KeyW is now part of Jacobs. Learn more about this exciting combination.



CIO SP3 Logo

Chief Information Officer – Solutions and Partners 3 (CIO-SP3)
Sotera CIO-SP3 Contract Data:
Vehicle Type Government Wide Acquisition Contract (GWAC)
Contracting Agency National Institutes of Health Information Technology Acquisition and Assessment Center (NITAAC)
Eligible Users All Federal and Civilian Agencies
Sotera Role Prime
Team Sotera Sotera Defense Solutions, Inc. BlueDog, Inc. Celerity Government Solutions, Inc. Delmarva Foundation for Medical Care, Inc. DigiFlight, Incorporated Dowless and Associates, Inc. F1 Computer Solutions, Inc. Health Integrity, LLC Missing Link Communications, Inc. MorganFranklin Corporation Virginia TechInterdisciplinary Center for Applied Mathematics (ICAM) Virginia Tech-Wake Forest University School of Biomedical Engineering and Sciences (SBES)
Government Access Fee 1%
Task Order Types FFP, T&M, CPFF, CPIF, CPAF
Contract Period 6/1/2012 – 5/31/2022
Contract Number HHSN316201200048W
Celling $20 Billion
Prompt Payment Terms Discount for Prompt Payment
Vehicle Contractors 54
DUNS Number 832461755
SAM Link (replaced CCR)
NITAAC “CIO-SP3” Website
The CIO-SP3 contract is a ten (10) year Indefinite Delivery/Indefinite Quantity (IDIQ) contract.  This contract is provides Information Technology (IT) services and solutions.  These IT solutions and services include, but are not limited to, health and biomedical-related IT services to meet scientific, health, administrative, operational, managerial, and information management requirements.  The contract also contains general IT services partly because medical systems are increasingly integrated with a broader IT architecture, requiring a systems approach to their implementation and a sound infrastructure for their operation.  The Government can procure these services in ten primary task areas, as follows:


Contract and task order management is a mandatory element for all task orders placed under the CIO-SP3 contract. The objective of contract and task order management is to provide the program management, project control and contract administration necessary to manage a high volume, multiple contract type task order process for a large, diversified team so that the cost, schedule and quality requirements of each order are tracked, communicated to the government, and ultimately attained. The use of commercially available automated tools (for example – a LAN or Web based contract task management system) and the application of expertise on processes and metrics that support task order management are encouraged to achieve the above objectives. The objective of the tools is to provide quicker access, improved accuracy, and enhanced accessibility for contractors/clients, real-time monitoring of status/deliverables, tracking the quality of work products and gauging overall customer satisfaction.


The objective of this task area is to support Biomedical Research, Health Sciences and Healthcare by performing studies and analyses, and providing operational, technical, and maintenance services for the systems, subsystems, and equipment, some of which interface with, and are extensions to, information systems throughout the federal government. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Health Sciences Informatic and Computational Services
  2. Health Communication Support Services and Enhancements to Facilitate Integration and Data Exchange at the Federal, State, and Local Level
  3. Integration of Health Systems Across Federal Agencies and Public and Private Healthcare Systems
  4. Modernization and Enhancement of Existing Health IT Legacy Systems
  5. Automation of Administrative and Clinical Processes
  6. Biomedical Information Services
  7. Biomedical Modeling, Visualization, and Simulation
  8. Biosurveillance and Disease Management Support
  9. Scientific Computing Services
  10. IT Clinical Support Services
  11. Telemedicine (e.g., mobile health/mHealth)
  12. Healthcare Payment Processes and Fraud and Abuse in Medical Claims
  13. Health Emergency Preparedness and Response to Include IT Support for Epidemic and Bio-Terrorism Simulations, Emergency Response Training, Exercise Support, etc.
  14. Security of Healthcare and Biomedical Research Systems
  15. IT Service Management
  16. Healthcare Systems Studies
  17. Natural Language Processing Software and Services (Biology/Medicine Focus)
  18. Medical Computer-based Training
  19. Standards Development for Health IT Services


The objective of this task area is to support Chief Information Officers (CIOs) in implementing laws, regulations, and polices and to facilitate evolving CIO practices. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. IT Governance Process Development and Management
  2. Workforce Management
  3. Capital Planning and Investment Control Support
  4. Independent Verification and Validation
  5. Agency Information Technology Architecture Support
  6. IT Portfolio Analysis
  7. Risk Management
  8. Program Analyses and Implementation (including Business Cases Analysis, Cost/Benefit Analysis and Cost Effectiveness Analyses)
  9. IT Organizational Development
  10. Program Management Office Support
  11. Advisory and Assistance Services
  12. FEA Alignment Support Services
  13. Market Research


The objective of this task area addresses systems and services that support the collection, storage, and retrieval of digital images. Digital images can include scanned documents, medical images, geographical information systems, video, and photographs. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Document Management Systems
  2. Image Conversion
  3. Image Content Management
  4. Medical Imaging, including Picture Archiving and Communication Systems
  5. Document Imaging
  6. Workflow Management for Digital Imaging Functions
  7. Geospatial and Scientific Imaging
  8. Environmental Imaging
  9. Image Analysis
  10. 3D Immersive Visualization
  11. Imaging Related to Laboratory and Test Equipment
  12. Security Imaging
  13. Identity and Access Management


The objective of this task area is to provide the Information Technology (IT) infrastructure and IT services required to assume management and operations of government IT resources and IT business functions. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Program Management
  2. Management of Call Centers
  3. Network Operations and Web Management Support
  4. Leasing of Hardware and Software
  5. Tools and Applications (including Application Service Provider)
  6. Hardware/Software Maintenance
  7. Transition Planning
  8. A-76 Studies Specific to IT Operations or Support
  9. Data Base Administration and Data Storage Management
  10. Backup and Recovery Services System Console Operations
  11. Production Control and Management
  12. Asset Management (including Radio Frequency Identification [RFID] Tracking)
  13. IT Acquisition Management
  14. Desktop Computing as a Unified Service
  15. Managed IT Services Support
  16. IT Impact Analyses
  17. Workflow Management
  18. Implementation of Standards (e.g., International Organization for Standardization (ISO) 9000, Capability Maturity Model Integration (CMMI), IT Services Management)
  19. Solution Leasing
  20. Software-as-a-service (SaaS)
  21. Cloud Computing


The objective of this task area is to support the operation and maintenance of IT systems, keeping IT systems viable with supported vendor releases or off-the-shelf applications software upgrades. Operations and maintenance on IT systems shall include all software and hardware associated with mainframes, client/server, web-based applications, and networking. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Operational Support
  2. Software Maintenance and Upgrades
  3. Telecommunications Maintenance (Data, Voice, Images, including Wireless)
  4. Infrastructure Management Services (IMS)
  5. Configuration Management
  6. Network/Hardware Support
  7. Help Desk/IT Support
  8. Resource Management
  9. Backup and Recovery Management
  10. Installation, Configuration, and Tuning
  11. Electronic Software Licensing Services including license: deployment, management, tracking, upgrading, etc.
  12. System Management
  13. IT Training
  14. IT Operation and Maintenance Planning
  15. Data Quality Management
  16. Transformation Services
  17. Continual Service Improvement
  18. Balanced Scorecard for Operations
  19. IT Infrastructure Optimization


The objective of this task area is to support the development and deployment of integrated information systems, which includes the integration of technical components, information technology components, organizational components and documentation. Integration projects can support a wide range of agency functions. In the healthcare and research domain, medical imaging systems, patient management systems, clinical management systems, and laboratory management systems are often provided via integration of commercial components with existing infrastructure. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Infrastructure Engineering, Development, Implementation, Integration
  2. Enterprise Application Integration
  3. Gap Analysis and Benchmarking
  4. Data Migration and Integration
  5. Open Source Integration
  6. Enterprise Data Management
  7. Collaboration Tools
  8. Business Process Reengineering
  9. Test and Evaluation Services
  10. Financial Analysis
  11. Feasibility Studies
  12. Requirements Analysis
  13. System Design Alternative (SDA) Studies
  14. Systems Engineering
  15. Architecture Validation and Verification
  16. Risk Assessment
  17. Acquisition Support


The objective of this task area is to support the protection of critical infrastructure, assurance of agency information, and operations that protect and defend information and information systems by ensuring confidentiality, integrity, availability, accountability, restoration, authentication, non-repudiation, protection, detection, monitoring, and event react capabilities. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Cyber Security
  2. Critical Infrastructure Asset Identification and Configuration Management Databases
  3. Information Assurance of Critical Infrastructure
  4. Risk Management (Vulnerability Assessment and Threat Identification)
  5. Facility Protection Planning
  6. Information Systems Security
  7. Security Operations Center Development and Operations Management
  8. Application Security
  9. Disaster Recovery
  10. Critical Infrastructure Continuity and Contingency Planning
  11. Incident Response Planning and Execution
  12. Security Certification and Accreditation
  13. Training and Awareness Programs
  14. Exercises and Simulation
  15. Federal Information Security Management Act (FISMA) Implementation Support
  16. Health Insurance Portability and Accountability Act Implementation Support
  17. Cryptographic Support and Services
  18. Record Management
  19. Public Key Infrastructure
  20. Trusted Internet Connections implementation
  21. Security Review and Analysis of Automated Information Systems
  22. Identity Management and Assurance
  23. Intelligent, Automated Data Collection and Analysis
  24. IT Forensics and eDiscovery


The objective of this task area is to support government services that are provided through digital, electronic means, creating a transparent interaction between government and citizens (G2C – government-to-citizens), government and business enterprises (G2B – government-to-business enterprises) and government interagency relationships (G2G – government-to-government). A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Data Warehousing and Data Mining
  2. Business Intelligence
  3. Web Development and Support
  4. Electronic Commerce and Electronic Data Interchange
  5. Customer Relationship Management
  6. Knowledge Management (IT-based sharing/storing of agency individuals’knowledge)
  7. IT –Enhanced Public Relations
  8. IT Strategic Planning
  9. Records/Document Management
  10. Business-to-Government (B2G) Solutions
  11. Communications Management
  12. Accessibility Services (508 and 504 compliance)
  13. Automated Abstraction, Taxonomies, and Ontologies
  14. Deep web and federated searching
  15. Computational linguistics and machine-based translation
  16. Telecommuting Support Services
  17. Interactive Marketing


The objective of this task area is to support the implementation of enterprise management applications and systems in the federal environment, which are integrated software applications used to control, monitor, and coordinate key business activities across an enterprise. These applications generally fall into the following categories: Financials, Human Resources, Logistics, Manufacturing, and Projects. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. ERP Package Implementation
  2. Integration of Business Systems
  3. Business Consulting Services
  4. Business Transformation and Business Process Reengineering
  5. Business Systems Modernization
  6. IT Software Package Selection
  7. ERP IT Infrastructure
  8. ERP Infrastructure Planning, Installation, and Tuning
  9. Performance Load Testing
  10. ERP End User Training


The objective of this task area is to develop customized software applications, database applications, and other solutions not available in off-the-shelf modular software applications. A comprehensive, but not limited, sampling of work to be performed under this task area is shown below:
  1. Requirements Analysis, Design, Coding, and Testing
  2. Production Deployment
  3. Application Prototyping
  4. Multimedia Software for Patient/Staff Education
  5. Program Evaluation Software
  6. Administrative and General Decision Support Software
  7. Business Intelligence and Analytics
  8. GIS-Enhanced Planning and Program Evaluation Software
  9. Web 2.0 Development and Management
  10. Database Development and Management
  11. Clinical Protocol and Quality Assurance Decision Support Software
NITAAC’s online ordering system, e-GOS, streamlines the ordering process in a few easy steps: 1. Customer submits request for proposal (RFP) which includes the following:     • Statement of Work (SOW)     • Instructions to Offerors     • Independent Government Cost Estimate (IGCE)     • Point of Contact (POC) information     • Funding strategy     • Proposal due date     • Desired contract type (i.e., CPAF, CPIF, CPFF, FFP, or T&M) 2. NITAAC reviews scope and releases to eligible contract holders 3. Optional question-and-answer period follows 4. Contract holders submit proposal 5. Customer evaluates and selects awardee 6. Contracting Official prepares award in agencies’ contract writing system (e.g., PRISM), using the CIO-SP3 contract number 7. Contracting Official loads award documents in e-GOS and submits to winning bidder.


Ms. Fleur Ryan Program Manager, CIO-SP3 and Vice President  Email: Phone: 703.880.9362   Mr. Kevin Burns  EPMO Program Manager  Email: k​e​v​i​n​.​b​u​r​n​s​@​s​o​t​e​r​a​d​e​f​e​n​s​e​.​c​o​m​  Phone: 703.880.9303 


Email: Phone: (888) 773-6542 NITAAC “CIO-SP3” website:
Team KeyW provides NIH with unique access to medical research, cyber security, PhD level research specialists and High Performance Computing through the following teaming relationships: Celerity. A large business teammate that provides business and technology consulting and integration services to financial services, healthcare, telecommunications, and government clients in over 17 states, Iraq, and Afghanistan. Celerity’s current work includes day-to-day support to Cigna Clinical IT applications throughout the US as well as support to the Defense Information System for Security (DISS) acquisition program to consolidate DoD’s security mission into an Enterprise System. Delmarva Foundation. A non-profit organization established in 1973 as a Professional Standards Review Organization (PSRO). Delmarva Foundation is a Quality Improvement Organization (QIO) for the State of Maryland and performs External Quality Review (EQR) and other services to Medicaid agencies in a number of jurisdictions across the United States. The organization has continued to build upon its core strength to develop into a well-recognized leader in Quality Assurance (QA) and Quality Improvement (QI). Products and services include QA and Quality Management (QM) contracts that address all healthcare provider sectors and home and community based waiver support providers. In addition to the QIO and current EQR Contracts, Delmarva Foundation holds current contracts including Medicaid Developmental Disability QA/QM, Utilization Review, QI, and Patient Safety QI Programs. DigiFlight. DigiFlight was founded in 2003 and is incorporated as a Small Business Administration (SBA) certified 8(a) corporation and Service-Disabled Veteran-Owned Small Business. DigiFlight’s key lines of business include Acquisition and Program Management Support; Systems Engineering/Integration; Test and Evaluation/Independent Verification and Validation; Command, Control, Communications, Computers, Intelligence, Surveillance, and Reconnaissance (C4ISR); and MAIS Cyberspace Operations/Information Assurance Test and Evaluation. Dowless & Associates. A woman-owned small business incorporated in 1999 that provides full lifecycle IT solutions for information systems security engineering, software engineering and integration and training, and curriculum development. Dowless & Associates has extensive database design, implementation, and management experience with Oracle, Microsoft SQL, and Sybase for Federal clients. Dowless & Associates design, install, operate, and manage a broad range of IT services including governance and policy analysis; incident response; network; application management and support; service desk/desktop support; and training. F1 Computer Solutions, Inc. A woman-owned small business that specializes in developing, integrating, delivering, and supporting a wide range of applications, network systems, and infrastructure solutions. F1 Computer Solutions has technology partnerships to bring to CIO-SP3 that include, Cisco, Microsoft, Dell, AT&T, Barracuda, HP, Symantec, and BICISI. Health Integrity, LLC (HI). HI operates nationally as a Federally designated program integrity contractor for Medicare and Medicaid. Currently, HI holds the following contracts: National Benefit Integrity Medicare Drug Integrity Contractor; Zone Program Integrity Contractor, Zone 4; and Audit Medicaid Integrity Contractor. Under these contracts, HI monitors complaints and initiates fraud investigations for referral to the Office of Inspector General as well as supporting cases with data, medical and pharmaceutical experience, audits, training, and investigative expertise. Missing Link Security (MLS). A veteran-owned small business serving the government since 1995. MLS’ unique blend of experts in information, physical, and personnel security assure consideration of all aspects of security when implementing a security posture. MLS specializes in security policy and processes, certification and accreditation, security audits, security operations, continuous monitoring, security testing, and forensics. MLS has a staff of cleared personnel who are experts in cyber security. MLS clients include the FBI, the National Cyber Security Division and the Office of Health Affairs of Homeland Security, and the Patent and Trademark Office of Department of Commerce. MorganFranklin. MorganFranklin is a business and technology solutions company founded in 1998. MorganFranklin is operations-focused and provides the expertise, resources, and project management skills required to turn strategy into results. MorganFranklin helps agencies achieve four fundamental and related goals: essential information & communications; financial & operational readiness; radical growth & change; and risk & crisis management. MorganFranklin’s teams combine core confidence with expertise in finance and accounting, management consulting, and technology to craft solutions that improve the efficiency and effectiveness of operations. MorganFranklin has worked with government and industry partners including the U.S. Army, Computer Sciences Corporation, and BearingPoint. REDLattice. REDLattice is an agile, mission-focused provider of services and technology solutions for the Intelligence and Defense communities. Our people are recognized leaders in the design, development and implementation of cutting-edge signal processing solutions,  geolocation applications, machine learning capabilities, cyber services and open source architectures. We are experienced in delivering rapid prototyping solutions across a range of mission needs. Virginia Polytechnic Institute and State University (VA Tech). The Advanced Research Computing (ARC) at Virginia Tech is an innovative and interdisciplinary environment advancing computational science, engineering, and technology. It provides biomedical research and advanced infrastructure and support to invigorate computational science and engineering at Virginia Tech. ARC focuses on collaborating with other computational science and engineering driven research centers in advancing knowledge and leading the evolution of scientific computing tools, techniques, and facilities that accelerate scientific discovery. Virginia Tech – Wake Forest University School of Biomedical Engineering & Sciences (SBES). SBES is a joint venture between Wake Forest University and Virginia Tech, which integrates the capabilities of the Virginia Tech College of Engineering, the Wake Forest University School of Medicine (WFUSM), and the Virginia-Maryland Regional College of Veterinary Medicine. This partnership brings access to research centers and labs that include: Advanced Neuroscience Imaging Research Core (ANSIR group), Bioanatomic Imaging and Treatment Program, Bioimaging Systems Lab, Biomedical Imaging Division / VT-WFU School of Biomedical Engineering and Sciences, Center for Biomolecular Imaging, Center for Injury Biomechanics, Center for Molecular Medicine and Diseases, Center for Nanotechology and Molecular Materials, Computational Bioinformatics & Bioimaging Laboratory; Crash Injury Research and Engineering Network (CIREN), Industrial Ergonomics & Biomechanics Lab, Institute for Critical Technology and Applied Science (ICTAS), Locomotion Research Lab, Movement Biomechanics Lab, Musculoskeletal Biomechanics Lab, Wake Forest Institute for Regenerative Medicine, and Human Performance and Biodynamics Laboratory.