# SAM #693JJ320A000013_693JJ322F00228N_P00010

Two-month extension of Deloitte cybersecurity management support for DOT systems

**Buyer:** IT ACQUISITION CENTER OF EXCELLENCE (ACE)
**Posted:** October 29, 2026
**Identifier:** 693JJ320A000013_693JJ322F00228N_P00010
**NAICS:** 541512

DOT is extending Deloitte’s cybersecurity support for the Office of the Secretary’s information systems for two months while it reviews its IT workforce and future service needs.
- **Action:** A two-month logical follow-on extension to the existing Cyber Security Information & Program Services (CSIPS) BPA order; this notice is a justification for the extension, not a new product procurement.
- **Agency:** Department of Transportation (DOT), Office of the Secretary (OST), Office of the Chief Information Officer (OCIO).
- **Service provider:** Deloitte LLP.
- **Scope:** Maintain current cybersecurity support for DOT infrastructure, applications, and information systems, including cybersecurity operations and oversight, vulnerability and risk management, FISMA compliance and reporting, and incident management.
  - Operate and maintain the existing BigFix, Tenable, and Invicti tool stack, including inventory, patching, updates, vulnerability scanning, compliance, and Continuous Diagnostics and Mitigation (CDM) data support.
  - Provide security-posture reporting, remediation prioritization, and risk-management modernization planning.
- **Reason for extension:** Continue support while DOT restructures its IT workforce and assesses whether federal employees can assume or reduce the work.
- **Period:** The current order expires October 31, 2026; the extension runs through December 31, 2026.
- **Products and quantities:** No separately purchased products, product quantities, or part numbers are specified; the stated quantity of 2 refers to two months of services.

### Description

<p>The Office of the Chief Information Officer (OCIO) within DOT has a need to extend the cybersecurity management support services under Cyber Security Information &amp; Program Services (CSIPS) Blanket Purchase Agreement (BPA) Order 693JJ320A000013_693JJ322F00228N awarded to Deloitte to support OST&#39;s applications and information systems. The CSIPS BPA Order expires on 10/31/2026 and this request is to extend current levels of support for an additional two (2) months (through 12/31/2026). An extension is needed while DOT goes through the process of restructuring the Department&rsquo;s information technology workforce and determines whether this support can be reduced or fully assumed by Federal employees. See attached justification for more detail.&nbsp;</p>

[View original listing](https://sam.gov/opp/932b73277f5f4441a3b55edd24cad6d9/view)