Acquisition Planning Forecast System |
|
Forecast Record Number: | F2026072729 |
| Component: DHS HQ/CISA | Published Date: June 1, 2026, 12:22 p.m. | Previously Published On: May 28, 2026, 2:42 p.m. |
| NAICS: 541690 - Other Scientific and Technical Consulting Services | Competition: YES |
| Small Business Set-Aside: N/A | Small Business Program: None |
| Contract Vehicle: OASIS+ | Contract Type: Time and Materials |
| Contract Status: New Requirement | Anticipated Award Quarter: Q4 FY2026 |
| Estimated Solicitation Release: 2026-07-10 | Contract Complete: 2028-08-27 |
| Requirements Title: CISA Cybersecurity Exercise Support Services | |
| Description: The OASIS+ domain is Management & Advisory. The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge). | |
| Estimated Dollar Range: $20,000,000.00 to $50,000,000.00 | Place of Performance: Arlington, VA |
| POC Name: Patricia Smart | Alternate POC Name: Heather Wastella |
| POC Phone: (202) 679-5265 | Alternate POC Phone: (202) 427-2701 |
| POC Email: [email protected] | Alternate POC Email: [email protected] |
| Small Business Specialist/APFS Coordinator POC Name: Melody Hinkle | |
| Small Business Specialist/APFS Coordinator POC Phone: (202) 812-0440 | Small Business Specialist/APFS Coordinator POC Email: [email protected] |
Change Log
| Field Changed | Old Value | New Value | Date Changed |
| Previous Published Date | 05/27/2026 | 05/28/2026 | June 1, 2026 |
| Published Date | 05/28/2026 | 06/01/2026 | June 1, 2026 |
| Last Updated Date | 05/28/2026 | 06/01/2026 | June 1, 2026 |
| Requirement | The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge). | The OASIS+ domain is Management & Advisory. The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge). | June 1, 2026 |
| Previous Published Date | 01/23/2026 | 05/27/2026 | May 28, 2026 |
| Published Date | 05/27/2026 | 05/28/2026 | May 28, 2026 |
| Last Updated Date | 05/27/2026 | 05/28/2026 | May 28, 2026 |
| Alternate Contact Phone | (771) 211-7810 | (202) 427-2701 | May 28, 2026 |
| Small Business Set Aside | Full | N/A | May 28, 2026 |
| Small Business Program | SDVOSB | None | May 28, 2026 |
| Previous Published Date | None | 01/23/2026 | May 27, 2026 |
| Published Date | 01/23/2026 | 05/27/2026 | May 27, 2026 |
| Last Updated Date | 01/23/2026 | 05/27/2026 | May 27, 2026 |
| Contract Complete | 05/28/2031 | 08/27/2028 | May 27, 2026 |
| Small Business Set Aside | N/A | Full | May 27, 2026 |
| Estimated Solicitation Release | 03/02/2026 | 07/10/2026 | May 27, 2026 |
| Award Quarter | Q3 2026 | Q4 2026 | May 27, 2026 |
| Dollar Range | $50M to $100M | $20M to $50M | May 27, 2026 |
| Small Business Program | TBD | SDVOSB | May 27, 2026 |