(Solicitation Cancellation) Automated Core Laboratory, Ft. Benning Ga

Amendment / Modification

This document, Amendment 0001, cancels Solicitation W81K0026QA113.

This amendment cancels the entire solicitation.

This cancellation means the original solicitation is no longer active. The requirement will be re-solicited by another agency at a later date.

Statement of Work (SOW) / Performance Work Statement (PWS)

This document outlines the Defense Health Agency (DHA) Cyber Logistics (CyberLOG) Cybersecurity/Risk Management Framework (RMF) Requirements. The primary objective is to ensure that all systems and products procured by DHA meet stringent cybersecurity standards and comply with the RMF process.

• System Security Requirements: Vendors must comply with security regulations and guidance, including those in Appendix A. This includes passing pre-validation technical screening (vulnerability scans, SCAP scans, STIGs checklists) within 6 months of contract award. Specific requirements include no unmitigated Very High, High, or Moderate Severity/Category I/II vulnerabilities from DISA STIGs or Nessus scans.

• RMF Assessment Timeframes: The document details specific timeframes for both vendor and government actions throughout the RMF process, including initial contact, documentation submission, vulnerability scans, and authorization.

• Assessment and Authorization (A&A): Vendors must provide hardware/software lists, architecture drawings, and workflow drawings within 15 business days of contract award. All other RMF documentation is due within 4 months of receiving templates. Vendors must obtain government approval for any developed RMF policies and provide additional documentation within 30 days of request.

• Privileged User Training and Certification: Contractors requiring privileged access must meet specific cybersecurity certifications (e.g., IAT Level I/II), undergo background checks, and complete required training (DoD Cyber Awareness, PII, HIPAA) annually.

• Warranty and Post-Warranty Service Maintenance: Vendors must ensure their products maintain ATO or operating system platform and patches/updates for six years or as long as commercially supported. This includes providing cybersecurity patches/updates and maintaining security configurations.

• Vendors must provide monthly vulnerability and configuration scan results.

• All discovered vulnerabilities must be closed within three months of discovery, or a POA&M must be provided.

• Vendors must maintain authorized security configurations and notify the government within 48 hours of any changes.

Not explicitly detailed as a contract period, but cybersecurity maintenance and support are required for six (6) years or the commercial support lifecycle of the equipment/product, whichever is longer.

• Compliance with DoD 8510.01 Risk Management Framework (RMF).
• Use of DoD-approved intrusion detection and prevention, antivirus, and anti-malware applications.
• Adherence to specific DoD Instructions and NIST publications listed in Appendix A.
• IPv6 capability is required for proposed systems.
• Vendors must provide a Point of Contact (POC) responsible for cybersecurity throughout the system lifecycle.

Solicitation / RFP / RFQ

This solicitation, identified as W81K0026QA113, is for the procurement of professional appearance services. The government is seeking offers for services that will be awarded under a contract.

• The core requirement involves providing professional appearance services.

• Specific details regarding the requirement are expected to be found in the Salient Characteristics and Statement of Work, which are referenced but not fully detailed in this document.

• The solicitation is issued by W40M MRCO WEST MEDICAL READINESS CONTR OFFICE WEST, JBSA FT SAM HOUSTON, TX.

• The solicitation issue date is May 8, 2026.

• The offer due date is June 8, 2026, at 11:00 AM local time.

• The North American Industry Classification System (NAICS) code is 325413, with a size standard for the industry.

• The solicitation is unrestricted.

• Quotes are to be submitted electronically via email to shenecqua.n.soares.civ@health.mil and joshua.p.barbero.civ@health.mil.

• The offer due date is identified on Page 1, Block 8 of the SF1449.

• Quotes must be held firm for at least 90 calendar days from the offer due date.

• Evaluation will be based on Lowest Price Technically Acceptable (LPTA).

• Offers must meet all technical evaluation factors and have a price determined fair and reasonable.

• Award will be made on an all-or-none basis.

• The acquisition is unrestricted.

• Offerors must be registered in the System for Award Management (SAM) with the appropriate NAICS Code prior to award and must not have any Active Exclusions listed within SAM.GOV.

• The document includes extensive details on contract clauses, provisions, and delivery schedules for various items, indicating a comprehensive contract structure.

• The primary point of contact for questions is Joshua Barbero (joshua.p.barbero.civ@health.mil) and Shenecqua Soares (shenecqua.n.soares.civ@health.mil).

• Questions regarding the solicitation are due by May 18, 2026, at 11:00 a.m. CST.