Department of Interior, Business Integration Offic

Background
The Department of the Interior's Business Integration Office is seeking to procure Onapsis licenses, maintenance, and support services. The goal of this contract is to enhance the agency's cybersecurity posture through vulnerability assessments and continuous monitoring of SAP and HANA systems.

Work Details
The contractor will provide the following services:
1. Onapsis Vulnerability Assessment for SAP (Part No. SW-ASSESS-SAP-S) - Quantity: 6
2. Onapsis Vulnerability Assessment for HANA (Part No. SW-ASSESS-HANA-S) - Quantity: 2
3. Onapsis Continuous Monitoring for SAP (Part No. SW-DEFEND-SAP-S) - Quantity: 3
4. Onapsis Continuous Monitoring for HANA (Part No. SW-DEFEND-HANA-S) - Quantity: 2
5. Onapsis Automated Governance for SAP (Part No. SW-NISTISOCOMPLY-S) - Quantity: 2
6. Onapsis Automated Governance for HANA (Part No. SW-NISTISOCOMPLY-HANA-S) - Quantity: 2
7. Onapsis Code Vulnerability Assessment (Part No. SW-ASSESSCODE-S) - Quantity: 3

Each service is to be delivered as a firm fixed price under the Product Service Code DA10, which pertains to IT and Telecom - Business Application/Application Development Software as a Service.

Period of Performance
The period of performance for the base period is from June 16, 2026, to June 15, 2031, with options available for extensions in subsequent years.

Place of Performance
The contract will be performed at various locations as determined by the Department of the Interior.

Bidder Requirements
Bidders must demonstrate relevant experience in providing cybersecurity services specifically related to SAP and HANA systems. They must possess necessary licenses and certifications related to IT security and have qualified personnel with expertise in vulnerability assessments and continuous monitoring.

Incumbent Analysis (see Incumbents section for more detail)
This opportunity appears to have a confirmed incumbent based on prior award NNG15SD38B-140D0423F0734, awarded to Redhawk IT Solutions for $994,864 (06/16/23–06/15/26) covering Onapsis software licenses, maintenance, and service. The current requirement similarly seeks Onapsis licensing along with ongoing maintenance/support and related capabilities (e.g., vulnerability assessments and continuous monitoring) for SAP and HANA environments, which suggests continuity of the same product/service scope.