CMRS Cloud

Awarded Limited / Sole Source Justification Posted

Solicitation number
852675435
Agency
Set-aside
No set-aside

Opportunity facts

Contract number
HC105023D0003-HC105026F0042
Place of performance
Maryland 20755, United States

Notice details come from SAM.gov. Updated .

About this opportunity

The Defense Information Systems Agency has awarded a sole-source task order to Microsoft Corporation under the Joint Warfighter Cloud Capability Indefinite Delivery/Indefinite Quantity contract (HC105023D0003) for Continuous Monitoring and Risk Scoring Cloud services, effective September 11, 2026.

DISA justified the sole-source action under FAR 16.507-6(b)(2) on the grounds that Microsoft is the only capable source. The Endpoint Security Solutions and Innovations Lab possesses a highly specialized, proprietary technical architecture deeply integrated with Microsoft-specific Platform-as-a-Service offerings, including Azure Event Hubs, Azure Structured Query Language, Microsoft Defender suite, and Microsoft Entra ID. The lab's current Interim Authorization to Test – Cloud is bounded specifically by Microsoft Azure Government security controls and Azure Key Vault Managed Hardware Security Modules configured for Impact Levels 5 and 6. Transitioning to an alternative cloud service provider would require complete re-engineering of security pipelines, invalidate the existing authorization, and trigger a 6–24 month re-authorization cycle that would unacceptably disrupt critical cyber defense operations.

Market research conducted June 2–26, 2026, and an RFI issued June 20, 2026, confirmed Microsoft as the sole capable provider. The task order provides a one-year base period plus one one-year option period. Performance includes cloud hosting infrastructure supporting data ingestion for CMRS, the ESSI Lab, and logs, with support to a pre-production cloud lab and data collection from Microsoft Defender reporting across the Department of Defense. Fair and reasonable pricing will be determined by comparison to the independent government cost estimate and JWCC Catalog pricing. DISA is developing a comprehensive transition plan toward cloud-agnostic, open-standards-based platforms to foster competition in future acquisitions.

Notice text

Awarded contract HC105023D0003 to unknown vendor for unknown amount on 2026-09-11.

Files

File Type Posted
852675435_JA_Final_Redacted.pdf PDF
852675435_JA_Final_Redacted.pdf PDF

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar opportunities
  • Ask GovTribe AI about this opportunity