GovSprint
← Back to today

CISA Cybersecurity Exercise Support Services

Department of Homeland Security · Cybersecurity and Infrastructure Security Agency · ISD, IOD, & ECD Contracting Division (70RCSJ)
Account requiredWhy it scored this way

Every reason behind the verdict rather than the headline one — which of your certifications match, how much runway is left, whether the work is your size, and what we would need to know to sharpen it.

Start free for 14 daysSign in

Forecast detail

Not yet solicited

The expected date passed 6 days ago. It may already be on the street — check SAM.gov before doing anything else.

Solicitation expected
August 14, 2026
Anticipated award
September 21, 2026 · Q4 2026
Estimated value
$20M to $50M
Period of performance
September 22, 2026 to September 21, 2028
Contract type
Time and Materials
Expected vehicle
OASIS+
Competition
New Requirement, No Contract
No incumbent. A new requirement means nobody is defending a position here, and no one has an insider’s head start on the scope.

Who to talk to

At the forecast stage there is no active procurement, so contact is welcome rather than restricted — this is the one window where a direct conversation is straightforwardly appropriate.

The Small Business Specialist is usually the better first call. Helping firms like yours find and compete for this work is their actual job, and they can tell you whether a set-aside is still under consideration.

Published by the agency in its acquisition forecast, last updated August 5, 2026. Forecast entries are plans, not commitments — dates slip and requirements get cancelled, restructured or absorbed into another buy.

Requirement details

Solicitation number
*F2026072729
Notice type
Forecast
NAICS
541690 — Other Scientific and Technical Consulting Services
Set-aside
Unrestricted
Posted
2026-08-05
Place of performance
Arlington, VA

Market intelligence

Account requiredWho wins this work, and what it pays

Comparable awards under NAICS 541690 at this agency — the incumbent, what they were paid, when their period of performance ends, and the real pricing distribution rather than the headline number. From public federal award records.

Start free for 14 daysSign in

Statement of work, as posted

The OASIS+ domain is Management & Advisory. The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge).

Contact

Point of contact
Patricia Smart
Role
Requirements owner
Email
CISAAPFSVendorInquiries@cisa.dhs.gov
Secondary
CISAAPFSVendorInquiries@cisa.dhs.gov
Introduce your firm

A short introduction against this specific requirement, sent while the agency is still deciding how to buy it.

Open email
Ask about the acquisition strategy

Ask whether a set-aside is being considered, which vehicle is planned, and whether the agency wants industry input. This is the question that can still change the outcome.

Open email
Ask to be notified on release

Ask to be added to any industry-day or notification list so you are not relying on catching the posting yourself.

Open email

Opens in your own mail client, addressed and with a subject line — you write the message. GovSprint never sends anything on your behalf.

Emails open in your mail client and are sent from your address, so the reply comes back to you and the exchange stays yours. Confirm the correct channel and any question deadline on the notice before sending — many solicitations require questions in a specific way.

View in the DHS forecast