DHS Network Operations Security Center (NOSC) Network, Cloud, and Cyber Services (NCCS) 2.0

This Statement of Work (SOW) outlines the requirements for the Department of Homeland Security (DHS) Network Operations Security Center (NOSC) Network, Cloud, and Cyber Services (NCCS) 2.0 contract. The primary objective is to evolve the DHS Headquarters NOSC into a best-in-class Cybersecurity Provider (CSP) and central IT Service Management hub. The contractor will provide 24x7x365 operational staffing primarily for Tier 1 and Tier 2 network, cloud, and cybersecurity services across all classification levels of the DHS OneNet enterprise. Key task areas include contract and transition management, capability delivery and continuous service improvement aligned with ITIL v4 and NIST frameworks, and real-time network and cloud monitoring. Additionally, the contractor will deliver core cybersecurity services such as threat intelligence, vulnerability assessments, penetration testing, threat hunting, and cyber forensics. Additional responsibilities encompass regional field engineering support, CSP program administration, security control assessments, and managing the DHS Industry Cyber Hygiene Assessment Program. The contract features a one-year base period followed by four one-year option periods, with performance occurring across designated DHS facilities. Key personnel, including a Program Manager and Deputy Program Manager, must hold PMP and CISSP certifications to oversee operations and facilitate knowledge transfer.

This document provides instructions for accessing the Network Operations Security Center (NOSC) Network, Cloud, and Cybersecurity Services (NCCS) physical Reading Room during Phase 2 of DHS solicitation 70RTAC26R00000007. The Reading Room, located at the TSA Headquarters in Springfield, Virginia, allows industry vendors to review hard-copy "For Official Use Only" (FOUO) and other relevant solicitation documents prior to the proposal closing date. Access is strictly controlled and requires advanced registration. Vendors must request an appointment at least 24 hours in advance, and sessions are scheduled in 30-minute increments on a first-come, first-served basis. Attendance is limited to two pre-registered representatives per vendor, who must present both government and company-issued identification upon arrival. Strict security protocols are enforced on-site. Visitors must sign in, will be escorted by a DHS Office of the Chief Information Officer (OCIO) representative at all times, and are prohibited from bringing electronic devices—such as cell phones, tablets, laptops, and USB drives—into the Reading Room. However, vendors are permitted to bring paper notebooks to take handwritten notes. The on-site government escorts are present solely for monitoring and cannot answer questions regarding the documents; all inquiries must be submitted formally in writing according to the solicitation's instructions by the designated deadline.

This document is a Draft Attachment for the NCCS Pricing Template, which serves as a structured tool for contractors to submit labor rate proposals for a federal government contract. The template outlines instructions for completing the "Labor Rates" tab, requiring contractors to fill in all yellow-shaded fields, propose an escalation rate, and define a "Top Secret" rate multiplier to be applied to Sensitive But Unclassified (SBU), Secret, and Remote labor rates. The pricing template is organized into six core tasks, detailing specific professional, technical, and cybersecurity labor categories across senior, mid, and junior levels: - **Task 1:** Contract Management (e.g., Program Managers) - **Task 2:** Capability Development and Improvement (e.g., Business Analysts, SME) - **Task 3:** Network, Cloud, and Cybersecurity M&A and Event/Incident Management (e.g., Cloud Architects, Cyber Security Engineers, SOC Analysts) - **Task 4:** HSEN Network Infrastructure Operations and Maintenance Support (e.g., Network/Systems Security Engineers) - **Task 5:** Field Engineering Technical Services (e.g., Field Engineers, Telecommunications Specialists) - **Task 6:** Other Cybersecurity Services (e.g., IT Auditors, Vulnerability Assessment Analysts) The pricing structure spans multiple performance periods, including a Base Period (09/01/2026 – 08/31/2027) and subsequent Option Periods extending through August 2030. It accounts for geographic differentials across key performance locations, specifically Washington, DC; Chandler, AZ; and Sennis, MS. This template will be utilized by the Government to calculate total proposed pricing for a best-value tradeoff evaluation.

This Department of Homeland Security (DHS) document outlines the labor categories, duties, and seniority level requirements for a cybersecurity and network infrastructure contract. Organized across six core task areas, the document provides structured job descriptions designed to support DHS's information enterprise, network operations, and cloud security initiatives. The contract framework is divided into the following tasks: - **Task 1: Contract Management:** Includes Program and Deputy Program Managers requiring CISSP certification and cybersecurity management experience. - **Task 2: Capability Development and Improvement:** Features analytical and support roles such as Business, Financial, and Knowledge Management Analysts, Project Managers, and Technical Writers. - **Task 3: Network, Cloud, and Cybersecurity M&A and Event and Incident Management:** Contains specialized technical positions including Cloud Architects, Cyber Security Incident Analysts, Threat Hunters, Database Administrators, and Software Developers. - **Task 4: HSEN Network Infrastructure Operations and Management Support:** Focuses on network design, security engineering, and hardware management. - **Task 5: Field Engineering Technical Services:** Covers on-site engineering and telecommunications installation. - **Task 6: Other Cybersecurity Services:** Includes IT Auditors, Risk Analysts, and Vulnerability Assessment Specialists. Additionally, the document defines experience and certification criteria for three seniority levels: Junior (0–2.5 years of experience and one certification/degree), Mid (2.5–7.5 years of experience and two certifications or a degree plus one certification), and Senior (7.5+ years of experience and two certifications, with education substitution allowances). Experience cannot be substituted for education at the Junior and Mid levels.

This document is a blank template designed for vendors to submit questions regarding the federal government's Draft Request for Proposals (RFP) number 70RTAC26R0000007, titled "Network, Cloud and Cyber Security Services 2.0." The structured table provides columns for vendors to input reference details, including the specific paragraph number, page number, and Draft RFP section, alongside their corresponding questions. The primary purpose of this file is to facilitate a clear, organized Q&A process between prospective contractors and the government agency during the pre-solicitation phase of the procurement.

This Draft Request for Proposal (RFP) (Solicitation No. 70RTAC26R00000007) is issued by the Department of Homeland Security (DHS) Office of the Chief Information Officer (OCIO) to establish a single-award, department-wide Indefinite-Delivery/Indefinite-Quantity (IDIQ) contract for Network, Cloud, and Cybersecurity Services (NCCS) 2.0. The contract features a 12-month base period, four 12-month option periods, and a cumulative dollar ceiling of $625,996,046.00. Procurement will follow a two-phase down-select evaluation process. Phase 1 is a mandatory pass/fail evaluation based on Factor 1 (Top-Secret Facility Clearance). Successful Phase 1 offerors will be invited to Phase 2, which utilizes a best-value tradeoff analysis evaluating Factor 2 (Demonstrated Prior Experience and Reference Checks), Factor 3 (Staffing and Management Approach), and Factor 4 (Price). Non-price factors, when combined, are significantly more important than price. The resulting IDIQ will support Firm-Fixed-Price, Time-and-Materials, Labor-Hour, and hybrid task orders. It mandates 24x7x365 operational support and strict compliance with DHS and TSA Enterprise Architecture standards, FIPS encryption standards, and DHS Information Security Policy 4300A. Additionally, the contractor must adhere to organizational conflict of interest rules and non-disclosure requirements, and is prohibited from performing inherently governmental functions.