Consumer Financial Protection Bureau Cybersecurity Support Services
The Consumer Financial Protection Bureau (CFPB) Cybersecurity Support Services Blanket Purchase Agreement (BPA) is a multi-award contract vehicle designed to provide comprehensive cybersecurity services to the agency. The master BPA, with a shared ceiling of $126,090,862.73, enables the CFPB to acquire specialized cybersecurity support through task orders across multiple cybersecurity domains. The vehicle supports the agency's critical need to maintain robust information security, protect consumer financial data, and ensure comprehensive cyber risk management.
The master BPA has awarded task orders to several prime contractors, including Deloitte & Touche LLP, ManTech Advanced Systems International, Inc., and Gunnison Consulting Group, Inc. These task orders, typically valued between $3.4 million and $11.8 million, cover specialized cybersecurity service areas such as Security Architecture and Engineering (SAE), Safeguards and Risk Management (SRM), Cybersecurity Operations (CyberOps), and Information Security Standards (ISS). The task orders are consistently structured as time and materials contracts with performance periods extending to October 2026, predominantly located in Virginia. None of the current task orders utilize small business set-aside designations, indicating full and open competition among large businesses with significant federal cybersecurity experience.
Master BPA 9/5/23 9/4/28 CFPB Fund and Redress Administration
The Consumer Financial Protection Bureau (CFPB) Fund and Redress Administration Indefinite Delivery/Indefinite Quantity (IDIQ) contract is a $50 million, 5-year multiple-award contract designed to provide third-party administration services for consumer protection enforcement actions. The primary objective of this contract vehicle is to support the CFPB's efforts to efficiently manage and distribute relief funds to consumers harmed by unfair, deceptive, or illegal financial practices. The contract enables the CFPB to rapidly engage specialized firms to handle complex claims administration, victim identification, payment processing, and reporting services across various consumer financial matters.
The task orders under this IDIQ are consistently firm fixed-price delivery orders, typically ranging from approximately $50,000 to $1.1 million, with performance periods spanning 1-4 years. Two primary prime contractors dominate the task orders: Epiq Class Action & Claims Solutions, Inc. and Rust Consulting, Inc. These firms provide specialized services for diverse matters including student loan issues, debt collection practices, lending violations, and civil penalty fund distributions. All task orders to date have been awarded without specific small business set-asides, indicating full and open competition. The primary performance locations appear to be in Minneapolis, Minnesota and Beaverton, Oregon. Task orders frequently involve administering redress for specific enforcement actions such as the JPAY Redress Matter, Monster Loans/Quick Debt Matter, and various student loan and lending-related consumer protection cases.
Master IDIQ 3/23/17 3/22/19 CFPB Economic Research
The Consumer Financial Protection Bureau (CFPB) Economic Research Master Indefinite Delivery/Indefinite Quantity (IDIQ) contract supports advanced economic research focused on consumer financial markets. The contract enables the CFPB's Office of Research to collaborate with contractors capable of designing, executing, and supporting economic laboratory experiments. These experiments are primarily aimed at testing disclosure effectiveness, exploring economic theories, and investigating behavioral patterns in various financial contexts. The vehicle provides a flexible mechanism for the agency to procure targeted research services that enhance understanding of consumer financial decision-making.
Task orders under this IDIQ consistently involve experimental research projects with academic institutions and private research firms, typically ranging from $15,000 to $110,000 in value and lasting between six months to three years. Gettysburg College has been a notable recipient, winning multiple delivery orders to conduct experiments on consumer financial disclosure techniques. Other contractors like Fors Marsh Group have also been awarded task orders, demonstrating the vehicle's openness to both academic and private sector research providers. All observed task orders were firm fixed-price awards with no specific set-aside designations, indicating open competition. The research work has been predominantly performed in locations including Gettysburg, Pennsylvania, and Arlington, Virginia, with a clear focus on supporting the CFPB's mission of improving consumer financial market transparency and understanding.
Master IDIQ 6/10/15 6/10/19 CPFB Cybersecurity
The Consumer Financial Protection Bureau (CFPB) Cybersecurity Master Blanket Purchase Agreement (BPA) is a multiple-award contract vehicle designed to provide comprehensive cybersecurity services and support to the agency. The primary focus of this BPA is to deliver advanced cybersecurity solutions, including Identity, Credential, and Access Management (ICAM) support, incident response, compromise assessment, and other critical IT security functions. Task orders under this vehicle are structured to enable rapid procurement of specialized professional services related to cybersecurity, IT modernization, and mission-critical technological support for the CFPB.
The BPA has been awarded to multiple prime contractors, including Deloitte Consulting LLP, Knowledge Consulting Group Inc. (KCG), and Booz Allen Hamilton Inc., with task order values ranging from approximately $350,000 to $12.7 million. These task orders typically have durations between one to two years, with most recent awards extending through late 2023. No specific small business set-aside designations were used for these awards, though some task orders involve subcontracting with small businesses such as women-owned and service-disabled veteran-owned enterprises. The primary place of performance is Washington, DC, with contractors providing cybersecurity services that support the CFPB's mission of protecting consumers in financial markets through comprehensive security and risk management solutions.
Master BPA 9/12/16 9/11/21 Diversity Compliance Support Services
The Diversity Compliance Support Services Master Indefinite Delivery/Indefinite Quantity (IDIQ) contract was awarded by the Consumer Financial Protection Bureau (CFPB) to provide comprehensive support services for the agency's Legal Division. The contract encompasses three primary service components: Performance Management, Compensation, and Hiring. Contractors under this vehicle are tasked with reviewing relevant documents, conducting data analyses, and developing detailed reports to support the CFPB's internal operational and compliance objectives.
Task orders under this IDIQ demonstrate a focus on statistical, personnel, and compliance-related services, with values ranging from approximately $22,000 to $465,000. Charles River Associates (CRA International, Inc.) has been a prominent contractor, winning multiple task orders including a $92,162 statistical support services order and a $465,570 personnel practice review task order. All observed task orders were awarded without specific set-aside designations, indicating open competition. The task orders typically have durations between one to two years, with pricing structured under labor hour contract types. The vehicle's shared ceiling value is $4,000,000, suggesting potential for multiple contractors to receive task order awards across various specialized support services for the CFPB's Legal Division.
Master IDIQ 9/29/14 9/27/19