Autonomous Security Awareness Training and Phishing Simulation

The contract entails the provision of a SaaS-based security awareness training and automated phishing simulation platform tailored for 1,100 users within OCTA, focusing on continuous employee education, targeted phishing campaign delivery, and comprehensive reporting capabilities. The platform must support ongoing training modules to cultivate a security-conscious culture while simulating real-world phishing attacks to evaluate and improve user response behaviors. It is expected to deliver detailed analytics and performance metrics to track progress, identify vulnerabilities, and demonstrate measurable reductions in risk over time. Compliance with applicable privacy standards is a core requirement, ensuring that all data collected, stored, and processed adheres to rigorous confidentiality and data protection protocols. The solution must be scalable, secure, and capable of integrating seamlessly into existing IT environments without disruption. The contract is structured as a subcontract under the NAICS code 611430, and the work is coordinated through the F&A-IS Administration in California. The solicitation was posted on July 21, 2026, with responses due by August 3, 2026, and the platform will be deployed to enhance organizational resilience against social engineering threats across the entire user base.