NCCS 2.0 Industry Day Questions _May19_2026.pdf

Question # Reference SOW Section Paragraph No. Question DHS Response

1 N/A N/A Will NCCS 2.0 require support across the full RMF lifecycle, including ATO package development, POA&M management, and ongoing continuous monitoring activities within NOSC environments?

No. DHS does not expect this contract offering to directly support governance, risk and compliance activities relating to ATO's or ISSO support services within this offering.

2 N/A N/A Will there be opportunities for small businesses, including SDVOSBs, to support ISSO functions and compliance efforts as part of prime contractor teams? No, ISSO and Compliance Support services are not included in the scope of this contract.

3 What acquisition approach is DHS considering for NCCS 2.0 to best support scalable, long term network, cloud, and cyber operations (e.g., single vs. multiple award IDIQ/BPA, new or existing vehicle)?

DHS is considering a DHS Wide Strategic Sourcing Vehicle (SSV) Single award IDIQ.

4 Will NCCS 2.0 operate as an enterprise wide NOSC capability across DHS, or be delivered through component specific operational models?

NCCS 2.0 is intended to operate as an enterprise-wide NOSC capability across DHS, serving as the central hub for IT service management, network, cloud, system, application, and cybersecurity monitoring and incident response for the DHS Onenet at all information processing and classification levels. Component-specific operational models may be supported as needed. The primary focus is enterprise-wide coverage, with flexibility for component-specific needs. The DHS NOSC will continue to supprt other DHS Compenets as both the senior reporting point for the department and through the Cyber Security Provider program within DHS for components that choose to leverage the NOSC to provide those services.

5 How does DHS envision integrating prime contractors and specialized service providers for cloud engineering, cybersecurity operations, Zero Trust implementation, and managed NOSC services?

This offering is a single award IDIQ and the NOSC expects that any awardee will manage and maintain their awarded contract appropriately.

6 What level of emphasis does DHS anticipate on cloud native operations versus hybrid or on premises environments within AWS GovCloud and Azure Government?

DHS is a hybrid computing environment and will continue to have on premises, off premises and managed services providers depending upon the needs of service procured to support DHS.

7 Which security and operational frameworks will be most critical to NCCS 2.0 success, and how should service providers demonstrate ongoing alignment and compliance?

As a government agency DHS NSOC must follow all applicable laws, regulations and policies, including NIST Frameworks.

8 Is DHS seeking expanded use of automation and AI enabled capabilities (e.g., SOAR, automated remediation, predictive analytics) to enhance NOSC efficiency and resilience?

Yes, DHS NOSC expects the awardee to be able to support and recommend additional capabilities to improve the efficiency and resilience of the DHS NOSC and its capabilities.

9 Will NCCS 2.0 contractors be responsible for providing and managing core network and security tools, or will DHS retain platform ownership with contractors focused on operations and optimization?

DHS will continue to provide and maintain the tools that the staff within DHS NOSC leverage or operate.

10 What small business participation goals or socioeconomic considerations does DHS anticipate for NCCS 2.0?

DHS proposed subcontracting goals will be provided in the draft/final RFP

11 When evaluating proposals, will DHS place greater weight on DHS specific NOSC experience, broader federal cyber/cloud operations, or large scale enterprise managed services experience?

The instructions on how the government will evaluate proposals will be provided in the solicitation once it is finalized.

12 What is the anticipated timeline from Industry Day to draft RFP, final solicitation, and award, and does DHS plan additional industry engagements?

Please see notional time line in Industry day slides. The government anticipates a presoliciation conference.

13 Will DHS provide guidance for small businesses interested in teaming or subcontracting under

NCCS 2.0?

Yes, information about teaming and subcontracting requirements will be in the solicitation.

14 Are there specific capability areas where DHS expects small business participation to be especially valuable?

DHS expects small business participation to be especially valuable in areas such as field engineering technical services, surge support, vulnerability assessments, cybersecurity audits, training and exercise programs, and specialized operational support for network, cloud, and cybersecurity monitoring and analysis as deemed necessary or required. Small businesses may also contribute to innovation, automation, and continuous service improvement initiatives, as well as provide niche expertise for incident response and operational optimization. DHS supports the inclusion of small businesses in these roles to enhance flexibility, responsiveness, and technical depth within NOSC operations.

15 Will an attendee list, teaming forum, or prime contractor contact list be made available after Industry Day?

This list has been released on sam.gov and includes only those attendees who have agreed to share their information

16 Will the Government entertain One-on-One meetings with the industry?

At this time, we do not anticipate conducting one on one meetings. However, we will keep the possibility under consideration and will keep industry abreast of any changes to this approach.

17 Does the Government have plans to release this as a Small Business? Or any other categories within Small Business?

At this time, DHS is planning to release this as a full and open solicitation.

18 Will there be opportunities for small businesses, including SDVOSBs, to support ISSO functions and compliance efforts as part of prime contractor teams?

No, ISSO and Compliance Support services are not included in the scope of this contract.

19 How does DHS anticipate the contractor's role in supporting AI governance, risk management, and oversight obligations for AI-enabled capabilities operating within the NOSC environment, including alignment to the NIST AI Risk Management Framework?

AI Governance or policy support services are not included in the scope of this contract.

20 Does DHS expect AI governance and policy support to be performed within the NCCS 2.0 scope, or addressed through a separate vehicle or task?

AI Governance or policy support services are not included in the scope of this contract.

21 Will DHS encourage or require small business teaming arrangements that bring AI governance and policy expertise alongside traditional network and cyber operations capabilities?

AI Governance or policy support services are not included in the scope of this contract.

22 Will DHS be submitting the final RFP to all firms who responded to the RFI or only selected organizations?

The RFP will be posted on Sam.gov to all of industry.

23 Will DHS be having a small business set-aside awardee as part of the multi-award approach?

No this is a single award IDIQ

24 Will the final procurement require an active Top Secret Facility Clearance at the time of proposal submission?

Yes.

25 Will DHS permit subcontractor Facility Clearance reliance, or must the prime contractor independently possess the required clearance level?

Under the National Industrial Security Program (NISP), the prime contractor must independently possess the required Facility Clearance (FCL) and cannot begin a classified contract based solely on a subcontractor’s FCL. However, unclassified support may be provided for the contract until the prime obtains its final FCL.

26 Is DHS anticipating a single award or multiple award IDIQ structure? DHS anticipates a single award IDIQ.

27 What contract type is currently anticipated for this effort: Time & Materials, Labor Hour, Firm Fixed Price, Hybrid structure

DHS is anticipating an IDIQ that allows LH, T&M, FFP or hybrid task orders.

Industry Day for NCCS 2.0 (May 19, 2026)

28 Will DHS require an approved purchasing system, EVMS, or other contractor business system requirements?

NCCS 2.0 is a services contract and not a system. EVMS will not be required. Since the Government anticipates T&M and cost reimbursement CLINS for Travel/ODCs, offerors must have an adequate accounting system in accordance with RFO 16.301-3(a)

29 Will small business Joint Ventures, Contractor Teaming Arrangements, or mentor protege structures be permitted?

Yes

30 Who are the current incumbent prime contractors supporting NCCS and NOSC operations? This is not an all inclusive list: Leidos, Caci, APF Technology, LLC, Decision Point

31 Approximately how many total FTEs currently support this environment? 100+ current FTEs.

32 Approximately what percentage of personnel require Secret, Top Secret, TS/SCI, SAP elegibility?

Specific personnel requirements will be addressed in the solicitation or RFP instructions. DHS will require contractors to maintain staff with the requisite security clearances, compartment accesses, and DHS suitability statuses to perform work at all NOSC locations, including classified system and resource monitoring. The actual percentage will depend on task order requirements and the mix of classified and unclassified work, which will be defined at the task order level.

33 What is the approximate operational split between Network Operations, Cloud Operations, Cybersecurity Operations, Program Management/PMO Support?

Selected material will be shared in the technical library. Instructions to review materials in the technical library will be released within the RFP

34 Is the incumbent workforce retention anticipated to be a significant consideration? Incumbent workforce retention is always a sound practice for any awardee to pursue, but not required by

DHS.

35 Which locations are expected to require permanent onsite support? The locations will be defined in each Task Order.

36 Will contractor personnel require access to SCIF environments for operational support activities?

Yes, supporting classified environments is within scope of this contract and will be defined at the task order.

37 Will Government furnished SCIF workspace be provided, or will accredited contractor SCIF capability be required for portions of performance?

Yes, government furnished SCIF workspace will be provided and No, contractor accredited SCIF space is not required.

38 What major enterprise platforms and environments are currently in scope, including SIEM, cloud, and IT service management platforms?

DHS is a hybrid computing environment and will continue to have on premises, off premises and managed services providers depending upon the needs of service procured to support DHS. DHS will continue to provide and maintain the tools that the staff within DHS NOSC leverage or operate.

39 Are there Government furnished tools currently supporting operations, or is DHS anticipating contractor provided tooling in certain areas?

Yes but DHS will continue to provide and maintain the tools that the staff within DHS NOSC leverage or operate. A list of tools will be provided in the technical library.

40 Is DHS expecting operational maturity demonstrations related to automation, AI assisted analysis, or agentic AI capabilities?

No

41 What transition period is currently anticipated? This will be determined by the individual Task Order awards

42 Are there known stfafing shortage areas or historically difficult to fill labor categories within the currently operational environment?

No, no more than DHS has experienced with other IT Contracts. Competition for more senior developed personnel with clearances has historically been observed.

43 Is surge staffing currently utilized to support operational requirements? Surge staffing is leveraged when necessary to support efforts on an as needed basis.

44 What operational capability areas are expected to be most critical to successful contract performance?

All areas are considered critical for successful contract performance

45 Will DHS evaluate demonstrated experience supporting DHS Cybersecurity Service Provider maturity requirements and classified cyber operations environments?

Yes. DHS will evaluate demonstrated experience supporting DHS Cybersecurity Service Provider (CSP) maturity requirements and classified cyber operations environments. The SOW requires contractors to maintain CSP Program Center of Excellence accreditation, comply with CSP Evaluator Scoring Metrics, and support operations across all classification levels, including Secret, Top Secret, TS/SCI, and SAP. Offerors will be expected to show relevant experience and maturity in these areas as part of the evaluation process.

46 Can DHS confirm whether NCCS 2.0 is anticipated to utilize a single-award IDIQ structure to streamline contract administration, establish clear accountability, improve responsiveness to evolving mission requirements, and enable rapid operational scaling and surge support?

Yes, DHS anticipates a single award IDIQ.

47 Would DHS consider a multi-phase source selection approach in which Phase 1 evaluates recent and relevant past performance to efficiently narrow the competitive range to the most qualified offerors, followed by a Phase 2 evaluation focused on operational expertise, technical approach, mission alignment, and price realism in support of selecting the highest technically rated offeror with a fair and reasonable price?

Yes. DHS will consider a phased approach as we continue to formulate the source selection process. Past performance is not being considered as an evaluation factor at this time.

48 Would DHS consider incorporating oral presentations, including scenario-based discussions, into the NCCS 2.0 evaluation process to accelerate procurement timelines, reduce evaluation burden, and better assess an offeror’s operational understanding, technical approach, and the real-world decision-making capabilities of proposed key personnel and SMEs?

At this time oral presentations are not being considered.

49 If oral presentations are utilized, would DHS consider a structured format in which offerors provide a 30-minute technical and management presentation followed by 90 minutes of interactive response to realistic operational scenarios, enabling DHS to evaluate real-time collaboration, technical problem solving, and operational leadership among proposed performing personnel?

At this time oral presentations are not being considered.

50 Would DHS consider expanding the technical evaluation confidence rating scale from the current three-level approach (e.g., High Confidence, Some Confidence, Low/No Confidence) to a more granular five- or seven-point scale in order to provide the Government with greater flexibility to meaningfully differentiate among offerors, better assess varying levels of technical maturity and operational capability, and improve the effectiveness of the overall source selection decision process?

The government will consider the technical evaluation confidence ratings and assess it's definitions to ensure it is meaningful, clearly distinguish levels of confidence, and effectively support the evaluation of an offeror's ability to successfully perform the requirements of the contract.

51 Does DHS anticipate releasing a draft RFP prior to the final solicitation? Yes 52 What acquisition milestones are currently anticipated for draft RFP release, final RFP release, award, and transition start? Please see industry day slides for notional milestones

When does DHS anticipate releasing Sections B, H, L, and M to industry? Please see industry day slides for notional milestones. This will be released in the draft and final RFP.

Does DHS anticipate issuing an awardable sample task order as part of the NCCS 2.0 evaluation process, and if so, would DHS consider structuring the sample task order with a three-year period of performance to allow offerors to demonstrate phased innovation, automation, AI-enabled modernization, and operational efficiencies that mature over time?

The government is still in the process of formulating the source selection process. All evaluation techniques are being considered at this time

55 In light of Executive Order 14402, “Promoting Efficiency, Accountability, and Performance in Federal Contracting,” how is DHS evaluating the use of fixed-price and performance-based acquisition strategies for NCCS 2.0 IDIQ while balancing the operational realities of 24x7x365 cybersecurity operations, incident response, surge support, and evolving threat environments?

DHS is carefully considering the principles outlined in Executive Order 14402, Promoting Efficiency, Accountability, and Performance in Federal Contracting, as part of the acquisition strategy for NCCS 2.0.

The Department recognizes the benefits of fixed-price and performance-oriented contracting approaches where requirements can be clearly defined, performance outcomes can be objectively measured, and performance risk can be reasonably allocated to the contractor.

However, the NCCS 2.0 requirement is expected to support a broad range of cybersecurity mission activities, including continuous 24x7x365 operations, incident response, surge support, vulnerability mitigation, threat hunting, and other activities that must adapt to rapidly evolving cyber threats and operational priorities. These mission requirements may involve varying levels of uncertainty, changing workload demands, and circumstances that cannot always be fully defined in advance.

To provide the flexibility necessary to support these operational realities, DHS currently intends to award a single-award IDIQ contract that permits the issuance of Fixed-Price (FFP), Time-and-Materials (T&M), Labor-Hour (LH), and hybrid task orders, as appropriate for the specific requirement being acquired. The contract structure is intended to enable the Government to select the task-order contract type that best aligns with the nature of the work, the level of performance risk, and the ability to define and measure outcomes.

At this time, DHS does not intend to structure NCCS 2.0 as a predominantly performance-based acquisition. Rather, the Department anticipates employing a mix of contract types at the task-order level to achieve an appropriate balance between efficiency, accountability, mission effectiveness, and operational flexibility while ensuring support for dynamic cybersecurity requirements.

56 Does DHS anticipate increasing the use of performance-based outcomes, service-level objectives, and measurable operational metrics within NCCS 2.0 in response to the Executive Order’s emphasis on performance-based contracting?

DHS is carefully considering the principles outlined in Executive Order 14402, Promoting Efficiency, Accountability, and Performance in Federal Contracting, as part of the acquisition strategy for NCCS 2.0.

The Department recognizes the benefits of fixed-price and performance-oriented contracting approaches where requirements can be clearly defined, performance outcomes can be objectively measured, and performance risk can be reasonably allocated to the contractor.

However, the NCCS 2.0 requirement is expected to support a broad range of cybersecurity mission activities, including continuous 24x7x365 operations, incident response, surge support, vulnerability mitigation, threat hunting, and other activities that must adapt to rapidly evolving cyber threats and operational priorities. These mission requirements may involve varying levels of uncertainty, changing workload demands, and circumstances that cannot always be fully defined in advance.

To provide the flexibility necessary to support these operational realities, DHS currently intends to award a single-award IDIQ contract that permits the issuance of Fixed-Price (FFP), Time-and-Materials (T&M), Labor-Hour (LH), and hybrid task orders, as appropriate for the specific requirement being acquired. The contract structure is intended to enable the Government to select the task-order contract type that best aligns with the nature of the work, the level of performance risk, and the ability to define and measure outcomes.

At this time, DHS does not intend to structure NCCS 2.0 as a predominantly performance-based acquisition. Rather, the Department anticipates employing a mix of contract types at the task-order level to achieve an appropriate balance between efficiency, accountability, mission effectiveness, and operational flexibility while ensuring support for dynamic cybersecurity requirements.

57 Given the Executive Order’s emphasis on tying contractor profit to measurable performance outcomes, does DHS anticipate incorporating incentive structures, balanced scorecards, or performance-based metrics into NCCS 2.0 evaluation and contract management approaches?

DHS is carefully considering the principles outlined in Executive Order 14402, Promoting Efficiency, Accountability, and Performance in Federal Contracting, as part of the acquisition strategy for NCCS 2.0.

The Department recognizes the benefits of fixed-price and performance-oriented contracting approaches where requirements can be clearly defined, performance outcomes can be objectively measured, and performance risk can be reasonably allocated to the contractor.

However, the NCCS 2.0 requirement is expected to support a broad range of cybersecurity mission activities, including continuous 24x7x365 operations, incident response, surge support, vulnerability mitigation, threat hunting, and other activities that must adapt to rapidly evolving cyber threats and operational priorities. These mission requirements may involve varying levels of uncertainty, changing workload demands, and circumstances that cannot always be fully defined in advance.

To provide the flexibility necessary to support these operational realities, DHS currently intends to award a single-award IDIQ contract that permits the issuance of Fixed-Price (FFP), Time-and-Materials (T&M), Labor-Hour (LH), and hybrid task orders, as appropriate for the specific requirement being acquired. The contract structure is intended to enable the Government to select the task-order contract type that best aligns with the nature of the work, the level of performance risk, and the ability to define and measure outcomes.

At this time, DHS does not intend to structure NCCS 2.0 as a predominantly performance-based acquisition. Rather, the Department anticipates employing a mix of contract types at the task-order level to achieve an appropriate balance between efficiency, accountability, mission effectiveness, and operational flexibility while ensuring support for dynamic cybersecurity requirements.

58 How does DHS envision applying the Executive Order’s requirements for justification of non-fixed-price contracts to NOSC operations where cyber incidents, surge requirements, and evolving operational needs may be difficult to fully define at IDIQ award?

DHS is likely to use a hybrid contract model for NCCS 2.0, combining fixed-price and flexible CLINs, and will justify non-fixed-price elements based on the unpredictable nature of NOSC operations, supported by robust documentation and performance management. DHS recognizes that NOSC operations involve unpredictable cyber incidents, surge requirements, and evolving needs that may be difficult to fully define at the time of IDIQ award. To apply the Executive Order’s requirements for justification of non-fixed-price contracts, DHS will likely document the operational realities and need for flexibility in contract management. DHS will justify non-fixed-price elements by demonstrating that certain tasks, such as surge support and incident response that cannot be accurately scoped in advance, and will implement controls, oversight, and measurable outcomes to maintain contractor accountability and compliance with federal acquisition policy.

59 Would DHS consider a hybrid acquisition approach that combines fixed-price elements for stable operational services with flexible T&M or labor-hour CLINs for surge response, incident-driven activities, and emerging cybersecurity requirements?

DHS is anticipating an IDIQ that allows Labor Hour, Time & Materials, Firm Fixed Price or hybrid task orders.

60 How does DHS plan to align NCCS 2.0 evaluation criteria with the Executive Order’s emphasis on accountability, cost predictability, and measurable performance outcomes while still encouraging innovation, automation, and AI-enabled modernization?

DHS recognizes the Executive Order's emphasis on accountability, cost predictability, and measurable performance outcomes and intends to incorporate these principles into the NCCS 2.0 source selection approach in a manner that supports mission effectiveness and operational excellence.

At this time, DHS anticipates evaluating offerors based on a phased approach, with Phase 1 being a go-no-go for TS FCL and Phase II based off of the following; demonstrated prior experience and reference checks, staffing and management approach, and price. Collectively, these evaluation areas are intended to provide the Government with a comprehensive assessment of an offeror's ability to successfully perform complex cybersecurity operations while delivering best value to the Government.

DHS believes this evaluation framework will promote accountability and informed source-selection decisions while encouraging contractors to propose innovative and modernized approaches that enhance cybersecurity operations and support evolving mission needs.

61 As DHS reviews large non-fixed-price contracts pursuant to the Executive Order, how does the Department anticipate balancing operational flexibility, cyber mission responsiveness, and contractor accountability within the NCCS 2.0 acquisition strategy?

DHS is carefully considering the principles outlined in Executive Order 14402, Promoting Efficiency, Accountability, and Performance in Federal Contracting, as part of the acquisition strategy for NCCS 2.0.

The Department recognizes the benefits of fixed-price and performance-oriented contracting approaches where requirements can be clearly defined, performance outcomes can be objectively measured, and performance risk can be reasonably allocated to the contractor.

However, the NCCS 2.0 requirement is expected to support a broad range of cybersecurity mission activities, including continuous 24x7x365 operations, incident response, surge support, vulnerability mitigation, threat hunting, and other activities that must adapt to rapidly evolving cyber threats and operational priorities. These mission requirements may involve varying levels of uncertainty, changing workload demands, and circumstances that cannot always be fully defined in advance.

To provide the flexibility necessary to support these operational realities, DHS currently intends to award a single-award IDIQ contract that permits the issuance of Fixed-Price (FFP), Time-and-Materials (T&M), Labor-Hour (LH), and hybrid task orders, as appropriate for the specific requirement being acquired. The contract structure is intended to enable the Government to select the task-order contract type that best aligns with the nature of the work, the level of performance risk, and the ability to define and measure outcomes.

At this time, DHS does not intend to structure NCCS 2.0 as a predominantly performance-based acquisition. Rather, the Department anticipates employing a mix of contract types at the task-order level to achieve an appropriate balance between efficiency, accountability, mission effectiveness, and operational flexibility while ensuring support for dynamic cybersecurity requirements.

Task 2, CSIP, Page 6

How does DHS envision evaluating contractor approaches for implementing and governing automation, agentic AI, and innovation within Tier 1 and Tier 2 NOSC operations to improve efficiency, accelerate response times, enhance knowledge management, improve situational awareness, and support scalable surge operations?

Offerors will be required to demonstrate this experience through demonstrated prior experience factor and provide their approaches in accordance with the SOW Task 2 CSIP.

63 Would DHS consider emphasizing the importance of senior personnel who combine operational expertise with AI oversight, mentoring, escalation support, and institutional knowledge transfer to strengthen mission continuity and workforce development?

Yes, DHS may emphasize the importance of senior personnel who combine operational expertise with AI oversight, mentoring, escalation support, and institutional knowledge transfer. DHS places strong emphasis on operational continuity, workforce development, and the adoption of innovative technologies, including automation and agentic AI. DHS requires the contractor to maintain qualified personnel, ensure continuity of support, and implement continuous service improvement and training programs. DHS does not explicitly call for senior personnel with combined operational expertise and AI oversight, mentoring, escalation support, and knowledge transfer, however, current objectives support the intent by requiring leadership, training, and optimization of NOSC operations. If DHS wants to emphasize these combined skills, it would be specified in the solicitation or key personnel requirements. The SOW aligns with the principle but does not directly mandate it.

Task 2, CSIP, Page 6

Will DHS evaluate innovation and continuous service improvement as scored discriminators to encourage investment in automation, AI-enabled operations, and operational optimization capabilities?

This will be evaluted through the Continuous Service Improvement Program (CSIP) as described in the draft SOW. Please refer to the draft/final RFP once released on how the government intends to evaluate sections in the SOW.

Task 2, CSP, Page 8

Will DHS assess demonstrated CSP/CSSP operational experience supporting large-scale enterprise cyber environments as part of the phased down-select process to reduce operational and transition risk?

This will be described within the Cybersecurity Services Provider section. Please refer to the draft/final RFP once released on how the government intends to evaluate sections in the SOW.

Task 1, How will DHS evaluate transition approaches focused on minimizing operational disruption, staffing impacts, contractual risk, and subscriber impacts during transition activities?

Please refer to the draft/final RFP once released on how the government intends to evaluate sections in the SOW.

67 Can DHS elaborate on how transition risk and continuity of operations will be evaluated given the mission-critical nature of the NOSC environment?

DHS intends to evaluate transition risk and continuity by reviewing these plans, the contractor’s approach to maintaining staffing levels, knowledge transfer, and operational readiness, as well as their ability to sustain uninterrupted NOSC services during transition and stabilization periods. DHS requires the contractor to ensure that transitions between incumbent and successor contractors occur without disruption to DHS operations. Contractors must submit detailed Transition-In and Transition-Out Plans, maintain continuity of support, and provide business continuity and disaster recovery plans.

68 How does DHS intend to evaluate demonstrated experience operating at the scale, classification level, and operational tempo required within the current environment?

DHS intends to evaluate experience through the contractor’s ability to meet these requirements, including staffing plans, and compliance with security and operational standards. DHS expects contractors to demonstrate experience supporting large-scale, multi-classification, and high-tempo operations.

How will DHS evaluate price realism to ensure offerors can recruit, retain, and sustain qualified personnel necessary to support high-quality 24x7x365 NOSC operations while mitigating risks associated with understaffing, attrition, and long-term cost growth?

The government does not intend to conduct price realism. Please refer to the draft/final RFP once released on how price will be evlauated

Would DHS consider conducting a comprehensive price realism evaluation across all labor categories and contract types included in the total evaluated price to ensure offerors can fully support NCCS 2.0 operational requirements and sustain long-term performance quality?

The government does not intend to conduct price realism. Please refer to the draft/final RFP once released on how price will be evlauated

71 How does DHS envision balancing innovation, modernization, and operational agility against low-price evaluation pressures?

DHS prioritizes operational maturity, continuous improvement, and the adoption of innovative technologies such as automation and agentic AI to enhance efficiency and resilience. While cost management and budget discipline are required, DHS emphasizes service quality, performance, and capability advancement over simply selecting the lowest price. DHS envisions balancing innovation and modernization with operational agility by requiring contractors to demonstrate both mature service delivery and the ability to implement new technologies, ensuring that value and mission effectiveness are not compromised by low-price evaluation pressures.

72 Would DHS consider requiring and evaluating IDIQ key personnel resumes outside of proposal page limitations to better assess operational leadership experience and reduce execution risk?

Yes, DHS may consider requiring and evaluating IDIQ key personnel resumes outside of proposal page limitations. Please refer to the draft/final RFP once released.

73 Would DHS consider requiring IDIQ key personnel letters of commitment outside of proposal page limitations to reduce transition and staffing

Yes, DHS may consider requiring key personnel Letters of commitment outside of proposal page limitations. Please refer to the draft/final RFP once released.

74 Would DHS consider requiring proposed IDIQ key personnel to remain assigned during at least the first 12 months of performance, except in mutually agreed circumstances or force majeure events, to ensure operational continuity during transition and stabilization?

DHS does not explicitly mandate that proposed IDIQ key personnel remain assigned for the first 12 months, it does require prior written approval from the Contracting Officer before replacing any individual designated as key personnel, and specifies that replacements must possess qualifications equal to or superior to those of the person being replaced. DHS prioritizes continuity and oversight of key personnel assignments, and any additional requirements, such as a 12-month minimum assignment would need to be specified in the solicitation or contract terms. If implemented, specific guidance and exceptions would be detailed in the solicitation or contract documents.

Would DHS consider adding an NCCS Chief Engineer as an IDIQ-level key personnel position to provide enterprise-wide technical oversight and operational stability?

No, This is not planned at the IDIQ level.

76 Would DHS consider adding an NCCS Chief Solution Architect as an IDIQ-level key personnel position responsible for driving innovation, modernization, process optimization, and future technology integration?

No, This is part of the requirements for the PMO task to oversee.

77 Would DHS consider requiring major subcontractors supporting cited corporate experience to demonstrate performance on efforts exceeding $400 million in contract value?

DHS does not explicitly require major subcontractors supporting cited corporate experience to demonstrate performance on efforts exceeding $400 million in contract value rather it does focus on the contractor’s ability and responsibility to provide qualified personnel, manage subcontractors, and ensure operational maturity and compliance with standards. DHS requires the contractor to provide effective use of subcontractors to satisfy objectives and service level requirements, it does not specify a minimum contract value threshold for prior experience. If DHS wishes to include this as a discriminator, it would be addressed in the RFP instructions or evaluation factors.

78 Would DHS consider utilizing both corporate experience references and formal Past Performance Questionnaires (PPQs) during phased evaluations to improve objective validation of relevant operational experience and reduce execution risk?

No, the government will only utilize demonstrated prior experience and reference checks

79 Would DHS consider requiring all PPQs to demonstrate relevant CSP/CSSP operational experience aligned to DHS NOSC mission requirements?

Past Performance is not being considered as an evaluation factor

80 Would DHS consider requiring prime offerors to demonstrate experience supporting environments exceeding 80,000 users to validate operational scalability?

DHS does not explicitly require prime offerors to demonstrate experience supporting environments exceeding 80,000 users. However, NCCS 2.0 require operational maturity, scalability, and the ability to support the expanding DHS user and subscriber base. If DHS decides to require specific user-scale experience as a discriminator, this would be detailed in the RFP instructions or evaluation criteria.

81 Would DHS consider requiring submission of three PPQs, with no more than one from a subcontractor or teammate, to ensure the prime contractor demonstrates direct operational responsibility?

Past Performance is not being considered as an evaluation factor

82 Would DHS consider requiring subcontractor PPQs to originate only from major or significant subcontractors to ensure operational relevance?

Past Performance is not being considered as an evaluation factor

83 Would DHS consider prioritizing experience relevance using a hierarchy such as DHS > DoD > Federal Civilian > Commercial environments to better align evaluations with DHS operational complexity?

No, DHS will not consider prioritizing experience relevance using a hierarchy. Government experience is considered relevant due to this is a government requirement

84 Would DHS consider excluding PPQs derived from joint ventures or parent holding companies to ensure evaluations reflect the capabilities of the actual proposing entities?

Past Performance is not being considered as an evaluation factor

85 How much flexibility will the final RFP allow for alternative technical and operational approaches?

Please refer to the draft/final RFP once it it released. The instructions will be provided in RFP.

86 Can DHS elaborate on the relative importance of operational maturity versus technical innovation?

DHS places significant emphasis on both operational maturity and technical innovation, viewing them as complementary priorities for NOSC operations. Operational maturity is foundational, contractors will be required to align all services and processes with industry standards and best practices such as ITIL v4, CMMI for Services, NIST CSF, and DHS CSP Program maturity metrics. The contractor must implement continuous service improvement programs, maintain accreditation, and demonstrate the ability to deliver reliable, resilient, and efficient NOSC operations across all classification levels and environments.

Technical innovation, including automation and agentic AI is emphasized as a means to enhance efficiency, responsiveness, and modernization. Both are important, but operational maturity is essential for stable service delivery, while innovation is expected to advance and optimize NOSC capabilities.

Mature, proven operations are required, and innovation is valued to further strengthen and modernize those operations.

Task 1, Pages 6 & 7

Does DHS anticipate establishing new operational performance metrics, such as MTTR, detection rates, automation effectiveness, or operational outcomes, and if so, will those metrics be provided to offerors in advance?

This is described within the Continuous Service Improvement and Performance and Investment Metrics in the draft SOW.

How much flexibility will contractors have regarding remote or hybrid operational support models across the IDIQ and Task Orders?

Remote work is not part of this offering. While some telework may be authorized, most work will need to be done onsite in the geographical area where the DHS NOSC faciliites are located.

89 What characteristics would lead DHS to view NCCS 2.0 as transformational rather than primarily sustainment-focused?

DHS may view NCCS 2.0 as transformational if the contractor delivers continuous service improvement, adopts advanced technologies such as automation and agentic AI, implements innovative operational practices, and demonstrates measurable increases in efficiency, resilience, and cybersecurity maturity.

Transformational characteristics include proactive threat detection and response, optimized knowledge management, enhanced training and workforce development, and the ability to evolve NOSC capabilities to meet emerging requirements like Zero Trust. Other transformational characteristics may include advancing service maturity, integrating new technologies, and driving operational excellence beyond routine sustainment.

90 How is DHS balancing modernization and innovation objectives against the need to preserve operational continuity within a live cyber defense environment?

This is described through the Continuous Service Improvement Program (CSIP) as described in the draft

SOW.

91 How does DHS anticipate adapting cyber workforce roles and evaluation criteria to address rapid advancements in AI, automation, and data science technologies supporting future cyber operations?

This is described through the Continuous Service Improvement Program (CSIP) as described in the draft

SOW.

For surge operations, does DHS envision greater reliance on automation and AI-enabled capabilities to reduce manual workload and staffing demands, or does the Government anticipate maintaining predominantly human-centered surge support models?

Surge staffing is leveraged when necessary to support efforts on an as needed basis.

93 Requesting clarification on if the link will be received later once the registration is closed ?

Yes

Please confirm the Government is planning to incorporate PIL Best Practices to maximize the objective evaluation of submissions such as setting four confidence levels (Superior Confidence, High Confidence, Some Confidence, and Low Confidence).

Confidence ratings provide evaluators the ability to look more holistically at the strong points and weak points of an offer to allow a more holistic and differentiated view of offerors' technical submissions.

The government plans to evaluate utilizing the three level confidence rating scale

95 To ensure cost realism for NCCS 2.0, please confirm the Government intends to disclose the affordability range that represents the total evaluated price as recommended by the Acquisition Gateway's Periodic Table of Acquisition Innovation. Sharing this information enables industry to align technical solutions with the Government’s fiscal realities.

The government does not intend to conduct cost/price realism. Please refer to the draft/final RFP once released on how cost/price will be evlauated

96 Given the complexity of the NCCS 2.0 requirements, please confirm the Government will conduct one-on-one meetings with interested offerors as part of its market research strategy, as recommended in the Acqusition Gateway's Periodic Table of Acquisition Innovations.

To provide best value to the government, one-on-one meetings and direct information exchanges allow for a comprehensive understanding of the technical requirements. This approach ensures that the final solicitation responses provide relevant and robust competition that aligns with market research best practices.

At this time, no one-on-one meetings are planned

97 Please confirm that safeguarding is NOT required for NCCS 2.0. While a Top Secret Facility Clearance (FCL) is appropriate to ensure personnel can access classified systems at Government or accredited SCIF locations, requiring contractor-site storage unnecessarily restricts the competitive pool.

Safeguarding is not required

98 To ensure maximum competition and transparency in this acquisition, please confirm the Government intends to provide non-incumbent offerors with the necessary granularity regarding the current 'as-is' state of operations through the release of a technical library or detailed 'Extent of Effort' document that defines the specific boundaries and historical data of each legacy contract being transitioned into this consolidated scope.

Yes, a technical library will be provided to all offerors. The process for accessing the technical library will be provided in the final solicitation

Please confirm the Government intends to release a draft solicitation to allow for industry feedback that can identify potential technical ambiguities and refine requirements, ultimately ensuring a more competitive, high-quality final solicitation. Yes

100 Will there be subcontracting opportunities for SDVOSB firms under NCCS 2.0, and will a small business subcontracting plan be required of prime contractors? Yes

What Cybersecurity Maturity Model Certification (CMMC) level is anticipated for this requirement?

CMMC is not currently listed as a requirement

Will any components or task orders under NCCS 2.0 be reserved as small business set-asides, or will the contract be structured to support SDVOSB participation?

No,This is a full and open competition for a single award IDIQ. with subcontracting opportunities and a subcontracting plan is required.

What is the anticipated contract structure (e.g., single award, multiple award IDIQ, or task order vehicle), and what is the estimated period of performance and contract ceiling?

Single award IDIQ strategic Sourcing Vehicle.

104 Does DHS encourage early teaming discussions between large integrators and qualified SDVOSBs prior to solicitation release?

Will DHS provide any additional engagement opportunities for industry collaboration following today’s session?

Are there incumbent teaming structures or capability gaps that DHS believes industry should pay particular attention to?

Yes, DHS encourages early teaming discussions. A list of interested vendors and their contact infomration has been released on sam.gov.

105 Is DHS currently leaning toward a single-award or multiple-award approach?

Will technical past performance be weighted toward enterprise-scale experience, or will specialized niche capabilities also be evaluated favorably?

Will there be opportunities for small businesses to demonstrate innovation, automation, or AI-assisted operational efficiencies?

Yes, this is planned to be a single award IDIQ strategic Sourcing Vehicle. No, Past Performance is not being considered as an evaluation factor. Yes, teaming arrangements/subcontracting opportunities will be available and a subcontracting plan will be required.

106 Has the DHS made a final determination in the procurement strategy for to the required/target small business sub-contracting goals for a large business Primes

Once DHS gets closer to finalizing the acquisition strategy, this information will be provided.

DHS typically sets small business participation goals and may include socioeconomic considerations (SDVOSB, WOSB, HUBZone) in evaluation criteria.

107 How does DHS envision smaller cybersecurity-focused SDVOSBs contributing to mission resilience and compliance modernization efforts under NCCS 2.0?

The RFP will provide instructions on teaming/partnerships and subcontracting.

DHS typically sets small business participation goals and may include socioeconomic considerations (SDVOSB, WOSB, HUBZone) in evaluation criteria.

Does DHS anticipate portions of this requirement being suitable for SDVOSB subcontracting participation?

Will the acquisition strategy include meaningful opportunities for emerging small businesses with specialized cybersecurity and IT support capabilities?

Is DHS considering phased onboarding or task-based approaches that would allow smaller firms to support discrete functional areas?

The RFP will provide instructions on teaming/partnerships and subcontracting.

DHS typically sets small business participation goals and may include socioeconomic considerations (SDVOSB, WOSB, HUBZone) in evaluation criteria.

109 Is there a priority ranking of Tasks 1-7? or are they all equal importance? No, All areas are considered critical for successful contract performance

Which technical capability areas are considered highest priority for mission success under

NCCS 2.0?

Are there particular cybersecurity frameworks, cloud environments, or zero trust initiatives that vendors should prioritize when preparing capabilities?

Will the requirement emphasize operational cybersecurity support, engineering services, end-user support, or a combination of all three?

No, All areas are considered critical for successful contract performance

111 Which components are covered under this SOW? This is a DHS Wide Strategic Sourcing Single Award IDIQ, which covers all components 112 Will CBP continue to maintain its own SOC and NOC? This is a DHS Wide Strategic Sourcing Single Award IDIQ, which covers all components 113 IS a SCIF required to bid on this RFP? A SCIF is not required 114 do you have sub contracting goals ? Subcontracting Goals will be provided in the draft/final RFP

Ref. Safeguarding classified -- does the awarded Prime have to have TS/SCI safeguarding - ie..

does this mean the contractor must of an offsite accredited SCIF for this contract?

A SCIF is not required and all parties must have the appropriate DD254 for the appropriated correspoonding classification of the level of work

116 What is the goal of the pre-solicitation conference The pre-solicitation conference will provide more details regarding the evaluation criteria and solicitation instructions.

For the solicitation, just for clarity, can you confirm there will be no…