybersecurity Maturity

Agency: Space Acquisition and Integration Office (SAIO), 135 Dover Street. Building #350, Ste 2225, Peterson SFB, CO, 80914-1385.

Notice ID: FA251827RCNECTS

Response Due Date: 23 February 2026

NAICS Code: 517810, All Other Telecommunications, with a Small Business size standard of $40M

Estimated Timeline to Award: 12 Months – February 2027

Planned Acquisition Strategy: Commercial Solutions Offering (CSO) limited to Small Business Entities

Description

The Space Acquisition and Integration Office (SAIO), on behalf of the 21st Communications Squadron (21 CS) under Combat Forces Command (CFC) at Peterson SFB (PSFB), CO, is conducting market research to determine the availability of commercial services capable of supporting mission-critical IT systems in secure environments. This RFI is issued in accordance with FAR Part 10 to gather information from industry regarding capabilities, commercial practices, and potential solutions.

Information submitted in response to this RFI will be held in strict confidentiality and will not be released outside the Government, nor used for any purpose other than market research.

The services required include, but are not limited to:

• Engineering IT solutions for secure mission systems.

• Responding to customer service requests for mission-critical networks.

• Planning and executing future solutions for secure communications networks.

• Developing and executing cybersecurity plans.

• Managing the Risk Management Framework (RMF) for secure systems.

• Operational support for IT systems in isolated and secure environments.

• Performance Work Statements (PWSs), changes/additions/deletions from the legacy contracts, and a requirements matrix for the consolidated services requirement have been included for your review o NOTE: Requirements highlighted in RED on the matrix were included in the legacy contracts but will not be included in the CNECTS requirement o All remaining requirements, unless otherwise noted, will be performed by CNECTS contracted personnel at all three locations

Unique Requirements:

• Personnel may be required to work in secure, isolated environments (e.g., bunker-like facilities) for extended periods.

• Knowledge of antiquated secure systems and government-specific standards is essential.

• Classified work and adherence to strict security protocols may be required.

Purpose

The purpose of this RFI is to:

1. Identify commercial services that align with the requirements described above.

2. Understand industry capabilities and practices for supporting secure, mission-critical IT systems within an open and/or closed environment. Please keep all responses at the unclassified level.

3. Determine whether these services meet the definition of "commercial services" under FAR 2.101.

4. Gauge industry’s progress towards Cybersecurity Maturity Model Certification (CMMC).

This RFI is for informational purposes only and does not constitute a solicitation or a commitment by the government to procure services. Responses to this RFI will be used solely for market research.

Questions for Industry

Respondents are requested to provide answers to the following questions:

1. Capabilities: Does your company provide services similar to those described above? If so, please describe your capabilities and experience.

2. Commercial Availability: Are these services offered to non-governmental entities in the commercial marketplace? If yes, please provide examples.

3. Customization: To what extent would these services require customization to meet the government’s requirements?

4. Security Requirements: Does your company have experience working in secure, isolated environments or supporting classified work? If yes, please describe.

5. Pricing: Are there established market prices for these services? If yes, please provide pricing information or examples.

6. Past Performance: Has your company provided similar services to government agencies? If yes, please provide details.

7. CMMC Certification: Is your company currently working towards CMMC Certification? How far along are you in the process? Is it reasonable to expect CMMC Level 3 Certification on or before full contract performance begins?

8. BIM Impact: Are you familiar with the Base Infrastructure Modernization (BIM) IDIQ?

a) Has your company had any experience with the BIM rollout and/or the descoping process?

b) Are there any lessons learned that you can share with the government?

c) Do you foresee any risk to the CNECTS contract and its requirements that the government should take into consideration?

9. Additional Information: Are there any other factors or considerations the government should be aware of regarding your ability to meet these requirements?

Submission Instructions

Interested parties are invited to submit responses to this RFI via email to rosalind.davis.3@spaceforce.mil no later than 23 February 2026. Responses should include:

• Company name, address, and point of contact information.

• A brief description of your company’s capabilities and experience.

• Answers to the questions listed above.

Please limit responses to 7 pages. Proprietary information should be clearly marked, and the government will protect such information in accordance with applicable laws and regulations.

Disclaimer

This RFI is issued solely for market research purposes and does not constitute a solicitation or a commitment by the government to procure services. The government will not reimburse respondents for any costs incurred in responding to this RFI.

Attachments:

1. FA2517-24-F-0034, Base Operating Support-Information Technology (BOS-IT) 1a. The BOS-IT contract also includes the Giant Voice PWS

2. FA8723-25-R-0007, Cheyenne Mountain SFS 21 CS Communications Contract

3. FA2550-21-C-0005, Wing Information & Communications Support (WICS) o (Partial PWS containing 21 CS-related requirements only)

4. Consolidated Requirements Matrix for RFI #2

5. CNECTS Requirements and Legacy Contract Differences