This is a sources sought notice for the maintenance, enhancement, and expansion of the U. S. Marine Corps' Insider Threat Program monitoring tool. The requirement includes fielding, operating, enhancing, expanding, and sustaining a comprehensive insider threat monitoring system, which comprises User Activity Monitoring (UAM), a Behavioral Analytics Platform, and a Case Management System. The contractor will be responsible for technical deployment, infrastructure sustainment, and secure operation of these capabilities across the Marine Corps Enterprise Network (MCEN) on the Nonclassified Internet Protocol Router Network (NIPRNet). Key tasks include continuous vulnerability management, cybersecurity services for the Risk Management Framework (RMF) process, system administration, software engineering, hardware support, and network engineering. The contract period is a twelve-month base year plus four twelve-month option years. Contractor personnel require a TS/SCI clearance and specific cybersecurity certifications. The primary worksite will be in Arlington, VA, with potential travel to other Marine Corps bases. Responses are due by May 29, 2026, 10:00 AM EST.
The draft Performance Work Statement (PWS) indicates that deliverables such as hardware, software, and required support are due 30 days after the award of the contract and must be maintained for the life of the contract. Specific deliverables like the engineering and implementation plan, and the assessment and authorization package are also due 30 days after award. User guides and technical documentation for system administrators are due 30 days after award and must be maintained throughout the life of the contract. User training is to be provided 30 days after award and upon request when new employees are identified. Monthly reports are due every 30 days.
The bid notice does not explicitly state the payment terms. However, it mentions that for cost and time and materials (T&M) CLINs, funding status will be addressed, and for incrementally funded fixed-price CLINs, funding status will also be addressed. Invoice submission and payment status will be discussed during contract status meetings.
The bid notice does not explicitly mention warranty terms for the products or services. However, it does state that the contractor shall provide dedicated lifecycle support for the Next-Generation Firewall (NGFW) infrastructure and execute return merchandise authorization (RMA) processes with original equipment manufacturers for warranty replacements.
The bid notice does not specify the award criterion. It is a sources sought notice for informational purposes and not a request for proposal or quote.
All contractor personnel are required to possess a TS/SCI clearance, must possess and maintain all training and certification required of a MCEN privileged user, and execute a non-disclosure agreement (NDA). All contractor personnel must possess a final favorable T5 investigation and hold the appropriate DoD **** (formerly ****) cyber workforce certification at the time of award.
The bid notice does not explicitly detail penalties for non-compliance or failure to meet requirements.
The bid notice does not mention any site visit requirements.
The bid notice does not mention any requirement for sample submission.
The bid notice does not specify a deadline for challenging the bid or its terms.
The bid notice does not explicitly outline disqualification risks. However, it does state that contractor personnel must maintain required clearances and certifications, and failure to do so could impact performance.
The bid notice does not provide an estimated total value for this requirement.