AMENDED* Mock Cyber Operational Readiness Assessment (CORA)
Closed Solicitation Posted
- Solicitation number
- N0018926Q0006
- Agency
-
Naval Supply Systems Command
Department of the Navy, Department of Defense
- Responses due
- Set-aside
- Total Small Business
Opportunity facts
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Annapolis, Maryland 21402, United States
- Points of contact
Notice details come from SAM.gov. Updated .
About this opportunity
The Naval Supply Systems Command (NAVSUP) Fleet Logistics Center Norfolk, on behalf of the United States Naval Academy (USNA) in Annapolis, Maryland, is soliciting a comprehensive cybersecurity assessment service to identify, document, and assess security vulnerabilities and risks within USNA's unclassified educational environment using the Cyber Operational Readiness Assessment (CORA) model standards. The procurement involves a two-week on-site assessment covering approximately 100 network, server, and workstation systems and 10,000 workstations, utilizing certified tools including Endpoint Security System (ESS) from Trellix and Assured Compliance Assessment Solution (ACAS) from Tenable. The contractor will be evaluated based on commercial product and services guidelines, with the government intending to award a Firm-Fixed-Price (FFP) contract to the quoter offering the most advantageous proposal. The solicitation (Reference Number N0018926Q0006) is classified under NAICS code 541519 (Other Computer Related Services) with a PSC category of R410. The deadline for quote submission is 11:00 AM EST on December 19, 2025, with the period of performance extending from two days after contract award through April 30, 2026, which was recently amended from March 30, 2026.
This solicitation is designated as a 100% small business set-aside with a small business size standard of $34.0 million. The assessment scope encompasses Windows Server, Workstation, MacOS, RedHat, and Ubuntu systems, with the contractor expected to provide 8-10 personnel for the on-site evaluation and serve primarily in an observer capacity while USNA personnel conduct the primary assessment work. Daily on-site work is scheduled from 0800 to 1700 hours with no weekend or after-hours work permitted. The government will provide asset inventories and system lists prior to the engagement and will furnish base access credentials as needed. The deliverables include a comprehensive CORA Assessment Report with an executive summary, detailed findings, risk ratings, actionable recommendations, and a presentation to USNA stakeholders, with all work to be performed at the Naval Academy in Annapolis, Maryland.
Notice text
2 versions
Update #2 · Latest ·
***AMENDED***
The purpose of this amendment is to change the Period of Performance from 2 Days After Date of Contract (ADC) to March 30, 2026 to 2 Days After Date of Contract (ADC) to April 30, 2026. A list of responses to questions posed during the solicitation has also been included as an attachment. All other contract terms and conditions remain the same.
***AMENDED***
This is a COMBINED SYNOPSIS/SOLICITATION for commercial supplies with services, prepared in accordance with the information in FAR Subpart 12.6, Streamlined Procedures for Evaluation and Solicitation of Commercial Items and FAR Part 13, Simplified Acquisition Procedures as supplemented with the additional information included in this notice. This announcement constitutes the only solicitation; a written solicitation will not be issued.
PAPER COPIES OF THIS SOLICITATION WILL NOT BE AVAILABLE. This combined synopsis/solicitation SHALL be posted on SAM.gov (https://sam.gov/).
The reference number is N0018926Q0006. This solicitation documents and incorporates provisions and clauses in effect through FAC 2025-06 (effective 1 October 2025) and DFARS Publication Notice 20251110 (effective 10 November 2025). It is the responsibility of the contractor to be familiar with the applicable clauses and provisions. The clauses may be accessed in full text at these addresses:
https://www.acquisition.gov/browse/index/far
http://www.acq.osd.mil/dpap/dars/dfarspgi/current/index.html
The NAICS code is 541519 (Other Computer Related Services) and the Small Business Standard is $34.0M. The purpose of the proposed contract requirement is to identify, document, and assess security vulnerabilities and risks within USNA’s unclassified educational environment using the assessment standards developed under the CORA model, on behalf of the United States Naval Academy (USNA), Annapolis, MD., for which the Government intends to solicit and award a Firm-Fixed-Price (FFP) contract to the quoter that is most advantageous to the Government. This requirement shall be solicited as a 100% small business set-aside.
The Naval Supply Systems Command (NAVSUP) Fleet Logistics Center (FLC) Norfolk requests responses from qualified sources capable of providing the required services listed in the Performance Work Statement.
See attached solicitation for more information.
Update #1 ·
This is a COMBINED SYNOPSIS/SOLICITATION for commercial supplies with services, prepared in accordance with the information in FAR Subpart 12.6, Streamlined Procedures for Evaluation and Solicitation of Commercial Items and FAR Part 13, Simplified Acquisition Procedures as supplemented with the additional information included in this notice. This announcement constitutes the only solicitation; a written solicitation will not be issued.
PAPER COPIES OF THIS SOLICITATION WILL NOT BE AVAILABLE. This combined synopsis/solicitation SHALL be posted on SAM.gov (https://sam.gov/).
The reference number is N0018926Q0006. This solicitation documents and incorporates provisions and clauses in effect through FAC 2025-06 (effective 1 October 2025) and DFARS Publication Notice 20251110 (effective 10 November 2025). It is the responsibility of the contractor to be familiar with the applicable clauses and provisions. The clauses may be accessed in full text at these addresses:
https://www.acquisition.gov/browse/index/far
http://www.acq.osd.mil/dpap/dars/dfarspgi/current/index.html
The NAICS code is 541519 (Other Computer Related Services) and the Small Business Standard is $34.0M. The purpose of the proposed contract requirement is to identify, document, and assess security vulnerabilities and risks within USNA’s unclassified educational environment using the assessment standards developed under the CORA model, on behalf of the United States Naval Academy (USNA), Annapolis, MD., for which the Government intends to solicit and award a Firm-Fixed-Price (FFP) contract to the quoter that is most advantageous to the Government. This requirement shall be solicited as a 100% small business set-aside.
The Naval Supply Systems Command (NAVSUP) Fleet Logistics Center (FLC) Norfolk requests responses from qualified sources capable of providing the required services listed in the Performance Work Statement.
See attached solicitation for more information.
Files
| File | Type | Posted |
|---|---|---|
| Solicitation Questions and Answers.pdf | ||
| Amended Combined Synopsis and Solicitation.pdf | ||
| Combined Synopsis and Solicitation.pdf |
Notice history
| Notice | Type | Posted |
|---|---|---|
| This notice | Solicitation | |
| Mock Cyber Operational Readiness Assessment (CORA) | Pre-Solicitation |
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| XACTA software | Naval Supply Systems Command | No set-aside | |
| B Department Operations Support | Naval Sea Systems Command | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity