FY25 PACAF Assessment and Authorization for Federal Information System Management Act (FISMA) and Cybersecurity Hardening

The Pacific Air Forces (PACAF) through the 766 Enterprise Sourcing Squadron at Joint Base Pearl Harbor-Hickam, Hawaii is procuring cybersecurity support services for Federal Information System Management Act (FISMA) Assessment and Authorization and Cybersecurity Hardening activities. The contract requires four contractor personnel including three Cybersecurity Subject Matter Experts and one Theater Vulnerability Analyst to support the HQ PACAF Cybersecurity Office in conducting security assessments, providing cybersecurity consultations, and preparing military and DOD civilian personnel across the PACAF Area of Responsibility for cyber readiness reviews. All contractor personnel must possess Top Secret/Sensitive Compartmented Information (TS/SCI) security clearances and meet DoD 8140 or DoD 8570.1-M certification requirements at Information Assurance Technical Level 3. The government will evaluate quotes using a best value subjective trade-off methodology considering three factors: Price, Technical, and Past Performance. Questions were due by August 5, 2025 at 0800 HST, with proposals due by August 11, 2025 at 0800 HST.

This procurement is set aside competitively for 8(a) companies under a firm-fixed-price contract structure with services purchased in accordance with FAR Part 12 and Part 13. The solicitation indicates a total potential award value of $34,000,000 across a five-year performance period consisting of one base year from September 30, 2025 to September 29, 2026, plus four one-year option periods extending through September 29, 2030, with a potential six-month extension available under FAR 52.217-8. The primary place of performance is Honolulu, Hawaii at Joint Base Pearl Harbor-Hickam, with extensive travel requirements up to 40% of time across the PACAF Area of Responsibility including approximately 10 Main Operating Bases and over 100 Geographically Separated Units in locations such as Japan, Korea, Guam, and Alaska. No current incumbent contractor is identified in the documentation, and the government reserves the right to cancel the procurement and notes that no award will be made until funds become available and appropriate approvals are obtained.