Managed Secure Research Enclave and Compliance Services

Clemson University is seeking a vendor to design, implement, and operate a managed, secure research enclave that can handle Controlled Unclassified Information (CUI), Controlled Technical Information (CTI), and export‑controlled data (ITAR/EAR). The effort is split into Phase 1 (core enclave with Windows and Linux VDI, Microsoft 365 GCC High, identity/access management, and full CMMC Level 2 compliance) and an optional Phase 2 (integration of Clemson‑owned on‑premises HPC clusters and large‑scale storage). Offerors may propose a brand‑new enclave (Phase 1A) or take over the existing “Granite” enclave (Phase 1B). The contract is for an initial one‑year term with up to four one‑year renewals. Deliverables include architecture diagrams, a responsibility matrix for 320 NIST 800‑171 assessment objectives, detailed technical and financial proposals, and compliance documentation. Evaluation will consider experience with CMMC Level 2 certifications, Linux VDI, on‑premises HPC integration, and export‑controlled information handling.