- DHS plans to release the final solicitation for its Network, Cloud and Cybersecurity Services 2.0 contract on Oct. 1
- The department is pursuing a $626 million single-award, department-wide IDIQ
- The 2026 Homeland Security Summit will explore cyber defense capabilities, AI and more
The Department of Homeland Security is preparing to move forward with a new department-wide contract for Network, Cloud and Cybersecurity Services, or NCCS, 2.0, according to a final draft solicitation posted on SAM.gov on Thursday.
As DHS is moving forward with its NCCS 2.0 acquisition, the Potomac Officers Club’s 2026 Homeland Security Summit on Nov. 10 will bring government and industry leaders together to discuss the technologies and operational priorities shaping the department’s next phase of modernization. Register now and hear directly from decision-makers about evolving mission requirements and where industry capabilities can contribute.
What Is the NCCS 2.0 Procurement Timeline?
The DHS Office of Procurement Operations, acting on behalf of the department’s Office of the Chief Information Officer, said it intends to solicit the potential $626 million NCCS 2.0 requirement and release the final solicitation on Oct. 1.
Phase 1 proposals will be due Oct. 6, followed by government notification to proceed to Phase 2 on Oct. 9. Phase 2 proposals are due Oct. 21, with the department anticipating contract award in late November 2026.
The resulting single-award IDIQ is intended to give DHS a centralized contracting vehicle as the department continues to evolve its Network Operations Security Center, or NOSC, and broader information technology enterprise.
Industry questions on the final draft solicitation are due Sept. 22.
What Is the Scope of the DHS NCCS 2.0 Contract?
The contractor will primarily provide Tier 1 and Tier 2 operational staffing for network, cloud and cybersecurity functions.
.The draft solicitation identifies cybersecurity capabilities including:
- Cybersecurity monitoring and analysis
- Log management
- Incident handling and incident response
- Asset visibility and monitoring
- Email security
- Cyber threat intelligence
- Intrusion defense
- Threat hunting
- Cyber forensics and malware analysis
- Evidence management
- Insider-threat support
- Blue, purple and red team testing
- Penetration testing
The contract also calls for support for DHS component network and security operations center audits, vulnerability management, security control assessments and reporting associated with Federal Information Security Modernization Act metrics.
The network portion of the work includes proactive and reactive monitoring of the OneNet wide-area network and DHS headquarters and management directorate local-area networks. That includes monitoring circuit status, edge infrastructure and network boundary points.
Cloud and platform responsibilities extend to tenant cloud environments, platforms, federal information security systems and applications.
