Communication Managerial Security Support Services - Colombia (CO-D-GAK)

This contract supports Communication Security (COMSEC) custodian services for the Colombian Joint Staff under Foreign Military Sales (FMS) case CO-D-GAK, with a five-year performance period from August 1, 2026, through July 31, 2031. It is a non-personal services contract requiring the contractor to provide comprehensive managerial and operational support for COMSEC materials, including strict control of keying material, safeguarding and issuance to cleared individuals, incident reporting in accordance with NSA manuals, and implementation of an emergency destruction plan compliant with NSA CSS Policy Manual 3-16. The scope encompasses housing and utilities for personnel, mobilization and demobilization, travel expenses, and other direct costs tied to the Performance Work Statement, with all funding subject to not-to-exceed or non-separately priced line items. The contract is set aside exclusively for small businesses under NAICS code 541513 and requires full compliance with the System for Award Management (SAM), including current representations, certifications, and entity registration with a CAGE code and UEI. The contractor must maintain Cybersecurity Maturity Model Certification (CMMC) compliance, flow down CMMC requirements to subcontractors, and affirm annually in the Supplier Performance Risk System. Personnel must hold Common Access Cards for DoD system access, U.S. nationals must register with the U.S. Embassy in Colombia, and third-country nationals must adhere to their home country’s embassy security requirements. The contract mandates monthly performance reporting and invoice certification through Wide Area WorkFlow (WAWF), with acceptance occurring after receipt of the contractor’s monthly report and COR certification. All proposals must be submitted via SAM.gov by June 29, 2026, in specified Microsoft Office formats, with the price proposal specifically required in editable Excel 2016. Evaluation will be on a tradeoff basis, prioritizing technical merit over past performance and price, with technical sub-factors rated pass/fail—unacceptable ratings disqualify offers. The contract includes mandatory clauses for anti-kickback, gratuities, contingent fee restrictions, cybersecurity, supply chain risk, NIST SP 800-171 requirements, and DX-rated priority for national defense use. Performance will occur primarily in Colombia, with administrative oversight handled by AFLCMC/HNCCPF in San Antonio, Texas, and all invoices processed through the DoDAAC F2MTN7 payment office.