Arctic Submarine Laboratory (ASL) - Cyber Security Engineering, test and evaluation, and Risk Management Framework (RMF)

The Arctic Submarine Laboratory (ASL), under NAVSUP Fleet Logistics Center Pearl Harbor, is seeking cyber security engineering, test and evaluation, and Risk Management Framework (RMF) support services to sustain Continuous Monitoring and execute the mandated migration to RMF Revision 5 (NIST SP 800-53 Rev. 5) for the Virginia Ice Capability Equipment (VICE) and Seawolf Arctic TEMPALT (SEAWOLF/LA-Class) systems. This requirement is structured as a Firm Fixed Price contract for a 12-month period, running from July 9, 2026, to July 8, 2027, with performance to occur at ASL’s facility in San Diego, California. The work includes developing and updating documentation for Assess & Authorize and Assess Only packages, maintaining eMASS records, refining hardware and software configurations, and ensuring alignment with DON RMF Process Guide, DoD Instruction 8510.01, and NAVSEA Business Rules. The solicitation is issued under FAR Part 12 and is a Total Small Business Set-Aside under NAICS Code 541512, restricted to Small Business, HUBZone Small Business, and Service-Disabled Veteran-Owned Small Business (SDVOSB) concerns. All offerors must register and maintain active status in the System for Award Management (SAM), comply with CMMC requirements for handling Federal Contract Information or Controlled Unclassified Information, and adhere to flow-down obligations as outlined in 32 CFR 170.23. Proposals must include a detailed technical capability statement, staffing plan, quality control plan, business information including CAGE code and socio-economic status, and a price proposal with clear unit and total costs broken down by overhead, general and administrative expenses, and profit. Offerors are subject to numerous FAR and DFARS clauses, including those covering employment eligibility, combating trafficking, executive compensation reporting, and cloud computing representation, with deviations applied to several clauses effective February and April 2026. The offer due date is July 2, 2026, at 4:00 PM Hawaiian Standard Time, and submissions must be directed to Dawit Gebreyesus at the designated Navy email address. Payment will be processed via Wide Area Workflow (WAWF), with invoice types specified based on service categorization, and technical acceptance is delegated to Joseph C. Hardy, Engineering Department Head, at the San Diego location.