PCCS-24-50006R Operational Technology Support_SSN.pdf

SOURCES SOUGHT NOTICE

FOR

DEPARTMENT OF HOMELAND SECURITY

CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY

Operational Technology Support

SSN Number: PCCS-24-50006R / APFS Record F2024065478

1. Introduction

The Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency

(CISA) is issuing a Sources Source Notice (SSN) as a means of conducting market research to identify sources.

This SSN is for planning purposes only and shall not be construed as an obligation on the part of the Government. This is NOT a Request for Quotations or Proposals. No solicitation document exists, and the Government may or may not issue a formal solicitation resulting from the responses received to this SSN.

Respondents are advised that the Government will not pay for any response expenses. All costs incurred responding to this SSN will be solely at the interested party's expense. Failure to respond to this SSN will not preclude participation in any future solicitation. Any information received will become the property of the Government and will not be returned to the submitter.

Interested parties are responsible for adequately marking proprietary or sensitive information.

Government technical experts drawn from staff within CISA, and other federal agencies may review responses. The Government may use selected support contractor personnel to assist in the review of the SSN responses. These support contractors will be bound by appropriate non-disclosure agreements to protect proprietary information.

2. Program Background

The purpose of this SSN is to determine the availability of qualified expertise in the functional areas listed below focusing on innovation, problem solving, and proficiency with U.S.

Government and critical infrastructure (CI) partners. As part of the overall CISA mission, the

Cybersecurity Division (CSD) actively engages with Government and critical infrastructure (CI) partners to help prepare for, prevent, and respond to incidents that could degrade or overwhelm strategic assets.

Within CISA CSD, the Joint Cyber Defense Collaborative (JCDC) sub-division enables and coordinates operational activities across CSD and engages partner organizations in protecting the

Nation’s critical infrastructure from physical and cyber threats through effective coordination and collaboration among a broad spectrum of government and private sector organizations.

However, there is currently a gap in CISA’s ability to build plans and execute initiatives around the protection and defense of control systems. CSD’s JCDC seeks to improve the cyber defenses of Industrial Control Systems (ICS) through its ability to collaborate with key Operation

Technology (OT) companies who possess knowledge, visibility, and capabilities of ICS

Infrastructure.

Respondents must demonstrate expertise in program operations support and analysis, cybersecurity subject matter expertise (particularly in defense of OT/ICS environments), cyber engagement and operational collaboration experience, stakeholder development and engagement, and national-level cyber defense operations, incident response, and service delivery.

Additionally, respondents must have a track record of leveraging subject matter expertise and experience to develop innovative measures to proactively defend against, detect, and respond to threats against OT/ICS environments owned by diverse entities.

Requirements

Through this SSN, JCDC, is seeking information as outlined in the questions below and in

Section 2:

1. The Government seeks additional input/comments on the attached draft Statement of

Work (SOW). Please provide as needed.

2. Include the type of work your company performed within the last three years in support of the same or similar requirements (similar in scope, and complexity).

a. Provide examples that reflect your company’s capabilities in the task areas outlined in the draft SOW and specify whether support has been provided as a prime contractor or subcontractor.

b. If significant subcontracting or teaming is anticipated, identify potential team members (if known), and describe the administrative and management structure of such arrangements.

3. Explain your company’s experience working on start-up or initial-stage cybersecurity programs and the ways in which you supported the program’s maturation (i.e., roles and responsibility development, standard operating procedure (SOP) or playbook development, staff training, etc.).

4. Describe your company’s experience supporting, monitoring, and evaluating stakeholder engagement activities and program operations.

5. Describe your company’s experience developing and delivering reporting for leadership and stakeholders on program activities and performance metrics.

6. Describe your company’s experience identifying, onboarding, and maintaining stakeholder relationships with diverse entities across sectors and types.

7. Describe your company’s experience developing and delivering regular communications to stakeholders on cybersecurity program activities and developments.

8. Describe your company’s experience facilitating the development of program charters and execution of internal and external governance or advisory bodies.

9. Describe your company’s experience conducting market research to scout and evaluate potential program stakeholders for engagement and inclusion, particularly in the OT/ICS cybersecurity field.

10. Describe your company’s approach to, and experience with, conducting and receiving stakeholder feedback and subsequent analyses.

11. Describe your company’s capabilities providing OT/ICS cybersecurity subject matter expertise, particularly with regards to threat information exchange and assessment, cyber defense planning and operations, cybersecurity guidance production, and strategic initiative engagement with critical infrastructure entities.

12. Describe your company’s capabilities in providing operational support services (i.e., training, subject matter expertise) to OT/ICS cybersecurity programs.

13. Describe your company’s capabilities in providing OT/ICS cybersecurity assessments.

14. Describe your company’s capabilities in providing support to OT/ICS cybersecurity-related incident response and investigation?

15. Describe your company’s capabilities in providing technical guidance in the OT/ICS space.

16. Describe your company’s cybersecurity capabilities in developing and providing OT/ICS cybersecurity solutions.

3. Instructions for Respondents:

All written submissions become the property of the United States Federal Government and will not be returned.

1. Provide organization name and address, organization’s point of contact name, telephone number and email address, Unique Entity Identification Number (UEI), socio-economic status, business size status (under NAICS 541611).

2. Each respondent’s responses shall be in sufficient enough detail to allow the Government to determine the experience and capability of your company to perform this work.

3. DO NOT include marketing or sales materials.

4. If your company has the potential capacity to provide the required services, provide the following information:

a. Identify any strategic sourcing vehicles or federal supply schedules your company holds.

b. State whether your company holds a Top-Secret facility clearance.

c. Tailored capability statements addressing the requirements of this SSN.

5. Responses shall be unclassified. DO NOT include any classified information in your capability statements.

6. Submit responses electronically using the most recent Microsoft Windows operating system (e.g., Microsoft Word, Microsoft PowerPoint, and Adobe PDF), 11-pt font minimum. Responses are limited to fifteen pages, excluding the cover page.

All data received in response to this SSN that is marked or designated as corporate of proprietary will be fully protected from any release outside the Government.

ELIGIBILITY

The applicable North American Industry Classification System (NAICS) code for this requirement is 541611-Administrative Management and General Management Consulting

Services. The size standard is $24.5M. The Product Service Code (PSC) is R499 -Support-

Profession; Other Professional Services.

Note: In accordance with DHS Directive 060-01, Development and Use of Strategic

Sourcing Contract Vehicles, dated 24 August 2012, strategic sourcing vehicles are mandatory for use, with limited exceptions. Therefore, a strategically sourced contract vehicle will take priority over awarding a standalone CISA contract.

4. DUE DATE

Please submit a response to Shawn Curro, shawn.curro@cisa.dhs.gov and Hannah Moussa, Hannah.Moussa@cisa.dhs.gov NLT 4:00 P.M. EST on 10 June 2024. The subject line of the email should state “PCCS-24-50006R SSN.”

mailto:shawn.curro@cisa.dhs.gov mailto:Hannah.Moussa@cisa.dhs.gov