Cyber Forensics and Training Alliance Support Services

Past Recompete Updated

Agency
Solicitation expected
Estimated value
$2,000,000 to $5,000,000
Set-aside
No set-aside

Forecast facts

Incumbent contract
Previous solicitation
Notice of Contract Award - NCFTA Award Notice · 70CMSD21P00000166 · Posted Oct 14, 2021
Anticipated award
Through
Acquisition strategy
Follow-on to Existing Contract
NAICS code
541990 All Other Professional, Scientific, and Technical Services
Place of performance
Pittsburgh, PA
Forecast number
F2026075475
Points of contact

Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.

About this forecast

Immigration and Customs Enforcement is releasing a solicitation on September 18, 2026 for cyber-forensics, training, analytical, threat intelligence, and information-sharing services to support investigative and enforcement operations against cyber-enabled threats, financial crimes, intellectual property violations, illicit trade, fraud, and transnational criminal activity. The provider must deliver cyber threat analysis, digital forensics support, trend reporting, investigative lead development, training courses, workshops, operational briefings, and access to collaborative information-sharing environments and data tools. Award is estimated for September 29, 2026.

The estimated award value ranges from $2 million to $5 million. Performance occurs in Pittsburgh, Pennsylvania, with the Homeland Security Investigations (HSI) division as the customer organization. Key government contacts are Bena Ahmed (bena.q.ahmed@hsi.dhs.gov, 703-343-7525) for requirements and Kirsi Lewis (kirsi.e.lewis@hsi.dhs.gov, 703-593-5363) as alternate contact.

This recompete follows Purchase Order 70CMSD21P00000166, awarded September 28, 2021 to the National Cyber-Forensics and Training Alliance (NCFTA), a nonprofit based in Pittsburgh, Pennsylvania, for $2,029,999.80 as a firm fixed-price award. The incumbent contract provided HSI with access to the NCFTA database for cyber forensics and law enforcement training support and extends through September 29, 2026.

Forecast text

The Government requires continued support from a qualified provider to deliver cyber-forensics, training, analytical, threat intelligence, and information-sharing services in support of investigative, operational, and enforcement mission requirements. This support is needed to enhance the Government’s ability to identify, analyze, investigate, and respond to cyber-enabled threats, financial crimes, intellectual property violations, illicit trade, fraud, and other transnational criminal activity.

The requirement includes access to a collaborative information-sharing environment, subject matter expertise, cyber threat research, analytical products, technical assistance, and training resources. The provider must support coordination and information sharing among government, law enforcement, industry, academia, and private-sector partners to identify emerging threats, support ongoing investigations, and improve operational decision-making. Services may include cyber threat analysis, digital forensics support, trend reporting, investigative lead development, training courses, workshops, operational briefings, and access to relevant data, tools, and expertise. The support is intended to strengthen investigative capabilities, improve situational awareness, and assist personnel in addressing complex cyber and trade-related threats.This acquisition will ensure continuity of mission-critical cyber-forensics, analytical, training, and information-sharing support services necessary to support Government investigative and enforcement operations.

On GovTribe

Work this forecast

  • Track it in your pipeline
  • Find teaming partners
  • Similar forecasts
  • Ask GovTribe AI about this forecast