CDC Managed Service Provider (MSP) 2.0

The CDC Office of the Chief Information Officer is seeking industry input through a Sources Sought Notice and Request for Information for the CDC Managed Service Provider (MSP) 2.0 initiative, with solicitation number 75D301_FY2027, posted on June 18, 2026, and responses due by July 2, 2026. This effort, under the Department of Health and Human Services and managed by the CDC Office of Acquisition Services in Atlanta, Georgia, targets a NAICS code 518210 with no set-aside designation, aiming to establish a comprehensive cloud services contract to support the agency’s entire IT infrastructure. The contractor will be responsible for delivering end-to-end managed services across on-premises, private, public, and hybrid cloud environments, including cloud hosting, infrastructure and platform administration, database management for SQL Server, Oracle, and MySQL, operational support maintained 24x7x365, transition activities for system migration, and robust disaster recovery capabilities aligned with established Recovery Time and Point Objectives. All services must fully comply with federal standards including FISMA, FedRAMP, and NIST, as well as CDC-specific cybersecurity and governance policies, requiring adherence to strict incident, problem, change, configuration, capacity, performance, and vulnerability management processes, along with audit-ready logging and standardized Golden Image maintenance. The government is evaluating industry capabilities to inform the structure of a future formal procurement, and as such, no contract award or pricing has been determined at this stage. Interested parties are required to provide organizational details including CAGE and UEI codes, SAM.gov registration status, size and ownership type, and identification of any existing prime contract vehicles such as NIH CIO-SP3, NASA SEWP V, GSA ALLIANT II, VETS II, STARS III, or MAS. Responses must include information on the vendor’s experience and approach to quality assurance and quality control, and must be submitted in Microsoft Word or PDF format, not exceeding ten pages, via email to al00@cdc.gov. The CDC is particularly interested in understanding the availability and technical capacity of small businesses, small disadvantaged businesses, certified 8(a) firms, service-disabled veteran-owned small businesses, HUBZone small businesses, and woman-owned small businesses to shape equitable and competitive contracting opportunities. This RFI does not constitute a solicitation for proposals but is a market research tool intended to gather insight on task areas, CLIN structures (