FOR FEDERAL CUSTOMERS    CONTRACTING OFFICERS · PROGRAM MANAGERS · SSOs · FSOs · SECURITY DIRECTORS    WORKING WITH BEDROCK
FOR FEDERAL CUSTOMERS · WORKING WITH BEDROCK

What Bedrock is, what we are not, and when we are the right referral.

A short guide for federal contracting officers, program managers, FSOs, SSOs, security directors, and anyone in the cleared community who may refer a colleague or counterpart to Bedrock. The information below is the same information we use to qualify our own engagements. We post it openly so the people who might refer us can do so with confidence and so the people we cannot help can find the right path faster.

INDEPENDENT ADVISORY CLEARED PRINCIPAL DELIVERY SDVOSB P-CARD AND SIMPLIFIED ACQUISITION COMPATIBLE FAR 19.1406 PATH · CO DETERMINATION REQUIRED
FEDERAL ACQUISITION PATH · CO READ

Five paths Bedrock receives work. Pick the one that fits your authority.

Path 1 · P-card
FAR 13.301 simplified acquisition.Standard micro-purchase threshold is currently $15,000 effective October 1, 2025, subject to agency cardholder limits, funding controls, statutory exceptions, and local procedures.
Path 2 · FAR Part 13 simplified acquisition
Above the micro-purchase threshold but at or below the simplified acquisition threshold ($250K standard).FFP labor with T&M travel at cost. Reduced solicitation burden where FAR Part 13 and agency procedures permit. CO discretion governs.
Path 3 · SDVOSB sole-source
FAR 19.1406, when CO determination supports it.SDVOSB sole-source may apply when conditions are met: no reasonable expectation of two or more SDVOSB offers, responsible contractor determination, fair and reasonable pricing, and anticipated award not exceeding $5M for non-manufacturing NAICS or $8.5M for manufacturing NAICS. Sole-source is not automatic; it depends on the CO's determination.
Path 4 · SDVOSB set-aside
FAR 19.502-2(b) Rule of Two.Set-aside required when two or more responsible SDVOSBs can respond at fair market price. Bedrock responds as SDVOSB prime in this case.
Path 5 · Sub to a prime
Bedrock teams under a prime contract as the cleared facility specialty sub.See Partner with Bedrock for the Prime Fast Sheet and standard sub engagement structure. Bedrock subs at FFP labor with T&M travel at cost, GSA CALC and BLS OES anchored rates.
What happens next
Response inside one business day.Mutual NDA on request before substantive discussion. References available upon request after NDA.
First contact
contact@bedrocksafe.comOr +1 937.301.9776, 0700-1900 ET. Cleared principal answers.
ADVISORY · ENGAGEMENT POSTURE

Bedrock provides advisory analysis based on customer-supplied information. Bedrock identifies gaps, risks, and recommended next actions against the published NISPOM, 32 CFR Part 117, ICD 705, and related standards. Bedrock does not guarantee compliance, accreditation, certification, inspection results, or government acceptance. Accreditation, certification, and inspection outcomes are agency determinations. The deliverable is an advisory opinion authored and signed by a cleared Bedrock principal.

FEDERAL ACQUISITION NOTE

This page is informational only and is not procurement advice. Federal customers should follow agency procedures, funding rules, cardholder limits, competition requirements, and contracting officer determinations. Bedrock can provide capability information, scope language, and fixed-fee advisory options. Acquisition path selection remains with the government.

WHAT BEDROCK IS

The independent cleared facility lifecycle company.

Bedrock's category is a narrow one. We are the independent firm that owns the seams between design, install, and accreditation across the cleared facility lifecycle. The role exists because most primes and customers want an independent set of eyes on the security side of the work, separate from the entity building it.

WHAT BEDROCK IS NOT

Lane discipline. The honest negative.

A federal customer or referrer needs to know what we do not do so they can route work to the right place when our lane does not fit. We post the negative explicitly.

FIT TEST

When Bedrock is the right referral, and when we are not.

A transparent two-column read so anyone considering a referral can route the conversation accurately the first time.

YES · Bedrock fits

Refer to Bedrock when:

  • Cleared contractor needs a pre-DCSA inspection gap review
  • FCL pursuit starting from sponsor verification or in-progress
  • SCIF or SAPF accreditation work needing ICD 705 design review
  • Prime contract has cleared facility specialty scope and needs an SDVOSB sub
  • An independent SME advisory role is required (OCI-clean by design)
  • NISPOM industrial security advisory, FOCI mitigation strategy
  • RMF overlay scope for classified-system and facility boundaries
  • FSO setup, ITPSO program design, FSO practitioner advisory
  • P-card or simplified acquisition cleared advisory engagement
NO · Bedrock is not a fit

Refer elsewhere when:

  • The need is IDS/ACS hardware install or integration
  • The need is UL 2050 certification holding (CRZH, CRZM)
  • The need is general SCIF construction or general construction prime work
  • The need is general cyber services beyond RMF overlay
  • The need is general IT services or managed service provider work
  • The need is long-term permanent FSO outsourcing
  • The need is security training delivery as the primary deliverable
  • The need requires a Top Secret facility clearance Bedrock does not yet hold (sponsor and we will tell you transparently)
ENGAGEMENT VEHICLES

How Bedrock takes work.

Bedrock structures engagements to fit common federal acquisition pathways. Anchored against GSA CALC and BLS OES. Defensible to pricing review.

Government Purchase Card (P-card).Sub-micropurchase fixed-fee advisory engagements under FAR 13.301. BASELINE by Bedrock NISP Readiness Assessment is structured for this. FAULTLINE 705 sprints (Drift Assessment, Re-Accreditation Packet, Pre-Inspection Audit) are structured for this.
Simplified Acquisition (FAR 13).Above P-card threshold but below SAT. Fixed-fee or Firm Fixed Price labor.
SDVOSB Sole-Source (FAR 19.1406).SDVOSB sole-source awards may be made when conditions are met: no reasonable expectation of two or more SDVOSB offers, responsible contractor determination, fair and reasonable pricing, and anticipated award not exceeding $5M for non-manufacturing NAICS or $8.5M for manufacturing NAICS. Sole-source is not automatic; it depends on the CO's determination. Useful for time-sensitive cleared advisory engagements when the conditions support it.
SDVOSB Set-Aside (FAR 19.502-2).Rule of Two set-aside under SDVOSB designation when two or more SDVOSBs can respond. Bedrock responds as SDVOSB prime in this case.
Sub to a prime contract.Bedrock subs under a prime contract as the cleared facility specialty sub. See Partner with Bedrock for the standard teaming structure.
Standard full procurement.For larger scope. Bedrock responds to Sources Sought, RFIs, and RFPs in the cleared facility lifecycle lane and adjacent NAICS coverage.
ENGAGEMENT MODEL · WHAT TO EXPECT

From first contact to signed deliverable.

The Bedrock engagement model is built so a federal customer or referrer knows what the first three weeks will look like before the first call.

Week 0 to 1: Scoping

A thirty-minute call with a cleared Bedrock principal. We confirm scope, vehicle, schedule, and whether Bedrock is the right fit. If we are not the right fit, we say so on the call and route you toward a path that is. If we are the right fit, we send a draft engagement letter and the structured intake the same week.

Weeks 1 to 4: Engagement

Customer completes the structured intake at their own pace. Cleared principal reviews intake line by line, requests clarifications, and drafts the deliverable. Deliverable is a signed PDF authored by a cleared Bedrock principal. Optional debrief call after delivery.

Post-engagement

Customer owns the deliverable. Bedrock retains a copy under controlled access for follow-on advisory engagements if requested. No data sold, no data transferred. No follow-on retainer required.

HOW TO REFER BEDROCK

The shortest path to a productive first call.

If you have a counterpart who might benefit from Bedrock, here is how to make the introduction count.

Three pieces of information that make the first call productive

1. The scope. Is this an ICD 705 SCIF/SAPF question, a NISPOM industrial security question, an RMF overlay question, an FSO setup question, or something else? Even one sentence helps Bedrock route the call to the right cleared principal.

2. The vehicle. Is this a P-card buy, a simplified acquisition, a sub role under a prime, or a larger procurement? The vehicle shapes the engagement letter.

3. The timeline. Is there a DCSA inspection, an accreditation milestone, an RFP deadline, or a soft window? The timeline shapes the engagement schedule.

Direct contact

Email: contact@bedrocksafe.com

Phone: +1 937.301.9776 (cleared principal, 0700 to 1900 ET)

Capability statement: bedrocksafe.com/capability-statement

What happens after the introduction

Bedrock will respond inside one business day. If the counterpart needs an NDA before the first substantive conversation, we sign a standard mutual NDA before the scoping call. References available upon request after mutual NDA.

TRUST SIGNALS

Registration, clearance, lane. The basics, posted openly.

Talk to a cleared principal.

First contact lands inside one business day. If the conversation is not the right fit for Bedrock, we route you to a path that is. If it is, we schedule the scoping call inside the same week.

Chief Executive Officer · Bedrock Security Advisory Group LLC
Available 0700-1900 ET · Mutual NDA on request before substantive conversation
Bedrock provides advisory services only. The deliverable is an opinion based upon customer-supplied information. Bedrock does not guarantee compliance with NISPOM, ICD 705, DCSA expectations, CMMC requirements, or any government review outcome. Customer remains responsible for compliance, accreditation, and inspection posture.