Opportunity

SAM #693JJ320A000013_693JJ322F00228N_P00010

Two-month extension of Deloitte cybersecurity management support for DOT systems

Buyer

IT ACQUISITION CENTER OF EXCELLENCE (ACE)

Posted

October 29, 2026

Identifier

693JJ320A000013_693JJ322F00228N_P00010

NAICS

541512

DOT is extending Deloitte’s cybersecurity support for the Office of the Secretary’s information systems for two months while it reviews its IT workforce and future service needs. - Action: A two-month logical follow-on extension to the existing Cyber Security Information & Program Services (CSIPS) BPA order; this notice is a justification for the extension, not a new product procurement. - Agency: Department of Transportation (DOT), Office of the Secretary (OST), Office of the Chief Information Officer (OCIO). - Service provider: Deloitte LLP. - Scope: Maintain current cybersecurity support for DOT infrastructure, applications, and information systems, including cybersecurity operations and oversight, vulnerability and risk management, FISMA compliance and reporting, and incident management. - Operate and maintain the existing BigFix, Tenable, and Invicti tool stack, including inventory, patching, updates, vulnerability scanning, compliance, and Continuous Diagnostics and Mitigation (CDM) data support. - Provide security-posture reporting, remediation prioritization, and risk-management modernization planning. - Reason for extension: Continue support while DOT restructures its IT workforce and assesses whether federal employees can assume or reduce the work. - Period: The current order expires October 31, 2026; the extension runs through December 31, 2026. - Products and quantities: No separately purchased products, product quantities, or part numbers are specified; the stated quantity of 2 refers to two months of services.

Description

The Office of the Chief Information Officer (OCIO) within DOT has a need to extend the cybersecurity management support services under Cyber Security Information & Program Services (CSIPS) Blanket Purchase Agreement (BPA) Order 693JJ320A000013_693JJ322F00228N awarded to Deloitte to support OST's applications and information systems. The CSIPS BPA Order expires on 10/31/2026 and this request is to extend current levels of support for an additional two (2) months (through 12/31/2026). An extension is needed while DOT goes through the process of restructuring the Department’s information technology workforce and determines whether this support can be reduced or fully assumed by Federal employees. See attached justification for more detail. 

View original listing