Request for Information: Cybersecurity and Program Support

The National Credit Union Administration (NCUA) is conducting a Request for Information to gather market research on comprehensive cybersecurity and program support services for its Office of the Chief Information Officer. This RFI seeks contractor capabilities across 11 task areas including cybersecurity program support, audit management, security operations, incident management, digital forensics, threat intelligence, project management, and optional surge support services. All contractor employees must be U.S. citizens due to the high-risk designation, with personnel performing cyberthreat intelligence work requiring Top Secret security clearance with Sensitive Compartmented Information access. Respondents must demonstrate experience with specific cybersecurity software products including Axonius, CrowdStrike, and Microsoft Defender, along with technical capabilities for vulnerability assessments, penetration testing, and continuous monitoring. The RFI responses are due by 2:00 p.m. ET on October 8, 2025, submitted via email with a maximum 10-page limit including a capabilities questionnaire response.

This opportunity has no set-aside designation and no incumbent contractors are identified in the documentation. The contract structure anticipates a base period of one calendar year with four optional one-year periods, totaling a potential five-year performance period, plus a one-month transition period. Work will be performed primarily at 1775 Duke Street in Alexandria, Virginia, supporting NCUA's cybersecurity operations and strategic objectives. The RFI emphasizes this is strictly for market research purposes and will not result in immediate contract award, with all submissions becoming government property. No specific budget range or award values are disclosed in the pre-solicitation materials, though the comprehensive scope across multiple cybersecurity disciplines suggests a substantial investment in enhancing NCUA's cyber defense capabilities.