DLA Cybersecurity Web-App Vulnerability Management

Background
The Defense Logistics Agency (DLA) is seeking to enhance its cybersecurity engineering support in response to increased research and development (R&D) activities related to information technology, cloud services, and operational technology.

This initiative is part of the DLA's mission to ensure robust cybersecurity measures are in place as it adapts to emerging technologies. The justification for this action is based on the need for an exception to fair opportunity, allowing for the use of other than full and open competition.

Work Details
The contractor will provide critical cybersecurity engineering support to the DLA HQ R&D program office at Fort Belvoir, VA. Key responsibilities include:

- Evaluating, documenting, and improving the cybersecurity posture of DLA activities;
- Ensuring compliance with Department of Defense (DoD) and DLA cybersecurity policies;
- Designing and evaluating risks associated with information and operational technology systems;
- Providing recommendations to the Program Manager and R&D directorate;
- Supporting multiple ongoing Small Business Innovation Research (SBIR) projects;
- Offering guidance on security architecture requirements, system hardening, risk mitigation, and compliance with DoD policies;
- Ensuring secure operation of the ARTET multi-cloud environment;
- Facilitating collaboration between public-private sectors as outlined in Executive Order 14028.

Period of Performance
The contract will be performed from October 1, 2023, through September 30, 2026, with two additional 12-month option periods.

Place of Performance
Fort Belvoir, VA