DCSA Enterprise Cybersecurity Support Services

Project ID: DCSA_CYBERSSN_25 FederalOpportunitiesSources Sought

Overview

Agency	Defense Counterintelligence and Security Agency
Deadline	02/23/26
Posted	02/23/26
Estimated Value	Not Provided
Set Aside	8A
NAICS	541513 - Computer Facilities Management Services
PSC	DJ01 - IT And Telecom - Security And Compliance Support Services (Labor)
Location	Quantico, VA 22134 United States

Description

Primary Latest Change

Posted: April 22, 2025, 3:33 p.m. EDT This is a Sources Sought Notice for Market Research purposes only. This Sources Sought is issued solely for information and planning purposes; it does not constitute a Request for Proposal (RFP), Request for Quote (RFQ), or a promise to issue an RFP or RFQ. DCSA is an agency of the Department of Defense (DoD), headquartered in Quantico, Virginia, providing security services to the DoD, Military Components, Executive Branch Departments and Agencies, and approximately 10,000 cleared Contractor facilities under the direction, authority and control of the Under Secretary of Defense for Intelligence and Security. The DCSA Office of the Chief Information Officer (OCIO) provides automated information systems and telecommunications in support of this mission. The mission of protecting information and information systems within DCSA and industry partners is an ongoing endeavor. Adversaries continue to present a persistent threat taking advantage of new forms of intrusion, malware, and data exfiltration. By using new technology advances and adjusting focus on potential vulnerabilities, DCSA can strengthen cybersecurity activity and defensive cyber operations. DCSA is seeking information from Certified 8(a) vendors ONLY regarding capabilities to provide Enterprise Cybersecurity Support Services in support of the DCSA OCIO mission. Interested Vendors are requested to respond to this Sources Sought no later than 5:00 PM EST on 20 May 2025 by emailing the Contract Specialist, Sherrita Muse, at sherrita.d.muse.civ@mail.mil, and the Contracting Officer, Kelsie Kautz, at kelsie.kautz.civ@mail.mil. Verbal questions will not be accepted. DCSA will respond to questions at its discretion. The Government will not respond to further questions regarding the anticipated date of solicitation release. Please reference the attached Sources Sought Notice document for full details.

Summary (Newest Update)

Background The Defense Counterintelligence and Security Agency (DCSA), an agency of the Department of Defense (DoD) headquartered in Quantico, Virginia, provides security services to the DoD, Military Components, Executive Branch Departments and Agencies, and approximately 10,000 cleared Contractor facilities. The DCSA Office of the Chief Information Officer (OCIO) is responsible for automated information systems and telecommunications in support of its mission to protect information and information systems. The agency faces persistent threats from adversaries exploiting new forms of intrusion, malware, and data exfiltration. To enhance cybersecurity activities and defensive cyber operations, DCSA is seeking information from Certified 8(a) vendors regarding their capabilities to provide Enterprise Cybersecurity Support Services. Work Details The Contractor shall provide Enterprise Cybersecurity Support Services across all classification levels, including: 1. Basic Services: Cyber Data Management, Cybersecurity Engineering, Cybersecurity Support, Cyber Compliance Support, Cyber Publication Services, Cyber Defense Operations, Cloud Security Engineering, System Lifecycle Risk Management – Change & Configuration Management, and Project/Program Management. 2. Information Systems Engineering Program Support: Maintain IT infrastructure and applications ensuring security efficacy. 3. Cybersecurity Support Services for Major Programs: Include Assessment and Authorization (A&A), cloud initiatives, risk management, product analysis, facility inspections/site assessments. 4. Cyber Compliance and Public Key Infrastructure (PKI) Support: Oversight for PKI program management. 5. Cyber Compliance Support Services IAW DoD 8570.01-M/8140: Review user account requests and ensure compliance for approximately 15,000 accounts annually. 6. Cyber Publication Support Services: Maintain cybersecurity publications for organizational operations. 7. Data Management Support Services: Support the Enterprise Data Management Program. 8. System Lifecycle Risk Management – CCRM: Establish a mature enterprise CCRM program ensuring change and configuration management operations are consistent across DCSA IT environments. 9. Cyber Defense Operations / Computer Network Defense Support Services: Maintain support for EC3-SOC following DoD guidance. 10. Emergent Technology Support: Provide cybersecurity/engineering services supporting zero-trust networking and innovative technologies to protect DCSA networks.

4: Posted: Feb. 23, 2026, 11:41 a.m. EST Description: The Government is issuing this notice to provide an update on the planned follow-on acquisition for the requirement previously announced under Sources Sought Notice DCSA_CYBERSSN_25. The Government is continuing internal acquisition planning. Based on current information: A solicitation will not be issued in Fiscal Year 2026. The anticipated timeline for any future solicitation is now projected for Fiscal Year 2027 2028; however, specific dates have not been established. No determination has been made regarding the applicable small business program or acquisition strategy, and such decisions remain under review. This notice is provided for informational purposes only and does not commit the Government to release a solicitation or make any changes to the current requirement. Vendor Inquiries: Due to the high volume of industry inquiries, the Government will not respond to individual requests for updates, timelines, or acquisition strategy. Any information the Government elects to make publicly available will be communicated through appropriate channels. Disclaimer: This notice does not constitute a solicitation and should not be construed as a commitment by the Government. All information is subject to change.

Current: Posted: Feb. 24, 2026, 11:58 a.m. EST The notice published on February 23, 2026 (see below) was an update to the planned follow-on acquisition for Source Sought Notice DCSA_CYBERSSN_25 in support of the DCSA Enterprise Cybersecurity Support Services requirement. THE GOVERNMENT IS NOT SEEKING CAPABILITY STATEMENTS AT THIS TIME. Description: The Government is issuing this notice to provide an update on the planned follow-on acquisition for the requirement previously announced under Sources Sought Notice DCSA_CYBERSSN_25. The Government is continuing internal acquisition planning. Based on current information: A solicitation will not be issued in Fiscal Year 2026. The anticipated timeline for any future solicitation is now projected for Fiscal Year 2027 2028; however, specific dates have not been established. No determination has been made regarding the applicable small business program or acquisition strategy, and such decisions remain under review. This notice is provided for informational purposes only and does not commit the Government to release a solicitation or make any changes to the current requirement. Vendor Inquiries: Due to the high volume of industry inquiries, the Government will not respond to individual requests for updates, timelines, or acquisition strategy. Any information the Government elects to make publicly available will be communicated through appropriate channels. Disclaimer: This notice does not constitute a solicitation and should not be construed as a commitment by the Government. All information is subject to change.

Contacts

Contact name	Sherrita Muse
Contact email	sherrita.d.muse.civ@mail.mil
Contact phone	None
Secondary contact name	Kelsie Kautz
Secondary contact email	kelsie.kautz.civ@mail.mil
Secondary contact phone	None