Call for Solutions - Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Monitoring Tool

The Department of the Army Materiel Command Contracting Command Rock Island Arsenal issued a Call for Solutions for an Information and Communications Technology Supply Chain Risk Management Monitoring Tool with solution briefs due September 9, 2026 at 1200 Eastern Standard Time; no set-aside applies.

The Army seeks a Commercial-Off-the-Shelf software platform or Software-as-a-Service tool to automate continuous vetting of IT hardware, software, and services across the procurement lifecycle, replacing manual, stove-piped compliance processes. The platform must integrate into the Army's Digital Market e-Mart portal via RESTful APIs and support Government operation without vendor dependency. Core mandatory capabilities include system architecture and API integration with documented hosting authorization (IL2, IL4, IL5, FedRAMP, or commercial cloud); automated ingestion and regulatory vetting of 10,000+ SKU catalogs in CSV or XML formats to flag Trade Agreements Act, NDAA Section 889, Section 1260h, and anti-counterfeiting compliance risks; continuous corporate monitoring of prime contractors and multi-tier subcontractors for Foreign Ownership, Control, or Influence, Ultimate Beneficial Ownership, software and hardware bills of materials, CVE vulnerabilities, mergers and acquisitions, and corporate health; and workflows and alert management with role-based access controls and escalation pathways. The tool must monitor approximately 1,000 unique vendors during the base year and ingest vendor-provided commercial threat intelligence and corporate ownership data.

Vendors must submit a technical white paper (maximum 7 pages, 11-point Cambria font, searchable PDF) and a recorded video demonstration (maximum 15 minutes, unlisted YouTube link with mock data) to Corene.n.feddersen.civ@army.mil and megan.e.haffey.civ@army.mil. Phase 1 evaluation applies five binary gateway compliance criteria followed by five weighted technical factors: System Architecture & API Integration (35%), Automated Catalog Ingestion & Regulatory Vetting (25%), Continuous Corporate Monitoring (20%), Workflows and Alert Management (10%), and Supplementary Analyst and Support Services (10%). The Government reserves the right to make multiple awards, no awards, or awards without discussions. Phase 2, by invitation only, will require detailed proposals with statements of work and pricing. Amendment 01 posted September 1, 2026 added a Q&A workbook. Questions closed August 28, 2026. The solicitation is governed by the Revolutionary FAR Overhaul Part 12 and DFARS Part 212.