CISA COCO Industry Day: NRMC Critical Infrastructure Risk Analysis

Update Feb 16, 2024: The Industry Day Attendee List and Government responses to the Q&A have been uploaded in the Attachments section of this notice.

Update Jan 26, 2024: The Sources Sought Notice has been revised to correct a typo in the requirement name in the "Introduction" on page 1. The revised text is highlighted and underlined. All other instructions in the notice remain unchanged.

Update Jan 24, 2024:

Note: This notice and event will serve as a Sources Sought Notice and our primary means of market research. We are requesting Industry to provide capability responses and any recommendations after the event and no later than 4:00PM ET on February 16, 2024. Please send to the POC emails located below in the "Contact Information" section of this announcement. Industry Day Slides, Sources Sought Notice, and Draft PWS have been uploaded in the Attachments section of this notice.

The U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) Chief of Contracting Office (COCO) will host an Industry Day virtually via Microsoft Teams on Wednesday, January 24, 2024 at 2:30PM EST. The purpose of the event is to provide Industry an overview of the National Risk Management Center (NRMC) Critical Infrastructure Risk Analysis Requirement.

We will provide a description of the draft Performance Work Statement (PWS) and will request Industry feedback and recommendations. There will also be an opportunity for a question-and-answer period at the end of the presentation. The Registration Link is provided below. Briefing slides will be posted approximately 2 days before the event.

BACKGROUND: CISA’s mission is to lead the national effort to protect and enhance the resilience of the nation’s physical and cyber infrastructure. The NRMC supports CISA's cybersecurity and infrastructure security mission by identifying, assessing, and prioritizing strategic risks to national critical functions and collaborating on the development of strategies and approaches to manage risks to critical functions.

In performance of this mission, the NRMC is leading a crosscutting risk management effort between the private sector and government to improve the defense of our nation's critical infrastructure. It provides a single point of access where government and the private sector can collaborate across sectors to develop plans and solutions for reducing cyber and other systemic risks to national and economic security. Please follow this posting for additional updates regarding this event.

DISCLAIMER: This Industry Day Notice is not a Request for Proposal (RFP) or an invitation for bid, nor is it to be construed as a commitment by the Government. The Government does not intend to make an award on the basis of this Industry Day or otherwise pay for the information which will be received.