The Performance-Based Work Statement (PWS) outlines requirements for an Information System Security Manager (ISSM) role within the U.S. Air Force's 76 Software Engineering Group (SWEG). It emphasizes the significance of cybersecurity, detailing the ISSM's responsibilities, which include managing cybersecurity policies, ensuring compliance with federal regulations, conducting risk management, and handling incident responses. The contractor must provide four qualified ISSM personnel, with optional additional Linux specialists. Key qualifications for ISSM candidates include substantial experience in information security, federal compliance frameworks, and strong communication skills. The document also specifies service expectations, including reporting metrics, a monthly status report, and personnel updates. Security protocols, travel requirements, and a commitment to safety and health standards are emphasized throughout the PWS. The contractor's performance will be evaluated based on the presence and effectiveness of ISSM personnel, compliance adherence, and the timely completion of tasks. This PWS underscores the Air Force's commitment to maintaining robust cybersecurity measures as part of its operational integrity.

The government is seeking potential sources for Information System Security Manager (ISSM) services at Tinker Air Force Base (AFB), Oklahoma. This market survey aims to identify vendors with the expertise necessary to manage cybersecurity protocols, ensure compliance with regulations, and maintain data integrity and confidentiality. The acquisition will likely utilize a one-time purchase order contract. It emphasizes that the services required include managing the organization’s cybersecurity policies and serving as the primary authority on security processes, including risk assessment and incident response. Foreign nationals are barred from participation, and all contractor personnel must be U.S. citizens. The document includes instructions for interested parties to submit a Contractor Capability Survey detailing their qualifications, past project experience, and interest in subcontracting opportunities. It encourages collaboration between large and small businesses and outlines specific capabilities needed, such as technical data generation and quality assurance processes. Responses must be submitted by March 18, 2025, to the designated contacts. The market survey serves strictly for planning, and does not guarantee future contract opportunities for those who respond.