STIOS RFI 19AQMM-RFI-26-1008.pdf

SOURCES SOUGHT / REQUEST FOR INFORMATION

Title: Security Technology Integration and Operations Support (STIOS) RFI Number: 19AQMM-RFI-26-1008

Agency: Department of State

Contracting Office: Bureau of Global Acquisitions

Program Office: Bureau of Diplomatic Security, Office of Security Technology (DS/C/ST)

NAICS Code: 541513 - Computer Facilities Management Services

PSC: DD01 - IT and Telecom – Service Delivery Support Services: ITSM, Operations Center, Project/PM (Labor)

Small Business Size Standard: $37 Million

Anticipated Period of Performance: 12-month base period and nine 12-month option periods

Place of Performance: Washington, DC National Capital Region, with domestic and overseas

TDY travel

Response Due Date: November 12, 2026, 5:00 PM Eastern Time

Description:

The U.S. Department of State, Bureau of Global Acquisitions, is conducting market research to determine whether qualified firms, particularly small businesses, are available and able to meet the requirements described in this notice and the attached draft Performance Work Statement (PWS). Interested sources should demonstrate proven experience successfully performing work similar in scope and scale to the work described in the draft PWS. The Department also invites industry comments on the draft PWS.

Section A: Introduction

The Government is issuing this RFI to conduct market research under Federal Acquisition Regulation (FAR) Part 10 and FAR 15.201(c)(7), and to identify vendors capable of performing the work described in this notice. This RFI is for information and planning purposes only. It is not a Request for Proposals (RFP), and it is not a promise to issue an RFP in the future. This RFI does not commit the Government to award a contract for any supply or service.

The Government is not seeking proposals at this time and will not accept unsolicited proposals.

The Government will not accept telephone calls or answer questions about this RFI.

The Government will not pay for any information provided or for any costs incurred in responding to this RFI. Respondents bear all costs of responding.

Firms that do not respond to this RFI may still take part in any future solicitation. If the Government issues a solicitation, it may post the notice on SAM.gov. Potential offerors are responsible for monitoring SAM.gov for more information about this requirement.

Section B: Background

The Bureau of Diplomatic Security, Office of Security Technology (DS/C/ST), requires a contractor to operate, maintain, and enhance the Department's Physical Security Information Management (PSIM) system and High-Definition Security Video System (HDSVS) enterprise.

The requirement also includes 24/7/365 operations center support, global security network operations, video analytics, 3-D facility modeling, IBM Maximo asset management support, SharePoint application development, domestic alarm network administration, cybersecurity risk mitigation engineering, and training. A Top Secret facility clearance is required. See the attached draft PWS for details.

Section C: Responses

Company Profile Questions

Company Name:

Company Point-of-Contact:

Email:

Phone:

UEI Number:

CAGE Code, if applicable:

Business Size under NAICS 541513 ($37M):

Small / Other than Small

Socioeconomic Status (check all that apply):

8(a), HUBZone, SDVOSB, WOSB, EDWOSB

Current GSA Schedules, GWACs, or other contract vehicles (include contract number and expiration date)

Registered in the System for Award Management (Yes/No)

Active exclusions in SAM.gov (Yes/No)

Technical Capabilities Questions

Please answer each of the questions below regarding your past performance in operating, maintaining, and integrating enterprise physical security information management (PSIM), video management, and access control systems on secure Government networks.

1. Describe up to three contracts performed within the last three years that are similar in size, scope, and complexity to this requirement. For each, provide the customer, contract number, period of performance, contract type, total value, your role (prime or subcontractor), the scale of the effort (number of sites, devices, servers, and users supported), and a customer point of contact.

2. Describe your experience staffing and managing a 24/7/365 operations center that provides Tier 1 through Tier 3 support. Address staffing models, escalation procedures, response times achieved, after-hours on-call support, and how you maintain minimum per-shift staffing with zero unstaffed shifts, including weekends and holidays.

3. Describe your experience maintaining PSIM and video management platforms at 99.9% or greater availability across geographically distributed sites, including high availability, automatic failover, and site operation during WAN outages.

4. Describe your experience integrating newly installed or upgraded video sites into an enterprise PSIM/VMS, including coordination with separate installation contractors and end-user training at site activation.

5. In your experience, what are the best practices for managing operational video analytics performance (e.g., perimeter intrusion, loitering, abandoned object, license plate recognition, facial recognition)? Address baselining, tuning, false-alarm measurement, and human verification of high-consequence alarms.

6. Describe your experience and expertise in maintaining integrations between a PSIM and access control, video, key management, and network monitoring systems. Include support of legacy systems through sunset and development of custom API, SQL, SNMP, or SYSLOG connectors.

7. Describe your experience creating and maintaining geospatially accurate 3-D facility models integrated into a security monitoring platform, including offline operation and accuracy validation.

8. Describe your experience operating and maintaining a global, encrypted, isolated network supporting operational technology and IoT devices. Address Zero Trust implementation, mixed Windows and Linux server environments (virtual, containerized, and physical), and rule-based infrastructure automation.

9. Describe your experience administering and enhancing IBM Maximo Application Suite (version 9.x or later), including cloud hosting on Red Hat OpenShift in Azure Government, DevSecOps pipelines, mobile devices, and Agile development.

10. Describe your experience developing and sustaining applications on SharePoint Online and PowerApps within another organization's hosted environment.

11. Describe your experience administering a domestic access control and intrusion detection network, including C•CURE configuration, panel programming, and badge record management.

12. Describe your experience supporting Risk Management Framework / Assessment and Authorization activities, continuous monitoring, POA&M management, and ISSO functions for operational technology networks.

13. In your experience, what are the best practices for knowledge transfer and assuming predecessor documentation and configurations on a 24/7 mission-critical system with no degradation of service during transition?

14. Describe any artificial intelligence or machine-learning capabilities you would use in performing this work. Address data and model portability, licensing, knowledge transfer, handling of personally identifiable information, and whether the AI was developed and is maintained in the United States.

15. Are you prepared to complete a cybersecurity supply chain risk management questionnaire and provide NIST SP 800-218 (Secure Software Development Framework) attestations for software you provide or develop?

16. Describe how you ensure applications, dashboards, and training materials you develop meet Section 508 accessibility standards.

Business Capabilities Questions

Please answer each of the questions below regarding your past performance in business operations. Please provide as much detail as possible.

1. Confirm whether you hold a Top Secret facility clearance, and state the number of personnel you currently employ with active Secret and Top Secret clearances. If not, describe your ability to obtain one. State the number of personnel you currently employ with active Secret and Top Secret clearances.

2. Identify any current contracts or subcontracts you hold with the Bureau of Diplomatic Security, Office of Security Technology.

3. For each of the following service areas, indicate whether you would perform as the prime, through a teaming partner or subcontractor, or not at all: PSIM/HDSVS operations and maintenance; video analytics; subsystem integration; 3-D modeling; network and infrastructure operations; 24/7 operations center; CMMS/Maximo; SharePoint development; domestic alarm network and security system configuration;

cybersecurity/risk mitigation engineering; and training.

4. Describe your experience coordinating with associate contractors under a multi-contractor agreement, including information sharing, interface management, and resolving overlapping responsibilities.

5. Do you have an established system to track labor per employee by task and project, maintain a project billing code structure mapped to contract line items (CLINs), report burn rates, and submit itemized invoices by project and CLIN? Please describe it.

6. Describe how you mobilize cleared personnel for short-notice domestic and overseas temporary duty (TDY), including travel cost management, Defense Base Act insurance, post hardship and danger pay administration, and pre-deployment security training.

7. Describe your recruiting pipeline and resources for fielding cleared technical staff within 7 days of contract award or option start, and for replacing key personnel within 30 days.

8. Describe your experience managing the lifecycle of Government-furnished hardware and software, including inventory, warranty and license tracking, and refresh recommendations based on total cost of ownership.

9. Based on the draft PWS, provide your recommended labor categories and estimated full-time equivalents (FTEs) for each service area, and identify which positions could be performed via telework.

10. Are any of the services described offered in the commercial marketplace? If so, describe your standard commercial terms.

11. If you are a small business, do you intend to submit a proposal as a prime contractor?

Describe how you would comply with the limitations on subcontracting, under which the prime may not pay more than 50 percent of the amount paid by the Government for contract performance to subcontractors that are not similarly situated entities.

12. Identify any potential organizational conflicts of interest arising from your current contracts, including work for associate contractors identified in the draft PWS, and describe how you would mitigate them.

Acquisition Structure Questions

The Government is investigating various contracting options for this support, and would like to understand industry’s perspective as to what would be most advantageous:

1. In your experience, what requirements do Government agencies typically include in solicitations which increase costs but do not increase value?

2. Contract type: What contract type or hybrid would best fit this requirement (for example, FFP, labor-hour, or hybrid by service tower)?

3. Consolidation: Would one contract or several separate awards better serve the Government and expand small business participation?.

4. Contract vehicle: Would you recommend a standalone contract or an existing GWAC or GSA Schedule?

5. Phase-in: Is the 60-day phase-in realistic for a 24/7 cleared workforce? If not, what period do you recommend?

6. Incentives: What performance incentives or measures would most improve results under this PWS?

7. NAICS and PSC: The Government anticipates using NAICS 541513 and PSC DD01.

Comment on whether these classifications are appropriate and, if not, recommend alternatives with supporting rationale.

Information Required to Develop a Competitive Solicitation Response

1. What additional information should the Department of State provide to ensure vendors have the information required to submit a competitive technical and price proposal for this requirement?

Response Information

Page Limit: Responses shall not exceed 15 pages, excluding the cover page, Company Profile table, and PWS comment matrix.

Format: Use 8.5 x 11-inch pages, 1-inch margins, and 11-point font or larger (tables may use 10-point). Submit in Microsoft Word (.docx) or PDF format. Number each response to match the question it answers.

PWS Comments: Submit PWS comments in a separate comment matrix (not counted toward the page limit) with these columns: PWS Section, Page, Comment, and Recommended Change.

Proprietary Information: Respondents should clearly mark any proprietary information. The Government will protect properly marked information from disclosure to the extent permitted by law. Responses will not be returned.

Response Due Date: November 12, 2026, by 5:00 PM Eastern Time

Email Subject Line: "RFI Response – STIOS – [Company Name]”

Submit Responses To:

• Maria Anguiano, Contracting Officer, anguianom@state.gov

• Amber Gray, Contract Specialist, GrayAL@state.gov

• Heather Keeton, Contract Specialist, KeetonHF@state.gov mailto:anguianom@state.gov mailto:GrayAL@state.gov mailto:KeetonHF@state.gov