RFI: Third-Party Cyber Risk Monitoring solution
Closed Solicitation Posted
- Solicitation number
- 28321325RI0000043
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 513210 Software Publishers
- Points of contact
- More information
Notice details come from SAM.gov. Updated .
About this opportunity
The Social Security Administration (SSA) has issued a Request for Information (RFI) seeking a Third-Party Cyber Risk Monitoring solution to assess and manage cyber risks posed by external partners and their suppliers. This procurement addresses the growing cybersecurity concerns as federal agencies increasingly rely on third-party vendors for various services, recognizing that these relationships can introduce vulnerabilities that may compromise sensitive data and disrupt operations. The solicitation falls under NAICS code 513210 (Software Publishers) and PSC category 7A21 (IT and Telecom - Business Application Software with Perpetual License). SSA seeks to enhance its cybersecurity framework by implementing a specialized solution designed to monitor the cyber posture of third-parties within their vendor ecosystem. The RFI was posted on August 19, 2025, with responses due by September 2, 2025, providing vendors a two-week window to submit their information.
This opportunity does not utilize any set-aside designations, making it open to all qualified vendors regardless of business size or socioeconomic status. The solicitation notice does not identify any current incumbents or existing contractors for similar services at SSA. No specific award values, budget ranges, or contract quantities are disclosed in this RFI stage, which is typical as this represents an information-gathering phase rather than a formal procurement solicitation. The timeline for services and specific performance requirements have not been detailed in the current notice. The place of performance is not explicitly specified in the available documentation, though services would likely support SSA's nationwide operations and third-party vendor monitoring requirements.
Notice text
This requisition is to release an RFI for a Third-Party Cyber Risk Monitoring solution. The Social Security Administration (SSA) has an ongoing requirement to monitor the cyber posture our third-parties and their suppliers. As federal agencies increasingly rely on third-party vendors for various services, the associated cyber risks have become a significant concern. Third-party relationships can introduce vulnerabilities that may compromise sensitive data and disrupt operations. Recognizing this, Social Security Administration (SSA) seeks to enhance its cybersecurity framework by procuring a third-party cyber risk monitoring solution specifically designed to assess and manage the cyber risks posed by our external partners.
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| Request for Information (RFI) for On-Premise Serve | Social Security Administration | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity