Virtual Machine (VM) Environment Development
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Naval Supply Systems Command (NAVSUP) Fleet Logistics Center San Diego (FLCSD), on behalf of the Naval Postgraduate School (NPS) and NATO School Oberammergau (NSO), has issued a Request for Quotation (RFQ) for Virtual Machine (VM) Development for NATO Cybersecurity Courses. This Total Small Business Set-Aside opportunity seeks to establish robust, browser-based, hands-on training environments for NATO personnel. Quotes are due by February 9, 2026, at 9:00 AM Pacific Standard Time (PST).
Purpose & Scope
The requirement is for the development and deployment of replicated, remotely accessible VM environments to host hands-on exercises for various cybersecurity courses, including Network Security, Software Reverse Engineering, Mobile Applications, and Machine Learning & AI for Cyber Applications. The solution must be browser-based, requiring no software downloads for students or faculty, and support up to 60 concurrent students per course iteration, with up to six courses running in parallel. Key deliverables include tailored VM environments, instructional/student guides, exported VMs in OVA format, and web-based user interfaces. The contractor will also provide Subject Matter Expert (SME) support during in-class resident weeks (immediate to 30-minute response) and email support during non-in-class weeks (8-hour response). Contractor-hosted environments are preferred, with data centers located in Germany to minimize latency (target <=90ms to NSO). All personnel must be U.S. Citizens.
Contract Details
This is a Firm-Fixed-Price (FFP) commercial contract issued under Federal Acquisition Regulation (FAR) Subpart 13.5 (Simplified Procedures). The Period of Performance includes a one 12-month base period (March 31, 2026 - March 30, 2027) and four 12-month option periods, extending through March 30, 2031. The requirement is a Total Small Business Set-Aside (FAR 19.5) under NAICS code 611710 (Educational Support Services). The place of performance is the contractor's site, with potential annual travel to NATO School Oberammergau, Germany.
Submission & Evaluation
Quotes must be submitted via email to the contract specialist by February 9, 2026, at 9:00 AM PST. Questions regarding the solicitation are due three business days prior to the quote submission deadline, by 1:00 PM PST. The evaluation will follow a tradeoff source selection process, considering Factor I: Technical (Technical Approach and Subject Matter Experience), Factor II: Past Performance, and Factor III: Price. Technical factors are significantly more important than price. Offerors must complete the "OFFEROR’S PAST PERFORMANCE DATA" form (Attachment 2) and use the provided pricing sheet (Attachment 1) for their proposals.
Key Clarifications
Recent clarifications emphasize that vendors must provide their own training platform, as the incumbent's HOTZone environment is proprietary. The solution must be platform-agnostic, but capable of supporting Ubuntu 24.04 LTS images. Student environments require isolation and specific network segmentation. A help desk SME should be available by phone during European working hours for the first and last weeks of courses. Contractors must be prepared to deliver OVAs and configuration files at the end of the Period of Performance.