ICT SCRM INDUSTRY DAY

WILL COMMENCE AT

10:00 a.m. EST

Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Industry Day

PREPARE. PROCURE. PERFORM. OUTPACE. OCTOBER 1, 2025SEPTEMBER 2, 2026

This brief is marked "Distribution Statement A.

Approved for Public Release, Distribution Unlimited".

Time

10:00 - 10:05

10:05 – 10:15

10:15 – 10:25

10:25 – 10:30

[BREAK]

10:40 – 11:00

Speaker Objective

Contracting Officer

Product Manager (PM) / Functional Sponsor

Product Lead (PL)

Deputy PL

DPL (Moderator) & PL

Set ground rules. Emphasize that verbal remarks are non-binding and outline how formal Q&A will be handled via SAM.gov

Explain the strategic vision. Discuss the ICT SCRM Army Memo.

Walk through the Requirements

Topic

Explain the Phased approach and evaluation process

Live Q&A

Welcome & Rules of Engagement

PM Introduction & Problem Statement

Deep Dive: Requirements

Evaluation & Submission Process

Moderated Q&A

AGENDA

Briefer: Jessica Li

OPENING REMARKS

Mr. Doug Haskin Project Manager

Acquisition, Training & Readiness

Ms. Lucy Chung Product Lead Digital Market

Distribution & Publication

• This brief is marked “Distribution Statement A. Approved for Public Release, Distribution Unlimited”.

• The Government will not publish Industry- Proprietary questions/comments or their responses.

• The Government intends to publish Industry- General frequently asked questions (FAQs) with Government-prepared responses.

• The “final” version of these slides will be posted to www.SAM.gov

Acquisition & Authority

• Nothing presented in this Industry Day commits the U.S. Army to any acquisition approach, agreement, or contract.

• Any future published opportunity will take precedence over information presented today or in response to questions.

• Session is conducted under the Commercial Solutions Opening (CSO) framework in accordance with DFARS Part 212—specifically DFARS 212.70— and the Army Open Solicitation procedures.

Resources &

Follow-On Actions

• Post-Industry Event Questions Link:

www.SAM.gov

• Call for Solutions on SAM.gov:

https://sam.gov/workspace/contract/op p/66a6e1dc27954057a1d3279fbcd77f 0f/view

1 2 3

RULES OF ENGAGEMENT

Briefer: Nicole Feddersen

GUIDANCE / VISION KEY REQUIREMENTS:PROBLEM STATEMENT

ICT SCRM ILLUMINATION SOLUTION

Briefer: Doug Haskin

Policy: Army Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) mandated 20 July 2026.

Mandates continuous vetting of COTS IT products for Foreign Ownership, Control, or Influence (FOCI), vulnerabilities, and counterfeits.

Establish a pre-vetted, trusted ecosystem allowing direct procurement of hardware and software.

The Army's legacy approach to ICT-SCRM is stove-piped and manual, creating critical vulnerability gaps.

Advanced persistent threats and counterfeiting networks can bypass static, point-in-time compliance gates.

Army requires a SCRM illumination and continuous monitoring tool to automate the vetting of IT hardware, software, and services across the entire procurement lifecycle.

“Software not Service” – Government requires a user operable Commercial-off-the-Shelf (COTS) software platform or Software-as-a-Service (SaaS) tool.

REQUIREMENTS: 1 - 3

System Architecture & API Integration

Requirement

• Secure and well-documented RESTful APIs designed to push continuous alerts, risk scores, and compliance data natively.

• Security and Authorization – Vendor must demonstrate zero-trust model.

• Provide description of the platform's technical architecture.

FACTOR

Automated Catalog Ingestion & Regulatory

Vetting (HW/SW) Requirement

• Ability to ingest process for ingesting, normalizing, and screening massive 10,000+ SKU hardware and software catalogs.

• Verify true OEM sourcing - Automatically identify and verify the original manufacturer, avoiding obfuscated supply networks and unauthorized middle-tier entities.

• TAA and NDAA compliance - Instantly flag Trade Agreements Act violations and NDAA Section 889 telecommunication restrictions without manual analyst intervention.

• Anti-Counterfeiting - Vet products for counterfeit indicators and safeguard critical equipment hardware.

FACTOR

Continuous Corporate Monitoring

Requirement

• Tool must continuously monitor prime contractors and evolving sub-tier service providers to ensure the integrity of IT software, hardware, and service-based programs.

• FOCI (Foreign Ownership, Control, or Influence) - Continuous scanning for foreign influence and geopolitical exposure risks.

• Ultimate Beneficial Ownership (UBO) - Expose hidden ownership layers to avoid blocked entities or actors.

• Dynamic tracking of vendor corporate restructuring and financial instability.

FACTOR

Briefer: Lucy Chung

REQUIREMENTS: 4 - 5

Briefer: Lucy Chung

Workflows, Alert Management & Handoffs

Requirement

• Role-Based Access: Distinct views for Contracting and Cyber analysts.

• Alert Tuning: Built-in mechanism to aggressively reduce false positives.

• Digital Routing: Seamlessly escalate automated risk alerts to dedicated SCRM analysis teams.

FACTOR

Supplementary Analyst & Support Services

Requirement

• Understanding of available professional services and analyst support.

• Cost structure - distinctions between included platform support and any add-on professional or engineering services

• Clear separation between standard product features and supplemental services

FACTOR

EVALUATION PROCESS

Gate Criteria (Pass/Fail)

1. Completeness

2. Administrative Formatting

3. Core Software Availability

4. Application Programming Interface (API)

Integration Readiness

5. Video Demonstration Compliance

Technical Evaluation Factors (Weighted)

1. API Architecture & Integration Readiness

2. Automated Catalog & Compliance Scalability

3. Continuous Vendor Surveillance

4. Procurement Usability & Workflow Routing

5. Supplementary Services & Technical Support

Submissions will be evaluated via a two-pronged approach:

SUBMISSION FORMATTING

Government will utilize a single- phase submission process, package will consist of two mandatory parts.

Submission Parts Formatting Requirements

Technical White Paper: A highly focused technical document detailing how the vendor's software addresses the five core operational areas.

Page Limit: Maximum of seven (7) pages (excluding cover page).

Format: PDF format, 11-point Cambria font, single-spaced with standard 1-inch margins.

Prohibitions: General corporate marketing material, boilerplate history, and glossy brochures will not be reviewed. Responses must strictly follow the headers below.

Recorded Video Demonstration: A secure online streaming link containing a recorded walk-through showing the live software platform executing key workflows.

Delivery Method: The recorded demonstration must be submitted exclusively as an unlisted YouTube link. Direct uploads of raw MP4 or other video files, as well as password-protected files or external cloud sharing links (such as Google Drive or Dropbox), will not be accepted.

Duration: The video must not exceed 15 minutes in length.

Data Content: The demonstration must utilize vendor-provided mock data representing typical commercial IT catalogs. No actual Government data will be provided for this effort.

Access Requirements: The provided YouTube video must be configured as unlisted so that it is not searchable by the public, but it must remain active and accessible to Government evaluators for the duration of the evaluation period. Because the video contains non-sensitive mock data, no additional security controls or password protection are required.

Submissions that do not comply with the above formatting requirements will not be accepted.

SUBMISSION DETAILS

Call for Solution Release Date: 24 August 2026

Solution Briefs Due: 1200 EST 09 September 2026

Email Submission Address:

Contracting Officer: corene.n.feddersen.civ@army.mil Specialist: megan.e.haffey.civ@army.mil

Required Subject Line Format: ICT SCRM Submission – [Company Name]

10:00 BREAK

Q&A

Questions & Answers Session

Moderator: Jessica Li

THE ARMY RELIES ON

Capability Program Executive Enterprise Software and Services (CPE ES2)