PARTNER WITH BEDROCK    SDVOSB CLEARED FACILITY SPECIALTY SUB    ICD 705 · NISPOM · RMF · FSO/ITPSO
PARTNER WITH BEDROCK · SDVOSB CLEARED FACILITY SPECIALTY SUB

Team with Bedrock as your SDVOSB cleared facility specialist.

Bedrock is the independent cleared facility lifecycle company. We sub under prime contractors on ICD 705 SCIF and SAPF accreditation work, NISPOM industrial security tasks, RMF overlay scope, TEMPEST coordination, and FSO and ITPSO practitioner advisory. Cleared principal accountability on every engagement. Bedrock is not the installer, not the certification holder, not the hardware provider. We do the part of the work primes typically subcontract to an independent specialty firm. SDVOSB; eligible to be considered under FAR 19.502-2(b) Rule of Two and under FAR 19.1406 sole-source paths subject to FAR conditions and contracting officer determination.

SDVOSB CLEARED PRINCIPAL DELIVERY ICD 705 / SCIF / SAPF NISPOM / 32 CFR PART 117 RMF OVERLAY FSO / ITPSO PRACTITIONER SDVOSB TEAMING PATH
PRIME FAST SHEET · 30-SECOND READ

What you need to evaluate Bedrock as a sub.

Who Bedrock is
SDVOSB, VetCert verified. Independent cleared facility lifecycle advisory firm. Cleared principals (TS/SCI active).
Where Bedrock fits on your prime
ICD 705 design review, CSP / PCSP / FFC drafting, accreditation lifecycle, NISPOM advisory, RMF overlay, SSO/SSR/SSM coordination, TEMPEST coordination, FSO and ITPSO practitioner support.
Where Bedrock does NOT fit
Not the installer. Not the certification holder (UL 2050 CRZH/CRZM). Not hardware supply. Not general cyber or IT services. Not training delivery. Not permanent FSO outsourcing.
Why primes use Bedrock
SDVOSB credit defensible to small-business goal review. Bedrock stays independent from installation, hardware supply, integration, and certification-holding roles so advisory findings are not tied to the entity selling, installing, integrating, or certifying the solution. That lane discipline supports the prime through award, performance, and post-award review.
Registration and NAICS
UEI H323F8L44MV5 · CAGE 01R17 · SAM.gov Active · Primary NAICS 541690. Secondary: 541330, 541611, 541618, 541512, 541519, 561621, 611430, 236220.
Sample workshare
Independent SME advisor on a four-phase scope (pre-award support, design review, install observation, sustainment transition). Or single-phase scope (accreditation package authorship). Bedrock subs at FFP labor with T&M travel at cost, no markup. GSA CALC and BLS OES anchored rates.
Sample teaming language
"[Prime] proposes Bedrock Security Advisory Group LLC, SDVOSB (UEI H323F8L44MV5, CAGE 01R17), as a subcontractor to provide independent cleared facility lifecycle advisory across [scope: ICD 705 design review / accreditation package authorship / NISPOM advisory / SSO coordination / TEMPEST coordination]. Bedrock will not participate in any capacity on the resulting design or installation effort associated with this requirement and will maintain organizational independence throughout the period of performance."
What happens next
Response inside one business day. Mutual NDA on request before substantive discussion. References furnished after NDA. 30-minute capability and OCI alignment call.
SDVOSB FAR 19.502-2(b) set-aside qualified FAR 19.1406 sole-source eligibility subject to CO determination OCI-clean by business model Cleared principal delivery
ADVISORY · ENGAGEMENT POSTURE

Bedrock provides advisory analysis based on customer-supplied information. Bedrock identifies gaps, risks, and recommended next actions against the published NISPOM, 32 CFR Part 117, ICD 705, and related standards. Bedrock does not guarantee compliance, accreditation, certification, inspection results, or government acceptance. As a sub to a prime, Bedrock delivers advisory scope under the prime's award; accreditation, certification, and inspection outcomes remain agency determinations.

WHY TEAM WITH BEDROCK

Three things primes get from a Bedrock sub role.

Beyond the SDVOSB credit, primes hire Bedrock for the operational discipline that turns a cleared-facility scope from a risk line item into a defensible work plan.

SDVOSB credit, defensible.Service Disabled Veteran Owned Small Business, VetCert verified. NAICS 541330, 541690, 236220, 541611, 541512, 541519, 561621, 611430 across our secondary coverage. Set-aside qualified under FAR 19.502-2(b). Sole-source under FAR 19.1406 may apply when conditions are met: no reasonable expectation of two or more SDVOSB offers, responsible contractor determination, fair and reasonable pricing, and anticipated award not exceeding $5M for non-manufacturing NAICS or $8.5M for manufacturing NAICS. Sole-source is not automatic; it depends on the contracting officer's determination.
Cleared principal accountability.The work is signed by a cleared principal. No junior contractor running point. No subcontractor stack you have to manage. The principal is the deliverable.
Lane discipline.Bedrock operates exclusively in the cleared facility lifecycle lane. ICD 705, NISPOM, RMF, TEMPEST, FSO/ITPSO. We do not stretch into IDS/ACS installation, UL 2050 certification holding, hardware integration, general cyber, or general IT. The discipline is what makes us operationally clean for independent advisory scope on your contract.
Evidence-based, citation-traceable.Every finding cites the NISPOM paragraph, ICD 705 section, NIST control, or documented operator observation it draws from. Our analysis is built to defend a DCSA inspection or AO review, not to look good in a slide.
WHERE BEDROCK FITS ON A PRIME'S WORK

The scope primes typically subcontract to an independent specialty firm.

If your prime contract includes any of the following scope, Bedrock is the SDVOSB sub built to deliver it.

ICD 705 v1.5.1 design review (35%, 65%, 95%, 100%)SCIF and SAPF design review against current ICD 705 Technical Specifications. AO-stop issues caught at 35% rather than at final inspection.
CSP, PCSP, and FFC drafting and quality controlConstruction Security Plan, Pre-Construction Security Plan, and Final Facility Checklist authorship and review.
Accreditation lifecycle supportPre-accreditation mock inspections, accreditation artifact preparation, DCSA and AO liaison, accreditation package quality control.
NISPOM industrial security advisory32 CFR Part 117 compliance verification, FOCI mitigation strategy, NISPOM Chapter 2/5/8 advisory, insider threat program review.
RMF overlay and ATO/ATC supportNIST SP 800-37 and DoDI 8510.01 alignment, CNSSI 1253 overlay for classified systems and facility boundaries, ATO/ATC package authorship and review.
SSO, SSR, SSM coordinationSpecial Security Officer, Special Security Representative, and Special Security Manager coordination across accreditation milestones.
TEMPEST coordination and advisoryRED-BLACK separation analysis, CNSSAM TEMPEST/01-13 alignment, IEEE 299-2006 shielding-effectiveness validation advisory.
FSO and ITPSO practitioner advisoryFSO setup, FOCI mitigation advisory, ITPSO program design, ongoing FSO practitioner support.
LANE DISCIPLINE · WHAT BEDROCK DOES NOT DO

What we removed from our scope on purpose.

A clean sub role requires honest lane boundaries. Bedrock does not stretch into adjacent scope just because we could bill it. The discipline is what keeps the sub role operationally clean.

Not IDS/ACS installation. We advise on installer compliance with UL 2050 scope; we do not perform the install.
Not UL 2050 certification holder. CRZH and CRZM are installer-side certifications outside our lane.
Not hardware integration. We do not stock, supply, or integrate physical security hardware.
Not general cyber services. Our cyber scope is bounded to RMF overlay and ATO/ATC for classified-system and facility boundaries. We do not deliver general SOC, IR, or commercial cyber work.
Not general IT services. We are not a managed service provider or general IT shop.
Not a training provider. We do not run security training as a line of business.
ACTIVE TEAMING POSTURE

Examples of how Bedrock teams under primes today.

Bedrock is currently positioned as the SDVOSB cleared facility specialty sub on several active federal pursuits. Each represents a different teaming structure available to your prime program.

AFLCMC / PZI · Hanscom

NBSFS SCIF IDS/ACS Independent SME

BSAG positioned to provide SDVOSB independent SME advisory under a four-phase scope. OCI-clean by business model. Pre-award solicitation support through Phase 4 sustainment transition.

USACE / Louisville

Scott AFB Building 1600 ICD 705

BSAG positioned as SDVOSB cleared facility sub under an eventual prime award. Construction Security Plan, PCSP, FFC, accreditation lifecycle support, AO liaison.

USAFE / 700 CONS

Ramstein Lenel SCIF ACS (in-theater)

BSAG positioned alongside a Lenel-certified European integration partner. ICD 705 compliance coordination, AO/SAO and Site Security Manager engagement, accreditation documentation and inspection-readiness support.

179th CW / Mansfield ANG

Building 403 ICD 705 Renovation

BSAG positioned as SDVOSB cleared facility sub under a future prime construction award. ICD 705 accreditation discipline, NISP coordination, AO and CSA engagement, Final FFC delivery.

STANDARD SUB ENGAGEMENT STRUCTURE

Defensible pricing. Clean cost narrative.

Bedrock's sub engagement is structured to survive prime pricing review and government cost analysis. Anchored against GSA CALC and BLS OES, with no hidden multipliers.

How a Bedrock sub role typically prices

Labor scope is Firm Fixed Price by deliverable wherever the prime contract permits. Travel is reimbursed at cost (T&M, no markup) within GSA per-diem boundaries. Labor categories are anchored to GSA CALC rates for cleared advisory and engineering positions, cross-checked against BLS OES wage data for the project's geographic area. Cleared principal time is the headline rate; documentation and QA roles are priced separately at lower categories.

  • Cleared principal time: TS/SCI rate, principal accountability, signed deliverables
  • RMF / cybersecurity SME: TS/SCI rate, NIST controls and ATO/ATC scope
  • QA and test SME: TS rate, accreditation artifact QA
  • Accreditation documentation specialist: Secret rate, packaging and review
  • Travel: GSA per diem, T&M at cost, no markup
  • Pricing posture: defensible to AFLCMC and DCMA pricing review; documented overhead, no T&M labor variance, no hidden multipliers
TRUST SIGNALS

The basics primes verify before NDA.

Bedrock posts the registration, clearance, and lane information primes need to begin a teaming conversation without back-and-forth.

SDVOSB · VetCert verified
SAM.gov · Active
UEI H323F8L44MV5
CAGE 01R17
Primary NAICS 541690; secondary coverage 541330, 541611, 541618, 541512, 541519, 561621, 611430, 236220
Cleared principals: TS/SCI active
Oklahoma incorporation, 2024
References available upon request and after mutual NDA

Start a teaming conversation.

If your prime contract or pursuit has ICD 705, NISPOM, RMF, or FSO/ITPSO scope, Bedrock is built for the sub role. Reach out and we will schedule a 30-minute capability and OCI alignment call.

Chief Executive Officer · Bedrock Security Advisory Group LLC
Available 0700-1900 ET · Capability statement and references furnished after mutual NDA
Bedrock provides advisory services only. The deliverable is an opinion based upon customer-supplied information. Bedrock does not guarantee compliance with NISPOM, ICD 705, DCSA expectations, CMMC requirements, or any government review outcome. Customer and prime remain responsible for compliance, accreditation, and inspection posture.