Area of Interest (AOI) for Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)

Solicitation / RFP / RFQ

This document is an Area of Interest (AOI) for a "Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)". The Defense Information Systems Agency (DISA) is seeking innovative and user-friendly Retransmission Devices (RDs) that meet evolving Commercial Solutions for Classified (CSfC) Mobile Access Capability Package (MACP) requirements. The goal is to develop a prototype RD that integrates a hardwired connection internally, eliminating conspicuous external cables and improving tactical mobility for users.

• Develop an "all-in-one" form factor (e.g., sleeve or integrated case) for the RD.

• Meet or exceed CSfC MACP version 2.7 requirements.

• Minimize physical footprint and visual signature.

• Support current and future approved DoD mobile devices (e.g., Samsung Galaxy S25/S26).

• Comply with CSfC and National Information Assurance Partnership (NIAP) requirements; components must be on the CSfC Components List and NIAP validated.

• Adhere to Supply Chain Risk Management principles and Trade Agreements Act statutes.

• Manufacturing and assembly must be performed domestically and comply with ITAR.

• Modem chips must comply with Section 889(a)(1)(A)&(B) of the FY19 NDAA.

• Provide unlocked 4G/LTE wireless network transport (prototype); future versions should support 5G.

• Support 802.11 a/b/g/ac (Wi-Fi 6E/7) transport options.

• Connectivity chip must be physically distinct from the main processor.

• Prototype must demonstrate Wi-Fi connectivity only.

• Desired: Ability to create an outer VPN on the RD using a physically and logically independent cryptographic key store.

• Desired: Support CNSA Suite 2.0 Profile for IPSEC.

• Include full lifecycle support if prototype is successful (planning, procurement, deployment, sustainment, secure disposal).

• Administered via a centralized, cloud-based platform authorized at FedRAMP High and/or DISA Impact Level 6.

• Support secure, over-the-air firmware updates and remote monitoring/reporting.

• Awarding Instrument: This AOI solicitation will be awarded under Commercial Solutions Opening (CSO) procedures.

• Anticipated Total Cost (Prototype): $500,000 to $850,000 for 20 devices over a 6-month period.

• Period of Performance: Proposals with a performance period of six months or less are ideal.

• Solution Briefs Due: 20 April 2026, 11:00 a.m., CDT.

• Submit Solution Brief To: disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil

• Evaluation: The Government will evaluate proposals based on merits, innovation, and feasibility. Preference will be given to submissions demonstrating existing, reference-verifiable commercial ability or existing products adaptable with minimal non-recurring engineering.

• Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self) is required for the prototype project. CMMC Level 3 will be required for follow-on production.

• Companies must have current CMMC status entered in SPRS at CMMC Level 2 (self) and an affirmation of continuous compliance.

• This AOI may result in the award of a prototype OT under 10 U.S.C. § 4022. It is not subject to the FAR.

• Follow-on production contracts or transactions may be awarded without further competitive procedures if the prototype is successful.

• An "Affirmation of Business Status Certification" is attached to this AOI.

Solicitation / RFP / RFQ

This document is an Area of Interest (AOI) for a "Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)". The Defense Information Systems Agency (DISA) is seeking innovative and user-friendly Retransmission Devices (RDs) that meet the latest CSfC MACP (version 2.7) requirements for a hardwired connection, while appearing inconspicuous and eliminating the need for external cables. The goal is to improve user experience, reduce operational risks, and enhance tactical mobility for Department of Defense (DoD) users.

• Develop an "all-in-one" form factor RD, ideally a sleeve or integrated case, that meets CSfC MACP v2.7 requirements internally.

• Minimize physical footprint and visual signature, similar to a commercial smartphone case.

• Support current and future approved DoD mobile devices (e.g., Samsung Galaxy S25/S26).

• Compliance with CSfC and National Information Assurance Partnership (NIAP) requirements.

• Adherence to Supply Chain Risk Management principles and Trade Agreements Act.

• Compliance with Section 889(a)(1)(A)&(B) of the FY19 NDAA.

• Provide unlocked 4G/LTE wireless transport (future development for 5G desired).

• Support 802.11 a/b/g/ac (Wi-Fi 6E/7) transport options.

• Prototype must demonstrate Wi-Fi connectivity only.

• Desired: Ability to create an outer VPN on the RD with a physically and logically independent cryptographic key store.

• Desired: Support CNSA Suite 2.0 Profile for IPSEC.

• Full lifecycle support, including planning, procurement, deployment, sustainment, and secure disposal.

• Administration via a centralized, cloud-based platform (FedRAMP High and/or DISA Impact Level 6).

• Awarding Instrument: Other Transaction (OT) under Commercial Solutions Opening (CSO) procedures.

• Anticipated total cost for prototype: $500,000 to $850,000 for 20 devices over a 6-month period.

• Potential for follow-on production contract or transaction without further competitive procedures.

• Solution Briefs Due: 13 April 2026, 11:00 a.m., CDT.

• Submit Solution Brief To: disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil

• Evaluation: Based on merits, innovation, and feasibility. Preference for existing, reference-verifiable commercial ability or existing products adaptable with minimal non-recurrent-engineering.

• Preferred performance period: Six months or less for rapid development and deployment.

• Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self) is required for the prototype project. CMMC Level 3 (C3PAO) required for follow-on production.

• Companies must have current CMMC status entered in SPRS.

• This AOI and any awarded OT are not subject to the Federal Acquisition Regulations (FAR).

• Affirmation of Business Status Certification is attached.

Form / Attachment / Pricing Sheet

This document is an "Affirmation of Business Status Certification (ABSC)" form. It requires each significant participating entity in an opportunity to complete a table with their business information and certify their business status. This is likely used to determine eligibility or set-aside status for the opportunity.

• Legal Entity Name
• Proposed NAICS Code
• Industry Size Standard (Small/Large/Foreign)
• DUNS No.
• CAGE Code
• Tax Identification
• Active SAM Registration (Yes/No and Expiration Date)
• Address (1, 2, City/State/Zip)
• POC Name/Title
• POC Phone/e-mail
• Business Status Certification: Bidders must select one of the following:
  • Nontraditional Defense Contractor (NDC)
  • Nonprofit Research Institution
  • Traditional Defense Contractor
• Signature, Name, Title, Date for certification.

Bidders must accurately complete this form to provide essential business and status information. The selection of business status (NDC, Nonprofit Research Institution, or Traditional Defense Contractor) is critical and may impact eligibility for certain contract types or set-asides. This form is required for the Prime/Lead entity and potentially for all other participating entities.