Cybersecurity capabilities projects IDIQ

Ended Indefinite Delivery Contract Awarded Last action

Contract number
75F40120D00030
Awardee
Awarding agency
Task orders
9 $35,237,031 obligated

Award facts

Opportunity
Combined order value
  • $35,237,031 Current, with exercised options
  • $37,950,210 Potential, with all options
Last date to order 100% complete
IDV ceiling 78% used
$45,000,000.00
Maximum order
$45,000,000.00
Award type
Single award
Who can order
Only the awarding agency
Set-aside
Competitive 8(a)
Competition
Full and Open Competition after exclusion of sources · 5 offers Negotiated Proposal / Quote
Pricing
Order Dependent (IDV only)
Legislative mandates

Award details come from SAM.gov/FPDS.

About this IDV

The Food and Drug Administration (FDA) awarded a single-award Indefinite Delivery/Indefinite Quantity (IDIQ) contract valued at $45 million to Copper River Cyber Solutions, LLC on September 25, 2020, under the competitive 8(a) small business set-aside. Titled the Cybersecurity Capabilities Projects IDIQ, this contract vehicle was established to provide expertise supporting the FDA System Management Center and associated cybersecurity capabilities aligned with the National Institute of Standards and Technology (NIST) Cybersecurity Framework and the Department of Homeland Security (DHS) Continuous Diagnostic and Mitigation Program. The scope encompasses asset management, vulnerability scanning, penetration testing, security incident response, and emerging technology capabilities. Copper River Cyber Solutions is an Alaska Native-owned, tribally owned, and minority-owned small business certified in the Small Business Administration's 8(a) Program and registered in the System for Award Management since 2014. The IDIQ contract established the ceiling authority under which the FDA has issued nine delivery orders through January 2025, with performance locations primarily in the Maryland area (North Bethesda, Silver Spring, and Rockville) and one location in Anchorage, Alaska.

Under this IDIQ vehicle, the FDA has issued nine delivery orders totaling approximately $39.5 million in contracted cybersecurity services. These delivery orders include cybersecurity threat hunting services ($7.32 million, firm fixed price, through September 2028), cybersecurity engineering services ($9.07 million, labor hours, through January 2027), cybersecurity support services using various pricing mechanisms ($2.13 million, $7.77 million, $3.41 million, and $3.07 million), cybersecurity platform and Pure Storage engineering services ($1.97 million), and cybersecurity hunt activities ($1.29 million and $1.96 million). Most delivery orders utilized firm fixed price or labor hour pricing structures, with several issued under competitive 8(a) set-asides and others issued without set-aside designation. The services delivered have evolved over the performance period from September 2020 through anticipated completion dates extending to September 2028, supporting the FDA's critical mission to protect public health by ensuring robust information security posture and cyber threat mitigation across its regulatory systems and infrastructure.

Task orders

Transactions

Action Obligated Date
Other Administrative Action P00003 $0
Exercise an Option P00002 $0
Supplemental Agreement for work within scope P00001 · Cybersecurity capabilities projects $0
Original award $0

Quick answers

Who was awarded contract 75F40120D00030?

75F40120D00030 was awarded to Copper River Cyber Solutions, LLC by Food and Drug Administration (Department of Health and Human Services) on September 25, 2020.

How much is contract 75F40120D00030 worth?

Orders under 75F40120D00030 have obligated $35,237,031. Their combined potential value, with all options, is $37,950,210. 75F40120D00030's own ceiling is $45,000,000. A single order can be worth up to $45,000,000.

How many orders have been placed under contract 75F40120D00030?

9 orders have been placed under 75F40120D00030, the latest on January 17, 2025.

Who can order from contract 75F40120D00030?

75F40120D00030 is a single award indefinite delivery contract. Only the awarding agency can place orders on it.

Was contract 75F40120D00030 competed?

The extent of competition for 75F40120D00030 was full and open competition after exclusion of sources. The government received 5 offers. It was set aside: Competitive 8(a).

On GovTribe

See this IDV's full record

  • Every order and transaction
  • The awardee's other awards and teaming partners
  • Similar IDVs and recompete opportunities
  • Ask GovTribe AI about this IDV