25-05 amend 4 first repub.pdf

AMENDMENT 4 TO ARA FA8750-25-S-7005

The purpose of this modification is to republish the original announcement, incorporating any previous amendments, pursuant to FAR 35.016(c).

This republishing also includes the following changes:

1. Part II, Full Text Announcement:

a. Section I, Important Notes Regarding paragraph 3, removes the word “basic” from the Other Transaction for Research Projects paragraph;

b. Section IV.2.a.ii; removes the word “basic”

c. Section IV.2.a.iii, updates the 10 U.S.C. 4023 language;

d. Section V.3, updates the Simplified Acquisition Threshold to $350,000;

e. Section V.4, updates the certified cost and pricing data threshold to $10M;

f. Section VI.3, updates the debriefing language;

g. Section VI.5.b.3, updates the DFARS clause;

h. Section VI.5.c, updates the DFARS clause;

i. Section VI.7, updates the provisions;

j. Section IVI.9; updates the DFARS reference;

k. Section VII: updates the OMBUDSMAN.

No other changes are made.

NAICS CODE: 541715

FEDERAL AGENCY NAME: Department of the Air Force, Air Force Materiel Command, AFRL - Rome Research Site, AFRL/Information Directorate, 26 Electronic Parkway, Rome, NY, 13441-4514

ARA ANNOUNCEMENT TYPE: Modification

ADVANCED RESEARCH ANNOUNCEMENT (ARA) TITLE: Advanced Cyber Effects for Strategic Operations (ACESO)

ARA NUMBER: FA8750-25-S-7005

PART I – OVERVIEW INFORMATION

This announcement is for an Open, 2 Step ARA which is open and effective until 6:00PM EST on 10 JUL 2030. Only white papers will be accepted as initial submissions; formal proposals will be accepted by invitation only. While white papers will be considered if received prior to 6:00pm Eastern Standard Time (EST) on 10 JUL 2030, the following submission dates are suggested to best align with projected funding:

FY26 by 30 Dec 2025 FY27 by 30 Sep 2026 FY28 by 30 Sep 2027 FY29 by 30 Sep 2028 FY30 by 30 Sep 2029

Offerors should monitor the Contract Opportunities on the SAM website at https://SAM.gov in the event this announcement is amended.

CONCISE SUMMARY OF TECHNOLOGY REQUIREMENT: Seeking to develop cyber operations prototypes for transition into operational DoD platforms to facilitate superiority in the Cyber Domain.

ARA ESTIMATED FUNDING: Total funding for this ARA is approximately $950M. Individual awards will not normally exceed sixty (60) months with dollar amounts normally ranging from $10M to $50M. There is also the potential to make awards up to $99.98M.

ANTICIPATED INDIVIDUAL AWARDS: Multiple Awards are anticipated. However, the Air Force reserves the right to award zero, one, or more Procurement Contracts or Other Transactions, for all, some, or none of the solicited effort based on the offeror’s ability to perform desired work and funding fluctuations. There is no limit on the number of OTs that may be awarded to an individual offeror.

TYPE OF INSTRUMENTS THAT MAY BE AWARDED: FAR based procurement contracts or other transactions (OT) under 10 USC 4021, 10 USC 4022 and 10 USC 4023 (previously 10 USC 4002, 2371, 10 USC 4003, 2371b and 4004, 2373)

In the event that an Other Transaction for Prototype agreement is awarded as a result of this competitive ARA, and the prototype project is successfully completed, there is the potential for a prototype project to transition to award of a follow-on production contract or transaction. The Other Transaction for Prototype agreement itself will also contain a similar notice of a potential follow-on production contract or agreement.

AGENCY CONTACT INFORMATION: All white paper submissions and any questions of a technical nature shall be directed to the cognizant Technical Point of Contact (TPOC) as specified below (unless otherwise specified in the technical area):

ARA PROGRAM MANAGER:

Tanya Macrina

AFRL/RIGA

525 Brooks Rd Rome, NY 13441-4505 Telephone: (315) 330-2282 Email: AFRL.RI.ACESO@us.af.mil

Questions of a contractual/business nature shall be directed to the cognizant contracting officer, as specified below (email requests are preferred):

Amber Buckley Telephone (315) 330-3605 Email: Amber.Buckley@us.af.mil

Emails must reference the solicitation ARA number and title of the acquisition.

Pre-Proposal Communication between Prospective Offerors and Government Representatives:

Dialogue between prospective offerors and Government representatives is encouraged. Technical and contracting questions can be resolved in writing or through open discussions. Discussions with any of https://sam.gov/ mailto:AFRL.RI.ACESO@us.af.mil mailto:Amber.Buckley@us.af.mil the points of contact shall not constitute a commitment by the Government to subsequently fund or award any proposed effort. Only Contracting Officers are legally authorized to commit the Government.

Offerors are cautioned that evaluation ratings may be lowered and/or proposal rejected if proposal preparation (Proposal format, content, etc.) and/or submittal instructions are not followed.

PART II – FULL TEXT ANNOUNCEMENT

ADVANCED RESEARCH ANNOUNCEMENT (ARA) TITLE: Advanced Cyber Effects for Strategic Operations (ACESO)

ARA NUMBER: FA8750-25-S-7005

Federal Acquisition Supply Chain Security Act (FASCSA) Orders: Depending on the date of issuance of this solicitation, FASCSA order(s) may be applicable. Therefore, the Offeror shall search for the phrase “FASCSA order” in the System for Award Management (SAM) (https://www.sam.gov) for any covered article, or any products or services produced or provided by a source, if there is an applicable Federal Acquisition Supply Chain Security Act Orders prohibition. This requirement only applies to FAR based awards.

I. TECHNOLOGY REQUIREMENTS:

The Air Force Research Laboratory is soliciting white papers under this Advanced Research Announcement (ARA) to research, design, develop, test, evaluate, implement, and transition Command, Control, Communications, Computers, and Intelligence (C4I) and Cyber technologies. The Air Force Research Laboratory’s (AFRL’s) strategic vision for cyber superiority is to ensure the scientific research and development being conducted, plays an integral role in AFRL’s mission. AFRL’s mission is to lead the discovery, development, integration, and transition of affordable warfighting technologies for our air, space, and cyberspace force. These capabilities will explore, prototype, and demonstrate high-impact, affordable and game-changing technologies giving the air, space, and cyberspace forces the competitive advantage needed to protect and defend the nation. As the Air Force is an air component to a Joint Force Commander (JFC), capabilities will further expand and enhance full spectrum cyber operations, cyber mission assurance, resiliency capabilities, as well as support effects on the Cyber Adversary via strategic operations within the Department of Defense (DoD), the United States, Intelligence Community (IC), and coalition cyber platforms.

AF Cyberspace Operations create effects along lines of operation and lines of effort consistent with Combatant Command (COCOM) and service priorities. Cyberspace operations can be executed independently, or integrated with operations in other domains, to achieve primary, complementary, or enabling effects. Additionally, cyberspace operations ensure the confidentiality, integrity, and availability of vital command and control (C2) networks to include the Department of Defense (DOD) Information Network (DODIN). Military operations in cyberspace are organized into missions, through a combination of actions, that create effects to achieve a commander’s objectives. Air Force cyberspace forces support these objectives through the conduct of Offensive Cyberspace Operations (OCO), Defensive Cyberspace Operations (DCO), and DOD information network (DODIN) operations.

The Cyberspace environment is depicted in a cyberspace layer model – constituted by three interrelated layers: the physical network, the logical network, and the cyber-persona layers. These layers consist of https://www.sam.gov/

Information Technology (IT) devices and infrastructure, elements of the network related to one another in a way that is abstracted from the physical network, based on the logic programming (code) that drives network components, and a view of cyberspace created by abstracting and combining data from the logical network layer to develop descriptions of digital representations of an actor or entity identity in cyberspace (cyber-persona) respectively.

Providing Cyber Science and Technology via advanced prototyping is a proven method to equip the Air Force with technologies that enable our freedom to operate in cyberspace while denying the adversary the same. AFRL’s Cyber Mission is to support the shaping of the cyber domain to the nation’s advantage by delivering the science and technology necessary to ensure cyberspace superiority and support the conduct of full-spectrum, multi-domain, integrated cyber operations.

Providing Cyber Science and Technology via advanced prototyping is also a proven means to support the responsibilities of Preserving Freedom of Action in a space domain, Enabling Joint Lethality and Effectiveness, and Providing Independent Options across the Space Force’s five core competencies:

combat power projection, information mobility, space domain awareness, space mobility, and logistics.

The scope and direction of this ARA are derived from the following:

Cyber Assured and Zero-Trust Infrastructure An assured and trusted cyber infrastructure begins with proven-correct designs that are technologically immune to threats and have an autonomous ability to modify the cyber domain to avoid unforeseen attacks and emerging threats. With this kind of infrastructure as the foundation, additional warfighting capabilities can be instantiated. For example, the infrastructure’s intrinsic ability to avoid and be resilient to attacks can be supplemented with tried-and-true warfighting tactics such as deception, maneuver, and even deterrence.

The Air Force is implementing a Zero Trust environment, a cyber assurance approach that assumes no user or device is inherently trustworthy, requiring continuous verification for access to resources. This strategy aims to improve security, provide warfighters with secure data access, and deny adversaries information dominance. The Air Force's Zero Trust strategy acknowledges potential hurdles and emphasizes continuous validation, data protection, and network segmentation.

The Department of the Air Force (DAF) envisions a future where Zero Trust architecture transforms network security. As this construct matures, the need for separate classification networks (e.g., Non- Classified Internet Protocol Router Network (NIPR), Secret Internet Protocol Router Network (SIPR), Joint World-Wide Intelligence Communications Systems (JWICS), and Special Access Program (SAP)) will diminish. Zero Trust principles, inherently adaptable and data-centric allow for a converged network environment.

In this future state, network access will be determined by the specific data and applications in use, not by predefined network boundaries. Each user, device, and context will be granted access based on their authorization level, enabling seamless and secure access to information. This approach aligns with the United States Cyber Command (USCC’s)mission to defend the nation from malicious cyber actors. A unified, Zero Trust-based network empowers USCC and the Air Force to operate with unmatched speed, relevance, and scale, ensuring a decisive advantage in cyberspace. By embracing Zero Trust, the Air Force strengthens its position as the nation’s first line of defense in this critical domain.

DoDIN Battlespace Organization

While cyberspace presents a unique operational environment, organizing its battlespace shares similarities with traditional land warfare principles. In the digital realm, the Department of Defense Information Network (DoDIN) architecture itself defines the terrain, shaping operational factors like command flow and control spans.

Just as in land warfare, effective DoDIN battlespace organization must begin at the Operational Area (OA) level and follow the established network architecture down through the echelons. This hierarchical approach mirrors the inherent structure of network architectures.

Assigning responsibility for specific areas of operation within the DoDIN should consider the capabilities and capacity of the designated organization, the nature of the mission, the specific network terrain, and the potential threats. This tailored approach ensures that the organization best suited to secure, operate, and defend a particular portion of the DoDIN is empowered to do so effectively.

Command, Control, and Communications (C3) Strategic operations rely heavily on robust C3 systems, which are essential for coordinating and executing military operations. Ensuring the security, effectiveness, and efficiency of C3 networks and infrastructure by modernizing C3 systems to keep up with evolving threats and technological advancements.

However, agile adversaries increasingly target these vital systems, seeking to disrupt Command and Control (C2) capabilities and erode the DoD’s information advantage. To counter this threat, it is necessary to maintain information dominance and decision advantage.

The Joint All-Domain Command and Control (JADC2) strategy provides a roadmap for achieving this objective. It recognizes the urgent need to equip Joint Force Commanders with the tools and capabilities necessary to maintain C2 across all warfighting domains and the electromagnetic spectrum, to deter, and, if necessary, defeat any adversary at any time and in any place.

JADC2 goes beyond simply modernizing existing C3 systems. It embraces a holistic approach, encompassing technological innovation, policy adjustments, organizational adaptation, and streamlined operational procedures. By fostering agility and adaptability, JADC2 ensures the Joint Force can effectively counter emerging threats and maintain decisive advantage in the face of evolving adversary tactics.

Situational Awareness and Mission Assurance Global Vigilance and Preserving Freedom of Action in the space domain requires continuous situational awareness and mission assurance understanding across the warfighting domains. However, maintaining this awareness, which is equivalent to a pilot’s need to continuously observe, orient, decide, and act, a process known as the “OODA Loop,” is impossible in an environment based on anything other than an assured and trusted infrastructure. In such an environment, most threats and attacks are avoided because of the very nature and construction of the infrastructure, not because of human operators or reactive tactics. Thus, a trusted infrastructure that is secure against attacks as well as resilient (i.e., able to recover from adverse events) is a prerequisite for the more complex, higher-level operations that achieve Global Vigilance.

Further, continuous Situational Awareness is the ability to perceive, understand and predict what the data contains to more effectively respond to the threats. This requires a real time comprehensive grasp on a warfighting environment that encompasses a robust Command and Control system with a secure cyber infrastructure.

The situational awareness decision making framework requires the data contained using the Observe, Orient, Decide and Act (OODA) philosophy developed by military strategist John Boyd. The OODA loop was designed to help individuals and organizations make effective decisions in rapidly changing environments by continuously cycling through these stages. The OODA loop goal is to outmaneuver your opponents by making faster decisions using feedback from the data continuously collected. This involves the continuous collection of data, fusion of the data into meaningful information for the analysts, distribution of the analyst’s data to the required people in the chain of command for the mission and continuously providing feedback as the environment changes.

The strategic objective of cyber situation awareness and mission assurance (SA/MA) is to provide automated situation and mission assessment and analysis that meet the operational requirements of all areas within the cyber domain – friendly systems and missions, traversal neutral systems or global commons and adversary systems – across the entire spectrum of conflict – from peacetime to major combat operations. Mission assurance lies at the heart of SA. Understanding the dependence of missions on specific assets, the interdependence of assets and the interdependence of missions drives the requirements for SA.

Cyber Situational Awareness and Mission Assurance (SA/MA) are paramount to this endeavor.

Automated situation and mission assessment tools must provide a comprehensive understanding of the cyber domain, encompassing friendly, neutral, and adversarial systems across the full spectrum of conflict. Crucially, understanding the intricate dependencies of missions on specific assets and their interdependence is essential for effective situational awareness. By prioritizing a secure and resilient infrastructure and fostering a culture of proactive situational and mission awareness, the Joint Forces are empowered to achieve and maintain global vigilance.

Delivery of Effects-Based Defenses Global Power and Enable Joint Lethality and Effectiveness is the ability to deliver precision effects any time, any place. In the context of cyber defense, this means using the assured and trusted infrastructure to automatically compute, provision, and deliver effects-based defenses designed to preserve missions, elicit specific desired adversary action, or provide defensive counter-cyber actions.

Cyber ISR Operations Cyberspace intelligence, Surveillance, and Reconnaissance (ISR) plays a crucial role in gathering intelligence to support the planning and execution of cyberspace operations. The AFRL/RI Strategy focuses on advancing research and innovation to provide the Air Force with cutting-edge technologies that ensure mission success in complex and contested environments. This strategy emphasizes the need for adaptable, resilient, and distributed ISR capabilities that can operate effectively at the tactical edge, enabling real-time decision-making and sensor exploitation in degraded communication conditions.

Enhancing the USAF’s ability to conduct decentralized ISR operations in contested environments further aligns with the Air Force Operational Imperatives (OIs) and the National Defense Strategy (NDS). Further, the Air Force’s shift from counterinsurgency operations to countering near-peer adversaries, where ISR operations must be flexible, distributed, and highly responsive to the dynamic nature of the modern battlefield. AFRL’s focus on cutting-edge ISR technologies seeks to address this challenge and provide the Air Force with a decisive advantage in the cyber domain.

Cyber Operational Preparation of the Environment (C-OPE)

Consists of non-intelligence enabling activities conducted to plan and prepare for potential follow-on military operations. This mission includes identifying data, software, system / network configurations and identifiers, or physical structures connected to, or associated with, the network.

Cyberspace Effects Operations Cyberspace actions that create various direct effects in cyberspace (i.e., denial, degradation, disruption, or destruction) and manipulations that can manifest as denial actions in the physical domains.

Signals Intelligence (SIGINT), Electronics Warfare (EW) and Cyber Operations Technologies.

Prototype integration areas of interest include methods of improving coordination and advancing the capability to conduct cyberspace operations in a multitude of environments. Approaches should take into consideration operational and contingency planning, as well as technology and approaches to better equip the warfighter. Concepts at the intersection of the areas of Signals Intelligence (SIGINT), Electronics Warfare (EW) and Cyber Operations technologies are sought in this Advanced Research Announcement (ARA). Integration efforts under this program are expected to result in experimental capabilities, concepts, theory, and applications addressing cyber operations problems to support the future needs of USCC, 16th Air Force, and other government agencies. Offerors are asked to describe the pre-conditions and assumptions that are necessary for the proposed techniques to work effectively.

Offensive Cyber Operations (OCO) are missions intended to project power in and through gray and red cyberspace through actions taken in support of combatant commander or national objectives. OCO may exclusively target enemy cyberspace functions or create first-order effects in cyberspace to initiate carefully controlled cascading denial effects into the physical domains to affect weapon systems, C2 processes, logistics nodes, and other high-value targets. All cyberspace operations missions conducted outside of blue cyberspace with intent other than defending blue cyberspace from an ongoing or imminent cyberspace threat are OCO missions.

AF Cyber Mission Forces (CMFs) conduct OCO, when directed, in support of COCOM or national mission objectives. OCO consists of ISR, C-OPE and cyberspace effects operations. OCO operations are planned, coordinated, and executed through either a JFHQ-C, or the Cyber National Mission Force (CNMF). Cyberspace Operations Integrated Planning Elements (CO-IPEs) provide direct support and reach-back capability to coordinate between USCC forces and COCOM staff to ensure authorities are in place and deconfliction actions occur.

Areas of Interest Technologies of interest to the strategic vision of this ARA include, but are not limited to: cloud (agnostic) architectures, code analysis and evaluation, cyber modeling & simulation, decision support for cyber missions, design frameworks, evaluation & measurement techniques, formal methods, mobile and embedded device security, telematics, methods/means for non-traditional cybersecurity, methods for data security in untrusted environments, protocol development and analysis, cyber situational awareness and risk estimation, secure development tools and techniques, standards for information exchange, trusted hardware and software, virtualization, and zero trust computing. Broad topics of interest also include, but are not limited to: cyber deterrence, global strike, cyber threat assessments, command, control, and communications (C3), cyber intelligence, surveillance and reconnaissance (ISR) and analytical fusion, disruptive information technology, cyber mission platforms, next-gen cyber operations technology, data embedding, spectrum approaches to the coordination and execution of cyber operations and improving cyber exercise technology, communication net access, enterprise operations, cyber stealth and persistence, artificial intelligence and machine learning applied to the cyber domain, and Deny, Degrade, Disrupt, Destroy, and Manipulate (D4M) efforts.

Platforms of interest to the Air Force include but are not limited to: Military platforms and Programs of Record (POR) with cyber components or dependence, shared/commercial and private/Government clouds, embedded devices and firmware, mobile and bring your own device (BYOD) platforms, Industrial Control Systems/ Supervisory Control and Data Acquisition (ICS/SCADA), Internet of Things (IoT), automation systems, tactical systems, wired and wireless networks at the enterprise and tactical levels.

In addition, the transition and refinement of prototypes developed through awards under this announcement would be considered by partnerships AFRL/RI establishes with other agencies, into assured and resilient full spectrum cyber capabilities to include cyberspace infrastructure and effects to be used in pursuit of cyber engagement and freedom of operations in cyberspace. Key focus areas include, but are not limited to, strengthening the security of US cyber assets, defending against adversarial cyber advancement, developing cyber exploitation technologies to provide the US with intelligence regarding the cyber landscape and adversary activities in the cyber domain.

IMPORTANT NOTES REGARDING:

1. REFERENCES TO THE FEDERAL ACQUISTION REGULATION (FAR) AND FAR

SUPPLEMENTS RELATED TO OT AWARDS. The requirements of Chapter 137 of Title 10 do not apply to the awards of OTs under this ARA per the statutory authority at 10 USC 4021 (previously 10 USC 4002, 2371) , 10 USC 4022 (previously 10 USC 4003, 2371b) and 10 USC 4023 (previously 10 USC 4004, 2373). Any references to the FAR or FAR Supplements are included in this ARA strictly for the sake of convenience (that is, in lieu of including the requirements in full text in this ARA), and are not to be construed to imply that the requirements of Chapter 137 of Title 10 as a whole apply to this ARA. This paragraph only applies to OT awards as a result of this ARA, not FAR based awards.

2. FUNDAMENTAL RESEARCH. It is DoD policy that the publication of products of fundamental research will remain unrestricted to the maximum extent possible. National Security Decision Directive (NSDD) 189 defines fundamental research as follows:

‘Fundamental research’ means basic and applied research in science and engineering, the results of which ordinarily are published and shared broadly within the scientific community, as distinguished from proprietary research and from industrial development, design, production, and product utilization, the results of which ordinarily are restricted for proprietary or national security reasons.

As of the date of publication of this ARA, the Government does not anticipate work proposed under this ARA to be considered fundamental research. Proposers should indicate in their proposal whether they believe the scope of the research included in their proposal is fundamental or not. While proposers should clearly explain the intended results of their research, the Government shall have sole discretion to select award instrument type and to negotiate all instrument terms and conditions with selectees.

Appropriate clauses will be included in resultant awards for non-fundamental research to prescribe publication requirements and other restrictions, as appropriate.

For certain research projects, it may be possible that although the research being performed by the awardee is restricted research, a sub-awardee may be conducting fundamental research. In those cases, it is the awardee’s responsibility to explain in their proposal why its sub-awardee’s effort is fundamental research.

3. OTHER TRANSACTION FOR RESEARCH PROJECTS. Governed by 10 USC 4021 (previously 10 USC 4002, 2371). Research projects other than contracts, cooperative agreements and grants in carrying out applied, and advanced research projects.

4. OTHER TRANSACTION FOR PROTOTYPE.

a. Governed by 10 USC 4022 (previously 10 USC 4003, 2371b). Under an OTP, the prototype agreement must be successfully completed. Successful completion can occur prior to the conclusion of a prototype project to allow the Government to transition any aspect of the prototype project determined to provide utility into production while other aspects of the prototype project have yet to be completed.

b. Governed by 10 USC 4023 (previously 10 USC 4004, 2373) when tied to experimental actions*.The white paper/proposal must cover the acquisition of “ordnance, signal, chemical activity, transportation, energy, medical, space-flight, telecommunications, and aeronautical supplies, including parts and accessories, and designs thereof, that the Secretary of Defense or the Secretary concerned considers necessary for experimental or test purposes in the development of the best supplies that are needed for the national defense.”

*10 USC 4023 also allows for FAR based contracts and OTs for Research or Prototype

5. CLOUD COMPUTING. In accordance with DFARS Clause 252.239-7010, if the development proposed requires storage of Government, or Government-related data on the cloud, offerors need to ensure that the cloud service provider proposed has been granted Provisional Authorization by the Defense Information Systems Agency (DISA) at the level appropriate to the requirement.

II. AWARD INFORMATION:

1. FUNDING: Total funding for this ARA is approximately $950M. The anticipated funding to be obligated under this ARA is broken out by fiscal year as follows:

FY26 - $190M

FY27 - $190M

FY28 - $190M

FY29 - $190M

FY30 - $190M

a. Individual awards will not normally exceed sixty (60) months with dollar amounts normally ranging from $10M to $50M. Awards under this solicitation will not exceed $99.98M.

b. The Government reserves the right to select all, part, or none of the proposals received, subject to the availability of funds. All potential Offerors should be aware that due to unanticipated budget fluctuations, funding in any or all areas may change with little or no notice.

2. FORM. Awards of efforts as a result of this announcement will be in the form of contracts or other transactions depending upon the nature of the work proposed.

3. ARA TYPE: This is a two-step open advanced research announcement. This announcement constitutes the only solicitation.

STEP ONE – The Government is only soliciting white papers at this time. DO NOT SUBMIT A FORMAL PROPOSAL. Those white papers found to be consistent with the intent of this ARA may be invited to submit a technical and cost proposal. See Section VI of this announcement for further details regarding the proposal.

III. ELIGIBILITY INFORMATION:

1. ELIGIBILITY: All qualified offerors who meet the requirements of this ARA may apply.

2. FOREIGN PARTICIPATION/ACCESS:

a. This ARA is closed to foreign participation. This includes both foreign ownership and foreign nationals as employees or subcontractors.

b. Exceptions.

1. Fundamental Research. If the work to be performed is unclassified, fundamental research, this must be clearly identified in the white paper and/or proposal. See Part II, Section I for more details regarding Fundamental Research. Offerors should still identify any performance by foreign nationals at any level (prime contractor or subcontractor) in their proposals. Please specify the nationals’ country of origin, the type of visa or work permit under which they are performing and an explanation of their anticipated level of involvement. You may be asked to provide additional information during negotiations in order to verify the foreign citizen’s eligibility to participate on contracts or other transactions issued as a result of this announcement.

2. Foreign Ownership, Control or Influence (FOCI) companies who have mitigation plans/paperwork in place. Proof of approved mitigation documentation must be provided to the contracting office focal point, Amber Buckley, Contracting Officer, at Amber.Buckley@us.af.mil prior to submitting a white paper and/or a proposal. Defense Counterintelligence Security Agency (DCSA) approved mitigation documentation includes one of the following: Board Resolution; Security Control Agreement; Special Security Agreement; Proxy Agreement; and Voting Trust Agreement. In addition to providing the approved mitigation documentation, also provide your CAGE Code and your fully executed DCSA cover letter. Expect at least 10 business days for the Government to review and verify FOCI mitigation documentation. Offerors who do not hold one of the above FOCI mitigation documents must work with DCSA to obtain mitigation documentation prior to being eligible under the BAA. For information on FOCI mitigation, contact the contact the Defense Counterintelligence and Security Agency (DCSA). Additional details can be found at: https://www.dcsa.mil/Industrial- Security/Entity-Vetting-Facility-Clearances-FOCI/Foreign-Ownership-Control-or- Influence/

3. Foreign Nationals as Employees or Subcontractors. Applicable to any effort not considered Fundamental Research. Offerors are responsible for ensuring that all employees and/or subcontractors who will work on a resulting contract are eligible to do

so. Any employee who is not a U.S. citizen or a permanent resident will be restricted from working on any resultant contract unless prior approval of the Department of State https://www.dcsa.mil/Industrial-Security/Entity-Vetting-Facility-Clearances-FOCI/Foreign-Ownership-Control-or-Influence/ https://www.dcsa.mil/Industrial-Security/Entity-Vetting-Facility-Clearances-FOCI/Foreign-Ownership-Control-or-Influence/ https://www.dcsa.mil/Industrial-Security/Entity-Vetting-Facility-Clearances-FOCI/Foreign-Ownership-Control-or-Influence/ or the Department of Commerce is obtained via a technical assistance agreement or an export license. Violations of these regulations can result in criminal or civil penalties.

c. Information Regarding Non-US Citizens Assigned to this Project

1. Contractor employees requiring access to USAF bases, AFRL facilities, and/or access to U.S. Government Information Technology (IT) networks in connection with the work on contracts, other transactions awarded under this ARA must be U.S. citizens. For the purpose of base and network access, possession of a permanent resident card ("Green Card") does not equate to U.S. citizenship. This requirement does not apply to foreign nationals approved by the U.S. Department of Defense or U.S. State Department under international personnel exchange agreements with foreign governments. It also does not apply to dual citizens who possess US citizenship, to include Naturalized citizens. Any waivers to this requirement must be granted in writing by the Contracting Officer prior to providing access. Specific format for waiver request will be provided upon request to the Contracting Officer. The above requirements are in addition to any other contract requirements related to obtaining a Common Access Card (CAC).

2. For the purposes of Paragraph 1, it an IT network/system does not require AFRL to endorse a contractor's application to said network/system in order to gain access, the organization operating the IT network/system is responsible for controlling access to its system. If an IT network/system requires a U.S. Government sponsor to endorse the application in order for access to the IT network/system, AFRL will only endorse the following types of applications, consistent with the requirements above:

a) Contractor employees who are U.S. citizens performing work under contracts, other transactions awarded under this ARA.

b) Contractor employees who are non-U.S. citizens and who have been granted a waiver.

Any additional access restrictions established by the IT network/system owner apply.

3. FEDERALLY FUNDED RESEARCH AND DEVELOPMENT CENTERS AND

GOVERNMENT ENTITIES: Federally Funded Research and Development Centers (FFRDCs) and Government entities (e.g., Government/National laboratories, military educational institutions, etc.) are subject to applicable direct competition limitations and cannot propose to this ARA in any capacity unless they meet the following conditions:

a. FFRDCs: FFRDCs must clearly demonstrate that the proposed work is not otherwise available from the private sector; and FFRDCs must provide a letter on official letterhead from their sponsoring organization citing the specific authority establishing their eligibility to propose to Government solicitations and compete with industry, and their compliance with the associated FFRDC sponsor agreement’s terms and conditions. This information is required for FFRDCs proposing to be prime contractors or sub-awardees.

b. Government Entities: Government entities must clearly demonstrate that the work is not otherwise available from the private sector and provide written documentation citing the specific statutory authority and contractual authority, if relevant, establishing their ability to propose to Government solicitations. While 10 U.S.C.§ 2539b may be the appropriate statutory starting point for some entities, specific supporting regulatory guidance, together with evidence of agency approval, will still be required to fully establish eligibility.

FFRDC and Government entity eligibility will be determined on a case-by-case basis; however, the burden to prove eligibility for all team members rests solely with the proposer.

Government agencies interested in performing work related to this announcement should contact the Technical Point of Contact (TPOC). If resulting discussions reveal a mutual interest, cooperation may be pursued via other vehicles.

4. ORGANIZATIONAL CONFLICTS OF INTEREST: In accordance with FAR 9.5, offerors are required to identify and disclose all facts relevant to potential OCIs involving the offerors organization and any proposed team member (sub-awardee, consultant). Under this Section, the offeror is responsible for providing this disclosure with each proposal submitted to the solicitation.

The disclosure must include the offerors, and as applicable, proposed team member’s OCI mitigation plan. The OCI mitigation plan must include a description of the actions the offeror has taken, or intends to take, to prevent the existence of conflicting roles that might bias the offerors judgment and to prevent the offeror from having unfair competitive advantage. The OCI mitigation plan will specifically discuss the disclosed OCI in the context of each of the OCI limitations outlined in FAR 9.505-1 through FAR 9.505-4.

a. Agency Supplemental OCI Policy: In addition, AFRL has a supplemental OCI policy that prohibits contractors/performers from concurrently providing Scientific Engineering Technical Assistance (SETA), Advisory and Assistance Services (A&AS) or similar support services and being a technical performer. Therefore, as part of the FAR 9.5 disclosure requirement above, an offeror must affirm whether the offeror or any proposed team member (sub-awardee, consultant) is providing SETA, A&AS, or similar support to any AFRL office(s) under: (a) a current award or subaward; or (b) a past award or subaward that ended within one calendar year prior to the proposal’s submission date. If SETA, A&AS, or similar support is being or was provided to any AFRL office(s), the proposal must include:

• The name of the AFRL office receiving the support;

• The prime contract number;

• Identification of proposed team member (sub-awardee, consultant) providing the support; and

• An OCI mitigation plan in accordance with FAR 9.5.

b. Government Procedures: In accordance with FAR 9.503, 9.504 and 9.506, the Government will evaluate OCI mitigation plans to avoid, neutralize or mitigate potential OCI issues before award and to determine whether it is in the Government’s interest to grant a waiver. The Government will only evaluate OCI mitigation plans for proposals that are determined selectable under the solicitation evaluation criteria and funding availability. The Government may require proposers to provide additional information to assist the Government in evaluating the offerors OCI mitigation plan. If the Government determines that an offeror failed to fully disclose an OCI; or failed to provide the affirmation of AFRL support as described above; or failed to reasonably provide additional information requested by the Government to assist in evaluating the proposer’s OCI mitigation plan, the Government may reject the proposal and withdraw it from consideration for award.

5. S&T PROTECTION.

I. Notice of Intent.

(a) Security Risk Review. Each proposal submission will be subject to a Security Risk Review prior to selection for award. The Security Risk Review is applied to federally funded research designed to help protect Department of the Air Force Science and Technology (S&T) by identifying possible vectors of undue foreign influence. AFRL will follow all policy and procedures outlined in Air Force Research Laboratory (AFRL) Instruction AFRLI 61-113, Science and Technology Protection for the Air Force Research Laboratory and Department of the Air Force Instruction DAFI 63-101/20-101, Integrated Lifecycle Management.

(b) Security risk review for these subject proposals will be developed for all proposed Senior/Key personnel and “Covered Individuals”. These risk reviews will be based on information disclosed in a Research and Related Senior and Key Person Profile and Security Questionnaire. In addition, any accompanying or referenced documents, publicly available information, and information contained in internal U.S. Government databases will be utilized in risk reviews. Nationality or citizenship is not a factor in the security risk reviews.

(c) When considering all external engagements, AFRL incorporates a holistic decision-making process that encompasses technical and security factors. The security review method implemented by AFRL measures risk factors to identify the appropriate Risk Acceptance Level (RAL) within the organization.

The objective analysis of the security risk factors is conducted to empower AFRL’s S&T leaders to make risk-informed decisions. The review process generally looks at five factors, or risk areas, but with authority for expanded review as noted in OSD R&E Memorandum dated 6 Jun 2023. The potential security risk factors are set forth below:

Potential security risk factors:

II. Actions Required by Applicants/Recipients at proposal submission.

(a) In accordance with AFRLI 61-113, S&T Protection, Applicants/Recipients are required to submit the following documentation with their proposal:

(1) Grant or Cooperative Agreement (CA) proposals:

(i) Standard Form 424, “Research and Related Senior and Key Person Profile (Expanded) (See Appendix 1) AND;

(ii) Security Program Questionnaire (See Appendix 2) AND;

(iii) “Privacy Act Statement” consent form for each Covered Individual that is also signed by the Applicants/Recipients as that Individual’s Sponsor. (See “Covered Individual” section below, and Appendix 4)

(2) Contract or Other Transaction Agreement (OTA) proposals:

(i) Research and Related Senior and Key Person Profile Worksheet (See Appendix 3) AND;

(ii) Security Program Questionnaire (See Appendix 2) AND;

(iii) “Privacy Act Statement” consent form for each Covered Individual that is also signed by the Applicant/Recipient as that Individual’s Sponsor. (See “Covered Individual” section below, and Appendix 4)

The above appendices are included in the RI-Specific Proposal Preparation Instructions which can be accessed at: https://sam.gov/opp/5d5947ee115b4a49adc07d0bc4bc72e5/view . Always reference the latest versions of these documents. Complete and submit the required forms with your proposal to the technical point of contact (TPOC) listed in Section VII-Agency Contacts AND AFRL.RIOF@us.af.mil.

https://sam.gov/opp/5d5947ee115b4a49adc07d0bc4bc72e5/view mailto:AFRL.RIOF@us.af.mil

(3) In the event a security risk is identified, and the Government has determined the security risk exceeds the acceptable threshold, the Applicant/Recipient will be notified and informed of the decline of award. The Government will only provide a general statement of the reasoning due to Government OPSEC measures.

(4) By submission of the Research and Related Senior Key Person Profile and Security Program Questionnaire, the Applicant/Recipient agrees to comply with the following:

(i) To certify that each covered individual who is listed on the application has been made aware: 1) of all relevant disclosure requirements, including the requirements of 42 U.S.C. § 6605; and 2) that false representations may be subject to prosecution and liability pursuant to, but not limited to, 18 U.S.C.

§§287, 1001, 1031 and 31 U.S.C. §§ 3729-3733 and 3802. See National Science and Technology Council Guidance for Implementing National Security Presidential Memorandum 33 (NSPM-33) on National Security Strategy for United States Government-Supported Research and Development (January 2022).

(ii) To establish and maintain an internal process or procedure to address foreign talent programs, conflicts of commitment, conflicts of interest, and research integrity.

(iii) To exercise due diligence to identify Foreign Components or participation by Senior/Key Personnel in Foreign Government Talent Recruitment Programs and agree to share such information with the Government upon request.

III. Actions Required by Covered Individuals.

(a) Covered Individual. An individual who contributes to a substantive, meaningful way to the scientific development or execution of a research and development project proposed to be carried out with a research and development award from a federal research agency; and is designated as a covered individual by the federal research agency concerned. See 42 U.S.C. § 6605, Definitions. (Note: For purposes of a Broad Agency Announcement (BAA) or Advanced Research Announcement (ARA) solicitation, “covered individuals” are all Senior/Key Personnel.)

(b) Federal law requires that all current and pending research support, as defined by 42 U.S.C. §6605, must be disclosed at the time of proposal submission, for all covered individuals. The Government may require an updated disclosure during the performance of any research project selected for funding. The Government will require an updated disclosure whenever covered individuals are added or identified as performing under the funded project.

(c) Covered Individuals are also required to sign the “Privacy Act Statement” and provide such signed statement to the Applicant/Recipient for submission with the proposal. (See Appendix 4)

(d) Any decision to accept a proposal for funding under this announcement will include full reliance on the individual’s statements. Failure to report fully and completely all sources of project support and outside positions and affiliations may be considered a material statement within the meaning of the False Claims Act, 31 U.S.C. 3729, and constitute a violation of Federal law.

IV. Actions required by Applicants/Recipients during period of performance:

a. Applicant/Recipient will be required to re-submit the Research and Related Senior and Key Person Profile as an annual requirement. In addition, whenever a new covered individual(s) is to be added or identified as performing under the funded project, a new Research and Related Senior and Key Person Profile will be required prior to continued performance.

b. If, at any time, during performance of this award, the Applicant/Recipient learns that its Senior/Key Research Personnel (including any sub awardee personnel who receive this designation) are or are believed to be participants in a Foreign Government Talent Program or have Foreign Components with a strategic competitor or country with a history of targeting U.S.

technology for unauthorized transfer, the Applicant/Recipient will notify the Contracting/Grants/Agreements Officer within 5 business days of awareness.

c. This disclosure must include specific information as to the personnel involved and the nature of the situation and relationship. The Government will review this information and conduct any necessary fact-finding or discussion with the Applicant/Recipient. The Government’s determination on disclosure may include acceptance, mitigation, or termination of the award.

d. Failure of the Applicant/Recipient to reasonably exercise due diligence to discover or ensure that neither it nor any of its Senior/Key Research Personnel involved in the subject award are participating in a Foreign Government Talent Program or have a Foreign Component with a strategic competitor or country with a history of targeting U.S. technology for unauthorized transfer may result in the Government exercising remedies in accordance with federal law and regulation.

e. The Applicant/Recipient will be required to flow down this provision to all sub awardees who have personnel designated as Senior/Key Research Personnel as a result of their involvement in the performance of the research.

IV. APPLICATION AND SUBMISSION INFORMATION:

All responses to this announcement must be addressed to the Technical Point of Contact (TPOC) listed in SECTION VII. DO NOT send white papers to the Contracting Officer.

All responsible sources may submit a bid, proposal, or quotation which shall be considered by the agency.

1. SUBMISSION DATES AND TIMES:

It is recommended that white papers be received by 6:00PM Eastern Standard Time (EST) on the following dates to maximize the possibility of award:

FY26 by 30 Dec 2025 FY27 by 30 Sep 2026 FY28 by 30 Sep 2027 FY29 by 30 Sep 2028 FY30 by 30 Sep 2029

White papers will be accepted until 6:00PM EST on 10 JUL 2030, but it is less likely that funding will be available in each respective fiscal year after the dates cited. This ARA will close on 10 JUL 2030 at

6:00PM EST.

All offerors submitting white papers will receive notification of their evaluation results within 45 days of submission. Offerors should email the TPOC, and the Contracting Officer listed in Section VII, for status of their white paper(s) after 45 days, if no such correspondence has been received.

2. CONTENT AND FORMAT: Offerors are required to submit a 4-to-5-page white paper summarizing their proposed approach/solution. Any pages in excess of 5 will be removed and not considered in the white paper evaluation. The purpose of the white paper is to preclude unwarranted effort on the part of an offeror whose proposed work is not of interest to the Government.

The white paper will be formatted as follows:

a. Section A: Title, Period of Performance, Estimated Cost, Name/Address of Company, Technical and Contracting Points of Contact (phone and email) (this section is NOT included in the page count)

i. if proposing an OT, one of the following must be met (COTR/AOTR will specify in the RFP if an OT is anticipated):

• At least one Nontraditional Defense Contractor or non-profit research institution participation to a significant extent in the prototype project: or

• ALL significant participants in the transaction other than the Federal Government are Small Businesses (including those participating in the Small Business Innovation Research (SBIR) or Small Business Technology…