CISA to Award $100M Cybersecurity Operations Contract in 2026

The Cybersecurity and Infrastructure Security Agency (CISA) is gearing up for a significant progression in its cybersecurity procurement strategy. The agency plans to issue a competitive solicitation for a follow-on contract valued at more than $100 million for cybersecurity operations support services, known as Cybersecurity Operations Support Services (COSS). This planned contract highlights the ongoing necessity for government agencies to enhance their resilience against increasing cyber threats, particularly given recent surges in cyber incidents affecting both public and private sector entities.

This impending award is expected to open for solicitation by October 31, 2026, with a targeted contract award timeframe set for the second quarter of fiscal year 2027. The contract will utilize the General Services Administration’s (GSA) Alliant 2 governmentwide acquisition contract vehicle, ensuring that a broad spectrum of service capabilities is covered, as alluded to in prior communications from CISA. The successful contractor will be expected to provide a comprehensive suite of cybersecurity services, which includes but is not limited to security operations center functions, vulnerability management, penetration testing, alongside enhanced measures for cloud and AI security.

As cyber threats evolve, CISA has recognized the critical need for robust protection strategies to defend against potential breaches and vulnerabilities. The contractor will be tasked with safeguarding CISA’s Federal Information Security Modernization Act (FISMA) systems, which encompass vital elements such as hybrid cloud environments, data centers, and network infrastructure. The emphasis on integrating advanced technologies—specifically in cloud security and artificial intelligence (AI)—will be pivotal in the upcoming contract. In an era where the implications of a successful cyber-attack can be catastrophic, the government's commitment to a fortified cybersecurity apparatus is increasingly apparent.

This contract also follows a precedent set by the current incumbent contractor, Leidos, which suggests a competitive landscape for bidders. The effectiveness and continuity of the services provided by Leidos thus far positions them as a formidable contender, although the competitive bidding process remains open to other qualified firms. Procurement professionals are advised to prepare their proposals aligning with the expected solicitation release timeline, as organizations with established expertise in complex cybersecurity operations are likely to find new opportunities as the market shifts.

Furthermore, CISA's commitment to cybersecurity operations is not limited to just this contract. The agency is also looking to pursue a separate cyber operations contract focused on furthering its threat hunting mission, which encompasses incident response and cybersecurity engineering capabilities. These moves indicate a strategic reinforcing of the agency’s cybersecurity framework to cover all bases of potential vulnerabilities. This expanded approach ensures that CISA can effectively respond not just to current threats but can preemptively strategize against those anticipated in the future.

With this in mind, industry stakeholders and potential offerors should assess their capabilities in areas such as security operations center management, vulnerability assessments, and leveraging emerging technologies to maintain competitiveness in this evolving landscape. Companies looking to bid should also stay informed about the evolving requirements and seek to demonstrate their experience with the GSA Alliant 2 contract while showcasing their ability to integrate the latest cybersecurity solutions efficiently.

In conclusion, CISA’s planned procurement of the cybersecurity operations support services contract underscores its ongoing commitment to enhancing national infrastructure’s resilience against cyber threats. As the solicitation date approaches, vendors must prepare thoroughly to position themselves advantageously in what promises to be a dynamic and competitive environment.

• CISA to release solicitation for follow-on cybersecurity operations support contract by October 31, 2026.
• The contract, valued at over $100 million, will utilize GSA's Alliant 2 vehicle.
• Services include security operations center functions, vulnerability management, and cloud security.
• The award is anticipated for the second quarter of fiscal year 2027.
• Incumbent contractor Leidos currently provides services, highlighting competitive dynamics.
• Organizations should evaluate capabilities in emerging technology security to align with CISA’s needs.