AF EAD_IA/MA-PLMF

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) outlines the requirements for Information Assurance/Mission Assurance and Program Lifecycle Management Framework (PLMF) support for the United States Air Force's Air Force Materiel Command, Air Force Lifecycle Management Center (AFLCMC), Executive Aircraft Division (EAD).

The contractor will provide professional services to support the EAD's mission, focusing on IT/IA/MA (Information Technology/Information Assurance/Mission Assurance) improvements for Commercial Derivative Aircraft (CDA) and related systems. Key areas include:

• Technical research and analysis to fulfill mission requirements.
• Support for cybersecurity, airborne and ground systems, IT/IA/MA capabilities, and secure data management.
• Development and assessment of IT/IA/MA requirements and impacts.
• Analysis of system compliance, vulnerabilities, and recommendations for technology integration.
• Project management and cybersecurity subtasks.
• Support for program lifecycle management.

Deliverables are specified in Section F, Table F.3.1, with planned frequencies and due dates. The Government requires a 10-day period for inspection and acceptance of deliverables.

The task order has a base period and four option periods, totaling sixty months. Performance will primarily occur at Government locations, with Tinker Air Force Base as a primary location. Other potential locations include Greenville, TX; San Antonio, TX; Joint Base Andrews, MD; Joint Base Langley-Eustis, VA; Offutt AFB, NE; Scott AFB, IL; Savannah, GA. OCONUS travel is authorized for Belgium, Japan, and Germany.

• Hybrid Firm-Fixed-Price (FFP) + Time-and-Materials (T&M) contract type.
• Contractor personnel require specific security clearances (Top Secret, SCI, Yankee White).
• Compliance with DoD cybersecurity and information assurance standards (RMF, STIG, SRG).
• Contractor manpower reporting via eCMRA.
• Adherence to specific work hours and potential surge periods.
• Compliance with all applicable federal regulations, including travel and security requirements.

Form / Attachment / Pricing Sheet

This document is a "Sources Sought Response Form" (RFI-Sources Sought Response Form.xlsx) designed to gather information from potential vendors regarding their capabilities and interest in supporting the United States Air Force (USAF) Air Force Materiel Command Air Force Lifecycle Management Center (AFLCMC-WVV) Executive Aircraft Division (EAD). The form requests information on Information Assurance/Mission Assurance and Program Lifecycle Management Framework (PLMF).

General Company Information:

• Company Name, CAGE Code
• Small Business status (including socio-economic groups)
• Other than Small Business status
• Average per-year funded value of projects
• IDIQ, GWAC, or Schedule vehicle information
• Secret Facility Clearance status

Project-Specific Information:

• Expertise in specific areas (Strategic Planning, Airborne Systems, Capability Gaps, DMSMS, Ground Systems, Mission Requirements, IT/MA Requirements/Technology, Secure Data Management, Cybersecurity Analysis, Vulnerability Assessments, Conference Planning, Cloud-based PLM/PDM/CDE solutions)
• Past Experience (PE) references (number, scope, funded value, prime/teaming role)

Company Interest:

• Willingness to submit a quote
• Reasons for not submitting a quote
• Need for teaming/partnering
• Anticipated percentage of work as Prime Vendor vs. subcontracted

RFI Questions:

• Experience with cloud-based PLM/PDM/CDE solutions

• Experience with AWS GovCloud

• Personnel security clearances (Top Secret, Yankee White)

• Ability to perform full requirements on day one

• Software development and testing infrastructure for cloud-based solutions

• Personnel with minimum 5 years of similar work experience

• Experience with FAA or Military Certification efforts for Commercial Derivative Aircraft

• Capability to host/maintain 3rd party applications in IL5/IL6 environments

• DevSecOps practices (CI/CD, Azure DevOps, Docker, AWS EKS, IaC)

• NIPRNet workloads with Impact Level 5 ATO (DoD/NIST RMF, CUI, US Army C5ISR Center, AWS GovCloud)

• Data security monitoring and verification plans

• Experience integrating ARINC 429 avionics equipment

• Capability to deconstruct, manipulate, analyze, and generate ARINC 429 labels

• Experience designing/conducting cybersecurity vulnerability testing on ARINC 429 systems

• Experience with RF signal manipulation for avionics behavior influence

• Experience integrating flight simulators with physical avionics systems (HIL)

• Past performance assessing/remediating cybersecurity vulnerabilities in ARINC 429 systems

• Experience with ARINC 615 data loading processes

• Complete peach-colored blocks on both sheets.

• Submit the response form via email to alex.budai@gsa.gov.

• Deadline: 5:00 pm (EDT) on May 15, 2026.

This form is critical for potential bidders to assess their qualifications and interest in the opportunity. It guides vendors on the specific technical expertise, past performance, and company capabilities the government is seeking. The responses will help the government determine the acquisition strategy and identify potential sources for this requirement.