DHS Network Operations Security Center (NOSC) Network, Cloud, and Cyber Services (NCCS) 2.0

The Department of Homeland Security (DHS) has issued a Request for Information (RFI) for Network Cyber and Cloud Support (NCCS) Services 2.0. This RFI seeks industry feedback on optimal approaches for providing network, system, cloud management, and cybersecurity support services for the DHS Network Operations and Security Center (NOSC) facilities located in the National Capital Region, Bluemont, VA, Mississippi, and Arizona. DHS is particularly interested in industry's views on staffing models, including the preferred mix of junior and journeyman personnel with integrated skill sets in network, cloud, and cybersecurity. The RFI also explores contract types, the feasibility of the proposed staffing expertise, and approaches for leveraging traditional and agentic AI tools. Additionally, it addresses surge support capabilities and personnel security requirements, specifically TS/SCI cleared staff for onsite work. Responses will help DHS plan for a future single-award contract for these critical support services.

The Department of Homeland Security (DHS) seeks to procure comprehensive cybersecurity, network operations, and management services for its Headquarters Network Operations and Service Center (NOSC) and select components. The contract, titled "DHS Network Operations Security Center (NOSC) Network, Cloud, and Cyber Services (NCCS) 2.0," aims to evolve the NOSC into a best-in-class entity meeting industry and governmental cybersecurity standards. Key objectives include enhancing network, cloud, platform, system, application, and cybersecurity monitoring and analysis, incident management, and response across the entire DHS information enterprise. The scope of work encompasses contract management, continuous capability improvement, 24/7 monitoring and incident response, network infrastructure operations and maintenance, field engineering support, and specialized cybersecurity services such as vulnerability assessments, threat intelligence, and penetration testing. The contractor will also be responsible for establishing a Program Management Office (PMO) to continuously improve all capability elements in accordance with various industry and government frameworks like ITIL v4, CMMI, and NIST Cybersecurity Framework. The contract will run for a 12-month base period and four 12-month optional ordering periods, starting August 1, 2026, and requires personnel with specific certifications and security clearances.