Continuous Monitoring & Agile Security Services (CMASS) IV

Requirement

***03/05/2026: Estimated solicitation release date updated to 03/31/2026, estimated period of performance start date updated to 09/16/2026, and anticipated award date updated to 09/01/2026.*** ***01/13/2025: Estimated solicitation release date updated to 03/02/2026.*** ***10/29/2025: Estimated solicitation release date updated from 11/03/2025 to 01/13/2026; Small business se aside updated from N/A to Full; Small business program updated from SB to 8(a); Anticipated award updated from 3/1/26 to 4/1/26*** ***9/24/2025: Estimated solicitation release date updated from 09/11/2025 to 11/03/2025; Dollar Range updated from $10M-$20M to $5M-$10M.*** USCIS has a requirement for Continuous Monitoring & Agile Security Services (CMASS). USCIS seeks to establish a more sustainable and effective continuous monitoring program, leveraging data from security and governance tools to enhance our ability to identify and mitigate cybersecurity risks, evaluate emerging technologies, streamline security-related tasks. Additionally, we seek to transform the Ongoing Authorization (OA) program to incorporate new capabilities and risk models for Machine Learning (ML) and Artificial Intelligence (AI) and implement appropriate governance measures. The CMASS resources will continue to support security authorization and continuous monitoring activities, the Vulnerability Management & Configuration Management Programs, role-based cybersecurity training, and system stakeholder outreach to ensure USCIS meets security and DHS Information System Performance Plan (ISPP) requirements.