Management, Analysis, and Cyber Regional Operations Support (MACROS)

Past New Requirement Updated

Agency
Solicitation expected
Estimated value
$50,000,000 to $100,000,000
Set-aside
Woman-Owned Small Business

Forecast facts

Anticipated award
Through
NAICS code
541512 Computer Systems Design Services
Place of performance
Arlington, VA
Forecast number
F2025071360
Points of contact

Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.

About this forecast

The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) is procuring specialized and advanced cyber analysis services under the Management, Analysis, and Cyber Regional Operations Support (MACROS) contract, set aside for Woman-Owned Small Business concerns. The requirement encompasses rapid assessment and analysis of cyber incident reporting from federal agencies, critical infrastructure operators, state, local, tribal, and territorial governments, and the private sector, with delivery of timely analytic products to inform senior leadership and operational teams during active incidents and identification of emerging patterns and coordinated malicious campaigns. Solicitation release is estimated for May 15, 2026, with award anticipated for September 30, 2026.

The estimated award value ranges from $50 million to $100 million under a Time and Materials contract vehicle using NITAAC CIO-SP3, with a period of performance extending through September 29, 2031. Work is performed in Arlington County, Arlington, Virginia. Primary contact is Patricia Smart at (202) 679-5265 or CISAAPFSVendorInquiries@cisa.dhs.gov, with alternate contact Heather Wastella at (771) 211-7810.

Forecast text

**This requirement is planned for FY27. Once milestones are known, the record will be amended. Currently, it is marked as No Longer Planned and republished for vendor awareness.**

This contract provides specialized and advanced cyber analysis services in support of CISA’s mission requirements under the Federal Information Security Modernization Act of 2014 and the Cyber Incident Reporting for Critical Infrastructure Act of 2022. It includes the capability to rapidly assess cyber incident reporting required of federal agencies, along with voluntary cyber incident reporting from critical infrastructure operators, state, local, tribal, and territorial governments, the private sector, and the public. It provides CISA with the capability to produce timely analytic products to inform senior leadership and operational teams during active incidents, supporting rapid decision-making and coordinated response efforts. In addition, ensures prompt identification of emerging patterns and connections, such as the exploitation of newly discovered vulnerabilities or coordinated malicious campaigns. This contract ensures CISA can maintain continuous situational awareness, manage fluctuations in reporting volume, and uphold its responsibility to safeguard federal systems and the nation’s critical infrastructure.

On GovTribe

Work this forecast

  • Track it in your pipeline
  • Find teaming partners
  • Similar forecasts
  • Ask GovTribe AI about this forecast