GSA Proposed Special Item Number (SIN) on IT Schedule 70: Highly Adaptive Cybersecurity Services (HACS) Request for Information

In today's active cyber threat environment, incident detection and response is an ongoing challenge for many organizations. The President has directed his Administration to implement a Cybersecurity National Action Plan (CNAP) that takes near-term actions and puts in place a long-term strategy to enhance Cybersecurity awareness and protections, protect privacy, maintain public safety as well as economic and national security, and empower Americans to take better control of their digital security. In addition, the Office of Management and Budget (OMB), per Memorandum M-16-04, Cybersecurity Strategy and Implementation Plan (CSIP) for the Federal Civilian Government, directs the General Services Administration (GSA), in coordination with OMB, to research contract vehicle options and develop a capability to deploy incident response services that Federal agencies can quickly leverage. The CNAP requires GSA, in coordination with the Department of Homeland Security (DHS), to establish appropriate procurement vehicles that allow departments and agencies to procure equivalent Incident Response, Penetration Testing, and Hunt services from leading commercial providers. To address these Cybersecurity realities, the General Services Administration (GSA) is considering a new Special Item Number (SIN) under IT Schedule 70 specifically for Highly Adaptive Cybersecurity Services (HACS). The purpose of this change would be to: Improve the way that GSA offers Cybersecurity services through IT Schedule 70, Increase visibility and improve access to Cybersecurity services offerings; and Provide industry partners the opportunity to differentiate their Cybersecurity services from other IT related services. This effort would support initiatives to improve customer procurement of Cybersecurity services and enable agencies to take full advantage of Cybersecurity services benefits to maximize capacity utilization, improve IT flexibility and responsiveness, and minimize cost. This RFI is meant to achieve two goals: Gain feedback from industry and any other relevant stakeholders on the proposed SIN; and Better understand how industry partners are selling Cybersecurity services today on IT Schedule 70. The benefits of the proposed SIN would be: Realignment of IT Schedule 70 Cybersecurity services to reflect the market and customer needs; Consolidation of Cybersecurity services for ease of customer discovery and access, to support market research and acquisition planning; An avenue for IT Schedule 70 industry partners to more easily differentiate Cybersecurity services from other IT offerings; Improved Cybersecurity services sales reporting and visibility for IT Schedule 70; and Added value to GSA's customers - GSA provides a high-level-vetting of what technologies and industry partners are available through the HACS SIN. GSA believes the Cybersecurity services market is sufficiently mature for this SIN to attract both industry partners and government buyers. The HACS SIN scope and description is identified below. As detailed in the questions for industry, GSA is seeking industry feedback on this scope and other aspects of the potential HACS SIN.