Continuous Monitoring Analytical Tool Set Development and Sustainment Services

Response Date: April 23rd, 2026

Published Date: April 9th, 2026

Base Period: July 1st, 2027 – June 30th, 2028

Option Period 1: July 1st, 2028 – June 30th, 2029

Option Period 2: July 1st, 2029 – June 30th, 2030

Option Period 3: July 1st, 2030 – June 30th, 2031

Option Period 4: July 1st, 2031 – June 30th, 2032

The requesting agency seeks a vendor to develop and sustain a continuous monitoring analytical tool set to support their cybersecurity operations. The system should include a continuous monitoring risk scoring solution that aggregates, correlates, and normalizes vulnerability and configuration data for IT systems, providing security control deployment and compliance measures such as technical implementation guide adherence, patch compliance, and configuration settings.

The scope also encompasses a cyber operational attribute management system with a central repository for dynamically maintained reporting hierarchies, accessible through APIs. Additionally, the enterprise user management system must serve as a central register managing user and non-user permissions for portfolio applications. A central attribution management portal is required to allow users to manage asset attribution data across multiple enterprise reporting and endpoint management platforms.

The vendor will support a data analytics test lab dedicated to configuration management, as well as concept development and validation for production systems under the cyber analytics division portfolio. The successful partner will be expected to deliver robust, secure, and user-centric tools that integrate seamlessly across enterprise systems.