Area of Interest (AOI) for Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)

Solicitation / RFP / RFQ

This Area of Interest (AOI) solicits innovative and user-friendly Retransmission Devices (RDs) to bridge the gap between evolving Commercial Solutions for Classified (CSfC) standards and operational needs for secure mobile device communications (SMDC). The goal is to develop a prototype RD that satisfies the CSfC MACP version 2.7 requirement for a hardwired connection internally, while appearing as a normal case to the outside observer. This aims to eliminate conspicuous external cables, reduce logistical burdens, and restore tactical mobility for users.

• Core Compliance & Physical Design: Must meet or exceed CSfC MACP v2.7 requirements, feature a minimized visual footprint (ideally smartphone case size), be an all-in-one form factor, and be modular for future EUD compatibility. Support for current and future DoD mobile devices (e.g., Samsung Galaxy S25/S26) is required; support for tablets/laptops is desired for follow-on.

• Component & Supply Chain Security: Must be compliant with CSfC and NIAP requirements, use NIAP-validated components, adhere to Supply Chain Risk Management, Trade Agreements Act, and Section 889(a)(1)(A)&(B) of FY19 NDAA. Manufacturing/assembly must be domestic and ITAR-compliant. Must commit to adapting to new form factors within 90 days.

• Connectivity & Transport: Must provide unlocked 4G/LTE transport for CONUS/OCONUS (prototype requires CONUS only), support 802.11 a/b/g/ac (Wi-Fi 6E/7), and have a distinct connectivity chip. Future support for 5G and Direct-to-Device satellite is desired. Prototype must demonstrate Wi-Fi only; follow-on requires Wi-Fi and Cellular. FCC certification may be required for follow-on.

• Security Features: Desired features include an outer VPN capability with a cryptographically key store independent of the EUD, supporting CNSA Suite 2.0 Profile for IPSEC.

• Lifecycle, Service & Management: Must include full lifecycle support (planning, procurement, deployment, sustainment, disposal) if successful. Must offer a framework for lifecycle cost control, scalability, and automated inventory/asset tracking. Administration via a centralized, cloud-based platform (FedRAMP High/DISA Impact Level 6 authorized) is required, supporting secure over-the-air firmware updates and remote monitoring.

• Awarding Instrument: This AOI solicitation will be awarded under Commercial Solutions Opening (CSO) procedures (DISA CSO HC108425S0001). The CSO outlines submission guidelines, evaluation, etc.

• Period of Performance: Six months is ideal for rapid development and deployment. Accelerated delivery (90-120 days) is viewed positively.

• Estimated Cost: Anticipated total cost for the 6-month prototype project is $500,000 to $850,000 for 20 devices.

• Contract Type: Prototype Other Transaction (OT).

• Submission Instructions: Refer to paragraph 4 of the AOI and CSO sections 3.1 and 3.2.

• Solution Briefs Due: 22 April 2026, 5:00 p.m., CDT.

• Submit To: disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil

• Evaluation: Government will evaluate based on merits, innovation, and feasibility. Preference given to submissions demonstrating existing, reference-verifiable commercial ability. If none, preference for existing/recent products adaptable with minimal non-recurring engineering.

• CMMC Requirement: Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self) is required for this prototype. CMMC Level 3 (C3PAO) required for follow-on production. Companies must have current CMMC status entered in SPRS.

• ITAR: Manufacturing and assembly must be domestic and ITAR-compliant.

• This AOI may result in a prototype OT award under 10 U.S.C. § 4022. It is not subject to the FAR.

• A follow-on production contract or transaction may be awarded without further competition if the prototype is successful.

• Cloud environment accreditation (FedRAMP High/IL6) is not required at award but Government will work with awardee to achieve it.

• Ruggedized or IP-rated enclosure is desirable but not firm for prototype.

• NIAP certification is not required for the RD itself unless it creates an outer VPN tunnel, in which case a NIAP-approved VPN client is required.

• Affirmation of Business Status Certification is attached.

Solicitation / RFP / RFQ

This document is an Area of Interest (AOI) for a "Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)". The Defense Information Systems Agency (DISA) is seeking innovative and user-friendly Retransmission Devices (RDs) that meet evolving Commercial Solutions for Classified (CSfC) Mobile Access Capability Package (MACP) requirements. The goal is to develop a prototype RD that integrates a hardwired connection internally, eliminating conspicuous external cables and improving tactical mobility for users.

• Develop an "all-in-one" form factor (e.g., sleeve or integrated case) for the RD.

• Meet or exceed CSfC MACP version 2.7 requirements.

• Minimize physical footprint and visual signature.

• Support current and future approved DoD mobile devices (e.g., Samsung Galaxy S25/S26).

• Comply with CSfC and National Information Assurance Partnership (NIAP) requirements; components must be on the CSfC Components List and NIAP validated.

• Adhere to Supply Chain Risk Management principles and Trade Agreements Act statutes.

• Manufacturing and assembly must be performed domestically and comply with ITAR.

• Modem chips must comply with Section 889(a)(1)(A)&(B) of the FY19 NDAA.

• Provide unlocked 4G/LTE wireless network transport (prototype); future versions should support 5G.

• Support 802.11 a/b/g/ac (Wi-Fi 6E/7) transport options.

• Connectivity chip must be physically distinct from the main processor.

• Prototype must demonstrate Wi-Fi connectivity only.

• Desired: Ability to create an outer VPN on the RD using a physically and logically independent cryptographic key store.

• Desired: Support CNSA Suite 2.0 Profile for IPSEC.

• Include full lifecycle support if prototype is successful (planning, procurement, deployment, sustainment, secure disposal).

• Administered via a centralized, cloud-based platform authorized at FedRAMP High and/or DISA Impact Level 6.

• Support secure, over-the-air firmware updates and remote monitoring/reporting.

• Awarding Instrument: This AOI solicitation will be awarded under Commercial Solutions Opening (CSO) procedures.

• Anticipated Total Cost (Prototype): $500,000 to $850,000 for 20 devices over a 6-month period.

• Period of Performance: Proposals with a performance period of six months or less are ideal.

• Solution Briefs Due: 20 April 2026, 11:00 a.m., CDT.

• Submit Solution Brief To: disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil

• Evaluation: The Government will evaluate proposals based on merits, innovation, and feasibility. Preference will be given to submissions demonstrating existing, reference-verifiable commercial ability or existing products adaptable with minimal non-recurring engineering.

• Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self) is required for the prototype project. CMMC Level 3 will be required for follow-on production.

• Companies must have current CMMC status entered in SPRS at CMMC Level 2 (self) and an affirmation of continuous compliance.

• This AOI may result in the award of a prototype OT under 10 U.S.C. § 4022. It is not subject to the FAR.

• Follow-on production contracts or transactions may be awarded without further competitive procedures if the prototype is successful.

• An "Affirmation of Business Status Certification" is attached to this AOI.

Solicitation / RFP / RFQ

This document is an Area of Interest (AOI) for a "Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)". The Defense Information Systems Agency (DISA) is seeking innovative and user-friendly Retransmission Devices (RDs) that meet the latest CSfC MACP (version 2.7) requirements for a hardwired connection, while appearing inconspicuous and eliminating the need for external cables. The goal is to improve user experience, reduce operational risks, and enhance tactical mobility for Department of Defense (DoD) users.

• Develop an "all-in-one" form factor RD, ideally a sleeve or integrated case, that meets CSfC MACP v2.7 requirements internally.

• Minimize physical footprint and visual signature, similar to a commercial smartphone case.

• Support current and future approved DoD mobile devices (e.g., Samsung Galaxy S25/S26).

• Compliance with CSfC and National Information Assurance Partnership (NIAP) requirements.

• Adherence to Supply Chain Risk Management principles and Trade Agreements Act.

• Compliance with Section 889(a)(1)(A)&(B) of the FY19 NDAA.

• Provide unlocked 4G/LTE wireless transport (future development for 5G desired).

• Support 802.11 a/b/g/ac (Wi-Fi 6E/7) transport options.

• Prototype must demonstrate Wi-Fi connectivity only.

• Desired: Ability to create an outer VPN on the RD with a physically and logically independent cryptographic key store.

• Desired: Support CNSA Suite 2.0 Profile for IPSEC.

• Full lifecycle support, including planning, procurement, deployment, sustainment, and secure disposal.

• Administration via a centralized, cloud-based platform (FedRAMP High and/or DISA Impact Level 6).

• Awarding Instrument: Other Transaction (OT) under Commercial Solutions Opening (CSO) procedures.

• Anticipated total cost for prototype: $500,000 to $850,000 for 20 devices over a 6-month period.

• Potential for follow-on production contract or transaction without further competitive procedures.

• Solution Briefs Due: 13 April 2026, 11:00 a.m., CDT.

• Submit Solution Brief To: disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil

• Evaluation: Based on merits, innovation, and feasibility. Preference for existing, reference-verifiable commercial ability or existing products adaptable with minimal non-recurrent-engineering.

• Preferred performance period: Six months or less for rapid development and deployment.

• Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self) is required for the prototype project. CMMC Level 3 (C3PAO) required for follow-on production.

• Companies must have current CMMC status entered in SPRS.

• This AOI and any awarded OT are not subject to the Federal Acquisition Regulations (FAR).

• Affirmation of Business Status Certification is attached.

Form / Attachment / Pricing Sheet

This document is an "Affirmation of Business Status Certification (ABSC)" form. It requires each significant participating entity in an opportunity to complete a table with their business information and certify their business status. This is likely used to determine eligibility or set-aside status for the opportunity.

• Legal Entity Name
• Proposed NAICS Code
• Industry Size Standard (Small/Large/Foreign)
• DUNS No.
• CAGE Code
• Tax Identification
• Active SAM Registration (Yes/No and Expiration Date)
• Address (1, 2, City/State/Zip)
• POC Name/Title
• POC Phone/e-mail
• Business Status Certification: Bidders must select one of the following:
  • Nontraditional Defense Contractor (NDC)
  • Nonprofit Research Institution
  • Traditional Defense Contractor
• Signature, Name, Title, Date for certification.

Bidders must accurately complete this form to provide essential business and status information. The selection of business status (NDC, Nonprofit Research Institution, or Traditional Defense Contractor) is critical and may impact eligibility for certain contract types or set-asides. This form is required for the Prime/Lead entity and potentially for all other participating entities.