About this file

This Sources Sought (SS)/Request for Information (RFI) is issued by the Air Force Materiel Command (AFMC) to conduct market research for cloud migration and cybersecurity services. The Department of the Air Force (DAF) seeks to modernize and secure its IT infrastructure, with key objectives including conducting comprehensive cloud assessments, executing secure cloud migrations of legacy applications, implementing continuous cloud development practices, and enhancing cybersecurity across cloud and hybrid environments.

Interested vendors are requested to submit 10-page responses by close of business on 29 Jan 2026 to eric.amissah.1@us.af.mil and warren.hodges@us.af.mil. The anticipated contract will be a firm-fixed-price with a period of performance up to three years, potentially using Agile methodologies. The solicitation is expected to be a FAR 19.8 small business competition. Respondents are asked to provide detailed capability statements addressing cloud migration experiences, system sustainment, technology integration, AI implementation, security control processes, and recommendations for performance indicators and evaluation criteria.

View the file

Other files

File Type Posted
Draft PWS -GBCAS and Cybersecurity cao.pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

SOURCES SOUGHT (SS)/ REQUEST FOR INFORMATION (RFI)

GUNTER BUSINESS CLOUD ACCELERATION SERVICES (GBCAS)

15 January 2026

1. SYNOPSIS

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. THERE IS NO SOLICITATION

AVAILABLE AT THIS TIME. REQUESTS FOR A SOLICITATION WILL NOT RECEIVE

A RESPONSE.

The Air Force Materiel Command (AFMC), Air Force Life Cycle Management Center (AFLCMC) Business and Enterprise Systems Directorate (BES) Program Execution Group (GBX) Contracting Division (GBK), Maxwell-Gunter Air Force Base (MAFB), Alabama is conducting market research seeking vendor interest for the continued cloud migration and cyber security services.

This RFI is issued solely for information and planning purposes. It does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This RFI does not commit the Department of the Air Force (DAF) to contract for any supply or service whatsoever. Further, the DAF is not seeking proposals at this time. Respondents are advised that the AF will not pay for any information or administrative costs incurred in response to this RFI; all costs associated with responding to this RFI will be solely at the interested party’s expense. If a solicitation is released, it is anticipated that it will be a FAR 19.8 small business competition. It is the responsibility of the potential offerors to monitor sites for additional information pertaining to this requirement.

The information provided is considered market research and may be used by the AF in developing its acquisition strategy, and performance specifications. Interested parties are responsible for adequately marking proprietary or competition sensitive information contained in their response. The Government reserves the right to contact the submitting parties, on an as-required basis, for further clarification on material provided. The Government reserves the right to contact additional customers to obtain information that will be used to evaluate the offeror’s interest.

The United States Government (USG), through the DAF, is issuing this Request for Information (RFI) to obtain input from industry regarding IT services in the areas of cloud assessment, cloud migration, continuous cloud development, cybersecurity, and integration of emerging technologies. Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract.

2. BACKGROUND

The DAF is evaluating options to modernize and secure its IT infrastructure. Key objectives include:

• Conduct comprehensive cloud assessments to evaluate readiness and identify migration candidates.

• Execute secure and efficient cloud migration of legacy applications and data.

• Implement continuous cloud development practices, including DevSecOps, Continued Integration/Continuous Development (CI/CD) pipelines, and automation. Explore and adopt new technologies (e.g., AI/ML, edge computing, advanced analytics) that can be integrated into cloud environments to support mission objectives.

• Enhance cybersecurity posture across cloud and hybrid environments, ensuring compliance with federal standards.

The Government seeks to understand current industry capabilities, best practices, and innovative approaches to achieve these objectives.

3. CONTRACTOR CAPABILITY STATEMENTS

The USG via the DAF requests input on the following areas:

1. Please share an example of your company's experience in migrating a system to a Cloud environment, ideally Cloud 1. Please include specifics regarding the migration timeframe, interfaces involved, complexity of the process, data management strategies, configuration management practices, DEVSECOPS implementation, utilization of cloud services, trends in release velocity, and any other relevant details. Please provide lessons learned, recommended best practices, (government/commercial) customers, environments sourced/targeted, risk management, and cost savings/efficiency.

2. Please provide an example of your company's performance in sustaining a system within a cloud environment. Please include details about your technical capabilities, experience with code refactoring, utilization of cloud-native services, and any other relevant information.

3. Please share an example of how your company has identified and implemented new technologies and processes within a cloud environment. If relevant, please include details about collaboration with other vendors for testing and integrating code.

4. Please explain your team's approach to integrating artificial intelligence (AI) into your processes and workflows. Please provide examples related to the migration and sustainment of mission applications.

5. Describe your process for selecting, tailoring, and implementing the security and privacy controls from NIST SP 800-53 Rev 5. Please explain how your team continuously monitors the effectiveness of your implemented NIST 800-53 controls? Detail experience using tools and methodologies to perform security control assessments in a Cloud environment.

6. Are there any areas of the draft PWS that are unclear or ambiguous?

7. What are some key performance indicators that should be used to measure success?

8. Do you have any recommendations for the evaluation criteria that should be used in the

RFP?

9. What relevant data rights should we be considering when performing cloud migration and cybersecurity. Are there any proprietary tools that your company plans to leverage.

4. PERIOD OF PERFORMANCE

The anticipated Period of Performance (PoP) will be up to three (3) years should a contract be awarded.

5. CONTRACT TYPE

The contract type is anticipated to be firm-fixed-price and account for Agile methodologies.

Contractors are encouraged to submit recommended contract line-item strategies for cloud migration and cyber security services

6. RESPONSE INSTRUCTIONS

Interested parties are invited to submit responses that include organization name, point of contact, and contact information.

Responses should be submitted electronically to eric.amissah.1@us.af.mil and warren.hodges@us.af.mil no later than COB 29 Jan 2026. The DAF request that submissions be limited to 10 pages.

7. DISCLAIMER

This RFI is issued solely for information and planning purposes. It does not constitute an RFP or a promise to issue RFP in the future. The USG and USAF will not reimburse any costs incurred in responding to this RFI. All submissions become Government property and will not be returned.

Attachments:

1. Draft Performance Work Statement mailto:eric.amissah.1@us.af.mil mailto:warren.hodges@us.af.mil

File details come from the government source that posted it. Updated .