ATIC Support Industrial Control System Phase 1 Review Edwards AFB

Solicitation / RFP / RFQ

This solicitation is for the "ATIC Support Industrial Control System Phase 1 Review" at Edwards Air Force Base. The government is procuring services for this review.

• Conduct an "ATIC Support Industrial Control System Phase 1 Review".

• The review must begin within 30 calendar days of award and be completed no later than 60 calendar days after award.

• The work is in accordance with a PWS dated January 22, 2026.

• Product Service Code: R499

• Pricing Arrangement: Firm Fixed Price

• Period of Performance: 60 Calendar Days from award.

• Offer Due Date: March 9, 2026, 10:00 AM.

• Solicitation Number: FA930226Q0012

• Evaluation factors will include Technical Acceptability, Price, and Past Performance, with Technical and Past Performance being equal in importance when combined and compared to price.

• This acquisition is set aside 100% for Small Business.

• NAICS Code: 541330 (Engineering Services)

• Size Standard: USD 25,500,000.00

• The solicitation includes FAR clauses 52.212-1, 52.212-3, and 52.212-5, as well as DFARS clauses. These are incorporated by reference or included in full text.

• Payment requests and receiving reports are to be submitted electronically via Wide Area WorkFlow (WAWF).

Questions & Answers / Clarifications

This document provides clarifications and answers to vendor questions regarding the ICS Infrastructure Site Visit, Review, and ATO Readiness Assessment (PWS).

• Travel Costs: Travel costs for site visits must be included in the firm-fixed price.
• Initial Report Contents: The initial report must include an ATO readiness assessment and detailed network maps/topology diagrams.
• ATO Readiness Assessment Depth: The assessment requires a High-Level Gap Analysis.
• RMF Control Baseline: The assessment should align with the Moderate level with overlays. No custom controls are required.
• Network Diagram Format: Visio is the preferred format for network diagrams.
• Network Diagram Detail: Diagrams should include physical layer 2, security devices, and data flows, focusing only on ICS-related network segments as the system is air-gapped.
• Assessment Scope: The assessment includes documentation review, interviews, and technical validation of configurations where access is permitted.
• Government Furnished Equipment (GFE): Contractors must supply their own computing resources; access will be limited to ICS networked components. Diagnostic and network analysis tools are permitted on the network, subject to security policies.
• Site Visit Support: The government will provide personnel to support site visit activities.
• On-Site Access: On-site access at each facility will be limited to 8-hour days, Monday-Friday.
• Deliverables: In addition to the Initial Report, inventory lists and draft diagrams are required.
• Report Revisions: A revision cycle for the Phase 1 Initial Report is permitted.
• Certifications: IAT certifications are not required for staff performing the site survey; the government team will retrieve needed information if system access is required.
• Final Report: The 30 days after initial report delivery will be used for revisions to the final report.
• Proposal Format: Vendor formatting is sufficient, provided abbreviations/acronyms are spelled out and industry jargon is avoided.
• Pricing: A firm-fixed price is acceptable instead of a day rate.
• Period of Performance (POP): Phase 1 review must be completed within 60 days of award, starting prior to 30 days after award. The report is required 60 days after Notice to Proceed (NTP). Phase 2 is not included in this POP.
• Site Visits: Site visits will not be held for the solicitation but will occur after award at facilities located on Edwards AFB.

These clarifications confirm that travel costs are to be included in pricing, specify the required depth and format of deliverables, and confirm the period of performance and site visit procedures post-award. The government will accept firm-fixed pricing.

Solicitation / RFP / RFQ

This solicitation (FA930226Q0012) is for the "ATIC Support Industrial Control System Phase 1 Review." The review is to be conducted at Edwards Air Force Base.

• The primary deliverable is a "Phase 1 Review" of the ATIC Support Industrial Control System.

• The review must commence within 30 calendar days of award and be completed within 60 calendar days after award.

• The contract will be a Firm Fixed Price arrangement.

• The Product Service Code is R499.

• The solicitation issue date is February 26, 2026.

• The offer due date is March 9, 2026, at 10:00 AM.

• Evaluation factors will include Technical Acceptability, Price, and Past Performance. Technical and Past Performance combined will be more important than Price.

• The acquisition is listed as "UNRESTRICTED OR SET ASIDE: 100% FOR: SMALL BUSINESS."

• The North American Industry Classification Standard (NAICS) code is 541330, with a size standard of $25,500,000.00.

• The Performance Work Statement (PWS) is dated January 22, 2026.

• Payment will be made via Wide Area WorkFlow (WAWF).

• Numerous FAR and DFARS clauses are incorporated by reference and in full text, covering various aspects of contract performance, representations, certifications, and compliance.

Solicitation / RFP / RFQ

This solicitation, FA930226Q0012, is for the "ATIC Support Industrial Control System Phase 1 Review" at Edwards Air Force Base. The North American Industry Classification Standard (NAICS) code is 541330, with a size standard of $25,500,000.00.

• Conduct an "ATIC Support Industrial Control System Phase 1 Review" in accordance with the PWS dated January 22, 2026.

• The review must begin within 30 calendar days of award and be completed no later than 60 calendar days after award.

• Pricing Arrangement: Firm Fixed Price.

• Product Service Code: R499.

• Offer Due Date: February 25, 2026, at 10:00 AM.

• Evaluation factors are not explicitly detailed in the provided pages, but typically include Technical Acceptability, Price, and Past Performance.

• This acquisition is set aside 100% for Small Business.

• The solicitation incorporates FAR clauses by reference, including those related to electronic submission of payment requests and receiving reports (WAWF), and various other terms and conditions for commercial products and services.

• A Performance Work Statement (PWS) dated January 22, 2026, is referenced as an attachment.

Solicitation / RFP / RFQ

This solicitation, FA930226Q0012, is for the ATIC Support Industrial Control System Phase 1 Review at Edwards Air Force Base. The acquisition is set aside for Small Business.

• The core deliverable is the ATIC Support Industrial Control System Phase 1 Review.

• The PWS (dated 22 January 2026) outlines the requirements.

• Phase 1 review must begin within 30 calendar days of award and be completed no later than 60 calendar days after award.

• Product Service Code: R499

• Pricing Arrangement: Firm Fixed Price

• Estimated Maximum Value: USD 25,500,000.00

• Offer Due Date: 20 February 2026, 10:00 AM Local Time.

• Evaluation factors are Technical Acceptability, Price, and Past Performance. The relative importance of Technical and Past Performance combined is equal to Price.

• This acquisition is 100% set aside for Small Business.

• The solicitation incorporates FAR clauses by reference and in full text, including those related to commercial products and services, payment instructions (WAWF), and various representations and certifications.

• Attachment 01 is the Performance Work Statement (PWS) dated 22 Jan 2026.

Statement of Work (SOW) / Performance Work Statement (PWS)

To provide technical support for a phased review of Industrial Control Systems (ICS) infrastructure at two Government facilities and an associated wide-area network. The goal is to assess the current posture, identify gaps, and provide actionable recommendations to support cybersecurity compliance and achieve/maintain Authority to Operate (ATO).

• Conduct an initial site visit and infrastructure review at two Government facilities.

• Perform an ATO readiness assessment.

• Develop a detailed network map/topology diagram.

• Inventory ICS hardware, software, and network devices.

• Evaluate existing posture against DoD Risk Management Framework (RMF) controls and NIST requirements.

• Total Period of Performance (POP): 60 calendar days from award.

• Phase 1 (Initial Site Visit and Report): Complete by Day 30.

• Place of Performance: Two Government-designated facilities. Analysis and reporting may be conducted at the contractor site.

• Phase 1 Initial Report: Summarizing site observations, high-level findings, and immediate risks. (Format: MS Word/PDF, Due Date: Day 30).

• The Phase 1 Initial Report must be submitted on time.

• The report must identify site observations and risks covering both facilities.

• Acceptance is based on a Government review of the report.

• Contractor personnel must hold a favorable Tier 3 background investigation (or equivalent).

• All work must comply with DoD cybersecurity, OPSEC, and physical security requirements.

• Personnel must be US Citizens.

• Site access requires 3 days advanced notice for the security team.

• Government Furnished Information (GFI) will include facility floor plans, current network documentation (if available), ATO packages, control baselines, and prior assessments.