The cleared facility lifecycle has owners at each stage. Architecture and engineering own design. Construction and integration own install. Security equipment vendors own hardware. Cyber and RMF firms own the authorization package. Compliance shops own the recurring paperwork. Accreditation authorities own inspection.
The seam between those stages, where most accreditation findings, schedule slip, and rework actually originate, has no standard owner on the delivery side and, equally important, no standard owner on the buying side. Federal customers know they need someone in the seam. They do not yet have a productized acquisition vehicle that names the role.
In a recent conversation, an Air Force small business director openly stated this. The category was real. The demand was confirmed. The vehicle was not.
When a contracting officer or program manager says "I know we need this, I am not sure how we buy it," the answer is not "vendors will find a path." The answer is that the buying surface needs to be defined before consistent demand can flow through it. This note is a contribution to that definition.
Decision burden lands on contracting officers and program managers. Programs spend heavily on facility construction, IDS and ACS installation, cyber RMF support, and accreditation paperwork, then discover late that nobody held the seam between them. Findings emerge during inspection that could have been surfaced six to twelve months earlier with independent SME advisory in the design and pre-construction phases.
The cost is not theoretical. A SCIF program with an avoidable accreditation finding can carry schedule slip in the eight-to-twenty-week range, redesign cost in the high five to low six figures, and reputational exposure with the cognizant security authority. The independent SME advisory category exists precisely to compress those failure paths. The gap is in how to buy it cleanly.
The GSA Multiple Award Schedule consolidated all prior schedules in 2020. Today there is one MAS, organized by Large Category, Subcategory, and SIN (Special Item Number), with SINs cross-walked to NAICS codes. The right first conversation with a federal buyer in the GSA channel is not "ramp on a Schedule." It is "where does this category belong."
For an SDVOSB providing independent cleared facility lifecycle advisory under primary NAICS 541690 (Other Scientific and Technical Consulting), with adjacents in 541330 (Engineering Services), 541611 (Administrative and General Management Consulting), and 541618 (Other Management Consulting), the SIN placement question is genuinely open. The right answer comes from GSA contracting professionals who own SIN cross-walk authority.
For federal customers: when an advisor approaches you saying they are pursuing GSA MAS, the right diligence question is which SIN they are pursuing and why. SIN placement is the substantive marker of category fit. "GSA MAS" alone tells you nothing.
For Bedrock: the conversation is open with GSA as of this note's publication.
Prior schedule names like "MAS 871" or "Schedule 70" predate the 2020 consolidation. Current correct framing is GSA MAS, with the relevant Large Category, Subcategory, and SIN named explicitly.
Federal Acquisition Regulation 19.1406 provides for SDVOSB sole-source contract awards when conditions are met. The conditions include no reasonable expectation of two or more SDVOSB offers, responsible contractor determination, fair and reasonable pricing, and anticipated award value within the applicable FAR threshold (currently $5 million for non-manufacturing NAICS and $8.5 million for manufacturing NAICS, both subject to current FAR updates).
The path is not automatic. It depends on contracting officer determination. But for individual SCIF or FCL or NISPOM advisory engagements where scope is bounded and pricing is defensible, FAR 19.1406 offers a faster path than GSA MAS application. SDVOSB primes can be considered when the conditions are met and the CO judges the path appropriate.
For federal customers: FAR 19.1406 is most useful when a single program has a specific, bounded scope for cleared facility advisory that does not need to be repackaged for multi-vendor competition. Examples include accreditation packet authorship, pre-inspection audit, drift assessment, and CSP or PCSP or FFC drafting and reconciliation.
For Bedrock: the FAR 19.1406 path was the structural basis for the NBSFS LOI submitted to AFLCMC/PZI on 2 June 2026.
OASIS Plus, E-PASS, and similar AFLCMC professional services vehicles already have named primes. An SDVOSB advisor can be brought onto these vehicles as a subcontractor providing the independent SME role within a prime's task order.
The subcontract path is the fastest revenue path for an SDVOSB in this category, because it does not require new vehicle infrastructure. The independence question still applies: the SDVOSB advisor should sit clean from the installer, integrator, and certification-holding roles. The prime takes a margin and the customer relationship. The SDVOSB advisor gets paid work and the long-term reference for a vehicle they were ultimately on.
For federal customers: when scoping cleared facility advisory under an existing prime contract, naming a specific OCI-clean SDVOSB sub in the task order can satisfy both the substantive advisory need and small-business credit toward agency goals. The prime brings the vehicle and program management infrastructure; the SDVOSB sub brings the cleared principal delivery and the lane discipline.
For Bedrock: positioning for sub paths on AFLCMC vehicles is an active pursuit thread.
This is not procurement advice. Acquisition path selection is a contracting officer determination under FAR, agency procedures, and program funding rules. Federal customers should follow their own acquisition counsel and CO guidance.
This is a field note from a small business operating in the category. The purpose is to surface the gap publicly so federal acquisition professionals, primes, and other SDVOSBs evaluating this space have a shared starting point.
