U.S. Department of Agriculture Cybersecurity Services BPA

The USDA established the Cybersecurity BPA to rapidly procure enterprise-wide cybersecurity support services through call orders issued by warranted USDA contracting officers, delivering specialized cybersecurity capabilities across all eight USDA Mission Areas, 29 Staff Offices, and the Office of the Chief Information Officer’s (OCIO) Cybersecurity and Privacy Operations Center (CPOC). ASSYST will provide an enterprise suite of cybersecurity functions, including Risk Management Framework (RMF) and FISMA compliance, Zero Trust Architecture (ZTA) engineering, continuous diagnostics and mitigation, threat intelligence, incident response, Supply Chain Risk Management (SCRM), and Enterprise Identity, Credential, and Access Management (ICAM). To support USDA's global workforce of nearly 100,000 employees operating across more than 4,500 locations, ASSYST will have an opportunity to deploy its battle-tested cyber delivery models alongside proprietary innovations, such as the Green Accelerator Framework and ComplySyncATO, to automate audit readiness, eliminate operational bottlenecks, and drive USDA’s enterprise security posture toward continuous compliance and proactive resilience. 

Contract Type

Multiple-Award Blanket Purchase Agreement (BPA)

ASSYST Contract Number

12314426A0031 

Order Type(s)

Determined at the call-order level by the Ordering Contracting Officer (OCO), under GSA MAS Special Item Number (SIN) 54151HACS (Highly Adaptive Cybersecurity Services) and NAICS code 541519

Performance Period

5 years, 09/21/2026 to 09/20/2031

ASSYST Point of Contact

Eugene Goldlust
Sr. Account Executive
Phone: 571-332-0444
egoldlust@assyst.net

Scope of the BPA

The USDA Cybersecurity Services Blanket Purchase Agreement (BPA) covers an extensive range of cybersecurity, information assurance, privacy, identity management, and operational support capabilities across three distinct Functional Areas (FAs).  Services span all 8 USDA Mission Areas, 29 Staff Offices, and the Cybersecurity and Privacy Operations Center (CPOC):

• Functional Area 1 (FA1): Mission Area–Level Cybersecurity Support
  • Call Order & Project Management
  • Risk Management Framework (RMF) Support
  • Security Engineering & SDLC Integration
  • Cyber Defense Program
  • Security Operations
  • Operational Support
• Functional Area 2 (FA2): Independent Control Assessment Services
  • Assessment Planning
  • Independent Security Control Assessments (SCA)
  • Findings & Reporting
• Functional Area 3 (FA3): Enterprise Cybersecurity Operations (CPOC Focus)
  • Enterprise Cybersecurity Engineering
  • Enterprise Cybersecurity Operations
  • Enterprise Privacy Operations
  • Enterprise Identity, Credential, and Access Management (ICAM)
  • Enterprise Security Management
  • Cyber Supply Chain Risk Management (C-SCRM)