CISA Cybersecurity Exercise Support Services
Past New Requirement Updated
- Solicitation expected
- Estimated value
- $20,000,000 to $50,000,000
- Set-aside
- No set-aside
Forecast facts
- Anticipated award
- Through
- NAICS code
- 541690 Other Scientific and Technical Consulting Services
- Place of performance
- Arlington, VA
- Forecast number
- F2026072729
- Points of contact
-
- Hannah Moussa cisaapfsvendorinquiries@cisa.dhs.gov (202) 568-4157
Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.
About this forecast
The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) is procuring full-spectrum cybersecurity exercise support services for its Infrastructure Security Division under Homeland Security Exercise and Evaluation Program guidelines. The contractor will deliver discussion-based exercises (seminars, workshops, tabletop exercises, and games) and operations-based exercises (drills, functional exercises, and full-scale exercises), requiring expertise in programmatic support, scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge. Solicitation release is estimated for August 14, 2026, with award anticipated for September 22, 2026.
The estimated award value ranges from $20 million to $50 million under a Time and Materials contract through the OASIS+ Management & Advisory domain, with performance extending through September 21, 2028. Work is performed in Arlington County, Arlington, Virginia. Contact Patricia Smart at (202) 679-5265 or CISAAPFSVendorInquiries@cisa.dhs.gov for requirements inquiries, with Heather Wastella available as an alternate contact at (202) 427-2701.
Forecast text
The OASIS+ domain is Management & Advisory. The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge).
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast