Risk Assessment - Sources Sought Announcement

Closed Pre-Solicitation Posted

Solicitation number
N63285-25-SSA-0017
Agency
Responses due
Set-aside
Total Small Business

Opportunity facts

Place of performance
Quantico, Virginia 22134, United States

Notice details come from SAM.gov. Updated .

About this opportunity

The Naval Supply Systems Command within the Department of the Navy is seeking a Software-as-a-Service (SaaS) platform capable of performing comprehensive cyber risk assessments for partner entities. This Sources Sought Announcement aims to identify vendors who can provide integrated cyber supply chain risk management functionality to support the agency's ongoing mission requirements. The platform must deliver a MITRE-based risk assessment that includes cyber risk technical assessment, FAIR (Factor Analysis of Information Risk) analysis, external compliance estimates, and a Ransomware Susceptibility Index (RSI). Additionally, the solution must generate clear and easily interpretable cyber risk reports with letter-grade ratings that allow users to drill down into technical details underlying each risk category. The platform must support unlimited NCIS user accounts and enable continuous monitoring of up to 200 entities. Responses to this Sources Sought Announcement are due by October 23, 2025, and the agency has requested that vendors provide recommendations for alternative PSC or NAICS codes if applicable.

This procurement is designated as a Total Small Business set-aside, restricting competition to small business entities. The pre-solicitation notice does not identify any incumbent contractors or provide specific award values or budget ranges for the requirement. The announcement does not specify a timeline for contract performance or service delivery, though the Sources Sought phase represents an early stage in the procurement process designed to gather market intelligence before formal solicitation. The current NAICS category is classified as Other Computer Related Services (541519), and the PSC category is IT and Telecom - Business Application/Application Development Software as a Service (DA10). No specific numerical quantities beyond the requirement to monitor up to 200 entities and support unlimited user accounts are provided in this preliminary notice.

Notice text

This Sources Sought Announcement is intended to identify Risk Assessment platforms capable of of performing the tasks outlined below.

NCIS seeks a Software-as-a-Service (SaaS) platform capable of performing cyber risk assessments for partner entities. The platform must provide integrated cyber supply chain risk management functionality to support ongoing mission requirements.

The required service must:

  • Provide a MITRE-based risk assessment
    • Including a cyber risk technical assessment
    • FAIR (Factor Analysis of Information Risk) analysis
    • External compliance estimate
    • Ransomware Susceptibility Index (RSI).
  • Offer a clear and easily interpretable cyber risk report featuring:
    • Letter-grade ratings with the capability to drill down into the technical details underlying each risk category.
  • Support unlimited NCIS user accounts
  • Enable the continuous monitoring of up to 200 entities.

**Please let us know if you have any recommendations for alternative PSC or NAICS codes.

Similar open opportunities

Opportunity Agency Set-aside Responses due
PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions Patuxent River, Maryland, United States · NAICS 541519 Naval Air Systems Command No set-aside
Request for Information Cyber Support Services 22448 Naval Sea Systems Command No set-aside
Commercial Solutions Opening for Data and Analytics for Maritime Domain Awareness NAICS 517410 Naval Information Warfare Systems Command No set-aside
XACTA software Suitland, Maryland, United States · NAICS 541519 Naval Supply Systems Command No set-aside

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar opportunities
  • Ask GovTribe AI about this opportunity