Combined Synopsis Solicitation_Amendment 1.pdf

Solicitation H9821026QA002

Department of Defense

Defense Human Resources Activity

Request for Quotation - H9821026QA002

AMENDMENT 1 – 17 June 2026

Defense Activity for Non-Traditional Education Support

Online College and Career Planning Tool

Issuing Office: Defense Human Resources Activity

4800 Mark Center Drive, Suite. 06J25

Alexandria, Virginia, 22350-1300

Agency Contacts: Constance Reedus, Contract Specialist

Email: constance.r.reedus.civ@mail.mil

And

Charles M. Carnley, Contracting Officer

Email: charles.m.carnley.civ@mail.mil

1. The Defense Human Resources Activity (DHRA) on behalf of the Defense Activity for Non-

Traditional Education Support (DANTES), intends to establish a Firm Fixed Price (FFP) contract for

Online College and Career Planning Tool Support.

2. General Information

Notice Type: Combined Synopsis/Solicitation

H9821026QA002

DANTES Online College and Career Planning Tool Support

29 May 2026

10 June 2026 by 1300 Eastern

15 July 2026 by 1300 Eastern

10 August 2026

100% small business set-aside

611710 – Educational Support Services

Solicitation Number:

Title:

Posted Date:

Questions Due Date:

Solicitation Response Date:

Estimated Award Date:

Set Aside:

NAICS Code:

3. This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in the Revolutionary FAR Overhaul (RFO) FAR Part 12, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested and a written solicitation will not be issued.

4. The Request for Quotation (RFQ) number H9821026QA002 shall be used to reference any written quotation provided under this RFQ.

5. The solicitation document and incorporated provisions and clauses, and the full text of provisions and clauses may be accessed electronically at www.acquisition.gov.

6. This requirement is a small business set-aside. The North American Industry Classification System

(NAICS) code for this project is 611710 with a size standard of $24,000,000.

7. The contractor, in compliance with Department of Defense Instruction (DODI) 1322.25, shall provide mailto:constance.r.reedus.civ@mail.mil mailto:charles.m.carnley.civ@mail.mil http://www.acquisition.gov/ the Defense Activity for Non-Traditional Education Support (DANTES) an online college and career planning counseling tool available to all members of the U.S. Armed Services. The online resource shall provide military members self-paced counseling assistance which will result in a career and education pathway customized for each individual user.

8. The contract will include a one-year base period and four, one-year option periods. The overall period of performance, including the four option periods is 29 August 2026 – 28 August 2031.

9. FAR Provision 52.212-1, Instructions to Offerors – Commercial Products and Services (Deviation

2026-O0038) (Feb 2026) applies to this acquisition and the following addendum applies:

Instructions to Offerors

1.0 This Section provides general guidance for preparation and submission of quotations, as well as specific instructions on the format and content of the quotations. The offeror’s quotation must include all data and information requested by these instructions and must be submitted in accordance with these instructions.

1.1 Offeror’s are instructed to read the entire RFQ document, including all Enclosures and Attachments, prior to submitting questions and/or preparing your quotation. This is an all-or-none requirement. Partial, incomplete quotations and any “assumptions” will be deemed noncompliant and will not be evaluated.

Offerors must agree to hold the prices in their quotations firm for a period of 90 calendar days from the date specified for receipt of quotations unless another timeframe is specified in an amendment to this RFQ.

1.2 All quotations shall be submitted via email to the Agency Contacts listed in this RFQ by the deadline established in the RFQ. The Government will not accept submissions received after the established deadlines.

1.3 Offerors may email written questions requesting clarification of the RFQ to the Contracting Officer

(CO) the Contract Specialist (CS) by the deadline established. No information concerning this RFQ or answers to requests for clarification will be provided in response to any other method than by emailing to the addresses listed in Agency Contacts. Questions will be accepted up to 1300 EST on 10 June 2026.

Questions received after this time and date will not be answered. The Government will provide responses to questions by posting them to the RFQ on SAM.gov. Questions shall be submitted utilizing the following format:

Subject: H9821026QA002 Questions

Reference: H9821026QA002, Paragraph(s) ________, Page(s)____.

1.4 Any Offeror that submits a quotation in response to this RFQ must be registered in the System for

Award Management (SAM), in accordance with FAR Clauses 52.204-7 and 52.232-33, when submitting an offer or quotation. If any Offeror is not registered in SAM.gov, the Offeror will be deemed noncompliant and will not be considered for award. Registration information for SAM can be found at:

https://sam.gov/content/home.

1.5 This is a follow-on requirement for an Online College and Career Planning Tool. Notice to Offeror(s):

Funds are not presently available for this effort. Please reference the Performance Work Statement and

Pricing Section for information regarding payment opportunities.

1.6 Notice to Offerors: The Government reserves the right to cancel this RFQ, either before or after the closing date. Offerors are responsible for all costs of preparing and submitting a quotation. If the Government cancels this RFQ, the Government will not reimburse the Offeror for any costs.

2.0 The Government will evaluate the Offeror’s technical quotation, past performance, and price quotations.

https://sam.gov/content/home

The Government will conduct a preliminary review of the Offeror’s quotation, including attachments, to ensure that all required information is complete and submitted in accordance with the instructions provided in the RFQ. Partial or incomplete quotations will be deemed noncompliant and will not be evaluated. In making an award determination, the Government will consider an Offeror’s entire quotation, which is defined as the combination of the technical and pricing submissions, as well as evaluation of the Offeror’s record of past performance.

3.0 Quotations: Each quotation shall be separated into four (4) volumes as shown in the table below.

3.1 The quotation shall be clear and concise and shall include sufficient detail for effective evaluation and for substantiating the validity of stated claims. The quotation shall not simply restate or rephrase the

Government’s requirements but rather provide a rationale explaining how the Offeror intends to meet the

Government’s requirements. Offerors shall assume that the Government has no prior knowledge of their capabilities and experience and will base its evaluation on the information presented in the Offeror’s quotation. Each volume shall be written on a stand-alone basis so that its contents may be evaluated without cross-referencing between volumes.

3.2 Offerors shall use letter-sized (8 ½” X 11”) pages (portrait format), single sided, single-spaced, with one-inch (1”) margins and use 11-point font in an easily readable font, such as Times New Roman or Arial.

Smaller fonts for tables, charts, and illustrations are acceptable, as long as they remain legible. Hyperlinks, if used, shall be verified as valid and correct. Each page shall be counted except for the following: Cover pages, table of contents, glossary, offer/subcontractor teaming agreements, affiliate documentation, and/or

Joint Venture Agreements. The Government will read/evaluate only the maximum number of pages allowed. The Government will not review pages in excess of the stated page limitations for each volume.

The Government may not consider quotations that do not conform to the specified organization and content.

The Government will evaluate quotations in accordance with the evaluation criteria set forth in the

Solicitation. The contents of each volume are described in the table below:

3.3 Each page of the documents submitted must be clearly marked with the Offeror’s name and the RFQ number.

3.4 Quotation submissions in response to this RFQ must be received no later than the date and time specified on Page 1 of the RFQ. Quotations must be received electronically by the closing date and time

IAW FAR 15.208(b)(1)(i). Email submission of quotations is the required transmittal method.

Quotations may be submitted in multiple emails but each individual email may not exceed 25 MB. This

25 MB includes the size of the offeror’s submission and the Government added security packet. Offerors must ensure that their emails, including the additional security attachments by the Government, do not exceed 25 MB to ensure they are received by the due date and time.

4.0 The Offeror’s quotation shall be submitted as follows:

a. VOLUME I - Business Information (No page limit).

Volume Tab Title Page Limits

Volume I Business Information No page limit

Volume II Technical 25 pages, excluding the Cover Page, Table of

Contents, and Glossary. The Government will only review up to the 25th page of this volume, therefore, any pages beyond 25 will not be evaluated.

Volume III Past Performance 6 Page Limit, excluding the Cover Page, Table of

Contents, and Glossary (if applicable)

Volume IV Pricing Information No page limit

The Business Information shall include the following:

(1) Company Name, Address, Point of Contact Information of individual authorized to represent the company and Phone Number, CAGE code, Unique Entity ID (UEI), Business Size, FAR and

DFARS provisions which require completion by the offeror.

(2) An executive summary of the Offeror’s quotation and a statement that the Offeror accepts the terms and conditions of the solicitation.

(3) A clear description of all prime contract, subcontract and/or teaming arrangements proposed.

For each subcontractor and teaming partner, the Offeror shall include the company name and division (if applicable), company URL, role in contract, mailing address, UEI, primary and alternate points of contact and contact information.

(4) If each subcontractor and Teaming Partner’s experience being submitted for consideration as part of the Past Performance, the submission shall include a signed commitment by the offer and subcontractor/Teaming Partner certifying that if a contract is awarded resulting from the quotation, the parties commit to joint performance as quoted. If the signed commitment is not fully executed by both parties and provided with the Past Performance Volume, subcontractor or Teaming

Partner’s past performance references will not be evaluated or considered.

Affiliate companies, sister companies, teaming arrangements, joint venture agreement, etc. will be considered provided sufficient documentation including an adequate narrative discussing the meaningful relationship between the parties is included in the Past Performance Volume.

Documentation includes a copy of the documented arrangement such as documented affiliation, a copy of the teaming agreement, a copy of the joint venture agreement, etc.

(5) Point of contact information for persons authorized to answer questions and or negotiate on behalf of the offeror.

(6) Acknowledgement of all Solicitation Amendments.

(7) Provide a Completed Attachment 2, CMMC Attestation. This provides the information that the offeror is attesting to meeting the Cybersecurity Maturity Model Certification

(CMMC) requirements set forth in DFARS 252.204-7021 and DFARS 252.204-7225.

The CMMC Level Certification for each Contractor Information System (CIS) shall be in the Supplier Performance Risk System (SPRS), as outlined in DFARS 252.204-

7021. The attestation letter must include the CMMC unique identifier (UID) number for each CIS that are applicable to supporting this requirement.

b. VOLUME II: Factor 1, Technical Capability (25 page limit).

The Offeror’s quotation shall address Section 4.0 of the PWS. This Volume shall specifically include and address the following four elements.

(1) Element A: Technical Approach and Methodology: The Offeror shall demonstrate its technical capability to meet the requirements outlined in the PWS. The Government will evaluate the extent of the Offeror’s capabilities based on depth and thoroughness of the proposal, proposed technical approach and methodology. The Government will also evaluate the Offeror’s approach to providing a commercially available online college and career planning tool. Particular attention should be paid to Section 4.1, Availability and Functionality, as these requirements are a critical indication of usefulness and usability for service members. The online product must be ready to use upon award of the contract.

(2) Element B: Reporting (5 page limit): The proposal shall describe the offeror’s approach for providing the reports described in Section 4.4 of the PWS. These reports are critical to the

Government’s ability to track return on investment.

c. VOLUME III: Factor 2, Past Performance (6 page limit).

The Government will consider an Offeror’s demonstrated current and relevant records of performance in supplying services as a prime contractor, as a joint venture member, or as a first-tier subcontractor. Contracts performed within the last 5 years from RFQ issuance date are considered recent. Offerors shall submit no more than three relevant Past Performance references. All references shall address current projects or those completed within the last 5 years by the Offeror as a prime contractor, as a joint venture member, or as a first-tier subcontractor.

For each reference the Offeror shall include contact information (name, Phone, and email) for the references listed, the project title, contract number, agency the project was done for, prime contractor or joint venture partner (if applicable), dollar amount, description of the work performed (if a joint venture or first-tier subcontractor, include % of overall contract that was performed), the performance period of the work, the cage and UEI of the prime or first-tier subcontractor or joint venture. The Government will use these references and other data obtained from sources it considers current and accurate, including but not limited to the Contractor

Performance Assessment Reporting System (CPARS) and Federal Awardee Performance and

Integrity Information System (FAPIIS), and System for Award Management (SAM).

If an Offeror or its subcontractor(s) determines they have no relevant past performance data, they shall provide the following statement in lieu of the information request below: “(Insert Offeror or subcontractor’s name) has determined that they possess no relevant past performance information

IAW the RFQ”.

d. VOLUME IV – Factor 3, Price (No page limit).

For evaluation purposes, Offeror’s shall complete the Priced CLIN Structure at Enclosure 1. All unit prices shall be no more than two decimal places.

The Government intends to evaluate the FAR 52.217-8, Option to Extend Services, as part of the price evaluation for this award. The offeror shall not provide a price on the FAR 52.217-8, Option to Extend Services. This will be calculated by taking 50% of the proposed price for Option Period

Four.

(End of Addendum)

10. FAR 52.212-2 Evaluation - Commercial Items (Deviation 2026-O0038) (Feb 2026) Evaluation

Factors for Award applies to this acquisition and the following addendum applies:

BASIS FOR CONTRACT AWARD

1. INTRODUCTION

1.1 The Government will award one contract resulting from this solicitation to the responsible Offeror whose quotation conforming to the solicitation will be most advantageous to the Government, price and other factors considered. The Evaluation Factors are:

Factor 1 – Technical Capability

Element A: Technical Approach and Methodology

Element B: Reporting

Factor 2 - Past Performance

Factor 3 - Price (price will not be assigned an adjectival rating)

Technical is more important than Past Performance, and Technical and Past Performance, when combined, are approximately equal to cost/price.

1.2 The Government intends to evaluate quotations and make award without holding meaningful exchanges. The primary objective of meaningful exchanges is to maximize the Government’s ability to obtain best value, based on the requirement and evaluation factors set forth in this RFQ. The Government may conduct meaningful exchanges with offerors, at the contracting officer’s discretion. Offerors are encouraged to quote the best terms from a price and technical standpoint.

1.3 The lowest priced quotation may not necessarily receive the award; likewise, the highest rated technical quotation may not necessarily receive the award.

1.4 Offerors are cautioned that “parroting” of the PWS with a statement of intent to perform does not reflect understanding of the requirement or capability to perform. Typographical errors indicate a lack of attention to detail and may result in a weakness noted against the Offeror’s quotation.

1.5 All quotations shall set forth full, accurate, and complete information as required by this solicitation

(including attachments and enclosures). The penalty for making false statements in the Offeror’s quotation is prescribed in 18 U.S.C. 1001.

1.6 To be considered and eligible for contract award, the Offeror must provide the completed and signed CMMC Attestation letter, and be registered and have the required CMMC Level certification (as identified in DFARS 252.204-7021 and DFARS 252.204-7225) in SPRS at the time of contract award. The Contracting Office will verify that the Offeror is registered and has the required CMMC Level certification in SPRS at the time of contract award decision. If an

Offeror does not provide the completed and signed CMMC Attestation letter at time of quote submission, and is not registered in SPRS with the required CMMC Level certification in SPRS at the time of contract award decision, the Offeror will not be considered or eligible for contract award.

2. EVALUATION FACTORS

a. Factor 1, Technical Capability.

Technical Capability will be evaluated to the extent that it addresses Section 4.0 and specifically the following two elements: Technical Approach and Methodology, and Reporting. The Technical

Proposal must demonstrate the Offeror’s ability to comprehend and perform the Government’s requirements as set forth in the technical portion of the PWS. The Proposal must demonstrate and explain the Offerors’ understanding of each of the Tasks in paragraph 4.0 of the PWS.

Any quotation receiving an overall rating of “Marginal” or “Unacceptable” will be deemed to have a risk that is so high that award cannot be made against the quotation and the quotation will not be further evaluated.

b. Factor 2, Past Performance.

The Government will consider an Offeror’s demonstrated current and relevant records of performance in supplying services as a prime contractor, as a joint venture member, or as a first-tier subcontractor.

Contracts performed within the last 5 years of solicitation issuance are considered recent. Offerors shall submit no more than three relevant Past Performance references. The Government will use the references submitted by the offeror, and other data obtained from sources it considers current and accurate, including but not limited to the Contractor Performance Assessment Reporting System

(CPARS) and Federal Awardee Performance and Integrity Information System (FAPIIS), and System for Award Management (SAM). Any substantial history of marginal ratings is considered adverse information and the Offeror will be defined as unacceptable.

c. Factor 3, Price.

The Government anticipates that adequate price competition will establish a fair and reasonable price.

However, if the Government does not receive adequate price competition, it will evaluate price quotations to ensure price reasonableness of the services being provided to the Government, considering the specific terms, conditions and relevant commercial practices.

The Government anticipates including an optional 6-month period of performance in accordance FAR

Clause 52.217-8 Option to Extend Services. Offerors shall not provide a price for this 6-month period of performance, as the evaluated price for this period will be calculated by taking 50% of the Option

Period Four total price.

3. EVALUATION CRITERIA AND RATINGS

a. Factor 1, Technical Capability- The Offeror’s technical capability will be evaluated to assess how well the Offeror demonstrated an understanding of the PWS requirements. The evaluation will include an assessment of how well the Offeror proposed to satisfy the performance requirements under following technical capabilities.

(1) Element A, Technical Approach and Methodology:

The Offeror’s Technical Approach and Methodology will be evaluated to assess how well the

Offeror demonstrates its technical capability to meet the requirements outlined in the PWS. The

Government will evaluate the extent of the Offeror’s capabilities based on depth and thoroughness of the proposal, proposed technical approach and methodology. The Government will also evaluate the Offeror’s approach to providing a commercially available online college and career planning tool. Particular attention should be paid to Section 4.1, Availability and

Functionality, as these requirements are a critical indication of usefulness and usability for service members. The online product must be ready to use upon award of the contract.

(2) Element B, Reporting:

The Offeror’s proposal will be evaluated to assess how well the Offeror approach for providing the reports described in Section 4.4 of the PWS. These reports are critical to the Government’s ability to track return on investment.

The Factor 1 - Technical Capability will receive one of the following ratings. Elements will not receive individual ratings.

TECHNICAL RATINGS

Rating Definition

Outstanding Quotation demonstrates an exceptional approach and understanding of the requirements and contains multiple strengths, and risk of unsuccessful performance is low.

Good Quotation indicates a thorough approach and understanding of the requirements and contains at least one strength, and risk of unsuccessful performance is low to moderate.

Acceptable Quotation meets requirements and indicates an adequate approach and understanding of the requirements and risk of unsuccessful performance is no worse than moderate.

Marginal Quotation has not demonstrated an adequate approach or understanding of the requirements, and/or risk of unsuccessful performance is high. Any quotation receiving this rating will not be further evaluated.

Unacceptable Quotation does not meet requirements of the RFQ, and thus, contains one or more deficiencies and is unawardable, and/or risk of performance is unacceptably high. Any quotation receiving this rating will not be further evaluated.

TECHNICAL EVALUATION DEFINITIONS

Definition

Strength Strength is an aspect of an Offeror’s quotation that has merit or exceeds specified performance or capability requirements in a way that will be advantageous to the Government during contract performance.

Weakness Weakness means a flaw in the quotation that increases the risk of unsuccessful contract performance.

Deficiency Deficiency is a material failure of a quotation to meet a Government requirement or a combination of weaknesses in a proposal that increases the risk of unsuccessful contract performance to an unacceptable level.

b. Factor 2, Past Performance:

Past performance will be reviewed using past performance references submitted by the Offeror, and the information obtained from the CPARS, FAPIIS, and SAM to ensure no negative or adverse reporting and to ensure award to a responsible offeror. Any substantial history of marginal ratings is considered adverse information and the Offeror will be defined as unacceptable.

In the case of an Offeror without a record of relevant past performance or for whom information on past performance is not available or so sparse that no meaningful past performance rating can be reasonably assigned, the Offeror may not be evaluated favorably or unfavorably on past performance. Therefore, the

Offeror shall be determined to have unknown (or “neutral”) past performance.

Past Performance

Satisfactory Based on the Offeror’s performance record, the Government has a reasonable expectation that the Offeror will successfully perform the required effort.

Unknown (Neutral) An Offeror without a record of recent and relevant past performance or for whom information on past performance is not available or so sparse that no meaningful past performance rating can be reasonably assigned

Unacceptable Based on the Offeror’s performance record, the Government does not have a reasonable expectation that the Offeror will be able to successfully perform the required effort. Any quotation receiving this rating will not be further evaluated.

c. Factor 3, Price:

Price quotations will not receive an adjectival rating. This factor will be evaluated utilizing price analysis techniques.

The Government anticipates that there will be adequate price competition to determine the price fair and reasonable. In the event adequate price competition is not received, the Government will evaluate the price proposals to ensure a fair and reasonable price by using price analysis techniques.

(End of Addendum)

11. The clause at FAR 52.212-4, Contract Terms and Conditions -- Commercial Products and

Commercial Services (Deviation 2026-O0038) (Feb 2026), applies to this acquisition.

12. The following additional FAR and DFARS provisions and clauses apply to this acquisition by full text:

52.216-1 Type of Contract (Deviation 2026-O0038) (Feb 2026)

The Government contemplates award of a Firm, Fixed-Price contract resulting from this solicitation.

(End of provision)

52.217-8 Option to Extend Services (Nov 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting

Officer may exercise the option by written notice to the Contractor within the period of the contract.

(End of clause)

52.217-9 Option to Extend the Term of the Contract (Mar 2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within the period of performance of the contract; provided that the Government gives the

Contractor a preliminary notice of its intent to extend at least 60 days before the contract expires.

The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 60 months.

52.233-2 Service of Protest (Deviation 2026-O0038) (Feb 2026)

(a) Protests, as defined in section 33.101 of the Federal Acquisition Regulation, that are filed directly with an agency, and copies of any protests that are filed with the Government Accountability Office (GAO), shall be served on the Contracting Officer (addressed as follows) by obtaining written and dated acknowledgment of receipt from

Charles M. Carnley

Contracting Officer

Defense Human Resources Activity, Acquisition Management Directorate

4800 Mark Center Drive, Suite 03E25

Alexandria, VA 22350

(b) The copy of any protest shall be received in the office designated above within one day of filing a protest with the GAO.

52.252-1 Solicitation Provisions Incorporated by Reference (Feb 1998)

This solicitation incorporates one or more solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at this/these address: Acquisition.gov

(End of Provision)

52.252-2 Clauses Incorporated by Reference (Feb 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

www.acquisition.gov www.acq.osd.mil/dpap/dars/class_deviations.html

(End of Clause)

52.252-5 Authorized Deviations in Provisions (Nov 2020)

(a) The use in this solicitation or contract of any Federal Acquisition Regulation (48 CFR Chapter 1) provision with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the provision.

(b) The use in this solicitation or contract of any Defense Federal Acquisition Regulation Supplement

(DFARS) (48 CFR Chapter 2) provision with an authorized deviation is indicated by the addition of

"(DEVIATION)" after the name of the regulation.

(End of provision)

52.252-6 Authorized Deviations in Clauses (Nov 2020)

(a) The use in this solicitation or contract of any Federal Acquisition Regulation (48 CFR Chapter 1) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the clause.

(b) The use in this solicitation or contract of any Defense Federal Acquisition Regulation Supplement

(DFARS) (48 CFR Chapter 2) clause with an authorized deviation is indicated by the addition of

"(DEVIATION)" after the name of the regulation.

252.204-7016 COVERED DEFENSE TELECOMMUNICATIONS EQUIPMENT OR SERVICES—

REPRESENTATION (DEC 2019)

http://www.acquisition.gov/ http://www.acq.osd.mil/dpap/dars/class_deviations.html

(a) Definitions. As used in this provision, “covered defense telecommunications equipment or services” has the meaning provided in the clause 252.204-7018 , Prohibition on the Acquisition of

Covered Defense Telecommunications Equipment or Services.

(b) Procedures. The Offeror shall review the list of excluded parties in the System for Award

Management (SAM) (https://www.sam.gov/) for entities excluded from receiving federal awards for “covered defense telecommunications equipment or services”.

(c) Representation. The Offeror represents that it [ ] does, [ ] does not provide covered defense telecommunications equipment or services as a part of its offered products or services to the

Government in the performance of any contract, subcontract, or other contractual instrument.

252.204-7017 PROHIBITION ON THE ACQUISITION OF COVERED DEFENSE

TELECOMMUNICATIONS EQUIPMENT OR SERVICES—REPRESENTATION (MAY 2021)

The Offeror is not required to complete the representation in this provision if the Offeror has represented in the provision at 252.204-7016 , Covered Defense Telecommunications Equipment or Services—Representation, that it “does not provide covered defense telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument.”

(a) Definitions. “Covered defense telecommunications equipment or services,” “covered mission,”

“critical technology,” and “substantial or essential component,” as used in this provision, have the meanings given in the 252.204-7018 clause, Prohibition on the Acquisition of Covered Defense

Telecommunications Equipment or Services, of this solicitation.

(b) Prohibition. Section 1656 of the National Defense Authorization Act for Fiscal Year 2018 (Pub.

L. 115-91) prohibits agencies from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service to carry out covered missions that uses covered defense telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award

Management (SAM) at https://www.sam.gov for entities that are excluded when providing any equipment, system, or service to carry out covered missions that uses covered defense telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system, unless a waiver is granted.

(d) Representation. If in its annual representations and certifications in SAM the Offeror has represented in paragraph (c) of the provision at 252.204-7016 , Covered Defense

Telecommunications Equipment or Services—Representation, that it “does” provide covered defense telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument, then the Offeror shall complete the following additional representation:

The Offeror represents that it [ ] will [ ] will not provide covered defense telecommunications equipment or services as a part of its offered products or services to DoD in the performance of any award resulting from this solicitation.

https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7018 https://www.sam.gov/ https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7016 https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7018 https://www.sam.gov/ https://www.acquisition.gov/dfars/part-252-solicitation-provisions-and-contract-clauses#DFARS-252.204-7016

(e) Disclosures. If the Offeror has represented in paragraph (d) of this provision that it “will provide covered defense telecommunications equipment or services,” the Offeror shall provide the following information as part of the offer:

(1) A description of all covered defense telecommunications equipment and services offered

(include brand or manufacturer; product, such as model number, original equipment manufacturer

(OEM) number, manufacturer part number, or wholesaler number; and item description, as applicable).

(2) An explanation of the proposed use of covered defense telecommunications equipment and services and any factors relevant to determining if such use would be permissible under the prohibition referenced in paragraph (b) of this provision.

(3) For services, the entity providing the covered defense telecommunications services (include entity name, unique entity identifier, and Commercial and Government Entity (CAGE) code, if known).

(4) For equipment, the entity that produced or provided the covered defense telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the OEM or a distributor, if known).

252.204-7021 CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY

MODEL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025)

(a) Definitions. As used in this clause—

“Controlled unclassified information” means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or

Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)).

“Current” means—

(1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status—

(i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level

2 (certified third-party assessment organization (C3PAO)) assessments, with—

(A) No changes in compliance with the requirements at 32 CFR part 170 since the

Conditional CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance by an affirming official (see

32 CFR 170.4); and

(ii) Not older than 180 days for Conditional Level 3 (Defense Industrial Base Cybersecurity

Assessment Center (DIBCAC)) assessments, with—

(A) No changes in compliance with the requirements at 32 CFR part 170 since the

Conditional CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance by an affirming official;

(2) With regard to Final CMMC Status—

(i) Not older than 1 year for Final Level 1 (Self), with—

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final

CMMC Status date (see 32 CFR 170.15); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official;

(ii) Not older than 3 years for Final Level 2 (Self) assessments and Final Level 2 (C3PAO) assessments, with—

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final

CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(iii) Not older than 3 years for Final Level 3 (DIBCAC) assessments, with—

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final

CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(3) With regard to affirmation of continuous compliance (32 CFR 170.22), not older than 1 year with no changes in compliance with the requirements at 32 CFR part 170.

“Cybersecurity Maturity Model Certification (CMMC) status” means the result of meeting or exceeding the minimum required score for the corresponding assessment. The potential statuses are as follows:

(1) Final Level 1 (Self).

(2) Conditional Level 2 (Self).

(3) Final Level 2 (Self).

(4) Conditional Level 2 (C3PAO).

(5) Final Level 2 (C3PAO).

(6) Conditional Level 3 (DIBCAC).

(7) Final Level 3 (DIBCAC).

“Cybersecurity Maturity Model Certification unique identifier (CMMC UID)” means 10 alpha-numeric characters assigned to each CMMC assessment and reflected in the Supplier Performance Risk System

(SPRS) for each contractor information system.

“Federal contract information (FCI)” means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the

Government. It does not include information provided by the Government to the public, such as on public websites, or simple transactional information, such as information necessary to process payments.

“Plan of action and milestones” means a document that identifies tasks to be accomplished. It details resources required to accomplish the elements of the plan, any milestones in meeting the tasks, and scheduled completion dates for the milestones, as defined in National Institute of Standards and

Technology Special Publication 800-115 (32 CFR 170.21).

(b) Framework. The Cybersecurity Maturity Model Certification (CMMC) is a framework for assessing a contractor’s compliance with applicable information security protections (see 32 CFR part

170).

(c) Duplication. The CMMC assessments will not duplicate efforts from any other comparable DoD assessment, except for rare circumstances when a reassessment may be necessary, for example, when there are indications of issues with cybersecurity and/or compliance with CMMC requirements.

(d) Requirements. The Contractor shall—

(1)(i) Have and maintain for the duration of the contract a current CMMC status at the following

CMMC level, or higher: CMMC Level 1 Self as of the date of quote submission and CMMC Level 2

(Self) for all information systems used in performance of the contract, task order, or delivery order that process, store, or transmit FCI or CUI within 90 Days of Award; and

(ii) Consult 32 CFR 170.23 related to the flow down of the CMMC requirements, and flow down the correct CMMC level to subcontracts and other contractual instruments;

(2) Only process, store, or transmit FCI or CUI on contractor information systems that have a

CMMC status at the CMMC level required in paragraph (d)(1) of this clause, or higher;

(3) Complete on an annual basis, and maintain as current, an affirmation, by the affirming official

(see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required in paragraph (d)(1) of this clause in the Supplier Performance Risk System (SPRS)

(https://piee.eb.mil) for each CMMC UID applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract;

(4) Ensure all subcontractors and suppliers complete prior to subcontract award, and maintain on an annual basis, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required for the subcontract or other contractual instrument for each of the subcontractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the subcontract; and

(5) If the Contractor has a CMMC Status of Conditional, successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(e) Reporting. The Contractor shall—

(1) Submit to the Contracting Officer—

(i) The CMMC UID(s) issued by SPRS for contractor information systems that will process, store, or transmit FCI or CUI during performance of the contract; and

(ii) Any changes in the CMMC UIDs generated in SPRS throughout the life of the contract, task order, or delivery order, if applicable;

(2) Enter into SPRS the results of a current self-assessment for each CMMC UID, not covered by a C3PAO assessment or DIBCAC assessment, applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract; and

(3) Complete in SPRS on an annual basis and maintain as current an affirmation of continuous compliance by the affirming official (see 32 CFR 170.4) for each self-assessment, C3PAO assessment, or

DIBCAC assessment required under the contract in SPRS.

(f) Subcontracts. The Contractor shall—

(1) Insert the substance of this clause, including this paragraph (f) and excluding paragraph (e)(1), in subcontracts and other contractual instruments, including those for the acquisition of commercial products and commercial services, excluding commercially available off-the-shelf items, if the subcontract or other contractual instrument will contain a requirement to process, store, or transmit FCI or

CUI; and

(2) Prior to awarding a subcontract or other contractual instrument, ensure that the subcontractor has a current CMMC certificate or current CMMC status at the CMMC level that is appropriate for the information that is being flowed down to the subcontractor based on the requirements at 32 CFR 170.23.

252.204-7025 NOTICE OF CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL

REQUIREMENTS (NOV 2025)

(a) Definitions. As used in this provision, “controlled unclassified information (CUI),” “current,”

“Cybersecurity Maturity Model Certification (CMMC) status,” “Cybersecurity Maturity Model

Certification unique identifier (CMMC UID),” “Federal contract information (FCI)”, and “plan of action and milestones” have the meaning given in the Defense Federal Acquisition Regulation Supplement

252.204-7021, Contractor Compliance With the Cybersecurity Maturity Model Certification Level

Requirements, clause of this solicitation.

(b)(1) Cybersecurity Maturity Model Certification (CMMC) level. The CMMC level required by this solicitation is: CMMC Level 1 (Self) as of the date of quote submission. This CMMC level, or higher

(see 32 CFR part 170), is required prior to award for each contractor information system that will process, store, or transmit Federal contract information (FCI) or controlled unclassified information (CUI) during performance of the contract. The contractor will be required to have a CMMC Level 2 Self within 90

Days of Award.

(2) The Offeror will not be eligible for award of a contract, task order, or delivery order resulting from this solicitation if the Offeror does not have, for each of the contractor information systems that will process, store, or transmit FCI or CUI and that will be used in performance of a contract resulting from this solicitation—

(i) The current CMMC status entered in the Supplier Performance Risk System (SPRS)

(https://piee.eb.mil) at the CMMC level required by paragraph (b)(1) of this provision; and

(ii) A current affirmation of continuous compliance with the security requirements identified at 32 CFR part 170 in SPRS.

(c) Plan of action and milestones. If the Offeror has a CMMC Status of Conditional, the Offeror shall successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(d) CMMC unique identifiers. The Offeror shall provide, in the proposal, the CMMC unique identifier(s) (CMMC UIDs) issued by SPRS for each contractor information system that will process, store, or transmit FCI or CUI during performance of a contract, task order, or delivery order resulting from this solicitation. The Offeror also shall update the list when new CMMC UIDs are generated in

SPRS. The CMMC UIDs are provided in SPRS after the Offeror enters the results of self-assessment(s) for each such information system.

252.240-7997 NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS (DEVIATION 2026-

O0025)(FEB 2026)

(a) Definitions.

Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding

Covered Defense Information and Cyber Incident Reporting, of this contract.

High Assessment means an assessment that is conducted by Government personnel, trained in accordance with DoD policy and procedures, using NIST SP 800-171A, Assessing Security Requirements for

Controlled Unclassified Information that—

(1) Consists of—

(i) A review of a contractor's previous assessment(s), as applicable;

(ii) A thorough document review;

(iii) Verification, examination, and demonstration of a Contractor's system security plan to validate that NIST SP 800-171 security requirements have been implemented as described in the contractor's system security plan;

and

(iv) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of “High” in the resulting score.

Medium Assessment means an assessment conducted by Government personnel, trained in accordance with DoD policy and procedures, using NIST SP 800-171A, Assessing Security Requirements for

Controlled Unclassified Information that—

(1) Consists of—

(i) A review of a contractor's previous assessment(s), as applicable;

(ii) A thorough document review; and

(iii) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of “Medium” in the resulting score.

(b) Applicability. This clause applies to covered contractor information systems that are required to comply with the National Institute of Standards and Technology (NIST)

Special Publication (SP) 800-171, in accordance with Defense Federal Acquisition

Regulation System (DFARS) clause at 252.204-7012, Safeguarding Covered Defense

Information and Cyber Incident Reporting, of this contract.

(c) Requirements. The Contractor shall provide access to its facilities, systems, and personnel necessary for the Government to conduct a Medium or High NIST SP 800-171

DoD Assessment, using the methodology described at 32 CFR 170.24, if necessary. The results of Medium or High NIST SP 800-171 DoD Assessments, when conducted by

DCMA, will take precedence over any other assessment, in accordance with 32 CFR

170.16(a)(1)(iv), 32 CFR 170.17(a)(1)(iv), and 32 CFR 170.18(a)(1)(iv).

(d) Procedures. Summary level scores for all assessments will be posted in the Supplier

Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to provide DoD

Components visibility into the summary level scores of strategic assessments.

https://www.sprs.csd.disa.mil/

Medium and High Assessments. DoD will post the following Medium and/or High Assessment summary level scores to SPRS for each system security plan assessed:

(i) The standard assessed (e.g., NIST SP 800-171 Rev 1).

(ii) Organization conducting the assessment, i.e., DCMA.

(iii) All industry CAGE code(s) associated with the information system(s) addressed by the system security plan.

(iv) Date and level of the assessment, i.e., medium or high.

(v) Summary level score (overall numerical score, not the individual value assigned for each requirement).

(vi) Date that all requirements are expected to be implemented based on information gathered from associated plan(s) of action developed in accordance with NIST

SP 800-171.

(e) Rebuttals. (1) DoD will provide Medium and High Assessment summary level scores to the Contractor and offer the opportunity for rebuttal and adjudication of assessment summary level scores prior to posting the summary level scores to SPRS (see SPRS

User's Guide https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf).

(2) Upon completion of each assessment, the contractor has 14 business days to provide additional information to demonstrate that they meet any security requirements not observed by the assessment team or to rebut the findings that may be of question.

(f) Accessibility. (1) Assessment summary level scores posted in SPRS are available to DoD personnel, and are protected, in accordance with the standards set forth in DoD

Instruction 5000.79, Defense-wide Sharing and Use of Supplier and Product

Performance Information (PI).

(2) Authorized representatives of the Contractor for which the assessment was conducted may access

SPRS to view their own summary level scores, in accordance with the SPRS…