DA10--Capital Assets and Facility Management Software and Support I Akaka VA (VA-26-00020638)

This solicitation, identified as RFQ 36C10B26Q0211, is a sources-sought notice issued by the Department of Veterans Affairs through the NASA SEWP V GWAC portal to gather market information for a Capital Assets and Facility Management Software and Support effort under a Service-Disabled Veteran-Owned Small Business (SDVOSB) set-aside. The procurement targets vendors offering cloud-based software solutions to support VA’s Capital Assets and Facilities Maintenance needs, with performance scope encompassing system development, deployment, sustained operations, security compliance, and ongoing maintenance. Key deliverables include a 3PAO Security Assessment Report, monthly continuous monitoring scans, Plan of Action and Milestones reports, inventory tracking, and a master delivery schedule aligned with VA’s technical and security frameworks. The effort requires adherence to FedRAMP, NIST, FISMA, Section 508, VA Handbook 6500, and Zero Trust architecture standards, with strict mandates for Software Bill of Materials in NTIA-compliant format, tamper-evident packaging, chain-of-custody documentation, and compliance with FAR 52.223-23 for sustainable procurement. All software and systems must be free of malware, updated with security patches within 30 business days, and deployed under VA Authority to Operate protocols. The contract imposes rigorous cybersecurity and personnel access controls, requiring all personnel with system access to hold appropriate security clearances, comply with VA Directive 0710 and NISPOM, and sign the VA Information Security Rule of Behavior. Use of personal or unapproved contractor-owned devices is strictly prohibited, and any change in personnel status must be reported within 24 hours, with immediate revocation of system access upon separation. The solicitation prohibits transactions involving Information and Communications Technology from foreign adversaries and restricts use of VA data to authorized purposes only, with all record requests requiring CO-level approval. Submissions are limited to email attachments of no more than 5 MB, with a required 5-page technical summary and specific subject line formatting. Responses are due by March 5, 2026, at noon Eastern Time, and must include a Unique Entity Identifier (UEI) along with business size and socioeconomic status certifications, particularly confirming SDVOSB eligibility and expenditure of at least 50% of performance costs on qualified entities. The contract type remains undefined, as this is a market research RFI preceding formal award, and no contract value, payment details,