USHMM-RFI-2027-MSSP
Updated
Presolicitation from the United States Holocaust Memorial Museum, for work in Washington, District of Columbia. Due Oct 30, 2026, 5:00 PM (UTC-4), 1 day left.
| Solicitation number | 95476727RFI-MSSP |
|---|---|
| Agency | United States Holocaust Memorial Museum |
| Office | Ushmm Procurement Division |
| Notice type | Presolicitation |
| Set-aside | None |
| Trade (NAICS) | Computer Systems Design Services (541512) |
| Product or service code | DJ10 |
| Place of performance | Washington, District of Columbia |
| Posted | Oct 28, 2026 |
| Response deadline | Oct 30, 2026, 5:00 PM (UTC-4) (1 day left) |
| Add the deadline to | Google Calendar · Apple / Outlook (.ics) |
Bid documents (2)
- USHMM Request for Information Managed IT Security and MSSP Services 292 KB
- MSSP Questions and Responses 229 KB
Paid members download every document from this page, or buy this bid alone.
Federal prevailing wage rates for this place: District of Columbia Davis-Bacon and SCA wage determinations.
Description
DISCLAIMER / MARKET RESEARCH NOTICE:This Request for Information (RFI) is issued solely for information gathering and planning purposes. It does not constitute a Request for Proposal (RFP), Invitation for Bid (IFB), or an obligation on the part of the United States Holocaust Memorial Museum (USHMM) to acquire any products or services. Responses to this notice are not offers and cannot be accepted by USHMM to form a binding contract.
Responders are solely responsible for all expenses associated with responding to this RFI. The United States Holocaust Memorial Museum (USHMM) is conducting formal market research to evaluate commercial vendor capabilities, industry pricing benchmarks, federal/commercial labor rates, and available contract acquisition vehicles (e.g., GSA MAS SIN 54151HACS, NASA SEWP, CIO-SP3/4, SAM.gov) for re-procuring comprehensive Managed Information Technology (IT) Security, Multi-Cloud/DevSecOps Architecture, Network Engineering, and specialized Managed Security Service Provider (MSSP) operational activities.
The primary objective of this market research effort is to evaluate whether competitive commercial marketplace capabilities exist to: Sustain, support, and execute day-to-day operations across USHMM's existing "As-Is" securityinfrastructure without operational disruption or increased organizational risk. Perform rigorous security architecture evaluations, threat modeling, gap analyses, and complianceassessments against industry-best security and privacy standards (NIST SP 800-53 r5, FISMA, PCI DSSv4.2.1, CISA Zero Trust Maturity Model, CSF 2.0).
Architect and recommend a modernized, cost-effective "To-Be" security state incorporating ZeroTrust architecture, automated orchestration, tool consolidation, and a Government OwnedContractor Operated (GOCO) Security Operations Center (SOC) framework. Execute a seamless, structured transition lifecycle from the "As-Is" state to the "To-Be" operationalmodel within strict schedule and budget parameters.
Pricing Benchmarks & Market Rate Expectations Provide feedback on the commercial feasibility of managing this scope under a Firm-Fixed-Price (FFP)monthly fee structure. Provide fully burdened hourly commercial labor rates or GSA schedule rates in the Washington, DCMetropolitan Area for equivalent labor categories (CISO, Security Architect, DevSecOps Engineer,Security Analyst, Network/System Engineer).
Submission Instructions & Response Format Response Deadline: All responses shall be submitted electronically no later than October 30, 2026, at 5:00 PM EDT. Submission Format: Responses must be submitted in PDF or Microsoft Word format, strictly limited to no more than fifteen (15) pages (excluding cover page and labor rate tables). Point of Contact: Submissions and any clarifying technical inquiries must be emailed to Mary Green, USHMM Contracting Officer at [email protected] with the subject line "RFI Response - USHMM Managed IT Security & MSSP Services".
Contracting contact
- Mary Green · [email protected] · (202) 488-0400
As published on the official notice. Ask questions in writing and before any questions deadline the notice sets.
Is your business small enough?
For NAICS 541512, a business counts as small if it has no more than $34.0 million in average annual receipts (SBA size standard). This notice is set aside, so only businesses under that size, or in the named program, can bid. SBA table, current as of Oct 15, 2026.
Notice history
- Oct 5, 2026: Presolicitation Due Oct 30, 2026, 5:00 PM (UTC-4)
- Oct 3, 2026: Presolicitation Due Oct 30, 2026, 5:00 PM (UTC-4)
- Oct 1, 2026: Presolicitation Due Oct 30, 2026, 5:00 PM (UTC-4)
Computer Systems Design Services contracts right now
There are 57 open government contract opportunities in this trade (NAICS 541512), 16 posted in the last 7 days; 44% are set aside for small businesses. The agencies buying the most are Department of the Air Force, Department of the Army and Department of Veterans Affairs. Most of the work with a stated place is in Virginia, District of Columbia and Illinois. A notice in this trade gives a median of 27 days from posting to deadline; this one gives 2 days.
All open computer systems design services contracts
Coming up in this trade
Planned contracts from the agencies' procurement forecasts, often months before a solicitation. Plans can change.
Recent awards in this trade
- Abbott Rapid Diagnostics Informatics, Inc $86,857 · Department of Veterans Affairs · Oct 1, 2026
- Reefpoint Group LLC $2.0 million · Department of Veterans Affairs · Sep 25, 2026
- E-Logic, Inc. $185,937 · Department of the Army · Sep 19, 2026
- Deloitte Consulting LLP $199.9 million · Department of Veterans Affairs · Sep 15, 2026
- L1 Enterprises Incorporated $227,449 · Department of Veterans Affairs · Aug 25, 2026
From the award notices agencies publish.