CIS Secure Suite Membership

The Federal Energy Regulatory Commission (FERC) is seeking to procure a CIS SecureSuite Membership from the Center for Internet Security through RFQ #89603025Q0068. The procurement involves acquiring cybersecurity resources including the CIS-CAT Pro configuration assessment tool, build content, and full-format CIS Benchmarks that will enable FERC to build securely configured servers, workstations, websites, and applications. This is a brand name sole-source procurement justified by the unique nature of CIS Benchmarks and their global recognition in the cybersecurity market, with FERC noting that alternative solutions could cause project delays of at least two weeks and significantly increase manual labor costs. The solicitation targets organizations with 1,000-4,999 end users and will be evaluated on a lowest-priced technically acceptable basis. Quotes are due by August 28, 2025, at 2:00 PM Eastern Time, giving potential vendors just one week from the August 21, 2025 posting date to respond.

This procurement does not include any small business set-aside designations and will be awarded as a firm fixed price contract for a one-year base period. The solicitation does not identify any incumbent contractors, though the brand name justification suggests this is likely a continuation or renewal of existing cybersecurity capabilities. No specific award values or budget ranges are disclosed in the available documentation. The membership is designed to serve FERC's organizational size of 1,000-4,999 employees and will significantly reduce implementation time for secure configuration settings from 40-80 hours to 16-24 hours per vendor product. All deliverables under this contract will be provided to FERC Headquarters located in Washington, DC 20426, with the contract to be awarded under FAR Parts 13.104 and 12.