Cybersecurity Support Services RFI

The Defense Security Cooperation Agency (DSCA) seeks support to modernize its Governance, Risk, and Compliance (GRC) posture by implementing automation and Policy-as-Code (PaC) capabilities. This initiative aims to create a secure, scalable, and continuously monitored IT environment across cloud and legacy systems, aligning with DoD cybersecurity standards. Key objectives include developing automation frameworks to reduce manual effort by 25-50%, codifying security policies for automated enforcement and auditing, enhancing continuous monitoring with real-time dashboards, achieving scalability and adaptability across DSCA systems, and fostering stakeholder collaboration. The contractor will deliver configurable automation frameworks, PaC frameworks, continuous monitoring dashboards, training materials, and governance artifacts. Performance will be evaluated on compliance with DoD directives, quality, timeliness, scalability, and user adoption, with a goal of enterprise-wide adoption and DSCA personnel training.

The Department of Defense, Washington Headquarters Services (WHS), Acquisition Directorate (AD), has issued a Request for Information (RFI) for Cybersecurity Support Services for the Defense Security Cooperation Agency (DSCA). This RFI, posted on October 24, 2025, with responses due by November 25, 2025, at 10 a.m. EST, seeks input for developing a solicitation and a Proposed Performance Work Statement (PWS). The WHS/AD is looking for potential sources to provide a draft PWS outlining the approach to performance requirements, including objectives, scope, performance standards, metrics, deliverables, and specific tasks. This is for planning purposes only and is not a solicitation or an obligation for the Government to award a contract. Respondents are advised not to submit proprietary, classified, confidential, or sensitive information, as all submissions become Government property. The Government reserves the right to use any non-proprietary information provided for any purpose deemed necessary, including in future solicitations. No meetings, briefings, or phone calls regarding the RFI status will be accepted. A Request for Proposal (RFP) may be issued after reviewing the RFI responses, which will not be returned.