# SAM #693JJ320A000018_693JJ323F00304N_P00004

Extension of Cybersecurity Management Support Services for Penetration Testing

**Buyer:** IT ACQUISITION CENTER OF EXCELLENCE (ACE)
**Posted:** September 15, 2026
**Identifier:** 693JJ320A000018_693JJ323F00304N_P00004
**NAICS:** 541519, 541512

The Department of Transportation (DOT), Office of the Secretary (OST), Office of the Chief Information Officer (OCIO), is requesting an extension of cybersecurity management support services for penetration testing under the Cyber Security Information & Program Services (CSIPS) Blanket Purchase Agreement.
- Extension is for five months, moving the end date from 9/28/2026 to 2/28/2027
- Services are provided by Ernst & Young LLP
- Scope includes technical and professional support for penetration testing of DOT infrastructure, applications, and information systems
  - Includes risk evaluation, vulnerability prioritization, and compliance with FISMA and OMB directives
  - Supports DOT cybersecurity Red, Purple, and Blue Team missions
- No specific product line items, part numbers, or purchase quantities are listed
- The extension ensures continuity of critical cybersecurity services for DOT

### Description

<p>The OCIO has a need to extend the cybersecurity management support services under Cyber Security Information &amp; Program Services (CSIPS) Blanket Purchase Agreement (BPA) Order 693JJ320A000018_693JJ323F00304N awarded to Ernst and Young to support OST&#39;s penetration testing activity. The Order currently expires on 9/28/2026 and this request is to extend current levels of support for an additional five (5) months (through 2/28/27).</p>

[View original listing](https://sam.gov/opp/677bd696652e4f77ab15c33320604c59/view)