Notice of Intent to Sole Source - Defensive Counterintelligence & Insider Threat Program Support Services - PHK ENTERPRISES, LLC
Closed Special Notice Posted
- Solicitation number
- 693JK426C600016
- Agency
-
Immediate Office of the Secretary of Transportation
Department of Transportation
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541990 All Other Professional, Scientific, and Technical Services
- PSC
- R499 Support- Professional: Other
- Place of performance
- Washington, District of Columbia 20590, United States
- Points of contact
Notice details come from SAM.gov. Updated .
About this opportunity
The Department of Transportation issued a notice of intent to sole source a Defensive Counterintelligence and Insider Threat Program (DCIITP) support services contract to PHK Enterprises, LLC, with a response deadline of August 31, 2026. The sole-source justification rests on 41 U.S.C. 3304(a)(1), citing PHK as the only responsible source capable of fulfilling the requirement based on exclusive operational footprint, proprietary User Behavior Analytics tools, direct technical partnerships with Nuix and Cogility platforms, and proven track record building enterprise insider threat architectures across federal agencies.
The contract calls for professional, technical, and analytical support services to protect DOT assets, personnel, networks, and classified national security information against foreign intelligence entity collection, unauthorized disclosures, and insider threats. Work follows a two-phase 12-month approach: Phase I (months 1–6) emphasizes program design, enterprise assessment, and technology evaluation; Phase II (months 7–12) focuses on technology optimization, stakeholder engagement, and modernization of policy and governance frameworks. The base period is 12 months with four optional 12-month renewal periods at government discretion.
Key personnel requirements include a Program Manager with minimum 8 years of federal Intelligence Community or insider threat program experience, a Certified Insider Threat Program Manager credential, and two Technical User Activity Monitoring Specialists with minimum 5 years of enterprise-level UAM/SIEM platform experience. All personnel must hold active Top Secret/Sensitive Compartmented Information clearances and comply with FISMA regulations and NIST SP 800-53 controls. Performance occurs primarily on-site at DOT Headquarters in Washington, DC. Proposed fully loaded hourly rates range from $120 to $195 per hour, subject to validation against the Independent Government Cost Estimate.
Notice text
*****NOTICE OF INTENT TO SOLE SOURCE - PHK ENTERPRISES, LLC*****
In accordance with Executive Order (E.O.) 13587, the National Insider Threat Policy, and DOT Order 1642.1A, the DOT requires professional and technical support services for the DCIITP to maintain a secure operating environment against foreign intelligence entity (FIE) collection, unauthorized disclosures, and insider threats.
The DCIITP is a centralized, department-wide program managed within the Office of Intelligence, Security, and Emergency Response (S-60). It works in close coordination with the Office of Security (M-40), the Office of the Chief Information Officer (S-80), and the Office of the General Counsel (OGC). The program is responsible for protecting classified national security information, Sensitive Security Information (SSI), and proprietary data across all DOT Operating Administrations (OAs).
The purpose of this contract is to acquire professional, technical, and analytical support services for the U.S. Department of Transportation (DOT) Defensive Counterintelligence and Insider Threat Program (DCIITP). The Contractor shall provide specialized expertise in counterintelligence (CI) analysis, insider threat detection, user activity monitoring (UAM), policy development, and security education to safeguard DOT assets, personnel, networks, and classified national security information.
The DCIITP is responsible for protecting DOT's personnel, classified information, and sensitive technical research against foreign intelligence entity (FIE) collection and exploitation. This includes monitoring and responding to patterns of unauthorized solicitation, academic poaching, and attempts to acquire sensitive software or data assets.
Files
| File | Type | Posted |
|---|---|---|
| Sole Source Justification Final.pdf | ||
| Statement of Work for DOT DCIITP.docx | DOCX document |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity