CPFB Cybersecurity

The Consumer Financial Protection Bureau (CFPB) Cybersecurity Master Blanket Purchase Agreement (BPA) is a multiple-award contract vehicle designed to provide comprehensive cybersecurity services and support to the agency. The primary focus of this BPA is to deliver advanced cybersecurity solutions, including Identity, Credential, and Access Management (ICAM) support, incident response, compromise assessment, and other critical IT security functions. Task orders under this vehicle are structured to enable rapid procurement of specialized professional services related to cybersecurity, IT modernization, and mission-critical technological support for the CFPB.

The BPA has been awarded to multiple prime contractors, including Deloitte Consulting LLP, Knowledge Consulting Group Inc. (KCG), and Booz Allen Hamilton Inc., with task order values ranging from approximately $350,000 to $12.7 million. These task orders typically have durations between one to two years, with most recent awards extending through late 2023. No specific small business set-aside designations were used for these awards, though some task orders involve subcontracting with small businesses such as women-owned and service-disabled veteran-owned enterprises. The primary place of performance is Washington, DC, with contractors providing cybersecurity services that support the CFPB's mission of protecting consumers in financial markets through comprehensive security and risk management solutions.