"In the absence of any reference in the RFE mandating certification from a specific agency, the submission of a CMMI certificate issued by a third-party