CISA Indefinite Delivery Indefinite Quantity Contract

Background
The Cybersecurity and Infrastructure Security Agency (CISA), part of the Department of Homeland Security (DHS), serves as the Nation’s risk advisor, collaborating with partners to defend against threats and enhance infrastructure resilience.

CISA aims to bolster the Nation's capacity to counter cyber-attacks by providing cybersecurity tools, incident response capabilities, and assessment services to protect Federal Civilian Executive Branch systems. This RFI is released by the General Services Administration (GSA) on behalf of CISA to conduct market research for a potential Indefinite Delivery Indefinite Quantity (IDIQ) contract that will support various functional alignment areas related to legacy DEFEND orders and other cybersecurity initiatives.

Work Details
The contractor will be expected to support increases in organizational capacity, improve IT flexibility, and reduce redundant infrastructure while enhancing security across participating organizations.

Key tasks include:
- Cyber/IT Project Management Support
- Requirements Management
- Capability Implementation
- Operations, Sustainment, and Ancillary Support
- Solution Development

The contractor will also provide expert guidance on security policy compliance and threat awareness. Specific initial task orders may include: Requirements and Implementation roadmap Management for Continuous Diagnostics and Mitigation (CDM), Strategic Cybersecurity Acquisition and Buying Support, Identity and Access Management (IDAM), Endpoint Detection and Response (EDR), Mobile implementation, Cloud Services management, Internet of Things (IoT) solutions, and Cybersecurity Training Program Support Services.

Period of Performance
The estimated period of performance is ten years, consisting of a five-year base ordering period with an additional five-year optional ordering period.

Place of Performance
The contract will be performed across various locations as required by the tasks outlined in the IDIQ.