CISA Cybersecurity Operations Support Services (COSS)

The Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), Office of the Chief Information Officer (OCIO), and the Defensive Cybersecurity Operations (DCO) Subdivision the responsibility to monitor and protect CISA systems from unauthorized access, misconfiguration or disruption of services from internal and external threats.
CISA will acquire expert IT Security services for CISA’s DCO mission. This includes leveraging expertise in Security Operations Center (SOC), Vulnerability Management (VAT), Penetration Testing, Security Engineering, Cloud Security, AI Security, Purple Team, and Electronic Discovery.
CISA will require a full range of cybersecurity operations and engineering services across of all CISA FISMA systems. CISA will also require skilled personnel, materials, equipment, facilities, travel, and other services required to satisfy DCO’s mission needs. The scope of systems where services will be included are the following environments:
• Hybrid cloud systems such as Infrastructure as a Service (IaaS), Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as Code (IaC) • Brick and Mortar Data Centers Environments • End user capabilities • Trusted Internet Connectivity • Remote connectivity and logical cloud technologies • WAN/MAN • Mission, big data and other cybersecurity flows and processing