CISA Cybersecurity Exercise Support Services

The OASIS+ domain is Management & Advisory. The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge).

Estimated value

$20M to $50M

Award quarter

Q4 2026

Est. solicitation date

Jul 31, 2026

Anticipated award

Sep 21, 2026

Contract vehicle

OASIS+

Contract type

Time and Materials

Competition

New Requirement, No Contract

Status

NEW

Fiscal year

2026

Period of performance

Sep 22, 2026 – Sep 21, 2028

• NAICS541690
• PSC541690