CISA Strategic Cyber Tools Buying
Closed Pre-Solicitation Posted
Not the latest version. See the latest special notice from .
- Solicitation number
- 47QFRA26K0008
- Agency
-
Assisted Acquisition Services Region 8
Assisted Acquisition Services, General Services Administration
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541519 Other Computer Related Services
- PSC
- Not on record
- Place of performance
- Washington, District of Columbia 20006, United States
- Points of contact
Notice details come from SAM.gov. Updated .
About this opportunity
GSA Assisted Acquisition Services is conducting a Request for Information on behalf of the Department of Homeland Security Cybersecurity and Infrastructure Security Administration (CISA) to perform market research for enterprise cybersecurity tools procurement support, with RFI responses due September 1, 2026 at 5 p.m. Eastern Time. This is not a solicitation and does not constitute a commitment to award a contract; participation is voluntary and the Government assumes no financial responsibility for response costs.
CISA seeks a contractor to centralize cyber tool purchasing for the Continuous Diagnostics and Mitigation Program and broader Capacity Building initiatives across the Federal Civilian Executive Branch, including CFO Act and non-CFO Act agencies. The anticipated contract scope covers a minimum $600 million annual cyber software procurement footprint, equating to approximately $6 billion over the contract lifecycle. The period of performance is one base year plus nine one-year option periods, beginning September 23, 2027.
Contractors must demonstrate capabilities across five functional areas: Contract and Project Management, Strategic Buying Advisory Support, Acquisition and Procurement Support, Enterprise License Procurement Management, and Surge Capacity. Primary objectives include establishing rapid procurement processes enabling tool acquisition within days to weeks, achieving optimal pricing with flexible terms and conditions (including mechanisms to eliminate shelfware, license pooling, transferability, and co-terming), and leveraging experienced cybersecurity procurement expertise. The contractor must manage an 87,000-item software catalog and support over 500 annual procurements. Primary NAICS code is 541512, though task order scope is not limited to this classification.
Responses must not exceed 20 pages, formatted in single spacing, 10-point Times New Roman font, with one-inch margins. Submissions must include a cover page, corporate overview (one page), prior experience examples (one page each), and capabilities and approaches (five pages maximum). Email responses to cdm.nextgen.tools@gsa.gov, referencing Acquisition ID 47QFRA26K0008 in the subject line. Amendment 001 was posted August 18, 2026.
Notice text
2 versions
Update #2 · Latest ·
General Services Administration (GSA), Assisted Acquisition Services (AAS) is releasing a Request for Information (RFI) on behalf of the Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Administration (CISA). The purpose of this RFI is to assist the Government in conducting market research to identify capable, interested Industry Partners and to inform industry of the Government’s intent to conduct one-on-one conversations between the AAS Contracting Officer (CO) and interested Industry Partners as part of market research for the subject requirements.
As provided by Federal Acquisition Regulation (FAR) 10.001 (GSA Class Deviation Revolutionary FAR Overhaul (RFO)-2025-10), industry engagement serves as a market research tool used by AAS to gauge industry interest, assess potential commercial/industry approaches, identify factors that could shape the acquisition strategy, inform future acquisition planning, promote competition, and improve the quality of proposals. The Government will request only the minimum information necessary, and all responses will be used solely for market research purposes. Any response to this RFI or information submitted by an interested Industry Partner to the Government will not be shared with any other Industry Partner. Participation in the RFI process is strictly voluntary.
This RFI does NOT constitute a Request for Proposal and is not to be construed as a commitment, implied or otherwise, by the Government that a procurement action will be issued. A response to this RFI is not a request to be added to a bidders list or to receive a copy of a solicitation. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of the submission of the requested information. No reimbursement will be made for any costs associated with providing information in response to this RFI and any follow-up information requests. The Government may not respond to any specific questions or comments in response to this RFI or information provided as a result of this request. This information will be used for market research only.
The Government is particularly interested in determining the information, documents, or similar data that industry would need to facilitate a bid/no bid decision and in the availability and applicability of commercial products and services to meet the requirements of the CISA Strategic Cyber Tools Buying requirement.
**Additionally, the Government welcomes respondents to identify any questions, assumptions, concerns, or recommendations related to this requirement that were not specifically addressed in this RFI. Respondents are encouraged to provide insight into areas where additional clarification or market research may be beneficial. This information may be used to further inform the Government's acquisition strategy and requirement definition. The Government may also use this feedback to develop discussion topics for a potential Industry Day, one-on-one Market Analysis Discussions (MAD) sessions, or other future market research activities. Submission of questions or assumptions does not guarantee that they will be addressed publicly or that a follow-on engagement will occur.
**Please Note** Attachments updated to reflect current information and page count details.
**Please be sure to reference current documents labeled with 47QFRA26K0008_Amendment 01, dated 18 Aug 2026.
Update #1 ·
General Services Administration (GSA), Assisted Acquisition Services (AAS) is releasing a Request for Information (RFI) on behalf of the Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Administration (CISA). The purpose of this RFI is to assist the Government in conducting market research to identify capable, interested Industry Partners and to inform industry of the Government’s intent to conduct one-on-one conversations between the AAS Contracting Officer (CO) and interested Industry Partners as part of market research for the subject requirements.
As provided by Federal Acquisition Regulation (FAR) 10.001 (GSA Class Deviation Revolutionary FAR Overhaul (RFO)-2025-10), industry engagement serves as a market research tool used by AAS to gauge industry interest, assess potential commercial/industry approaches, identify factors that could shape the acquisition strategy, inform future acquisition planning, promote competition, and improve the quality of proposals. The Government will request only the minimum information necessary, and all responses will be used solely for market research purposes. Any response to this RFI or information submitted by an interested Industry Partner to the Government will not be shared with any other Industry Partner. Participation in the RFI process is strictly voluntary.
This RFI does NOT constitute a Request for Proposal and is not to be construed as a commitment, implied or otherwise, by the Government that a procurement action will be issued. A response to this RFI is not a request to be added to a bidders list or to receive a copy of a solicitation. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of the submission of the requested information. No reimbursement will be made for any costs associated with providing information in response to this RFI and any follow-up information requests. The Government may not respond to any specific questions or comments in response to this RFI or information provided as a result of this request. This information will be used for market research only.
The Government is particularly interested in determining the information, documents, or similar data that industry would need to facilitate a bid/no bid decision and in the availability and applicability of commercial products and services to meet the requirements of the CISA Strategic Cyber Tools Buying requirement.
**Additionally, the Government welcomes respondents to identify any questions, assumptions, concerns, or recommendations related to this requirement that were not specifically addressed in this RFI. Respondents are encouraged to provide insight into areas where additional clarification or market research may be beneficial. This information may be used to further inform the Government's acquisition strategy and requirement definition. The Government may also use this feedback to develop discussion topics for a potential Industry Day, one-on-one Market Analysis Discussions (MAD) sessions, or other future market research activities. Submission of questions or assumptions does not guarantee that they will be addressed publicly or that a follow-on engagement will occur.
Files
Notice history
| Notice | Type | Posted |
|---|---|---|
| Industry Day Notice _ CISA Strategic Cyber Tools Buying | Special Notice | |
| This notice | Pre-Solicitation |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity