DHS Network Operations Security Center (NOSC) Network, Cloud, and Cyber Services (NCCS) 2.0

This is a Request for Information (RFI) issued by the Department of Homeland Security’s Information Technology Acquisition Center under solicitation number 70RTAC26RFI000004 for the Network Cyber and Cloud Support (NCCS) Services 2.0 initiative. The RFI is strictly for market research and planning purposes and does not constitute a solicitation, obligation, or commitment by the government to issue a formal contract. Responses must be submitted electronically via email to opoindustryliaison@hq.dhs.gov no later than 12:00 p.m. Eastern Time on Friday, March 6, 2026, with submissions limited to 15 pages in Times New Roman, size 11, excluding the cover page, and individual email attachments must not exceed 5 MB. The RFI seeks input on capabilities to support comprehensive cybersecurity services aligned with ITIL v4 and the NIST Cybersecurity Framework, including Zero Trust architecture, ICT supply-chain security, and operational resilience across DHS locations such as Washington D.C., Stennis, Mississippi, and Chandler, Arizona, with potential for remote work and on-site presence as required. If a formal solicitation follows, the anticipated contract would include a 12-month base period beginning August 1, 2026, and four optional 12-month ordering periods extending through July 30, 2031. Performance would require contractors to maintain a TS/SCI facility clearance and ensure all personnel hold or can obtain TS/SCI clearances with SSBI-level background investigations via SF-86 forms. Key personnel must include a Program Manager with PMP and CISSP certifications and a Deputy Program Manager with CISSP and 5–10 years of cybersecurity leadership experience. Contractors must support fly-away teams and kits, surge staffing, and immediate reporting of any personnel changes, corporate ownership shifts exceeding 25%, or non-U.S. citizen involvement. Deliverables include program management, communications, disaster recovery, staffing, and continuous service implementation plans, all subject to version control and timely submission. Compliance with DHS 4300A/B, NIST SP 800-53 Rev. 5, Section 508, FIPS 197, NSA Type 1/2 encryption, PKI, and NISPOM standards is mandatory, with all hardware and software requiring Unique Entity ID (UEI) documentation. Packaging must be tamper-e