Embedded Defense Package

Solicitation / RFP / RFQ

This solicitation (RFQ N0018926QL123) is for CORA Support Services for the United States Naval Academy (USNA) as part of the Embedded Defense Package (EDP) initiative. The EDP aims to provide consistent, expert cybersecurity support to maintain and improve USNA's network security posture, ensuring continuous readiness for third-party reviews like the Cyber Operational Readiness Inspection (CORA).

• Service Activities: Includes CORA Fix Action Support (addressing findings in Tenable Security Center, Nessus, databases, DNS, ACAS, ESS, network security, web servers, mobile/wireless security, OS, VMware, Splunk), Formal CORA Support Services (Game Day Support), and System and Network Engineering (Cyber Readiness Assessments, Architecture Reviews, ACL Reviews, Network Mapping).

• Deliverables: Visit Summary Report, Executive Summary, Detailed Findings, Actionable Recommendations, and Final Presentation.

• Contract Type: Firm Fixed Price.

• Period of Performance: Six (6) months.

• SME Support: Three (3) weeks of SME support are available as needed within the Period of Performance. Unused weeks are forfeited.

• Submission: Quotes are to be submitted electronically via email to cody.s.witz.civ@us.navy.mil by the due date of May 1, 2026, 10:00 AM.

• Quote Content: Must include Solicitation Number, Quoter's Name/Address/Cage Code, Point of Contact information, quote validity (30 days), terms and conditions, country of origin, and lead time.

• Price Submission: A completed price list for each CLIN, supplemental information to support the quoted price, and completed SAM representations/certifications are required.

• Evaluation: The Government will award on a sole source, direct award basis to SecureStrux LLC. The award will be based on price, with the Government reserving the right to consider past performance if the low price quote may not represent best value. Price is a significant evaluation factor.

• This acquisition is listed as UNRESTRICTED.

• NAICS Code: 541519 (Other Computer Related Services), Size Standard: $14 million.

• The solicitation incorporates FAR clauses by reference, including 52.212-1 (Instructions to Offerors) and 52.212-2 (Evaluation).

• Payment will be made via Wide Area WorkFlow (WAWF).

• The place of performance is USNA INFO Tech Services Dept, ITSD, Annapolis, MD.

Justification for Sole Source

This document justifies soliciting a requirement on a sole source basis, precluding full and open competition, in accordance with FAR 12.102(a). The U.S. Naval Academy requires an "Embedded Defense Package" (EDP) consisting of specialized cybersecurity Subject Matter Expert (SME) support to prepare for an imminent Cyber Operational Readiness Inspection (CORA).

• Provide just-in-time training.

• Implement necessary network configuration changes and remediation efforts identified during a recent mock inspection.

• Ensure compliance with cybersecurity standards and prevent network disconnection.

• Period of Performance (PoP): Six (6) months from contract award.

• SME Support: Eight (3) weeks of support to be delivered within the PoP.

• Urgency: Immediate commencement of services upon award is required due to the impending CORA.

This document is a justification for sole source, not a solicitation. Therefore, no submission or evaluation criteria are provided.

This requirement is restricted to SecureStrux LLC.

• The CORA program has specific assessment checks, methodologies, and terminologies that require matching.

• Market research indicated SecureStrux LLC is the single vendor capable of meeting all requirements.

• SecureStrux demonstrated superior knowledge of the program, with former DoW's CORA team members.

• SecureStrux completed the current CORA assessment and is uniquely qualified to perform remedy services.

• The supplies/services must be compatible in form, fit, and function with existing systems.

• The estimated price/cost and required delivery date are not explicitly stated but the PoP and SME support duration are defined.

• Source Selection Information is referenced but not included in this document.

Form / Attachment / Pricing Sheet

This document is a "REGISTER OF WAGE DETERMINATIONS UNDER THE SERVICE CONTRACT ACT" issued by the U.S. Department of Labor. It provides the minimum wage rates and fringe benefits required for various occupations when performing contract work covered by the Service Contract Act in specific geographic areas. Bidders must use this information to ensure compliance with labor wage requirements for covered positions.

• Area: Maryland Counties of Anne Arundel, Baltimore, Baltimore City, Carroll, Harford, Howard, Queen Anne's.
• Occupational Listing: Provides a comprehensive list of job titles, corresponding occupation codes, and the minimum hourly wage rate for each.
• Fringe Benefits: Indicates that fringe benefits are required and follow the occupational listing. Specific benefits like Health & Welfare and Paid Sick Leave (EO 13706) are detailed at the end of the document.
• Executive Orders: Notes the applicability of Executive Order (EO) 13706 (Paid Sick Leave) and EO 13658 (Minimum Wage) for federal contractors.
• Vacation and Holidays: Outlines standard provisions for paid vacation and holidays.
• Conformance Process: Details the procedure for requesting additional classifications and wage rates if an occupation is not listed.

This document is critical for bidders to accurately estimate labor costs for their proposals. It establishes the minimum wage and benefit rates that must be paid to employees performing work under the contract. Failure to comply with these wage determinations can lead to contract violations and penalties. Bidders must ensure their proposed labor rates meet or exceed these minimums for all applicable job classifications.