CISA Considers Contractor for Cybersecurity Software Procurement

The Cybersecurity and Infrastructure Security Agency (CISA) is exploring the possibility of hiring a contractor to manage its cybersecurity software purchases through a consolidated mechanism. Currently, CISA acquires tools via the Continuous Diagnostics and Mitigation (CDM) program and its Capacity Building arm. The agency aims to increase its annual cybersecurity software budget from $600 million to $6 billion over the contract's lifecycle. CISA is collaborating with the General Services Administration’s Assisted Acquisition Services to assess market research for this initiative. The request for information (RFI) outlines the need for strategic buying advisory services, procurement support, and software asset management, among other requirements. Responses to the RFI are due by September 1, 2026.

Key Points: • CISA is considering hiring a contractor to streamline cybersecurity software purchases. • The agency plans to increase its cybersecurity software budget to $6 billion annually. • Responses to the request for information are due by September 1, 2026.