DHS CISA SSN PCCS-24-10001.pdf

SOURCES SOUGHT NOTICE

FOR

DEPARTMENT OF HOMELAND SECURITY

CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY

Cybersecurity Division Mission Engineering Subdivision

Program Support Services Sources Sought Notice PCCS-24-10001

INTRODUCTION

CISA is issuing a Sources Sought Notice (SSN) as a means of conducting market research to identify potential qualified firms having an interest in, and the resources to support, the requirement for Incident Response.

This SSN is for planning purposes only and shall not be construed as an obligation on the part of the Government. This is NOT a Request for Quotations or Proposals. No solicitation document exists, and the Government may or may not issue a formal solicitation resulting from the responses received to this SSN.

The Government will not pay for any response expenses. All costs incurred responding to this SSN will be solely at the interested party's expense. Failure to respond to this SSN will not preclude participation in any future solicitation. Any information received will become the property of the Government and will not be returned to the submitter.

Interested parties are responsible for adequately marking proprietary or sensitive information.

Government technical experts drawn from staff within CISA, and other federal agencies may review responses. The Government may use selected support contractor personnel to assist in the review of the SSN responses. These support contractors will be bound by appropriate non-disclosure agreements to protect proprietary information.

PROGRAM BACKGROUND

CISA’s mission is to lead the national effort to understand, manage, and reduce risk to our cyber and physical infrastructure. To support this cyber mission, CISA’s Cybersecurity Division (CSD) is responsible for enhancing the security, resiliency, and reliability of the nation's cyber and communications infrastructure. It does this by supporting a series of continuous efforts designed to further safeguard Federal Government systems by reducing potential vulnerabilities, protecting against cyber intrusions, and anticipating future threats. Within CSD, Mission Engineering (ME) is responsible to engineer, acquire, integrate, and deliver mission capabilities for cyber operators and analysts to secure and defend the nation’s cyberspace. CSD is headquartered within the National Capital Region (NCR).

REQUIRED CAPABILITIES

The Contractor shall provide services in support of the areas specified in the Program Background as noted above and as provided in the DRAFT (SOW) attached to this announcement.

It is imperative that businesses responding to this SSN articulate their capabilities clearly and adequately regarding each task area listed.

Industry input is also requested on the draft attached SOW. Feedback related to the draft SOW must be submitted as a separate document.

ELIGIBILITY

The applicable NAICS code for this requirement is 541990 - All Other Professional, Scientific, and Technical Services with a Small Business Size Standard of $19.5 Million.

The Product Service Code is R408 Support—Professional: Program Management/Support

Note: In accordance with DHS Directive 060-01, Development and Use of Strategic Sourcing Contract Vehicles, dated 24 August 2012, strategic sourcing vehicles are mandatory for use, with limited exceptions. Therefore, a strategically sourced contract vehicle will take priority over awarding a standalone CISA contract.

SUBMISSION DETAILS

Interested businesses should submit a brief capabilities statement package demonstrating ability to provide the services listed in this announcement. All responses are to use 11-point, Times New Roman font, and one-inch margins, single spaced in all section in Microsoft Word. Page limit: 10 pages.

Responses to this SSN, including any capabilities statement, shall be electronically submitted in either Microsoft Word or Portable Document Format (PDF), no later than December 19, 2023, 2023, at 4:00 P.M Eastern Time to Nathalie Snyder, nathalie.snyder@cisa.dhs.gov and Hannah Moussa, hannah.moussa@cisa.dhs.gov.

Note: The Government reserves the right to hold one-on-one meetings resulting from SSN responses received as part of its market research. Meetings may be held with companies who provide comprehensive and relevant responses to the topic and questions in this notice.

If your organization has the potential capacity to provide the required services, provide the following information:

1. Organization name, UEI, CAGE code, Business size (large or small) and socio-economic status (i.e., 8(a), Small Disadvantaged, HUBZone, Service-Disabled Veteran-Owned, Women-Owned Small Business, etc.), address, primary points of contact (POCs) and their email address, web site address, telephone number.

2. Identify any strategic sourcing vehicles or federal supply schedules your company is included on.

3. Tailored capability statements addressing the requirements of this notice, with appropriate documentation supporting claims of organizational and staff ability.

4. Include the type of work your company performed within the last three (3) years in support of the same or similar requirements (similar in size, scope, and complexity).

a. Provide examples that reflect your company’s capabilities in the task areas outlined in the draft SOW and specify whether support has been provided as a prime contractor or subcontractor.

b. If significant subcontracting or teaming is anticipated; identify potential team members (if known) and describe the administrative and management structure of such arrangements.

5. Please describe your company’s capabilities in providing surge support based on changing requirements for short- and long-term mission needs.

6. Please describe your company’s capabilities in providing operational support services successfully in the federal government cybersecurity domain.

7. Please describe your company’s capabilities in coordinating broad range of operational support services including but not limited to operations and administration support, budget formulation and execution support, financial management and cost support, procurement and contract execution support, project management, and program planning support operations with the US Government.

Furthermore, CISA’s preference is to procure services on a small business set-aside basis, to the extent possible, based on market research results.

We encourage all small businesses, in all socioeconomic categories (including, 8(a) Business Development Program, Small Disadvantage Business, Historically Underutilized Business Zone, Service-Disabled Veteran-Owned, Women-Owned Small

Business concerns), to identify their capabilities in meeting the requirement at a fair market price.

APFS Record: F2024064641 Notional Milestones:

Sources Sought Notice: December 2023 Finalize SOW and Acquisition Strategy: February 2024 Release Solicitation/RFQ: March 2024 Award: August 2024

All data received in response to this SSN that is marked or designated as corporate of proprietary will be fully protected from any release outside the Government.