70RCSJ26RFI000001 CTS.pdf

REQUEST FOR INFORMATION

FOR

DEPARTMENT OF HOMELAND SECURITY

CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY

CYBER TECHNOLOGY SERVICES

REQUEST FOR INFORMATION NUMBER: 70RCSJ26RFI000001

INTRODUCTION

The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA) is issuing this Request for Information (RFI) as a means of conducting market research to identify potential qualified companies having an interest in, and the resources to support the Cyber Technology Services (CTS) requirement. This RFI is for planning purposes only and shall not constitute an obligation on the part of the Government. This is NOT a Request for Quotations or Proposals. No solicitation document exists, and the Government may or may not issue a formal solicitation resulting from the responses received to this RFI.

The Government will not pay for any response expenses. All costs incurred responding to this RFI will be solely at the interested party's expense. Failure to respond to this RFI will not preclude participation in any future solicitation. Any information received will become the property of the Government and will not be returned to the respondent. Interested parties are responsible for adequately marking proprietary or sensitive information. Government technical experts drawn from staff within CISA, and other federal agencies may review responses. The Government may use selected support contractor personnel to assist in the review of the RFI responses. These support contractors will be bound by appropriate non-disclosure agreements to protect proprietary information.

The purpose of this RFI is to provide interested companies with the opportunity to submit information regarding their capabilities to meet the Government’s requirements. Responses to this RFI will assist the Government in refining the scope, technical approach, contract type, potential contract vehicles, and the method of acquisition.

PROGRAM BACKGROUND

The CTS requirement will provide support services in carrying out the day-to-day operations through the sustainment of Government networks and related services utilizing cybersecurity activities and computer network defense initiatives for the Cybersecurity Division (CSD), Threat Hunting (TH) Sub-division which entails Information Technology (IT) Development Operations, IT Security Operations, Operation and Maintenance (O&M) activities, and Technology and Innovation services.

Additionally, the requirement will provide services designed to improve operations, to include cybersecurity activities and computer network defense initiatives to satisfy the task areas listed below and described in the draft Performance Work Statement (PWS) for a proposed single task order.

Task Area 1 – Program Management Task Area 2 – IT Architecture, Technology, and Innovation Services Task Area 3 – IT Engineering, Development Operations and Services Task Area 4 – Data Management & Analytics Task Area 5 – IT Sustainment, Operations and Maintenance (O&M) Services Task Area 6 – IT Security Operations and Services Task Area 7 – Laboratory Support Services Task Area 8 – IT Service Desk, Asset Management & Logistical Support

HOW TO RESPOND TO THIS RFI

Respondents that believe they possess the capabilities to provide all the task areas should submit documentation of their ability to meet each of the task areas.

Respondents that believe they possess the capabilities to provide four or more of the task areas should submit documentation of their ability to meet those task areas.

It is imperative that responses be brief and concise, yet articulately and clearly demonstrate the ability to perform each task area listed with appropriate documentation supporting claims of organizational and staff ability.

Include the type of work your company performed within the last three years in support of the same or similar requirements, size, and complexity, indicating the customer, contract type and approximate value, and scope and major functional areas delivered.

Describe your organization’s core capabilities and provide one example that reflects your company’s experience in each task area outlined in the draft PWS, particularly:

• Large‑scale cybersecurity engineering and operations in Federal environments;

• Development, Security, and Operations (DevSecOps) for mission‑critical systems

(classified and unclassified);

• 24x7x365 SOC operations and incident response;

• Threat‑hunting tools, platforms, and services;

Indicate your organization’s size and socio-economic status (e.g., large business, small business, 8(a), HUBZone, SDVOSB, WOSB). If significant subcontracting or teaming is anticipated, identify potential team members (if known) and describe the administrative and management structure of such arrangements. Describe how your organization would anticipate using teaming arrangements or subcontractors (e.g., niche cyber capabilities, lab specialties, small business partners). Identify any particular skill sets or niche capabilities you would likely seek from teammates.

Please also respond to the following questions within your submission:

1. Please describe how your Company has identified and addressed specific process, visibility and capability gaps in a large enterprise infrastructure environment (e.g., Federal Civilian Executive Branch) and as a result implemented new tools and/or data sources.

2. Describe how your Company leveraged roles such as Project Managers, Tech Writers, and Business Process analysts in a manner that minimized administrative burden to end users. Describe your approach to program governance, scheduling, risk management, and performance measurement for a multitask area, multilocation engagement.

3. Describe your Company’s experience successfully delivering full-lifecycle architecture, engineering, and sustainment of complex IT systems, hardware, and software across numerous classified and unclassified network enclaves.

4. Describe your Company’s experience providing holistic data governance, management, and analytic capability development to an extremely large, complex enterprise, consisting of numerous classified and unclassified network enclaves, systems, applications, and data stores, in a fully integrated and data-centric architecture.

5. Is your Company currently performing or have in the past performed same or similar services as those in this RFI? If so, indicate whether your organization offers capabilities described in this notice on one or more of your company's own Federal Government contracts (i.e., GSA Multiple Award Schedule or Government-wide Acquisition Contracts).

6. Based on the scope and risk described in the draft requirements document, what contract type(s) do you recommend? Please address the rationale for your recommendation by task area (e.g., development vs. O&M vs. SOC operations).

7. Identify any sections or task areas of the draft requirements document that you believe are: ambiguous or unclear; not feasible as written; or potentially duplicative or overlapping. Provide suggested clarifications, consolidations, or changes to improve clarity and executability.

8. Identify any innovative practices, technologies, or approaches (technical, operational, or contractual) that you believe CISA should consider to enhance mission outcomes under this requirement.

9. Provide feedback on the realism and feasibility of the described key roles (e.g., Senior Contractor Program Manager, Project Manager, Senior IT Program Manager) and any recommended additional key roles. Provide examples of typical labor categories and qualification standards (e.g., years of experience, education, certifications, clearance levels) that you would expect to use to meet the PWS requirements.

ELIGIBILITY

The applicable NAICS code for this requirement is 541519 – Other Computer Related Services with a Small Business Size Standard of $34M. The Product Service Code is DA01 IT and Telecom Business Application/Application Development Support Services.

Note: In accordance with DHS Directive 060-01, Development and Use of Strategic Sourcing Contract Vehicles, dated 24 August 2012, strategic sourcing vehicles are mandatory for use, with limited exceptions. Therefore, a strategically sourced contract vehicle will take priority over awarding a standalone CISA contract.

SUBMISSION DETAILS

Interested companies should submit a capabilities statement package (no more than 10 pages, 8.5 x 11-inch pages, font no smaller than 10 point) demonstrating the ability to provide the services listed in this RFI.

Entities should submit a Cover Page: The cover page does not count towards the page limit. The cover page should contain at a minimum the following information:

Company name and address Primary Point of Contact, including phone number and email address SAM.GOV Unique Entity ID (UEI) and CAGE code Business Type NAICS Code and associated size standard.

Submit responses electronically in either Microsoft Word or Portable Document Format (PDF), no later than 4:00 p.m. EST, June 19, 2026 to hannah.moussa@.cisa.dhs.gov and jennifer.burbage@cisa.dhs.gov (No phone calls please.)

All data received in response to this RFI that is marked or designated as corporate or proprietary will be handled in accordance with applicable laws and regulations and fully protected from any release outside the Government.

Respondents must refrain from providing any proprietary, confidential, or classified information in response to this RFI. Responses to this RFI will not be returned and all submissions become Government property.