Cybersecurity Management Services

DISA is seeking small‑business sources to provide comprehensive Cybersecurity Management Services for its J‑9 HaC Division, including vulnerability scanning, incident response, RMF/FISMA compliance, automation, and related training and audit support across classified (SIPRNet) and unclassified (NIPRNet) environments. Offerors must submit a brief capabilities statement (no more than five pages) answering the listed technical questions and providing required business information via email by the specified deadline; this is a Sources‑Sought notice, not a solicitation for a full proposal. The notice is set‑aside for small businesses (including SDVOSB, HUBZone, 8(a), WOSB, etc.) and does not require selection among multiple topics or task areas. Work will be performed at DISA facilities in Oklahoma City, OK; Mechanicsburg, PA; Montgomery, AL; San Antonio, TX; and Ogden, UT, with a base period of one year starting Oct 1 2026 and three one‑year options, and all personnel must hold Secret clearances and the contractor must have a Secret Facility Clearance.

Notice ID

cdb534f832384552be365efdfc062be3

Solicitation Number

832573449

NAICS Code

541512

Classification Code

N/A