Cybersecurity Management Services

Background
The Defense Information Systems Agency (DISA) is seeking sources for Cybersecurity Management Services to support the J-9 Hosting and Compute (J-9 HaC) Cybersecurity Division. This division oversees the security posture of all information technology (IT) assets that handle Department of Defense (DoD) information.

The goal of this contract is to ensure that IT systems are acquired, configured, operated, maintained, and disposed of in accordance with DoD cybersecurity policies and standards.

Work Details
The Cybersecurity Management Services include: training; audits; review, creation, and execution of policies, orders, and guidance; vulnerability scanning, detection, and analysis; compliance monitoring, reporting, and mitigation; cybersecurity systems management; automation configuration; change management; and account management for J-9 HaC managed information systems.

Specific tasks include supporting endpoint management and vulnerability analysis, conducting scans and remediation support, monitoring security threats, developing security compliance reports for DoD Risk Management Framework (RMF) and Federal Information Security Management Act (FISMA) requirements, providing recommendations for improvements in cybersecurity processes, and ensuring personnel obtain appropriate DoD-approved 8140 certifications.

Period of Performance
One-year base period with three one-year option periods beginning October 1, 2026.

Place of Performance
Oklahoma City, OK; Mechanicsburg, PA; Montgomery, AL; San Antonio, TX; Ogden, UT.