RFP DeploymentSolutions Amendments QA 20260416.pdf

Q# Date Received Reference Section Page # Question Government's Response

1 4/13/2026 General

Amendment 0001 indicates that the closing date and time of the solicitation has been extended to April 21, 2026, at 4:00 PM Eastern Time, however, it does not appear that the solicitation details screen in SAM.GOV has yet been updated. Please confirm that the submission close date is indeed April 21, 2026, at 4:00 PM Eastern Time.

The Government has updated the date in SAM.Gov with the posting of Amendment 0002.

2 4/15/2026 General

Is the not a full RFP or is it requesting a RFI response and an RFP will be released at a later date? In the write up it states in the early section that the solicitation is an RFP (“Solicitation number HT003826RE001 is issued as a request for proposal (RFP) for Deployment Solutions.”) but at the bottom of the solicitation it states that it is not an RFP (“This notice is for informational and market research purposes only. It does not constitute a formal Request for Proposal (RFP) and is not to be construed as a commitment by the Government to issue a solicitation or award a contract. The Government will not pay for any information or administrative costs incurred in response to this notice. All information submitted in response to this notice is voluntary, and the Government may or may not use the information to develop its acquisition strategy and final solicitation.”)

Can you clarify if this current notice in SAM.gov is a request for a full RFP or an RFI response?

The language at the bottom of the solicitation was inadvertently included in the request for proposals announcement. The Government has updated SAM.Gov to remove the inaccurate language.

3 4/15/2026 General

With reference to the subject notice, SAM appears to reflect an update this morning 4/15 at 9:50 AM.

However, it is not clear what changed, if anything. Could you please confirm?

See Question 2. The Government updated SAM.Gov with a note about the change.

4 4/15/2026 Amendment 0002 18

Page 18 of Amendment 0002 states that offerors are to identify all commercial technical data, commercial computer software, and commercial computer software documentation in accordance with Addendum 3 in Section 3 of Volume III, Contracts (see below). It would be difficult for offerors to respond to this requirement without seeing any of the actual Task Orders which contain the specific scope of work for each one. Also, we are not proposing anything in our response to the IDIQ solicitation that would require Assertions and would follow the required disclosure process for Assertions as needed for future Task Orders. Based on this, can the stated requirement be addressed on a Task Order basis rather than at the IDIQ level?

Offerors shall make their best effort to answer Addendum 3 when submitting the IDIQ Proposal.

Q&A LOG

Program Executive Office (PEO) Defense Healthcare Management Systems (DHMS) Deployment Solutions

HT003826RE001 for Amendments 0001 and 0002 Date: 16 April 2026

Q# Date Received Reference Section Page # Question Government's Response

Q&A LOG

Program Executive Office (PEO) Defense Healthcare Management Systems (DHMS) Deployment Solutions

HT003826RE001 for Amendments 0001 and 0002 Date: 16 April 2026

5 4/15/2026

Please confirm that, at time of proposal submission, offerors need not have completed a Level 2 CMMC self-assessment and that offerors merely must complete such self-assessment before award? We note that GAO has previously held that requiring certifications at the time of proposal submission, rather than at the time of award, is unduly restrictive of competition. See, e.g., Insight Tech. Sols., Inc., B 420543, B 420543.2, May 27, 2022, 2022 CPD 134 (sustaining protest challenging the terms of solicitation that required cyber certification at time of proposal submission and noting that the agency’s needs would be met by requiring certification at the time of award).

In accordance with PWS 17.4, Cybersecurity Maturity Model Certification, The contractor shall align with the most current CMMC program milestones and prepare to attain an accredited CMMC Third Party Assessment Organization (3PAO) at CMMC Level 2. Once CMMC 2.0 is fully implemented, DoW will only accept CMMC assessments provided by the Government or an authorized and accredited C3PAO or certified CMMC Assessor. In the final phases of the transition to CMMC 2.0 assessments will be retroactive, and contractors will need to demonstrate compliance. Additional information on CMMC is available at https://dodcio.defense.gov/CMMC and https://www.cyberab.org/.

See "RFP_DeploymentSolutions_Q&A_2026.04.13" Questions related to CMMC.

According to the FAR/DFAR, the Offeror/Contractor and sub-contractors must have the Certification, or self-attestation prior to November 10, 2026, active in SPRS at the time of contract award.

6 4/15/2026

For those offerors who have not previously completed a CMMC self-assessment (or received 3CPAO certification) at the time of proposal submission but are nevertheless scheduled to have such self-assessment completed before anticipated award, what information would be expected with the proposal?

See Question 5.

7 4/15/2026 With respect to question 61 (from RFP_DeploymentSolutions_QA_2026.04.13), please confirm that in accordance with the regulations, subcontractors will only need Level 2 CMMC certification to the extent they're handling the relevant data (i.e., CUI).

Subcontractors must meet the same level of certification as the Prime at the time of award. This is evidenced in the flow down rule established in the CMMC guidance (32 CFR 170.23).

Sheet1