Opportunity
SAM #693JK426C600016
Sole Source Professional and Technical Support Services for DOT Defensive Counterintelligence & Insider Threat Program (DCIITP)
Buyer
Office of the Secretary
Posted
August 20, 2026
Respond By
August 31, 2026
Identifier
693JK426C600016
NAICS
541690, 541330, 541990
This notice announces DOT's intent to award a sole source contract for insider threat and counterintelligence support services. - Agency: U.S. Department of Transportation (DOT), Office of Intelligence, Security, and Emergency Response (S-60) - Vendor: PKH Enterprises, LLC - Sole source justification based on proprietary tools, operational expertise, and federal embedding - Services required: - Counterintelligence analysis and insider threat detection - User activity monitoring and behavioral risk analysis - Policy development, governance, and security education - Enterprise assessments, CONOPS, technology evaluations, policy updates, and training plans - Key personnel: Program Manager and two Technical UAM Specialists - Deliverables: Baseline maturity analysis, operating framework, modernization roadmap, policy suite, optimization plan, and workforce training - Technologies referenced: Nuix and Cogility platforms (for insider threat analytics) - Period of performance: 12-month base period with four 12-month option periods - No specific product part numbers or quantities; focus is on specialized support services - Commercial opportunity is limited due to sole source designation, but similar companies with insider threat and counterintelligence expertise may be relevant for future requirements
Description
**NOTICE OF INTENT TO SOLE SOURCE - PHK ENTERPRISES, LLC**
In accordance with Executive Order (E.O.) 13587, the National Insider Threat Policy, and DOT Order 1642.1A, the DOT requires professional and technical support services for the DCIITP to maintain a secure operating environment against foreign intelligence entity (FIE) collection, unauthorized disclosures, and insider threats.
The DCIITP is a centralized, department-wide program managed within the Office of Intelligence, Security, and Emergency Response (S-60). It works in close coordination with the Office of Security (M-40), the Office of the Chief Information Officer (S-80), and the Office of the General Counsel (OGC). The program is responsible for protecting classified national security information, Sensitive Security Information (SSI), and proprietary data across all DOT Operating Administrations (OAs).
The purpose of this contract is to acquire professional, technical, and analytical support services for the U.S. Department of Transportation (DOT) Defensive Counterintelligence and Insider Threat Program (DCIITP). The Contractor shall provide specialized expertise in counterintelligence (CI) analysis, insider threat detection, user activity monitoring (UAM), policy development, and security education to safeguard DOT assets, personnel, networks, and classified national security information.
The DCIITP is responsible for protecting DOT's personnel, classified information, and sensitive technical research against foreign intelligence entity (FIE) collection and exploitation. This includes monitoring and responding to patterns of unauthorized solicitation, academic poaching, and attempts to acquire sensitive software or data assets.