Request for Information: Cybersecurity and Program Support

The National Credit Union Administration (NCUA) seeks information on companies capable of providing comprehensive cybersecurity program support services. The RFI (NCUA25RFI0028) focuses on identifying, protecting, detecting, responding to, recovering from, operating, maintaining, and continuously improving NCUA's cybersecurity program, ensuring compliance with FISMA, OMB, NIST, and other federal guidelines. The draft Statement of Work outlines eleven task areas, including Cybersecurity Program Support, Audit Management, Cybersecurity Architecture and Engineering, Security Operations Center, Incident Management, Forensics Support, Cyber Threat Intelligence, and Project Management Support, with optional task areas for Surge Support, ISSO Support, and Cyber Supply Chain Risk Management. Specific requirements include developing a three-year Cybersecurity Strategic Plan, implementing the NIST Cybersecurity Framework, and managing the Assessment & Authorization (A&A) process. Responses should address the company's capabilities to perform each task area, including experience with federal agencies of similar size and complexity, and provide recommendations for evaluation factors and a draft Service Level Agreement. The RFI does not constitute a promise to issue a future RFP, and all costs associated with responding are solely the respondent's responsibility. Responses are due by 2:00 p.m. ET on October 8, 2025, to VBertucci@ncua.gov.

Notice ID

ffebd259763142a0bc8cf292318c5cdf

Solicitation Number

NCUA25RFI0028

NAICS Code

541519

Classification Code

DJ01