R-EFB iPad Redactions

Final Rule

This final rule from the Department of Defense establishes the Cybersecurity Maturity Model Certification (CMMC) Program. The CMMC Program aims to verify that defense contractors and subcontractors have implemented required security measures to safeguard Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).

• Tiered Model: CMMC requires companies to implement cybersecurity standards at progressively advanced levels (Levels 1, 2, and 3) based on the type and sensitivity of information handled.

• Assessment Requirement: CMMC assessments verify the implementation of cybersecurity standards.

• Phased Implementation: The program will be implemented over a three-year period, starting with self-assessments and progressing to third-party and government assessments.

• Level 1 (Self): For FCI, requires a self-assessment and annual affirmation. No POA&Ms are permitted.

• Level 2 (Self): For CUI, requires a self-assessment and annual affirmation. POA&Ms are permitted for certain requirements, with a 180-day closeout period.

• Level 2 (C3PAO): For CUI, requires a third-party assessment by an accredited CMMC Third-Party Assessment Organization (C3PAO), with triennial assessments and annual affirmations. POA&Ms are permitted.

• Level 3 (DIBCAC): For CUI, requires a government assessment by the Defense Contract Management Agency (DCMA) Defense Industrial Base Cybersecurity Assessment Center (DIBCAC), following a Final Level 2 (C3PAO) status. Triennial assessments and annual affirmations are required.

• Effective Date: December 16, 2024.

• Incorporation by Reference Approval: December 16, 2024.

Ms. Diane Knight, Office of the DoD CIO at osd.pentagon.dod-cio.mbx.cmmc-inquiries@mail.mil or 202-770-9100.

Questions & Answers / Clarifications

This document provides answers to vendor questions and clarifications regarding the "Ipad Redaction" opportunity. Answers are provided in red text.

• Subcontractor Approval Process: OSI approval for subcontractors is estimated to take a 2-week process for both prime and subcontractors.
• Subcontractor Impact on Evaluation: The use of subcontractors is not an evaluation factor for award.
• Equipment Pickup and Return: Personal pickup and return of equipment is an acceptable method. Base access requirements have been added via updated attachment 3.
• Prime Contractor SPRS Score: Offerors are required to have an SPRS score on file, specified as Level 1 (Self) per updated CLS document (clause 252.204-7021).
• Subcontractor SPRS Score: Subcontractors handling Controlled Unclassified Information (CUI) are also required to have an SPRS score, specified as Level 1 (Self) per the updated CLS document and Federal Register notice.

This document clarifies requirements related to subcontractor approvals, evaluation, equipment handling, and SPRS scores for both prime and subcontractors. It references updated attachments and clauses that bidders should review.

Forms / Attachments / Pricing Sheets

This document lists clauses that are incorporated by reference into the solicitation. It serves as an attachment to provide potential bidders with a comprehensive list of applicable clauses and their associated titles and dates.

• Clause Number: The unique identifier for each clause.
• Clause Title: A brief description of the clause's content.
• Year/MO: The year and month the clause was last updated.
• Section: The section within the contract where the clause is located.

This document is crucial for bidders as it outlines the legal and regulatory requirements that will govern the contract. Bidders should review these clauses to understand their obligations, potential risks, and to ensure their proposals adequately address all stipulated requirements. Key clauses highlighted include those related to:

• Whistleblower rights and reporting
• Safeguarding defense information
• Prohibition of certain telecommunications equipment and business operations
• Electronic submission of payment requests
• Labor standards and paid sick leave
• Cybersecurity maturity model certification (CMMC)
• Health and safety on government installations
• Contractor access to government installations

Questions & Answers / Clarifications

This document provides answers to vendor questions regarding the "Ipad Redaction" opportunity, with answers presented in red text.

• Subcontractor Approval Process: The government estimates a 2-week process for OSI approval of any prime or subcontractor prior to performing work.
• Subcontractor Impact on Evaluation: The use of subcontractors is explicitly stated as not an evaluation factor for award.
• Equipment Pickup and Return: The government confirms that personally driving to Whiteman AFB to pick up and return equipment is an acceptable method of fulfillment. Base access requirements have been added via updated attachment 3, titled "Contractor Access to Department of the Air Force Installations."

This Q&A document clarifies processes and requirements related to subcontractors and equipment handling, potentially impacting how bidders plan their approach and resource allocation. It also directs bidders to updated attachment 3 for specific base access information.

Forms / Attachments / Pricing Sheets

This document, titled "CLAUSES INCORPORATED BY REFERENCE," lists various clauses that are incorporated into the contract by reference. It serves as a reference for the specific contractual terms and conditions that apply to the opportunity.

• Clause Number: The unique identifier for each clause (e.g., 252.203-7000).
• Alternate/Development Number: Any alternative or development numbers associated with the clause.
• Clause Title: A brief description of the clause's subject matter.
• Year/Month: The effective date of the clause.
• Section: The section of the contract where the clause is located.

Bidders must review these incorporated clauses to understand the full scope of contractual obligations, requirements, and representations that will apply if awarded the contract. Key clauses highlighted include those related to:

• Safeguarding Covered Defense Information and Cyber Incident Reporting (252.204-7012)
• Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services (252.204-7018)
• Notice of NIST SP 800-171 DoD Assessment Requirements (252.204-7019, 252.204-7020)
• Various prohibitions related to business operations with specific regions or entities.
• Payment instructions and routing data for Wide Area WorkFlow (WAWF).
• Health and Safety on Government Installations.
• Contractor Access to Department of the Air Force Installations.
• Representations regarding small business status, joint ventures, and inverted domestic corporations.

Forms / Attachments / Pricing Sheets

This document lists clauses that are incorporated by reference into a solicitation (FA462526Q1005). It provides the clause number, alternate/development number, clause title, year, and section for each referenced clause.

• Requirements Relating to Compensation of Former DoD Officials (252.203-7000)
• Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services (252.204-7018, 252.204-7017)
• Notice of NIST SP 800-171 DoD Assessment Requirements (252.204-7019, 252.204-7020)
• Prohibition on Certain Procurements from the Xinjiang Uyghur Autonomous Region (252.225-7059, 252.225-7060)
• Electronic Submission of Payment Requests and Receiving Reports (252.232-7003)
• Wide Area WorkFlow Payment Instructions (252.232-7006)
• Representation of Use of Cloud Computing (252.239-7009)
• Statement of Equivalent Rates for Federal Hires (52.222-42)
• Postaward Small Business Program Rerepresentation (52.219-28)
• Prohibition on Contracting With Inverted Domestic Corporations-Representation (52.209-2)

Bidders must review these incorporated clauses to understand the legal and regulatory requirements that will apply to any resulting contract. This includes requirements related to:

• Defense telecommunications equipment and services.
• Cybersecurity and information systems.
• Supply chain restrictions (e.g., Xinjiang region).
• Payment and invoicing procedures (WAWF).
• Cloud computing usage.
• Labor standards and wage requirements.
• Small business status and representations.
• Restrictions on inverted domestic corporations.

Understanding and complying with these clauses is critical for proposal preparation and contract performance.

Solicitation / RFP / RFQ

This is a combined synopsis/solicitation for commercial items to procure the purchase and delivery of iPad Redaction services. This announcement serves as the only solicitation; quotes are requested, and a written solicitation will not be issued. The acquisition is a 100% Woman-Owned Small Business set-aside.

• The primary deliverable is iPad Redaction services in accordance with the attached Performance Work Statement (PWS) dated 30 January 2026.

• A Wage Determination (WD 2015-5089 Rev 29) is incorporated.

• The North American Industry Classification System (NAICS) code is 811310 with a size standard of $12.5 M.

• The CLIN schedule indicates 40 Jobs for "iPad Redaction in accordance with PWS dated 30 January 2026".

• The contract will be awarded as a purchase order.

• Quotes must be submitted via email to naiya.colon_ortiz@us.af.mil AND lynnann.duchene@us.af.mil.

• RFQ due date: Tuesday, 5 May 2026, by 3:00 P.M. CST.

• All questions regarding the RFQ must be emailed by Friday, 24 April 2026, at 2:00 P.M. CST.

• Evaluation will be based on Simplified Acquisition Procedures.

• Technical acceptability is required for eligibility, specifically adherence to the Performance Work Statement dated 3 September 2025.

• Award will be made to the vendor offering the best value, considering price and performance time.

• The government intends to award without discussions.

• 100% Woman-Owned Small Business set-aside.

• All companies must be registered in the System for Award Management (SAM) at the time of quote submittal.

• The RFQ number is FA462526Q1005.

• Zip files are not acceptable. If email attachments exceed 10 MB, contact the government for alternate instructions.

• The government will not provide contract financing.

• Offerors must provide specific company information with their quote, including CAGE Code and SAM UEI.

• Attachments include: PWS dated 30 January 2026, WD 2015-5089, and CLSExport_FA462526Q1005 IPAD REDACTION(Provisions and Clauses).

Statement of Work (SOW) / Performance Work Statement (PWS)

To provide personnel, equipment, tools, materials, supervision, and quality control for the redaction of 40 iPad Airs (model number A3266).

• Remove the Camera, microphone, Wi-Fi hardware, and Bluetooth hardware from each iPad.

• Return the iPads to working status following redaction.

• Document the redaction process for each iPad, including the serial number and removed items, in a signed report.

• Dispose of all removed parts.

• Confirm the iPads are still in good working order after hardware removal.

• Confirm serial numbers against Appendix A.

• This is a one-time contract with no further work anticipated.

• The contractor is responsible for shipping and movement of equipment to complete the contract.

• Subcontractors require coordination and approval from AFGSCOSI.

• A signed report documenting redaction completion for each iPad is required, identifying iPads by serial number.

Form / Attachment / Pricing Sheet

This document is a U.S. Department of Labor Wage Determination (Wage Determination No.: 2015-5089, Revision No.: 29) for the Service Contract Act. It establishes the minimum wage rates and fringe benefits required for various occupations in the specified geographic area (Missouri Counties of Henry, Johnson, Pettis, Saline).

• Lists numerous occupations with corresponding wage rates and footnotes.
• Includes details on fringe benefits, such as Health & Welfare rates.
• Provides information on Executive Orders 13706 (Paid Sick Leave) and 13658 (minimum wage adjustments).
• Outlines the process for requesting additional classifications and wage rates (Conformance Process).

This document is crucial for bidders to understand the minimum labor costs associated with performing services under a government contract in the specified area. Bidders must ensure their proposed wages and benefits meet or exceed these requirements to be compliant. It directly impacts the cost proposal and overall feasibility of bidding on opportunities requiring services in this region.