NGA may seek help from commercial vendor on incident monitoring on five of its networks

NGA headquarters
NGA headquarters
in Springfield, VA

The National Geospatial-Intelligence Agency (NGA) issued a sources sought notice on Feb. 19 in an effort to gather information from industry on how a commercial contractor could provide incident monitoring services on two classified NGA networks and three of its other networks — NIPRNet, SIPRNet and JWICS.

The mission of this contractor, if the NGA decides to move ahead with such a procurement, would be to support the agency’s intrusion detection and intrusion prevention systems — including the Operations and Sustainment (O&S) of the relevant equipment — in an effort to maintain system availability at the required 99.999% level, says the NGA notice.

NGA is requesting feedback from industry to its sources sought notice by March 18.

The incident monitoring work will take place at NGA facilities in Springfield, VA, as well as St. Louis and Arnold, MO.

“The scope of this contract is to provide services for the [Cyber Security Operations Cell] CSOC Information Assurance (IA) functional operations on all NGA intrusion detection (ID) information systems (domestic and international) and networks; and SIEM — ArcSight monitoring services,” explains the notice.

If it moves ahead with this contract, NGA says it envisions a one-year performance period (from December 15, 2014 to December 14, 2015), plus four additional one-year option periods.

Further information is available from Shenita Sylvain, a contracting officer, at 571-557-2407 or