DEPT OF DEFENSE · DEPT OF THE ARMY · W6QM MICC-CARLISLE BARRACKS
This solicitation seeks specialized commercial services to design, implement, and operationalize the Microsoft Sentinel platform for the Department of Defense. Key requirements include NIST SP 800-53 compliance, onboarding 350 endpoints, and achieving a 98% data ingestion success rate. [1][2]
Microsoft Sentinel Implementation Services The awarded vendor shall: + Conduct a Discovery Phase to assess the current environment, validate requirements, and document data sources. + Develop a detailed Solution Design Document (SDD) for Microsoft Sentinel, including architecture diagrams, data source integration, analytics and detection use cases, automation and incident response design, and reporting specifications. + Implement and configure Microsoft Sentinel, including: - Onboarding of approximately 350 Intune-managed endpoints - Integration with Microsoft Entra ID, Intune, Defender, and M365 audit logs - Configuration of analytics rules, incident workflows, automation playbooks, dashboa
Set-aside: Small Business Set Aside - Total
Generated from the public notice and source-backed solicitation passages. Confirm important requirements in the cited brief and official documents.
This right does not abrogate any other Government rights. ## 1.16 Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be averse to the interests of the Government or others.
RESERVED **1.23.8 Additional Training Requirements:** Contractor shall accomplish any additional training that the Department of Defense, Department of the Army, local commanders may determine necessary for personnel working on military installations or working with military personnel (not to exceed 10 hours of instruction per contract). ## 1.24 Government Property and Services: RESERVED # PART 2 DEFINITIONS & ACRONYMS **2.
Microsoft Sentinel Implementation Services The awarded vendor shall: + Conduct a Discovery Phase to assess the current environment, validate requirements, and document data sources. + Develop a detailed Solution Design Document (SDD) for Microsoft Sentinel, including architecture diagrams, data source integration, analytics and detection use cases, automation and incident response design, and reporting specifications. + Implement and configure Microsoft Sentinel, including: - Onboarding of approximately 350 Intune-managed endpoints - Integration with Microsoft Entra ID, Intune, Defender, and M365 audit logs - Configuration of analytics rules, incident workflows, automation playbooks, dashboards, and reporting + Provide knowledge transfer and administrator training to AU/USAWC personnel. + Deliver all documentation, including build documentation, operational guides, and runbooks. # Performance Requirements * The solution must align with NIST SP 800-53 and OMB M-21-31 event logging mandates. * The contractor shall ensure at least a 98% data ingestion success rate for all specified endpoints and data sources. * All deliverables must be provided in digital format and approved by the Government. * The contractor shall provide monthly and quarterly performance and ticketing reports during the managed services period. * Service Level Objectives: + Critical incidents: 30 min response, 24 hr resolution + High: 1 hr response, 48 hr resolution + Medium/Low: 8 hr response, 48 hr resolution # Vendor Qualifications * The contractor must be a Microsoft Solution Partner and Tier-1 (Direct-Bill) Cloud Solution Provider (CSP). * The contractor must have experience with DoD, NIST, and federal compliance. * The contractor must be registered and active in SAM.gov. # Delivery and Support * All services shall be delivered remotely unless otherwise specified. * The contractor shall coordinate with USAWC IT personnel for deployment and activation. * All onboarding, configuration, and documentation must be completed within the agreed project schedule. # Security & Compliance * The solution must support secure identity, MFA, and comply with DoD and NIST SP 800-53 requirements. * All data residency and support must be within CONUS. * All monitoring and response activities must align with CJIS, NIST, CMMC, and HIPAA frameworks.
Pricing shall be provided on the provided Excel spreadsheet template. (End of 52.212-1 addendum, please continue to 52.212-2) # **ADDENDUM TO 52.212-2** **EVALUATION – COMMERCIAL ITEMS (Oct 2014)** EVALUATION FACTORS FOR AWARD All personnel shall meet the required qualifications listed below.
SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED REQUEST FOR QUOTE (RFQ) INVITATION FOR BID (IFB) REQUEST FOR PROPOSAL (RFP) SEE ADDENDUM 19.
Set-aside: Small Business Set Aside - Total
PA, 17013, USA
Posted Aug 28, 2026; Responses due Sep 8, 2026, 11:00 AM UTC; Archive date Sep 23, 2026
Extracted from the official notice and archived solicitation files. Confirm controlling requirements in the source documents.
This requirement is for the procurement of highly specialized commercial professional services to design, implement, and operationalize the Microsoft Sentinel platform. These services require intimate and expert-level knowledge of USAWC's specific Microsoft 365 A5 licensing and security configuration. The critical performance requirements for this acquisition center on the successful implementation of a fully operational security platform. The contractor must design a system that complies with NIST SP 800-53 and OMB M- 21-31 event logging mandates. The contractor shall successfully onboard approximately 350 endpoints and all specified M365 data sources, ensuring at least a 98% data ingestion success rate. The contractor must also deliver comprehensive training and "as-built" documentation to ensure Government self-sufficiency. Please see attached documents for further details and instructions on submitting your quote.
Open a filename to view the saved source file. If a saved copy is not available yet, FedRoster will continue to the matching SAM.gov notice.