Offensive Cyber Depot Operations & Sustainment

Questions & Answers / Clarifications

This document provides responses to questions submitted by vendors regarding a Request for Information (RFI) related to FA8307-26-R-CW02. The RFI was conducted for informational and market research purposes, and this action officially closes on 20 May 2026.

• Requirement Type: This is not a new requirement; it is a follow-on contract to FA8307-22-F-0030, currently performed by an incumbent contractor.
• Clearance Requirements: Top Secret/Sensitive Compartmented Information (TS/SCI) is required.
• Response Format: All responses should be unclassified and submitted via unclassified email to the Contracting POC.
• SCIF Requirements: The contractor will provide and operate a SCIF in the San Antonio metropolitan area with connected AFSCI terminals. The SCIF must meet applicable DoD and IC standards, anticipated to follow ICD 705 and DoDM 5105.21-M-1, along with AF-specific SCI security directives. The government will provide AFSCI terminal connectivity specifications and security requirements in the draft RFP.
• ATO Ownership: The contractor will serve as the Site ISSO, responsible for maintaining and adapting the currently active ATO for one information system/authorization boundary, which has three separate physical locations and an active ATO expiring in Feb 2028.
• IDIQ Vehicle: The government is seeking industry recommendations for existing DoD-accessible IDIQ vehicles and does not have a preferred vehicle. A new standalone contract may be considered if no existing IDIQ adequately covers the scope.
• Contract Type: The government is evaluating a cost-reimbursement contract structure, but the specific fee type (CPFF, CPIF, CPAF) has not been finalized.

The RFI is due 20 May 2026. The government is still refining the acquisition timeline, with an objective to award the follow-on contract by December 2026. Additional schedule details will be provided in the draft RFP. Small business determination is ongoing, and a set-aside strategy will be considered if market research supports it. A Small Business Subcontracting Plan will be required from large business offerors if the acquisition proceeds on an unrestricted basis.

Request for Information (RFI)

This RFI is issued by the Air Force Life Cycle Management Center (AFLCMC) for planning purposes only. It seeks information from vendors capable of performing Cost Plus operations and sustainment activities for cyber weapon systems within the AFLCMC/HNCO (Offensive Cyber Systems) portfolio. The government is ideally looking for vendors who can leverage existing Indefinite Delivery / Indefinite Quantity (IDIQ) contracts accessible by DoD Agencies.

Potential vendors are expected to perform the following:

• Provide Tier 1, 2, and 3 level support for complex information systems.

• Repair, update, and return complex information systems to service.

• Create virtual machines, networks, and infrastructures in an air-gapped environment.

• Update and maintain hardware and software configuration baselines.

• Install and maintain services under a service-oriented architecture.

• Work within the government's Risk Management Framework (RMF) to obtain and retain system approvals (IATT, ATC, ATO).

• Perform system scans in compliance with Security Technical Implementation Guides (STIG).

• Perform continuous system monitoring, including ACAS scans and IAVM monitoring.

• Write, update, and provide technical reports and data (e.g., System User Manuals, Design Documents).

• Provide and operate a contractor Sensitive Compartmented Information Facility (SCIF) in the San Antonio Metropolitan Area.

• Provide and operate an unclassified server space for Test and Integration (T&I) offsite.

• Provide 24/7 Help Desk services.

• Software: Microsoft Server 2022+, Red Hat Enterprise Linux, VMWare/vSphere/ESXi, Microsoft Windows 11 Enterprise, SecureView.

• Hardware: Servers, Switches, Firewalls, Workstations, Keyboard/Video/Mouse (KVM) devices.

• Requires TS/SCI eligibility.

• Anticipated labor categories include Network Specialists, System Engineers, System Administrators, Help Desk Support, Configuration Manager, Test Engineer, Information System Security Manager (ISSM), and others as deemed necessary.

• Some members may require Special Access eligibility.

• This is NOT a request for competitive proposals.

• Vendors interested in meeting the requirement should identify their interest and capability by submitting a capability statement/white paper (max 5 pages, excluding title page) and a ROM.

• Submissions must be sent to Capt Charles Craig (Contracting Officer) at charles.craig.2@us.af.mil within ten (10) business days of publication.

• Hard copies will not be accepted.

• Submissions should be at the appropriate security level, with proprietary information minimized and clearly marked.

• Questions must be submitted in writing to the Contracting Officer no later than April 20, 2026.

• Telephonic questions will not be entertained.

• Responses to this RFI will not be returned.

• The government will not reimburse respondents for any costs associated with this RFI.

• Response is voluntary and will not affect future offeror ability.

• Information submitted may be released to non-Government advisors for review and analysis.