DISA Releases Sources Sought Notice for Cyber Vulnerability Support

The Defense Information Systems Agency has issued a sources sought notice for cyber vulnerability management services.

DISA is conducting market research to support the needs of its cyber services line of business, which handles all information technology assets used for managing Department of Defense data, Intelligence Community News reported.

Interested sources are asked to detail their ability to support cyber vulnerability scanning and detection, maintain operational security and support information assurance enabled devices managed by the DOD.

Companies must also describe their experience in monitoring, analyzing, reporting and improving the cybersecurity posture of information systems.

In addition, DISA wants to learn more about companies’ efforts in utilizing and managing cyber systems, such as tools, applications, databases and other software/network platforms.

The sources sought notice is meant for small businesses only. DISA is expected to eventually award a potential four-year contract to procure the needed cyber vulnerability management services. Contract work will be performed in Pennsylvania, Oklahoma, Alabama and Utah beginning October 1, 2022.

The contractor must have final top secret sensitive compartmented information secret and secret clearances.

Cinteot, a HUBZone 8(a) certified woman-owned small business based in Chambersburg, Pennsylvania, is the incumbent contractor.

The company was awarded a firm-fixed price cybersecurity services contract in 2019 under the General Services Administration’s IT Schedule 70 contract vehicle. The existing contract is slated to run through September 2022 if all options are exercised.