CSO - USTRANSCOM Information Technology (IT) Enterprise Modernization (ITEM) Solutions

USTRANSCOM's Commercial Solutions Opening (CSO) Call 002 seeks innovative commercial solutions for Zero Trust Enterprise Modernization and Optimization, specifically focusing on a secure, cloud-enabled Contract File Management Solution. This initiative supports the DoD's Combined Joint All-Domain Command and Control (CJADC2) strategy and aligns with the DoD Zero Trust Strategy. The required solution must replace legacy tools, provide comprehensive Contract Lifecycle Management, and comply with DoD Zero Trust Architecture (ZTA) requirements, including 91 Target Level activities and 61 Advanced Level capabilities. It must be deployable across UNCLASSIFIED environments, terrestrial data centers, and multiple cloud platforms (Azure, AWS, On-premises) at impact level 5 (IL5), be cloud-agnostic, and support agile deployment. Key functionalities include automated workflows, secure document management, comprehensive reporting, multi-factor authentication, granular access control, secure handling of CUI and PII, robust APIs, continuous security monitoring, and regulatory compliance. Submissions for Phase I, including a PowerPoint briefing and white paper, are due by November 3, 2025.

USTRANSCOM's Commercial Solutions Opening (CSO) Call 002 seeks innovative Zero Trust (ZT) solutions for enterprise modernization, aligning with the DoD's CJADC2 strategy and ZT initiatives. The primary focus is on Area of Interest (AoI) 1: a secure, cloud-enabled contract file management solution to replace legacy tools. This solution must adhere to Zero Trust Architecture (ZTA) principles, supporting 91 Target Level and 61 Advanced Level ZT capabilities, deployable across UNCLASSIFIED environments (terrestrial, Azure, AWS, on-premises) at impact level 5 (IL5), be cloud-agnostic, and possess DoD provisional authorization. Key functionalities include automated workflows, secure document management, comprehensive reporting, MFA, RBAC/ABAC, secure handling of CUI/PII, robust APIs, continuous security monitoring, and regulatory compliance (FAR, DFARS, NARA, Section 508). USTRANSCOM requires complete, mature solutions for Phase I submissions (PowerPoint briefing, white paper, and Rough Order of Magnitude) by November 5, 2025. Questions are due by October 22, 2025.

TRANSCOM is seeking a comprehensive Contract File Management Solution (CFMS) with full Contract Lifecycle Management (CLM) capabilities, excluding contract writing. The solution must support approximately 250 users, scalable to 1,500 annual contract actions, and migrate 2TB of legacy data. Key requirements include an Impact Level 5 (IL5) authorized Unclassified GovCloud (UGC) deployment, a documented portability plan for multi-cloud, and integration with existing TRANSCOM systems like Advana and PIEE. Zero Trust principles are paramount, requiring Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC) with CAC/PIV, and Attribute-Based Access Control (ABAC) based on user role and data classification (CUI/PII). The system needs secure document management with major/minor versioning, redlining, and collaborative editing. Automated routing and approval workflows are critical. Continuous monitoring aligned with DoD ISCM and RMF controls, with audit logs sent to Elastic and Splunk, is required. The anticipated start is FY26, with a target operational date of June 1, 2026. A 30-day MVP standup, including accreditation, is expected, leveraging standard COTS configurations. The government will retain IP rights over configuration and data.

TRANSCOM seeks an end-to-end Contract File Management (CFM) and Contract Lifecycle Management (CLM) solution, with an anticipated start in FY26, for approximately 250 users. The scope for Area of Interest 1 is full contract lifecycle management, from intake through closeout. The solution must be IL5 compliant, cloud-agnostic (initially targeting AWS), and integrate with existing systems like PIEE and Advana. Key requirements include automated workflows for routing and approvals, secure document management with major/minor versioning and collaborative editing, and support for CUI/PII tagging. Zero Trust principles, including MFA, RBAC, secure APIs, and data governance, will be evaluated. A train-the-trainer model is acceptable for user roles, and in-app contract editing is preferred. The solution must support 2TB of legacy data migration and 1,000-1,500 annual contract actions. It must have an RPO of 1 hour, RTO of 4 hours, and 99.9% availability during business hours. A 30-day MVP deployment goal requires standard COTS configurations. The deadline for the new solution to be operational is June 1, 2026.