Scout

DISA-OTA-26-R-SMDC

Area of Interest (AOI) for Secure Mobile Device Communications (SMDC) Prototype Other Transaction (OT)

DEPT OF DEFENSE > DEFENSE INFORMATION SYSTEMS AGENCY (DISA) > IT CONTRACTING DIVISION - PL84

Rejected
Actions
Open SAM.gov
Notice Type Solicitation
Due 2026-04-20
Posted 2026-04-02
NAICS 541519
PSC DA01
Set-aside None listed
Scout Score 66

Quick analysis

DISA AOI seeks a CSfC-compliant secure mobile retransmission device integrated into a phone sleeve/case, with strict NIAP/CSfC, ITAR-domestic manufacturing, Section 889, and CMMC L2 pre-award requirements.

Trace has strong alignment via CSfC and NSA Trusted Integrator credentials and DISA past performance (e.g., MPE-S prime; GSM-O sub), but will likely need a hardware manufacturing partner to meet NIAP component usage and ITAR domestic build.

Prototype scope is modest (≈20 devices over ~6 months; $500–$850K) with a high-value pathway to sole-source follow-on production if successful, making this strategically attractive.

Compliance risks include unconfirmed CMMC Level 2 status and the need for an IL6/FedRAMP High management platform and ITAR manufacturing; these appear addressable via teaming and targeted preparations before award.

Scope summary

  • Deliver an inconspicuous retransmission device integrated into a sleeve/case that satisfies CSfC MACP v2.7 hardwired connection requirements (no external cables).
  • Use NIAP-validated components from the CSfC Components List; government will not accept achieving NIAP validation during the prototype.
  • ITAR-regulated domestic manufacturing and assembly; comply with the Trade Agreements Act; implement supply chain risk management.
  • Section 889(a)(1)(A)&(B) compliance for modem chips; connectivity silicon must be physically distinct from the main processor.
  • Connectivity: request for unlocked 4G/LTE (eSIM + physical SIM), CONUS/OCONUS capable, and Wi‑Fi 6E/7 support; prototype must demonstrate Wi‑Fi connectivity at minimum (noted ambiguity).
  • Optional outer VPN on the RD, if provided, must use an independent cryptographic keystore and support CNSA Suite 2.0 IPsec profile per draft PQ guidance.
  • Centralized cloud administration platform at FedRAMP High and/or DISA Impact Level 6; support OTA firmware updates, remote monitoring, automated inventory/asset tracking, and full lifecycle support including secure disposal.
  • Prototype performance target ≤6 months; anticipated budget $500K–$850K to deliver ~20 devices.
  • CMMC Level 2 (self) required pre-award and recorded in SPRS with continuous compliance; CMMC Level 3 (C3PAO) required for follow-on production.
  • Submission: Solution Brief due 20 April 2026, 11:00 a.m. CDT to the DITCO OTA inbox; ABSC form completion for prime and significant participants.

Dimension scores

Total - 66/100
Technical Fit - 16/20

Strong CSfC/NSA Trusted Integrator alignment to the requirement for CSfC MACP v2.7-compliant secure mobile communications (AOI SMDC Prototype OT.pdf). Trace’s CSfC and secure comms/SE&I capabilities fit; however, the hardware sleeve/case build with NIAP-listed components and ITAR domestic manufacturing suggests need for a manufacturing partner, tempering a perfect score (company_profile: CSfC, NSA TI, E&I facility).

Past Performance - 15/20

Direct DISA past performance (company_profile: MPE-S prime; GSM-O sub; DISA mission support) in closely related secure comms/IT domains. Same agency and adjacent mission increase credibility, though not identical OT product development work (AOI indicates DISA customer).

Vehicles / Contract Access - 6/10

Open OTA via CSO (10 U.S.C. §4022) with no set-aside and no restricted vehicle requirement (AOI). Not on a Trace-held prime vehicle, but fully accessible for submission.

Competitive Position - 9/15

Meaningful differentiators (NSA Trusted Integrator, CSfC deployments, DISA past performance) align to requirement. Competition likely includes specialized device OEMs/manufacturers meeting ITAR/NIAP constraints; no incumbent advantage noted. Net: competitive but not dominant.

Risk - 6/15

Notable execution risks: ITAR domestic manufacturing, need for NIAP-listed components at prototype (no in-prototype validation), potential ambiguity Wi‑Fi vs cellular for prototype, aggressive 6‑month schedule for 20 devices, and unconfirmed internal CMMC L2 status (AOI requirements; company_profile lacks CMMC level). Familiar customer reduces risk, but hardware/productization elevates it.

Strategic Value - 8/10

Prototype OT can lead to follow-on production without competition (AOI). Expands DISA relationship in CSfC secure mobility, reinforcing Trace’s core lanes (CSfC/secure comms) and potentially creating a productized offering with broader DoD applicability.

Compliance - 6/10

Most requirements appear addressable but with gaps/unknowns: CMMC L2 (self) required pre-award and must be in SPRS (status not confirmed in company_profile), ITAR domestic manufacturing and FedRAMP High/IL6 admin platform likely require teaming. No set-aside barriers; SAM/DUNS/CAGE standard (ABSC). Overall moderate compliance posture with teaming path.

Concerns

  • Unconfirmed internal CMMC Level 2 status required pre-award (must be in SPRS).
  • Need for ITAR domestic manufacturing and assembly; Trace may require a qualified U.S.-based manufacturing partner.
  • Requirement to use NIAP-validated components at prototype start may constrain sourcing/options and schedule.
  • Ambiguity between cellular vs Wi‑Fi for prototype demonstration could create scope misalignment unless clarified.
  • Aggressive 6‑month schedule for hardware design/integration, testing, and delivery of ~20 units.
  • Admin platform at FedRAMP High/IL6 may require partner tooling or accreditation alignment.
  • Section 889 and chip separation constraints may limit modem/vendor options and increase lead times.

Teaming opportunities

  • U.S.-based ITAR-compliant device/case manufacturer with experience integrating NIAP-listed components.
  • Supplier(s) of NIAP-validated components aligned to CSfC MACP v2.7 and CSfC Components List.
  • FedRAMP High / DoD IL6-capable device management platform partner for admin, OTA updates, monitoring, and asset tracking.
  • CMMC advisory/assessment support to ensure Level 2 (self) pre-award readiness (and Level 3 path for follow-on).
  • Wireless hardware expertise for modem/Wi‑Fi integration meeting Section 889 and chip separation requirements.
  • Test/validation partner for CSfC conformance, NIAP component verification, and DISA acceptance.

Competitive position

  • NSA Trusted Integrator with long-standing CSfC deployments reduces CSfC/NIAP integration risk and accelerates compliance.
  • DISA past performance (e.g., MPE-S prime; GSM-O sub) and mission familiarity enable faster stakeholder alignment and delivery.
  • E&I Facility for rapid integration, T&E to military standards, and production/deployment supports accelerated 6‑month prototype.
  • OCC/managed services experience positions Trace to deliver IL6/FedRAMP High-aligned lifecycle management and monitoring.
  • Proven tactical comms and multi-domain integration background strengthens solution credibility for secure mobile use cases.

Bid/No bid factors

  • CMMC Level 2 (self) must be in SPRS pre-award; Trace’s current level is not confirmed in the company profile.
  • ITAR domestic manufacturing is mandatory; internal manufacturing capability not documented—requires teaming.
  • NIAP-validated components required at prototype start; limited vendor pool could impact cost/schedule.
  • Deleted attachment noted on SAM; although a current AOI PDF is available, ensure version control before submission.
  • Prototype scope ambiguity on cellular vs Wi‑Fi demonstration; requires Q&A clarification.

Documents

Download all
AOI Attachment 1 Affirmation_of_Business_Status_Certification.pdf Download
Summary

Standard Affirmation of Business Status Certification (ABSC) form requiring each significant participating entity (and specifically the prime/lead) to provide entity identifiers, proposed NAICS, size standard, DUNS, CAGE, TIN, active SAM registration, contact information, and to certify business type (Nontraditional Defense Contractor, Nonprofit Research Institution, or Traditional Defense Contractor) with an authorized signature. This attachment is an eligibility/compliance checkbox used for prototype OT submissions and supports teaming documentation. The form does not contain technical requirements or programmatic details.

  • Requires legal entity identifiers: DUNS, CAGE, Tax ID, and active SAM registration (explicitly required for the prime/lead)
  • Asks for proposed NAICS Code and Industry Size Standard — useful to confirm alignment with solicitation NAICS (541519) and small-business status
  • Entities must declare business type: Nontraditional Defense Contractor (NDC), Nonprofit Research Institution, or Traditional Defense Contractor — NDC status affects OTA considerations
  • Signed certification required (electronic signature accepted) — formal compliance step for proposal eligibility
  • Form is intended for every significant participating entity and highlights prime/lead documentation responsibility — relevant for teaming and prime selection
AOI SMDC Prototype OT.pdf Download
Summary

DISA AOI for a prototype OT (10 U.S.C. §4022) seeking an inconspicuous Retransmission Device (RD) integrated into a sleeve/case to meet CSfC MACP v2.7 hardwired-connection requirements while restoring tactical mobility. The document defines technical, supply-chain, security, lifecycle, and certification requirements (NIAP/CSfC components, ITAR domestic manufacturing, Section 889 compliance), administrative submission details, a preferred 6-month prototype schedule, and an anticipated prototype budget of $500K–$850K to deliver ~20 devices. It also mandates CMMC Level 2 (self) in SPRS pre-award and warns that a successful prototype could lead to a follow-on production award without further competition.

  • Solicitation/AOI: DISA AOI 'Secure Mobile Device Communications' (Project DISA-OTA-26-R-SMDC; CSO Opening HC108425S0001); awarded under OT authority (10 U.S.C. §4022).
  • Submission deadline: Solution briefs due 20 April 2026, 11:00 a.m. CDT; submission inbox and Agreements Officer listed.
  • Desired form factor: all-in-one RD integrated into a sleeve/case; minimize visual signature; eliminate separate device/cable; modular to support current/future EUDs (e.g., Samsung Galaxy S25/S26).
  • Must comply with CSfC MACP v2.7 (and subsequent versions) and use components on CSfC Components List; NIAP-validated components required prior to/for prototype (Government will not accept achieving NIAP validation during prototype).
  • Supply chain/manufacturing: ITAR-regulated domestic manufacturing and assembly required; adhere to Trade Agreements Act; supply chain risk management required.
  • Modem/chip constraints: All modem chips must comply with Section 889(a)(1)(A)&(B) (NDAA FY19); connectivity chip must be physically distinct from main processor.
  • Connectivity requirements: document requests unlocked 4G/LTE supporting embedded and physical SIM, CONUS/OCONUS capability (for prototype OT language), 802.11 a/b/g/ac (Wi‑Fi 6E/7) support; notable internal note that the prototype must demonstrate Wi‑Fi connectivity only (potential ambiguity between cellular vs Wi‑Fi requirements).
  • Security features: outer VPN on RD is desired; if provided, must use a cryptographic keystore independent of the EUD and support CNSA Suite 2.0 IPSEC profile per draft PQ guidance if used.
  • Lifecycle & management: centralized cloud admin platform must be FedRAMP High and/or DISA Impact Level 6; support OTA firmware updates, remote monitoring, automated inventory/asset tracking, and full lifecycle support including secure disposal.
  • Performance & cost target: ideal prototype performance period ≤6 months; Government anticipates $500K–$850K total to deliver 20 devices over ~6 months (includes development, implementation, support).
  • Certifications & compliance: CMMC Level 2 (Self) required pre-award and must be entered in SPRS with affirmation of continuous compliance; CMMC Level 3 (C3PAO) required for follow-on production (~Nov 10, 2027).
  • Awarding note: Prototype OT may lead to follow-on production contract without competition; CSO procedures govern submissions; preference for existing, reference-verifiable commercial solutions.
  • Admin point: Submission email disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil; Agreements Officer: Joe Santel; Agreements Specialist: Ashley Fleming.
Deleted Attachments.txt Unavailable

No current live SAM.gov attachment matches this stored row.

Summary

Lists a single deleted attachment filename for the opportunity: '303300116b42409385207c51443eb318-AOI SMDC Prototype OT.pdf'. The file contains no solicitation content itself, indicating the primary AOI PDF was removed and creating an evidence gap for requirements and specs.

  • Deleted attachment filename: 303300116b42409385207c51443eb318-AOI SMDC Prototype OT.pdf
  • Indicates the original AOI/solicitation PDF was attached but has been deleted from the notice
  • No substantive solicitation text in this file — requirement/spec details are not present here
  • Creates an evidence gap that requires retrieval of the deleted PDF (e.g., from archive or vendor copies) to assess technical fit, vehicles, and requirements
Technical details

Entry: sync

Review status: Up to date

Logical upstream opportunity: 11210

Notice lineage:

  • 6f4e81a20e0b48feb0817b42d4e5f4ff (posted 2026-04-02) - current
  • 98c4a509d78f4f95ae21586d7004fd0e
  • a841949da29e4f36a3e6d6762d920c3d

Last synced: 2026-04-07T14:38:16.983776+00:00

Last analyzed: 2026-04-03T15:41:33.041332+00:00

Latest package fingerprint: 39bd6382cf86d530d1d79ee9c16bd1983896f069b946b3edc569be643f5019f1

Latest package notice: 6f4e81a20e0b48feb0817b42d4e5f4ff

Latest package documents: 3

Recent package history
  • 2026-04-03T15:39:20.594758+00:00: 6f4e81a20e0b48feb0817b42d4e5f4ff with 3 docs

Labels

Human notes

No human notes yet.

Qualification Settings

Included notice types

Scope Filters

Use one code or phrase per line, or comma-separate.

System Settings

Runtime

Custom Search

Search time

These filters apply only to this run. Qualification settings stay unchanged.

Custom Search queries Fetchmesh and stores the results in Scout without mutating the default sync configuration.

Workspace visibility

All custom searches are public for now.

Included notice types

Scope Filters

Use one code or phrase per line, or comma-separate.

Browse Searches