Cybersecurity support in the international financial sector

The Department of State Office of Acquisition Management is seeking a cybersecurity service provider to support foreign entities in enhancing their counter-DPRK cybersecurity capabilities, with a specific focus on combating theft and money-laundering within cryptocurrency exchanges. The solicitation requires the contractor to provide remote cyber incident response support, cybersecurity consultancy, and forensic analysis services, with the ability to respond virtually within 48 hours and deploy subject matter experts worldwide within 14 calendar days. Key personnel must include a Project Manager with PMP certification, a Lead Technical SME with seven years of cyber incident response experience, and a Deputy Technical SME with three years of experience. The evaluation criteria will prioritize the qualification and experience of key personnel, technical and management approach, and relevant past performance, with price as a secondary factor. Critical dates include a December 3, 2024 deadline for questions and a December 30, 2024 deadline for proposal submissions.

The solicitation is an unrestricted contract under NAICS code 541511 with no specific set-aside designation. There is no mention of an incumbent contractor, and the contract will be structured with a 12-month base period and two 12-month option periods. While no specific budget range is provided, the NAICS size standard is $34 million, suggesting potential significant funding. The contract will require three key personnel with Secret security clearances, and deployments are likely to occur in regions such as Europe, East Asia, and Southeast Asia. The primary place of performance is Washington, DC, with the contractor expected to support international financial sector entities in implementing sanctions-related cybersecurity measures. The contract will be primarily Firm-Fixed-Price with a small allocation for travel expenses, and subcontractor contributions are limited to 49% of the total cost.