NATO Business Opportunity: Provision of Incident Response Services and Surge Capacity

Key Dates

Due Date

Posted Date

Agency & Value

Agency

BUREAU OF INDUSTRY AND SECURITY

Contract Value

Not provided

Codes & Classification

Solicitation Number

RFQ-CO-424362-IR

NAICS

541519 - Other Computer Related Services

Classification Code

—

Additional Details

Set Aside

None

Place of Performance

BELGIUM

SourceSAM

The NATO Communications and Information Agency (NCIA) has announced a significant business opportunity for qualified U.S. contractors through a forthcoming Request for Quotation (RFQ-CO-424362-IR). This procurement seeks to establish a Framework Agreement for the provision of Incident Response (IR) services and surge capacity, with the overarching goal of enhancing NATO’s ability to prepare for, manage, mitigate, and recover from cybersecurity incidents. The agreement is designed to ensure that NATO has immediate access to specialized expertise, advanced technologies, and scalable resources to address evolving cyber threats. The scope of the Framework Agreement is divided into two primary schedules: - **Schedule A – IR Retainer:** This component involves a prepaid retainer credit model, ensuring 24/7/365 operational readiness and surge capacity for both remote and on-site support. Contractors will be responsible for managing IR Retainer credits through a contractor-owned platform, which must provide real-time visibility into available and spent credits, facilitate top-up and carry-over mechanisms, and generate monthly reports. The retainer will be renewed annually via Task Orders, ensuring ongoing preparedness and responsiveness. - **Schedule B – On-Demand Cyber Security Services:** Under this schedule, NCIA will procure proactive and reactive incident handling services from a non-exhaustive catalogue detailed in the Statement of Work (SOW). These services will be requested on an as-needed basis via Task Orders, each specifying the scope, objectives, deliverables, required personnel and clearances, and place of performance. The anticipated duration of the Framework Agreement is three years, during which the selected Indefinite Delivery/Indefinite Quantity (IDIQ) contractor(s) will be expected to deliver both Schedule A and Schedule B services. **Key Requirements and Eligibility Criteria:** - U.S. prime contractors must maintain a professionally active facility within the United States and possess a Facility Security Clearance (FCL) at the level of SECRET or higher. - Contractors must be pre-approved for participation in NATO Competitive Procurement (NCP) and be issued a Declaration of Eligibility (DOE) by the U.S. Department of Commerce (DOC). - Registration with NCIA’s eProcurement tool, Neo, is mandatory. - Contractor personnel must be cleared to work unescorted in Class II Security areas, necessitating appropriate personnel clearances and facility security measures. **Application Process:** - U.S. firms interested in bidding must complete a one-time NCP application, which includes a company resume or capability statement and independently reviewed financial documents. - The application and supporting documentation should be submitted to the DOC, which will review and, upon approval, issue a DOE for the project. - Firms new to NCP must request a DOE and submit their application by June 4, 2026. **Timeline:** - Deadline to request DOE and submit NCP application: June 4, 2026 - Planned RFQ distribution: June 30, 2026 - Anticipated bid closing: August 15, 2026 - Estimated contract award: November 15, 2026 **Contracting Entity and Contact Information:** - Contracting Entity: Bureau of Industry and Security, U.S. Department of Commerce - Primary Contact: Lee Ann Carpenter ([email protected]) - Place of Performance: Belgium - NAICS Code: 541519 (Other Computer Related Services) This opportunity is classified as a Special Notice and is currently active. Contractors with robust cybersecurity incident response capabilities, appropriate security clearances, and experience supporting large-scale, mission-critical environments are encouraged to evaluate this opportunity. The requirements for facility and personnel clearances, as well as the need for NATO procurement eligibility, are critical and non-negotiable elements that will remain constant throughout the contract lifecycle. For further details and to access the official notice, interested parties should refer to the SAM.gov listing (Opportunity ID: af07e687307349bc9f8b52f1f323ab13) or visit the NCIA procurement portal.