Request for Information - Information Technology Global Operations

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) outlines the requirements for comprehensive Information Technology Support Services (ITSS) to sustain and enhance the Department of Defense Education Activity's (DoDEA) global IT and cybersecurity operations. The goal is to provide a world-class education by ensuring robust, secure, and modern IT infrastructure and services.

The contractor will provide a wide range of IT services, including:

• 24x7 Security Operations Center (SOC) Support: Continuous monitoring, detection, and response to cyber threats, including Tier 1 Monitoring & Triage, Tier 2 Investigation & Threat Hunting, and Tier 3 Advanced Response.
• DevSecOps and Cloud-Native Application Development: Secure, scalable, and compliant application development, testing, deployment, and maintenance.
• Enterprise Device Management Support: Managing the full lifecycle of endpoint, mobile, and IoT devices, enforcing Zero Trust principles.
• Enterprise Network Operations Center (NOC) Support: Ensuring the reliability, performance, security, and resilience of DoDEA's global network infrastructure (SD-WAN, LAN, wireless, firewall, cloud networking, IoT/OT).
• CloudOps Support: Providing comprehensive cloud operations for Google Workspace and Microsoft Azure environments.
• Agile Project Management: Coordinating, tracking, and delivering technical tasks using Agile frameworks.
• Business Case and Requirement Analysis: Developing business cases and defining traceable requirements for IT solutions.
• Technical Writing: Developing and maintaining high-quality technical documentation.

Services will be delivered using a performance-based approach with measurable standards and quality levels defined in the Performance Requirements Summary (PRS) and Quality Assurance Surveillance Plan (QASP). Key performance indicators include, but are not limited to, Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), uptime percentages, vulnerability remediation timelines, and successful change execution rates.

Not explicitly detailed in this section of the document, but implies global operations for DoDEA.

• Compliance with federal and Department of Defense cybersecurity requirements, including DoD Zero Trust, DoDI 8510.01, NIST 800-53, and DoDEA-specific mandates.
• Adherence to Zero Trust Architecture principles across all services.
• Use of Agile project management methodologies.
• Security clearance requirements for all assigned personnel.
• Contractors may be required to support outdated, customized, or mission-critical systems.
• Government Furnished Property/Equipment (GFP/GFE) will be provided as appropriate.

Request for Information (RFI) / Sources Sought

This RFI is issued by the Department of Defense Education Activity (DoDEA) for market research purposes to assess the capability of Small Businesses to provide global Information Technology Support Services (ITSS). The RFI is not a solicitation, and no contract will be awarded from this announcement. It aims to help DoDEA determine appropriate acquisition and competition strategies.

DoDEA requires integrated support across the following functional areas:

• Security Operations Center (SOC) (24x7 Tier 1-3 operations)
• DevSecOps & Cloud-Native Application Development
• Enterprise Device Management
• Enterprise Network Operations Center (NOC)
• CloudOps (Google Workspace & Microsoft Azure)
• Agile Project Management
• Business Case & Requirements Analysis
• Technical Writing & Documentation

This RFI is for planning purposes only. No contract will be awarded from this announcement.

• Responses are due within 10 business days of the posting date on SAM.gov.
• Submissions must be in PDF format, with a maximum of 15 pages for the narrative response (excluding cover page, table of contents, and optional attachments).
• Respondents must answer 19 structured questions covering corporate capabilities, program management, SOC support, DevSecOps, device management, NOC support, CloudOps, Agile PM, business case analysis, technical writing, staffing, clearances, and IT certifications.
• Optional attachments include a Capability Matrix, Corporate Experience Summary Table, Proposed Organizational Structure Chart, Key Personnel Matrix, and Risk Mitigation Summary.

This RFI is strictly for market research to assess Small Business market capability. Set-aside consideration is for Small Businesses & Small Business Joint Ventures. Respondents must identify their small business category.

• The Draft Performance Work Statement (PWS) outlines outcome-based objectives, performance standards, and Acceptable Quality Levels (AQLs).
• Respondents may submit "Points of Clarification" not to exceed two (2) pages if any aspect of the RFI appears unclear. These will be noted but will not result in a Q&A process.
• The government will not reimburse respondents for the cost of preparation.