Solicitation
Area of Interest (AOI) for User Activity Monitoring (UAM) Centralization Prototype Other Transaction (OT)
Dept of Defense · Defense Information Systems Agency (DISA) · Sol. DISA-OTA-27-R-UAM
Due in 12 days
Track this notice by email. We'll email you if it's amended or awarded, and a week and two days before responses are due.
AI summary Beta
Some details weren't available to this summary, so it may miss requirements. Check the attachments on SAM.gov.
The Defense Information Systems Agency (DISA) wants prototypes of one central, multi-tenant User Activity Monitoring (UAM) system that watches what users do on Government devices to detect insider threats. It would replace many separate agency-run UAM tools, first on SIPRNet (the secret network). Work would be done under an Other Transaction (OT) prototype agreement rather than a regular FAR contract, and DISA prefers a performance period of 3 months or less.
Watch out for
- Classified-network work. The system must run on SIPRNet and may later extend to JWICS and SAP networks, which likely means cleared people and facilities, though the notice does not spell out clearance requirements.
This UAM capability will be provided on the SIPRNet with the
- Government wants unlimited data rights. The Government requires unlimited rights to the technical data package and all software developed under the program, which may conflict with a small company's proprietary code.
the U.S. Government requires Unlimited Data Rights to the
- Key requirements file is restricted. Attachment 1 (Desired Solution Attributes) is controlled and needs access requested on SAM.gov, so the detailed technical requirements could not be read for this brief.
- Short deadline. Solution briefs are due 22 October 2026, about two weeks after posting, and the system covers a large, complex security scope.
- Stricter cybersecurity rules may follow. A higher-level certification such as a C3PAO assessment may be required for any follow-on production award, so plan for that cost.
Be advised that a higher-level certification, such as a C3PAO assessment, may be required for
- Production follow-on can be awarded without competition. A successful prototype may lead to a non-competitive production award that could be significantly larger, which is an upside for the winner but means losing the prototype shuts you out.
Read from the notice and 2 attachments. 1 not read in full.
- AOI - UAM.pdf
- Attachment 2 Affirmation_of_Business_Status_Certification.pdf
- Attachment 1 - Desired Solution Attributes.pdf: controlled: request access on SAM.gov
Full brief
What they want
- A centralized, multi-tenant UAM prototype where each organization keeps strict control and isolation of its own data, policies, triggers, reports and dashboards
- A hybrid cloud and on-premises solution that uses AI and/or machine learning
- Initial deployment on SIPRNet, able to grow to NIPRNet, SAP and JWICS networks later
- Support for both CONUS and OCONUS locations
- Features that reduce labor and hardware needs and make it easier to create and update policies at the organization level
- Capabilities listed in Attachment 1 (Desired Solution Attributes) and Appendix A (Standards, References and Policies)
- Contract type
- Prototype Other Transaction (OT) agreement under 10 U.S.C. 4022, awarded through a Commercial Solutions Opening (CSO); not subject to the FAR
- Period of performance
- Not fixed; performance periods of 3 months or less are preferred, but all periods are welcome
- Place of performance
- Fort George G Meade, MD, USA (per notice); solution must cover CONUS and OCONUS locations
- Contract vehicle
- DISA Commercial Solutions Opening HC108425S0001 (Area of Interest DISA-OTA-27-R-UAM)
- How they'll choose
- Not described in detail. Each submission is evaluated on its merits under the CSO procedures; no scoring formula is given in the AOI.
- Offers due
- 22 October 2026, 5:00 p.m., CDT (Solution Briefs)
- How to submit
- Email the solution brief to the DITCO OTA Team at disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil
What they'll judge offers on
- Merits of the solution
- Innovation
- Feasibility
- Potential to rapidly enhance warfighter capability and mission readiness
What to include when you submit
- Follow paragraph 5 of the AOI and CSO sections 3.1 (General Guidelines) and 3.2 (Phase 1 Solution Briefs)
- Include the signed Affirmation of Business Status Certification (Attachment 2) for each significant participating entity
- The submission must reach the Agreements Officer's inbox before the deadline; late submissions are not evaluated
- Address the Desired Solution Attributes (Attachment 1) and Appendix A
You must have
- Current NIST SP 800-171 self-assessment posted in the Supplier Performance Risk System (SPRS); you pay for any work needed to reach and keep compliance
To be eligible for award, performers must have a current NIST SP 800-171 self-assessment
- Active SAM registration, CAGE code, tax ID and entity details listed on the Affirmation of Business Status Certification (required for the prime/lead)
*Active SAM Registration Yes No Expiration Date:
- State whether you are a Nontraditional Defense Contractor, nonprofit research institution or traditional defense contractor on the certification
The Entity named above represents that it is (check one of the following boxes):
- A voluntary third-party (C3PAO) cybersecurity assessment is not required but may be viewed more favorably; a higher-level certification may be required for any follow-on production
Be advised that a higher-level certification, such as a C3PAO assessment, may be required for
Not in the notice text
- Detailed technical requirements in Attachment 1 (Desired Solution Attributes), which was not provided
- Appendix A - Standards, References and Policies content
- Estimated budget or value of the prototype
- Clearance or facility clearance requirements for the team
- Page limits and format for the solution brief (only said to be in the CSO)
- Detailed evaluation criteria and their order of importance (in the CSO, not in these files)
Is this a fit for your business?
Create a free accountFedReady checks notices like this against your business profile, tracks deadlines, and alerts you to new matches. Creating an account is free.
Key facts
- Response due
- Oct 22, 2026, 10:00 PM UTC
- Posted
- Oct 8, 2026
- Notice type
- Solicitation
- Solicitation
- DISA-OTA-27-R-UAM
- Agency
- Dept of Defense · Defense Information Systems Agency (DISA)
- Office
- It Contracting Division - PL84
- NAICS
- 541519
- Product/service code
- DA01
- Business type
- IT, software & telecom
- Place of performance
- Fort George G Meade, MD
- Contracting contact
- DITCO OTA Mailboxdisa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil
- Versions
- 2 (amended since first posted)
What similar contracts paid
3,497 contracts at this agency under the same NAICS code, in the same state, had activity in the last 5 years, according to USAspending.gov. Small businesses won 45% of the dollars in this market over the last 3 fiscal years.
Typical contract$108KMiddle half: $20.7K to $761K
Typical per year$85.8KValue divided by years of performance
Possible incumbent's contract endsSep 2027A similar contract in this state, ending near when this one starts
Before you respond
Full notice text from SAM.gov
The Defense Information Systems Agency seeks prototypes for a centralized, multi-tenant User Activity Monitoring solution to enhance cybersecurity across the Department of War. This effort aims to replace the current fractured UAM environment with a modern, scalable, and efficient capability. Interested parties are encouraged to review the full Area of Interest solicitation for detailed requirements.
Similar open opportunities
- PANEL PC, IN REPAIR/MODIFICATION OFNAVSUP Weapon Systems Support Mechanicsburg plans to buy repair or modification of one PANEL PC (NSN 7H-7025-016924379), delivered to DLA Distribution in New Cumberland, PA. It…
- CONVERTER,ANALOG TO
- (New Action): VA Procurement Policy Documentation Control Software (VA-27-00008195)The VA Office of Procurement Policy is asking vendors (a Request for Information, not a solicitation) about a document control system for Standard Operating Procedures, forms and…
- Qgenda On-call Full Range (FR) Scheduling Software (VA-27-00011101)The Department of Veterans Affairs (Technology Acquisition Center) is asking vendors for information about supplying brand name QGenda On-Call Full Range, a clinical scheduling…
- Travel Management Office (TMO) Travel Program (Defense Travel System (DTS) & Government Travel Charge Card (GTCC)) and Mail Management Center (MMC) Technical and Administrative Support Services.Navy Strategic Systems Programs (SSP) is doing market research for Travel Management Office support (Defense Travel System and government travel charge card) and Mail Management…