N6600126R0002 - Cyberspace Science, Research, Engineering and Technology Integration Small Business Multiple Award Contract (MAC)

Questions & Answers / Clarifications

This document consolidates questions received from industry and provides responses from the Government regarding the N66001-26-R-0002 CYBERSPACE SBSA MULTIPLE AWARD CONTRACT (MAC) RFP.

• Place of Performance: Determined at the Task Order (TO) level.
• Facility Clearance (FCL): Offerors must possess a Top Secret FCL at the time of proposal submission. A Secret FCL is not sufficient for award.
• Organizational Experience: References can include work performed by the Prime Offeror, including as a prime or subcontractor. However, subcontractor experience will be considered for Organizational Experience but not for Past Performance.
• Past Performance: References submitted will be used to evaluate past performance. CPARS or Past Performance Questionnaires (PPQ) are acceptable. Subcontractor references are not considered for Past Performance.
• Proposal Submission: Offerors may cite a maximum of three (3) references for work performed by the Prime Offeror. Specific instructions regarding proposal volumes, page limits, and file formats are detailed in L-215-PAC001.
• Small Business Set-Aside: Small businesses are eligible for the unrestricted effort and the Small Business Set-aside. Large businesses can participate as subcontractors to Small Business primes.
• Cybersecurity: Clause 252.204-7021 (Cybersecurity Maturity Model Certification) is now applicable to this solicitation.
• Teaming Arrangements: Contractor Teaming Arrangements (CTAs) are permitted. Information regarding teaming arrangements should be provided in Volume II.

This document clarifies several key aspects of the solicitation, including eligibility, submission requirements, and evaluation criteria. It also indicates that the solicitation has been updated to include Clause 252.204-7021. Offerors should carefully review these clarifications to ensure their proposals meet all requirements.

Solicitation / RFP / RFQ

This solicitation is for a Multiple Award Contract (MAC) for Cyberspace Science, Research, Engineering and Technology Integration. The contract will be awarded to multiple small businesses.

• The solicitation outlines requirements for various sections including Solicitation/Contract Form, Supplies or Services and Prices/Costs, Description/Specifications/Work Statement, Packaging and Marking, Inspection and Acceptance, Deliveries or Performance, Contract Administration Data, and Special Contract Requirements.

• Specific requirements include safeguarding covered defense information, cybersecurity measures, and compliance with NIST 800-171.

• Travel costs will be reimbursed according to Federal Travel Regulations.

• Counterfeit or grey market IT products are addressed, requiring certification of authenticity and authorized supply chain.

• Data submission requirements include using the Acquisition Management System (AMS) CDRL Tool.

• Cybersecurity personnel must meet specific training and certification requirements.

• Contractors must comply with foreign entry requirements when performing outside the U.S.

• Liability insurance requirements are detailed.

• Restrictions on connecting non-Government owned equipment to RDT&E networks are specified.

• Organizational Conflicts of Interest (OCI) mitigation plans may be required.

• Contractors must adhere to specific cybersecurity maturity model certification (CMMC) levels.

• Contract Type: Indefinite-Delivery, Indefinite-Quantity (IDIQ) with Cost-Plus-Fixed-Fee (CPFF) pricing for services and Cost (no fee) for Other Direct Costs (ODCs).

• Overall Contract Ceiling: $50,000,000.00

• Base Period Ceiling: $34,317,000.00 (5 Years)

• Option Period Ceiling: $15,683,000.00 (2 Years)

• Minimum Order: $2,500.00

• Maximum Order: $50,000,000.00

• Government Minimum to Order: $1.00

• Government Maximum to Order: $50,000,000.00

• Period of Performance: 01 June 2026 to 31 May 2033

• Proposals are due by 11:00 AM local time on 24 April 2026.

• Proposals must be submitted electronically.

• Evaluation will be a three-step process: Acceptability of Offer, Capability (Organizational Experience, Past Performance), and Source Selection Decision.

• Price or cost will not be evaluated for the basic contract, but will be considered for task/delivery orders.

• Offerors must complete all required representations and certifications.

• Key personnel must be identified and substitutions are restricted.

• This is a Small Business Multiple Award Contract (MAC).

• Specific set-aside provisions for small businesses may apply to individual orders.

• The solicitation includes numerous FAR and DFARS clauses incorporated by reference.

• Attachments include Statement of Work, Contract Security Classification Specification (DD 254), Organization Experience Matrix, Reference Information Sheet, Past Performance Questionnaire, and Q&A.

• Estimated effective award date is 1 June 2026.

Amendment / Modification

This amendment (0001) to solicitation N6600126R00020001 makes the following changes:

• Proposal Due Date Extension: The proposal due date has been extended to 1100 PT on April 24, 2026.

• Consolidated Q&A: The consolidated Questions & Answers (Q&A) attachment (Att_6_QandA) is now provided, based on questions received by the original suspense date.

• Point of Contact Update: The NIWC Point of Contact (POC) on the Past Performance Questionnaire (Att 5) has been updated.

• Solicitation Language Correction: Language within the solicitation has been corrected as noted in the Q&A Attachment.

• Clause/Provision Addition: The following clauses and provisions have been added:

  • DFARS 252.204-7021: Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirements (Nov 2025)
  • DFARS 252.204-7025: Notice of Cybersecurity Maturity Model Certification Level Requirements (Nov 2025)

• Section A - Solicitation/Contract Form (Response Due Date)

• Section G - Contract Administration Data (NIWC POC on PPQ)

• Section I - Contract Clauses (Addition of DFARS 252.204-7021)

• Section J - List of Attachments (Addition of Att_5_Past_Performance_Questionnaire Rev1 and Att_6_QandA; deletion of Att_5_Past_Performance_Questionnaire)

• Section L - Instructions, Conditions, & Notices to Offerors or Quoters (Addition of DFARS 252.204-7025)

The proposal deadline has been extended. Offerors should review the added Q&A attachment for clarifications and corrections, and note the addition of new cybersecurity-related clauses and provisions impacting their proposals.

Amendment / Modification

This document is a "Conformed" version of Solicitation N6600126R00020001, indicating it incorporates all amendments and changes made to the original solicitation. The "Created On" date of the document is April 8, 2026, and it was posted on April 8, 2026.

This document supersedes previous versions and incorporates all changes and amendments to the original solicitation.

Potential offerors should refer to this conformed solicitation for the most current and complete set of requirements, terms, and conditions. The original solicitation's deadline for offers was April 24, 2026, at 11:00 AM local time. This conformed document should be used for proposal preparation and submission.

Amendment / Modification

This amendment (0001) to solicitation N6600126R00020001 makes the following changes:

• Proposal Due Date Extension: The proposal due date has been extended to 1100 PT on April 24, 2026.

• Q&A Attachment: Provides the consolidated Questions & Answers (Q&A) attachment (Att_6_Q_and_A), based on questions received by the original suspense date.

• Point of Contact Update: Updates the NIWC Point of Contact (POC) for the Pre-Proposal Questionnaire (PPQ).

• Solicitation Language Correction: Corrects language within the solicitation as noted in the Q&A Attachment.

• Section A - Solicitation/Contract Form: Response Due Date changed from April 20, 2026, to April 24, 2026.

• Section J - List of Attachments: Added 'Att_5_Past_Performance_Questionnaire Rev1' and 'Att_6_QandA'. Deleted 'Att_5_Past_Performance_Questionnaire'.

The proposal deadline has been extended. Offerors should review the new Q&A attachment for clarifications and potential impacts on their proposals. The updated POC for the PPQ should be used for any related inquiries.

Form / Attachment / Pricing Sheet

This document is a reference information sheet for organizational experience. It is designed to collect details about past contracts or projects that offerors can use to demonstrate their relevant experience. Bidders will use this form to provide specific information about references for their submitted proposals.

This form requires detailed information about a reference, including:

• Reference Contact Information: Name, address, and technical/contracting points of contact for the reference organization.
• Reference Contract Information: Control number, task order number, contract type, award value, award date, period of performance, and whether a small business subcontracting plan was included.
• Status of Reference Work: Actual work dates, work location, and the current status of the work (e.g., continuing, completed, terminated).
• Amount Invoiced to Date: Financial information related to the reference contract.
• Organizational Experience Information: Certification regarding the recency of work described (since January 1, 2021) and a summary description of the contract work, specifically formatted to address each "Key Area" as defined in the solicitation. The detailed description is to be provided as an addendum, not within this form itself.

This attachment is crucial for bidders to document and present their past performance and organizational experience as required by the solicitation. It guides the specific data points needed to substantiate claims of relevant experience, particularly concerning work performed since January 1, 2021. The format and content requirements for the summary description and addendum directly impact proposal preparation and evaluation.

Questions & Answers / Clarifications

This document consolidates questions received from industry regarding the CYBERSPACE SBSA MULTIPLE AWARD CONTRACT (MAC) RFP (N66001-26-R-0002) and provides the Government's responses.

• Facility Clearance (FCL): Offerors must possess a Top Secret FCL at the time of proposal submission. A Secret FCL is not sufficient for award.
• Organizational Experience & Past Performance: References for work performed by the Prime Offeror (including as a subcontractor) can be used for Organizational Experience. However, subcontractor references will not be considered for Past Performance evaluation. Teaming arrangements are permitted, and their details should be described.
• Subcontracting: Limitations on subcontracting are detailed in clause 52.219-14. Subcontractors do not need to submit Section K or policy for uncompensated overtime.
• Proposal Submission: Specific guidance is provided on proposal volumes, page limits, and the inclusion of cover pages, tables of contents, and acronym lists (generally excluded from page counts per A15). A second version of the cost proposal in Excel is not required for the MAC-level proposal but may be provided.
• Security Requirements: A DD Form 254 is included, indicating a Top Secret facility clearance is required. Cybersecurity Maturity Model Certification (CMMC) requirements are addressed, with specific sections and clauses referenced.
• Task Orders: Place of performance, security clearances, and other specific requirements will be determined at the Task Order (TO) level.

This Q&A document clarifies several key aspects of the solicitation, including eligibility requirements (FCL), proposal content and evaluation criteria (Organizational Experience vs. Past Performance, subcontracting), and submission instructions. Offerors should review these clarifications carefully to ensure their proposals meet all requirements. Amendment 1 is referenced for proposal due date and time changes.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Statement of Work (SOW) outlines the requirements for providing a wide range of expertise to support the Naval Information Warfare Center, Pacific (NIWC Pacific) in establishing and maintaining Cyberspace Operations and enabling product lines, programs, and projects.

• Core Activities: Identifying and developing core technical and functional services for full-spectrum Cyberspace Operations. This includes developing and deploying holistic systems and tool sets for Cyber Situational/Battlespace Awareness (CS/BA) and Command and Control (C2) of Cyberspace Operations.

• Methodologies: Utilizing DevSecOps methodologies for rapid, secure, and continuous development of new capabilities to conduct Offensive, Defensive, and DODIN Operations.

• Areas of Focus: Supporting the development of tools and processes for understanding the Cyberspace Operational Environment, investigating improved techniques, and researching innovative technologies.

• Specific Tasks: Includes system analysis, architecture, engineering, integration, requirements analysis, operational and technical support, exercise and experimentation support, software development and prototyping, and cybersecurity risk management.

• The contractor will support the development of tools and processes for developing, maintaining, and increasing understanding of the Cyberspace Operational Environment.

• The contractor shall investigate and research improved techniques and solutions meeting requirements documents or specifications.

• Security engineering and rapid prototyping will include support for the correction of vulnerabilities and development of predictive cyber attack technologies.

• Not explicitly stated in the SOW, but implies ongoing support for NIWC Pacific.

• Support may be on-site or off-site.

• Security Clearances: Support may require access to unclassified, Secret, Top Secret, and Sensitive Compartmented Information (SCI) levels. Contractors may need to obtain and maintain SCI clearances and access to specific networks (JWICS, NSAnet, NGAnet).

• DevSecOps: Emphasis on integrating secure development practices throughout the lifecycle.

• Technology Assessment: Identifying and analyzing innovative technologies from various sources, including industry, academia, and government.

• Reporting: Requirements for reports, technical data, and computer software delivery will be specified via Contract Data Requirements List (CDRL), DD Form 1423.

Form / Attachment / Pricing Sheet

This document is a DD Form 254, Contract Security Classification Specification. It outlines the security requirements for a contract, including the level of clearance and safeguarding required for classified information, as well as specific security guidance and access requirements for contractor personnel.

• Classification Level: Top Secret facility clearance required.
• Contract Information: Includes solicitation number (N6600126R0002), original contract date (20251010), and due date (20250916).
• Contractor/Subcontractor Information: Placeholder for contractor and subcontractor details (TBD).
• Performance Locations: Lists various U.S. Navy and other government locations where performance may occur, including Fort Meade, MD; San Diego, CA; Pearl Harbor, HI; San Antonio, TX; Washington, DC; and Offutt AFB, NE.
• Procurement Description: "Cyberspace science, research, engineering and technology integration support."
• Access Requirements: Details requirements for access to various types of classified information, including COMSEC, Restricted Data, National Intelligence Information (SCI, Non-SCI), SAP, NATO, Foreign Government Information, and CUI. Specific requirements for IT levels, privileged access, and handling of classified documents are outlined.
• Security Guidance: Includes specific instructions on handling classified information, OPSEC, intelligence oversight, and reporting procedures. It also references relevant policies and directives such as NISPOM, SECNAVINSTs, and DFARS.
• Public Release: Information pertaining to the contract shall not be released without proper approval.

This document is critical for bidders to understand the security posture and requirements associated with the contract. It specifies the necessary security clearances, training, and handling procedures for classified information that potential contractors and their personnel must meet. Bidders must assess their ability to comply with these stringent security requirements, including facility clearances, personnel clearances, and specific training, to determine their eligibility and capability to perform the contract work.

Form / Attachment / Pricing Sheet

This document is an organizational experience matrix required for submission with proposals, as per RFP L-215-PAC001, Submission of Proposals, paragraph 3.1(a). It is designed to help the government assess the breadth, depth, and relevance of the Prime Offeror's experience on Government contracts since January 1, 2021.

• Prime Offeror References: Bidders must cite a maximum of three (3) references for work performed by the Prime Offeror. Work performed includes acting as the prime contractor, a subcontractor performing the work, or a prime contractor overseeing a subcontractor that performed the work.
• Key Areas (KAs): The matrix includes columns for specific Key Areas, identified as KA 1 (SOW 2.5.1), KA 2 (SOW 2.7), and KA 3 (SOW 2.11.4). Bidders must indicate experience in one or more KAs for each reference by marking the applicable column with an 'X'.
• Reference Details: For each reference, bidders need to provide a Control Number (e.g., Contract No.) and the name of the prime or subcontractor that performed the referenced work.

This matrix is a critical component of the proposal submission. Bidders must carefully select and document their relevant past performance experience, ensuring it aligns with the specified Key Areas outlined in the SOW. Accurate and complete submission of this matrix is essential for demonstrating organizational capability and meeting RFP requirements.

Form / Attachment / Pricing Sheet

This document is Attachment 5, a Past Performance Questionnaire, used to gather information about a contractor's past performance for a competitive service contract. It is intended for references provided by the offeror to complete and submit.

• The questionnaire requests information on six key areas of past performance:
  • Quality
  • Schedule
  • Cost Control
  • Management
  • Utilization of Small Business
  • Regulatory Compliance
• It includes rating definitions ranging from Unsatisfactory to Exceptional.
• A narrative explanation section is provided for detailed feedback.

Bidders should be aware that this questionnaire will be sent to their references. The responses will be used by the government to evaluate the offeror's past performance, which is a factor in the source selection process. The document also references FAR clauses related to past performance evaluation and small business subcontracting.

Solicitation / RFP / RFQ

This solicitation, N6600126R0002, is for a Multiple Award Contract (MAC) for Cyberspace Science, Research, Engineering and Technology Integration. The contract type is anticipated to be Cost-Plus-Fixed-Fee (CPFF) for services and Cost (no fee) for Other Direct Costs (ODCs).

Work will be performed in accordance with Attachment 1 - Statement of Work. Specific requirements will be detailed in individual task orders.

• Contract Ceiling: $50,000,000.00 (Overall/Combined)

• Base Period Ceiling: $34,317,000.00 (5 Years)

• Option Period Ceiling: $15,683,000.00 (2 Years)

• Pricing Arrangement: Cost Plus Fixed Fee (CPFF) for engineering services (CLIN 0001, 1001) and Cost No Fee for Other Direct Costs (ODCs) and Data (CLIN 0002, 0003, 1002, 1003).

• Proposal Submission: Electronic submission via the Procurement Integrated Enterprise Environment (PIEE) Solicitation Module.

• Deadline for Questions: April 6, 2026, 11:00 AM Pacific Time.

• Estimated Award Date: June 1, 2026.

• Evaluation: Proposals will be evaluated in three steps: Acceptability of Offer, Capability (Organizational Experience, Past Performance), and Source Selection Decision. Price or cost will not be evaluated for the base contract but will be a factor for task/delivery orders. A "No Tradeoff" approach will be used.

This is a Small Business Multiple Award Contract (MAC). Specific set-asides for small businesses may be applied to individual orders.

• Offerors must register in PIEE to submit a proposal.
• Key Personnel are required, with specific substitution procedures.
• Cybersecurity requirements, including NIST SP 800-171 compliance, are detailed.
• Specific clauses regarding foreign travel, contractor picture badges, and information security are included.

Form / Attachment / Pricing Sheet

This document is a reference information sheet for organizational experience. It is designed to collect details about past performance and organizational experience from references.

• Reference Contact Information: Requires complete name, address, and technical/contracting points of contact for the reference organization.

• Reference Contract Information: Details such as control number, task order number, contract type, award value, award date, period of performance, and whether a small business subcontracting plan was included.

• Status of Reference: Information on actual work dates, work location, and the current status of the work (e.g., continuing, completed, terminated).

• Amount Invoiced To Date: Financial information regarding the reference contract.

• Reference Organizational Experience Information: A certification regarding the recency of work described and instructions for providing a summary description of contract work, emphasizing its relevance to key areas and submission requirements.

• Bidders must complete all relevant fields for each reference provided.

• A summary description of contract work must be provided as an addendum, adhering to specific formatting and page limitations as outlined in the solicitation (L-215-PAC001 SUBMISSION OF PROPOSALS and Paragraph 3.1(b)).

• Bidders must certify whether the work described was performed since January 1, 2021.

This form is critical for bidders to document their past performance and organizational experience. It requires detailed information about previous contracts and the work performed, which will be used by the government to evaluate the bidder's qualifications and capability to perform the work required by the solicitation. The specific details requested (e.g., contract type, award value, period of performance, work status) are essential for demonstrating relevant experience.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Statement of Work (SOW) outlines the requirements for providing a wide range of expertise to support the Naval Information Warfare Center, Pacific (NIWC Pacific) in establishing and maintaining Cyberspace Operations and enabling product lines, programs, and projects.

• Support full spectrum Cyberspace Operations and enabling capabilities, including Offensive Cyberspace Operations (OCO), Defensive Cyberspace Operations (DCO), and Department of Defense Information Network (DODIN) Operations.
• Identify and develop core technical and functional services.
• Enable rapid, secure, and continuous development of new capabilities using DevSecOps methodologies.
• Develop and deploy holistic systems and tool sets for Cyber Situational/Battlespace Awareness (CS/BA).
• Provide Command and Control (C2) of Cyberspace Operations.
• Support the development of tools and processes for understanding the Cyberspace Operational Environment.
• Investigate and research improved techniques and solutions.
• Perform technology assessment, development, and transition, including analysis of alternatives (AoA), evaluation, and testing of technologies.
• Conduct systems engineering, requirements analysis, and operational and technical support.
• Provide exercise and experimentation support, including simulation development and participation in exercises.
• Engage in software development and prototyping, including reverse engineering of software components.
• Support security engineering, cybersecurity risk management, and information technology systems support.

Not explicitly stated in this document; likely defined at the task order level.

• Support may require access to unclassified, Secret, Top Secret, and Sensitive Compartmented Information (SCI) levels.
• Contractors may need to obtain and maintain SCI clearances and specific network access (JWICS, NSAnet, NGAnet).
• Adherence to DevSecOps principles and modern software development methodologies.
• Compliance with cybersecurity and information assurance standards, including RMF.
• Operations Security (OPSEC) practices are required for handling critical information.

Form / Attachment / Pricing Sheet

This document is a DD Form 254, Contract Security Classification Specification. It outlines the security requirements for a contract, including clearance levels, safeguarding of classified information, and specific security guidance.

• Clearance and Safeguarding: Specifies the required Facility Security Clearance (FCL) level (Top Secret) and the level of safeguarding for classified information (None).
• Contract Information: Includes fields for Prime Contract Number, Subcontract Number, Solicitation Number (N6600126R0002), and Due Date (20250916).
• Contractor and Performance Locations: Lists "TBD" for contractor details and specifies various performance locations across the United States, including Fort Meade, MD; San Diego, CA; Honolulu, HI; San Antonio, TX; Washington, DC; and Offutt AFB, NE.
• General Unclassified Description: "Cyberspace science, research, engineering and technology integration support."
• Access Requirements: Details requirements for access to various types of information, including COMSEC, Restricted Data, National Intelligence Information (SCI, Non-SCI), Special Access Programs, NATO Information, Foreign Government Information, and Controlled Unclassified Information (CUI).
• Security Guidance: Outlines specific security guidance, including the handling of classified documents, CUI, OPSEC training, and intelligence oversight.
• Points of Contact: Identifies Contracting Officer's Representatives (CORs) and other relevant security personnel.

This form is critical for bidders to understand the security implications and requirements of the contract. It specifies the necessary security clearances, handling procedures for classified and controlled unclassified information, and training requirements. Bidders must ensure they can meet these stringent security protocols to be eligible for and perform on this contract. The listed performance locations are also important for understanding where work may be performed.

Form / Attachment / Pricing Sheet

This document is an organizational experience matrix required as part of the proposal submission for RFP L-215-PAC001. It is used to assess the breadth, depth, and relevance of the Prime Offeror's experience on Government contracts since January 1, 2021, specifically for the Key Areas (KAs) defined in the solicitation.

• References: Bidders must cite a maximum of three (3) references for work performed by the Prime Offeror (acting as prime contractor or subcontractor).
• Key Areas (KAs): The matrix includes columns for specific Key Areas: KA 1 (SOW 2.5.1), KA 2 (SOW 2.7), and KA 3 (SOW 2.11.4).
• Marking: For each reference, bidders will indicate experience in one or more KAs by marking the applicable column(s) with an "X."
• Formatting: Column width and row depth can be adjusted as necessary within existing margins.

This matrix is crucial for demonstrating the offeror's qualifications and relevant past performance. Bidders must carefully select references and accurately map them to the specified Key Areas to meet the requirements of the solicitation. Failure to provide this matrix or complete it accurately may impact the evaluation of the proposal.

Form / Attachment / Pricing Sheet

This document is Attachment 5, a Past Performance Questionnaire, used by the Naval Information Warfare Center – Pacific to request information regarding a contractor's past performance. It is intended to gather feedback from references provided by offerors to aid in the evaluation of competitive service contracts.

• Information Request: The form outlines specific areas for evaluation, including Quality, Schedule, Cost Control, Management, Utilization of Small Business, and Regulatory Compliance.
• Rating Definitions: Provides clear definitions for performance ratings ranging from Unsatisfactory to Exceptional.
• Survey Sections: Includes detailed questions within each evaluation area for the reviewer to assess.
• Narrative Explanation: A section for providing detailed comments and explanations for the ratings given.
• Submission Instructions: Requestors are to complete the survey and email it, along with any other pertinent information, by the proposal due date/time to david.m.roden2.civ@us.navy.mil.

Bidders should be aware that this questionnaire will be sent to their provided references. The responses will directly impact the evaluation of their past performance, which is a critical factor in contract award. Understanding the criteria and rating definitions will help bidders prepare their reference lists and potentially brief their references on the key performance areas being assessed.