# MDMC Digital Depot - Requirements Matrix

- Company: IAMUS CONSULTING, INC
- SAM URL: https://sam.gov/opp/3da441ff651e44c0af213498680dc003

This solicitation includes 23 required obligations and 1 attachment-derived requirements.

## Matrix Summary
- Requirements: 23
- Sections: 7
- Evidence confidence: Moderate confidence
- Mandatory: 23
- Hidden: 1

## What to Verify Before Drafting Starts
- Due date: Submit the proposal by 2026-04-16.
- Submission method: Quoters must submit their response to the RFQ via email to morris.t.childre.civ@usmc.mil, alicia.l.davis.civ@usmc.mil, and matthew.radi@usmc.mil no later than the date posted on SAM.gov.
- Pricing sheet: Rates quoted in Attachment 3 must be fully burdened. Quoters must state whether labor categories are subject to SCLS and provide the applicable occupation code.
- Exceptions: Quoters must include a specific certification statement in their quote indicating whether they are taking any exception, deviation, or requesting a waiver from any terms or conditions of the RFQ.

## Requirements by Section

### Security / Privacy
- Requirement: Quoters must include a specific certification statement in their quote indicating whether they are taking any exception, deviation, or requesting a waiver from any terms or conditions of the RFQ.
  - Obligation: Required
  - What to prepare: Certifications
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.21
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 21
  - Relevant passage: If an Quoter is taking any exception the Quoter shall complete and submit with its quote the certification using the following language: "I, (Name and Title), certify that: 1) I am an official authorized to bind the entity; and 2) I further certify that (Insert Entity Name) is taking exception to" If an Quoter is not taking any exception
  - Evidence confidence: Moderate confidence
- Requirement: Quoters must submit a 1-page Letter of Intent (LOI)/resume for each key and non-key personnel. Resumes must include Education, Experience, Certification, and Security Level. Key personnel must meet PWS 1.5.7 requirements.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: Evaluation - Commercial Products and Commercial Services · p.24
  - Source document: D1_M6700426Q0016.pdf
  - Section: Evaluation - Commercial Products and Commercial Services
  - Page: 24
  - Relevant passage: Quoters must submit a 1-page Letter of Intent (LOI)/resume for each key and non-key personnel. Resumes must include Education, Experience, Certification, and Security Level. Key personnel must meet PWS 1.5.7 requirements.
  - Evidence confidence: Moderate confidence
- Requirement: Quoters must submit an Implementation Plan addressing PWS paragraphs 4.1 through 4.5, demonstrating knowledge and understanding of Project Management, Environments, Post Deployment System Support, Cloud Support, and Cybersecurity Support.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: Evaluation - Commercial Products and Commercial Services · p.24
  - Source document: D1_M6700426Q0016.pdf
  - Section: Evaluation - Commercial Products and Commercial Services
  - Page: 24
  - Relevant passage: Quoters shall submit an Implementation Plan for PWS paragraphs and subparagraphs for 4.1 - 4.57 which shall demonstrate their knowledge and understanding of the PWS requirements The Quoter shall explain how they plan to perform, manage, and address the effort of PWS paragraph 4.1 4.2 4.3 4.4
  - Evidence confidence: Moderate confidence
- Requirement: The Project Manager must possess a Bachelor's degree, 10+ years of supervisory experience, and 2+ years of IT system project experience; the Cybersecurity Information Security Analyst must possess a Bachelor's degree with 6+ years of USMC RMF experience (or 8+ years without a degree), CISSP or equivalent DoD 8570 certification, USMC IC4 Validator certification, and a Secret clearance.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: 1.5.7 Staffing and Key Personnel · p.6
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 1.5.7 Staffing and Key Personnel
  - Page: 6
  - Relevant passage: Project Manager Bachelor’s degree. 10+ years supervisor experience Cybersecurity Information Security Analyst Bachelor’s degree in computer science, or other relevant degree with 6+ years USMC Risk Management Framework experience or no degree with 8+ years Certified Information Systems Security Professional (CISSP) or equivalent DoW 8570 certification. Certified as a validator by USMC Information, Command, Control, Communications, and Computers (IC4).
  - Evidence confidence: Moderate confidence
- Requirement: The Contractor must maintain Capability Maturity Model Integration (CMMI) Level 3 certification (or greater) at no cost to the Government and ensure CMMI Level 3 practices are followed and documented.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: 4.1 Project Management · p.16
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 4.1 Project Management
  - Page: 16
  - Relevant passage: 4.1.5 Contractor shall maintain Capability Maturity Model Integration (CMMI) Level 3 certification (and other superseding Levels/guidance) at no cost to the Government and ensure CMMI Level 3 practices are followed and documented.
  - Evidence confidence: Moderate confidence
- Requirement: The Contractor must obtain monthly Assured Compliance Assessment Solution (ACAS) scans and remediate vulnerabilities within specified timeframes: Critical (2 business days test/4 business days prod), High (5 business days test/7 business days prod), Moderate (25 business days test/30 business days prod), and Low (35 business days test/40 business days prod).
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: 4.3 Post Deployment System Support (PDSS) · p.18
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 4.3 Post Deployment System Support (PDSS)
  - Page: 18
  - Relevant passage: The Contractor must obtain monthly Assured Compliance Assessment Solution (ACAS) scans and remediate vulnerabilities within specified timeframes: Critical (2 business days test/4 business days prod), High (5 business days test/7 business days prod), Moderate (25 business days test/30 business days prod), and Low (35 business days test/40 business days prod).
  - Evidence confidence: Moderate confidence
- Requirement: The Offeror must complete the representations at DFARS 252.204-7016 and 252.204-7017 regarding covered defense telecommunications equipment or services.
  - Obligation: Required
  - What to prepare: Certifications
  - Row confidence: Moderate confidence
  - Citation: DFARS Clauses Incorporated by Full Text · p.18
  - Source document: D1_M6700426Q0016.pdf
  - Section: DFARS Clauses Incorporated by Full Text
  - Page: 18
  - Relevant passage: The Offeror must complete the representations at DFARS 252.204-7016 and 252.204-7017 regarding covered defense telecommunications equipment or services.
  - Evidence confidence: Moderate confidence
- Requirement: The Contractor must provide USMC Certified Validator(s) to perform RMF authorization validation and auditing in accordance with ECSM 018 MCAAP, and provide required system artifacts to obtain and maintain an Authorization to Operate (ATO).
  - Obligation: Required
  - What to prepare: RMF / ATO support plan and required system artifacts
  - Row confidence: Moderate confidence
  - Citation: 4.4.3 Contractor shall migrate data to a Government approved Cloud environment within 30 · p.20
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 4.4.3 Contractor shall migrate data to a Government approved Cloud environment within 30
  - Page: 20
  - Relevant passage: Within 30 calendar days upon request. 4.5 Cybersecurity support 4.5.1 Contractor shall provide USMC Certified Validator(s) to perform validation/auditing of MDMC RMF authorization requirements in accordance with Enterprise Cybersecurity Manual (ECSM) 018 Marine Corps Assessment and Authorization Process (MCAAP). 4.5.2 Contractor shall perform Common Vulnerability Scoring System (CVSS) scoring, develop the Security Assessment
  - Evidence confidence: Moderate confidence

### Submission
- Requirement: The quote must contain pricing for all requested line items, as the award will be made in aggregate.
  - Obligation: Required
  - What to prepare: Price Volume
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.20
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 20
  - Relevant passage: Quote must contain all requested line items as the contract award will be made in aggregate. Therefore, any quote received without all line items priced will be considered non-responsive.
  - Evidence confidence: Moderate confidence
- Requirement: A cover sheet must be in each package. At a minimum, the header or footer of each page must include the Quoter's name, RFQ number, Package Name, and page number.
  - Obligation: Required
  - What to prepare: All Volumes
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.20
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 20
  - Relevant passage: Labeling. A cover sheet shall be in each package, clearly marked as to package title, RFQ identification and the Quoter's name. At a minimum, the following information shall be included in either the header or footer of each page: i. The Quoter's name; ii. The RFQ number; iii. The Package Name; and iv. The page number.
  - Evidence confidence: Moderate confidence
- Requirement: The Technical Package is limited to 25 total pages (including resumes and write-up). Subfactor 1 is limited to 1 page, Subfactor 2 to 16 pages, and Subfactor 3 to 8 pages. File format must be .docx or PDF.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.20
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 20
  - Relevant passage: 1. Technical Package - Twentyfive (25) total pages - Total page counts includes required resumes and technical package write up. a. Subfactor 1 - 1-page, b. Subfactor 2 - 16-pages, and c. Subfactor 3 - 8-pages
  - Evidence confidence: Moderate confidence
- Requirement: The Price Package is limited to 3 pages (not including the pricing spreadsheet). All pricing information must be addressed ONLY in the Price Package.
  - Obligation: Required
  - What to prepare: Price Volume
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.20
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 20
  - Relevant passage: 2. Price Package - 3-pages (not including pricing spreadsheet (attachment 2). Pricing Information All pricing information shall be addressed ONLY in the Price Package. Price information shall not appear in the Technical Package.
  - Evidence confidence: Moderate confidence
- Requirement: The Past Performance package is limited to 8 pages. A maximum of three (3) recent (no older than 3 years) and relevant references may be submitted.
  - Obligation: Required
  - What to prepare: Past Performance Volume
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.20
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 20
  - Relevant passage: 3. Past Performance - 8-pages. Past performance. A maximum of three (3) recent and relevant past performance references may be submitted. To be determined relevant, past performance must be for similar Size, Scope, and magnitude of this effort. To be determined recent, performance must be no older than three (3) years old.
  - Evidence confidence: Moderate confidence
- Requirement: Quoters must submit their response to the RFQ via email to morris.t.childre.civ@usmc.mil, alicia.l.davis.civ@usmc.mil, and matthew.radi@usmc.mil no later than the date posted on SAM.gov.
  - Obligation: Required
  - What to prepare: Email Submission
  - Row confidence: Moderate confidence
  - Citation: Addendum to 52.212-1, Instructions to Offerors · p.20
  - Source document: D1_M6700426Q0016.pdf
  - Section: Addendum to 52.212-1, Instructions to Offerors
  - Page: 20
  - Relevant passage: Quoters must submit their response to this Request for Quotation (RFQ) via email to no later than the date morris.t.childre.civ@usmc.mil; alicia.l.davis.civ@usmc.mil; and matthew.radi@usmc.mil posted on SAM.gov.
  - Evidence confidence: Moderate confidence
- Requirement: When the contractor identifies that a specific MS requirement is needed, the contractor shall submit an RGS form with supporting documentation to the COR to allow the Government to determine if the scope is required and the price is fair and reasonable.
  - Obligation: Required
  - Applicability / trigger: When a specific MS requirement is needed
  - What to prepare: form with
  - Row confidence: Moderate confidence
  - Citation: 4. Establish a common understanding of quality, schedule, and management expectations. · p.3
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 4. Establish a common understanding of quality, schedule, and management expectations.
  - Page: 3
  - Relevant passage: When the contractor identifies that a specific MS requirement is needed, the contractor shall submit to the COR a RGS form with supporting documentation to allow the Government to determine whether the identified scope is required and that the corresponding price for that scope is fair and reasonable. Regardless of the dollar value, the Contractor’s supporting
  - Evidence confidence: Moderate confidence

### Deliverables
- Requirement: The Contractor must submit a written Safety Plan to the COR for review and approval by the KO within 10 calendar days after contract award.
  - Obligation: Required
  - Row confidence: Moderate confidence
  - Citation: 1.5.13 Safety · p.10
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 1.5.13 Safety
  - Page: 10
  - Relevant passage: The Contractor must have a written Safety Plan and submit it to the COR for review and approval by the KO within ten (10) calendar days after contract.
  - Evidence confidence: Moderate confidence
- Requirement: Contractor must submit a Weekly Status Report by uploading it to the Government SharePoint site every Wednesday by 0800 ET.
  - Obligation: Required
  - Row confidence: Moderate confidence
  - Citation: 5.0 Deliverables · p.21
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 5.0 Deliverables
  - Page: 21
  - Relevant passage: Weekly Status Report / 4.1.6, 5.1 | Wednesday of each week by 0800 ET. | Upload to Government SharePoint link
  - Evidence confidence: Moderate confidence
- Requirement: The Contractor must submit a monthly payment request (invoice) electronically via Wide Area Workflow (WAWF) by the 10th business day of each month, including supporting documentation such as travel authorizations (if applicable) and a monthly status report.
  - Obligation: Required
  - Row confidence: Moderate confidence
  - Citation: 5.3 Monthly Payment Request · p.22
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 5.3 Monthly Payment Request
  - Page: 22
  - Relevant passage: The Contractor must submit a monthly payment request (invoice) electronically via Wide Area Workflow (WAWF) by the 10th business day of each month, including supporting documentation such as travel authorizations (if applicable) and a monthly status report.
  - Evidence confidence: Moderate confidence

### Evaluation
- Requirement: The Quoter must provide a Transition-In Plan for the first 30 days of contract award that includes a schedule with milestones, risk identification and mitigation strategies, and a staffing timeline for key and non-key personnel.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: Evaluation - Commercial Products and Commercial Services · p.23
  - Source document: D1_M6700426Q0016.pdf
  - Section: Evaluation - Commercial Products and Commercial Services
  - Page: 23
  - Relevant passage: The Quoter shall provide a transition-in plan (the first 30-calendar days of contract award) that details its concept to take over from the incumbent contractor This Transition-In plan shall include: i. A schedule with milestones and tasks. ii. The identification of risks associated within the proposed Transition-In Plan and address how the Quoter plans to mitigate those risks. iii.
  - Evidence confidence: Moderate confidence
- Requirement: Propose a labor mix of categories and hours based on the Government estimate of 13 full-time equivalents (FTEs) at 1,880 hours each, clearly identifying and highlighting any adjustments to these staffing levels.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: Evaluation - Commercial Products and Commercial Services · p.23
  - Source document: D1_M6700426Q0016.pdf
  - Section: Evaluation - Commercial Products and Commercial Services
  - Page: 23
  - Relevant passage: The Government estimates thirteen (13) FTEs to complete tasks detailed in the PWS Quoters may propose adjustments to these recommended FTE quantities Any proposed adjustments to staffing levels must be clearly identified and highlighted in your technical package Quoters shall propose the labor mix (i.e., labor categories and hours) necessary to complete the tasks outlined in PWS for key and non-key personnel in the format below.
  - Evidence confidence: Moderate confidence

### Pricing
- Requirement: Rates quoted in Attachment 3 must be fully burdened. Quoters must state whether labor categories are subject to SCLS and provide the applicable occupation code.
  - Obligation: Required
  - What to prepare: Price Volume
  - Row confidence: Moderate confidence
  - Citation: Base Year
  - Source document: D1_Attachment 3 - Pricing Workbook.xlsx
  - Section: Base Year
  - Relevant passage: Note 1: Rates quoted shall be fully burdened rates | Note 2: All quoted labor categories shall state whether they are subject to SCLS. Labor categories subject to SCLS shall state applicable occupation code
  - Evidence confidence: Moderate confidence

### Schedule
- Requirement: Submit the proposal by 2026-04-16.
  - Obligation: Required
  - What to prepare: Complete proposal submission
  - Row confidence: Moderate confidence
  - Citation: Schedule
  - Source document: MDMC Digital Depot
  - Section: Schedule
  - Relevant passage: 2296398381; Morris Childre <morris.t.childre.civ@usmc.mil> 2296396881 Published date: 2026-04-01 Proposal due date: 2026-04-16 date: 2026-04-16
  - Evidence confidence: Moderate confidence

### Key Personnel / Staffing
- Requirement: The Contractor must achieve 50% staffing for all key personnel within 15 calendar days of award, and 100% staffing for both key and non-key personnel within 30 calendar days of award.
  - Obligation: Required
  - What to prepare: Technical Volume
  - Row confidence: Moderate confidence
  - Citation: 1.5.7 Staffing and Key Personnel · p.6
  - Source document: D1_Attachment 1 - Performance Work Statement.pdf
  - Section: 1.5.7 Staffing and Key Personnel
  - Page: 6
  - Relevant passage: Contractor shall achieve 50 percent staffing for all key personnel within (15) calendar days and 100 percent staffing for all key personnel within (30) calendar days of contract award. Contractor shall achieve 100 percent staffing of non-key personnel listed in proposal within (30) calendar days of contract award.
  - Evidence confidence: Moderate confidence