JOTFOC for Sole Source 8(a) Direct Award for Enterprise Cybersecurity Services (ECS)

This contract represents a sole-source 8(a) direct award to Chenega Systems, LLC, an Alaska Native Corporation and SBA-certified 8(a) participant, for Enterprise Cybersecurity Services supporting the U.S. Small Business Administration (SBA). The procurement, conducted under the statutory authority of FAR 6.302-5(b)(4) and FAR 19.805-1(b)(2), addresses an urgent and compelling need to maintain SBA’s cybersecurity, privacy, Controlled Unclassified Information (CUI), and records management capabilities without interruption. The firm-fixed-price contract is valued at approximately $12.15 million and covers a one-year period serving as a bridge contract to ensure continuous protection and compliance of SBA’s critical IT infrastructure, including cloud and on-premises environments that support over 10,000 users and safeguard a $1+ trillion small business loan portfolio. The scope encompasses program management, cybersecurity operations, policy and compliance, architecture and engineering, privacy program oversight, and records management, all aligned with federal mandates including the President’s Management Agenda (PMA), Office of Management and Budget (OMB) performance metrics, and Council of the Inspectors General on Integrity and Efficiency (CIGIE) standards. The contract performance is centralized primarily in Washington, D.C., with services delivered across multiple field offices and data centers nationwide. Given the unusual and compelling urgency due to the imminent expiration of the preceding contract, this non-competitive award prioritizes uninterrupted service delivery. Oversight is provided by designated contracting and program officials within GSA and SBA, with Chenega Systems responsible for meeting all cybersecurity and privacy requirements in accordance with federal regulations and SBA’s enterprise security strategy.