Offensive Cyber Depot Operations_ Sustainment RFI.pdf

CONTROLLED UNCLASSIFIED INFORMATION

FA8307-26-R-CW02

Request for Information (RFI)

For

Offensive Cyber Depot Operations & Sustainment

1. Introduction

(U) This Request for Information (RFI) is in accordance with the Revolutionary Far Overhaul (RFO) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes - Oct 1997) and is published only to obtain information for use by the Air Force Life Cycle Management Center(AFLCMC), Joint Base San Antonio - Lackland, Texas, for planning purposes only.

(U) This RFI does not constitute an invitation for bids, a request for proposal, a solicitation, a request for quote or an indication that the Government will contract for the items provided by submitter. The Government will not reimburse respondents for any costs associated with the preparation or submission of the information requested. Response to this RFI is strictly voluntary and will not affect any potential offeror's ability to submit an offer if a solicitation is released.

Any requests for a solicitation package will be disregarded. The Government does not intend to award a contract based on this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of preparing submissions in response to this RFI and the Government's use of such information.

(U) Submittals will not be returned to the sender. Respondents of this RFI may be requested to provide additional information/details based on their initial submittals.

2. Background

(CUI) AFLCMC/HNCK Cryptologic and Cyber Systems Division, Contracting Branch Joint Base San Antonio - Lackland TX, is seeking a Depot Support contract from vendors who have the capability to perform Cost Plus operations and sustainment activities for cyber weapon systems within the AFLCMC/HNCO (Offensive Cyber Systems) portfolio. Ideally, vendors will recommend use of an existing Indefinite Delivery / Indefinite Quantity (IDIQ) contract to which they are a party, and which is accessible by DoD Agencies.

3. Objective

Potential vendors will be required to perform the following:

(CUI) Provide Tier 1, 2, and 3 level support for complex information systems.

(U) Repair, update, and return complex information systems to service.

(CUI) Create virtual machines, networks, and infrastructures in an air-gapped environment.

(U) Update and maintain hardware and software configuration baselines for these systems.

(CUI) Software expected to be relevant to this effort includes (but is not limited to)

- Microsoft Server 2022 and beyond

- Red Hat Enterprise Linux

- VMWare / vSphere / ESXi

- Microsoft Windows 11 Enterprise

- SecureView

- Etc.

(CUI) Hardware expected to be relevant to this effort includes (but is not limited to)

- Servers

- Switches

- Firewalls

- Workstations

- Keyboard / Video / Mouse (KVM) devices

- Etc.

(U) Install and maintain services under a service-oriented architecture.

(CUI) Work within the government’s Risk Management Framework (RMF) to obtain and retain system Interim Approval to Test (IATT), Authority to Connect (ATC), and Authority to Operate (ATO) approvals.

(U) Perform system scans in compliance with Security Technical Implementation Guides (STIG).

(U) Perform continuous system monitoring to maintain RMF ATO including, but not limited to, performing system ACAS scans in compliance with DISA Security Technical Implementation Guides (STIG), performing weekly security posture reviews, and monitor Information Assurance Vulnerability Alerts (IAVMs)

(U) Write, update and provide System User Manuals, System Description/Design Documents, System Installation Guides, and other types of technical reports and data.

(CUI) Provide and operate a contractor Sensitive Compartmented Information Facility (SCIF) in the San Antonio Metropolitan Area. The SCIF must have connected AFSCI terminals and provide sufficient space for the contractor workforce (estimated 8 - 10 positions)

(CUI) Provide and operate an unclassified server space to host Test and Integration (T&I) system offsite.

Space must have an internet connection to allow contractor team to download system updates that can be tested on the T&I before being brought on site.

(CUI) Provide Help Desk services to our customers. Help Desk ‘tickets’ will be maintained on the AFSCI system. Help Desk will be available on a 24/7 basis via an ‘on call’ point of contact at all times.

(CUI) The workforce will require TS/SCI eligibility and is anticipated to consist of a mix of the following

(or similar) labor categories:

- Network Specialists

- System Engineers

- System Administrators

- Help Desk Support

- Configuration Manager

- Test Engineer

- Information System Security Manager (ISSM)

- Other, as deemed necessary by the contractor

(CUI) Some members of the workforce will require Special Access eligibility.

(U) Work with the incumbent contractor to ensure a smooth transition, if applicable.

4. Requested Information.

(U) This is not a request for competitive proposals. If a vendor believes it can meet the Government's requirement, it may identify its interest and capability to Capt Charles Craig (Contracting Officer) at charles.craig.2@us.af.mil within ten (10) business days of this publication. Interested vendors are requested to submit a capability statement/white paper (no more than 5 pages, not inclusive of title page) and a ROM. Hard copies will not be accepted.

Respondents shall ensure submissions are sent at the appropriate security level. It is preferred that only non-proprietary information be submitted. However, proprietary information, if submitted, should be kept to a minimum and MUST BE CLEARLY MARKED. Respondents are advised that information submitted in response to this RFI may be released to non-Government advisors for review and analysis.

5. Questions.

(U) If you have any specific questions (relating to the above information only) please submit them in written format to the Contracting Officer listed above no later than April 20, 2026.

Telephonic questions will not be entertained, and responses to this RFI will not be returned.