DCSA Enterprise Cybersecurity Support Services

Background
The Defense Counterintelligence and Security Agency (DCSA), an agency of the Department of Defense (DoD) headquartered in Quantico, Virginia, provides security services to the DoD, Military Components, Executive Branch Departments and Agencies, and approximately 10,000 cleared Contractor facilities.

The DCSA Office of the Chief Information Officer (OCIO) is responsible for automated information systems and telecommunications in support of its mission to protect information and information systems. The agency faces persistent threats from adversaries exploiting new forms of intrusion, malware, and data exfiltration.

To enhance cybersecurity activities and defensive cyber operations, DCSA is seeking information from Certified 8(a) vendors regarding their capabilities to provide Enterprise Cybersecurity Support Services.

Work Details
The Contractor shall provide Enterprise Cybersecurity Support Services across all classification levels, including:

1. Basic Services: Cyber Data Management, Cybersecurity Engineering, Cybersecurity Support, Cyber Compliance Support, Cyber Publication Services, Cyber Defense Operations, Cloud Security Engineering, System Lifecycle Risk Management – Change & Configuration Management, and Project/Program Management.

2. Information Systems Engineering Program Support: Maintain IT infrastructure and applications ensuring security efficacy.

3. Cybersecurity Support Services for Major Programs: Include Assessment and Authorization (A&A), cloud initiatives, risk management, product analysis, facility inspections/site assessments.

4. Cyber Compliance and Public Key Infrastructure (PKI) Support: Oversight for PKI program management.

5. Cyber Compliance Support Services IAW DoD 8570.01-M/8140: Review user account requests and ensure compliance for approximately 15,000 accounts annually.

6. Cyber Publication Support Services: Maintain cybersecurity publications for organizational operations.

7. Data Management Support Services: Support the Enterprise Data Management Program.

8. System Lifecycle Risk Management – CCRM: Establish a mature enterprise CCRM program ensuring change and configuration management operations are consistent across DCSA IT environments.

9. Cyber Defense Operations / Computer Network Defense Support Services: Maintain support for EC3-SOC following DoD guidance.

10. Emergent Technology Support: Provide cybersecurity/engineering services supporting zero-trust networking and innovative technologies to protect DCSA networks.