2025-0189 CVA DCIS Tool Management Support (CTS) - TUE 2 Sep

Deadline Date: Tuesday 2 September 2025

Requirement: Continuous Vulnerability Assessment (CVA) Deployable Communication System (DCIS) Tool Management Support

Location: Mons, BE

Full Time On-Site: Yes

Time On-Site: 100%

Period of Performance: 2025 Base period: As soon as possible but not later than 13 October 2025 to 31 Dec 2025, with possibility to exercise the following options:

2026 Option: 1 January until 31 December 2026

2027 Option: 1 January until 31 December 2027

2028 Option: 1 January until 31 December 2028

Required Security Clearance: NATO COSMIC TOP SECRET

1. BACKGROUND

The NATO Communications and Information Agency (NCIA) is dedicated to acquiring, deploying, and defending communication systems for NATO’s political decision-makers and Commands. It operates on the frontlines against cyber-attacks, collaborating closely with governments and industry to prevent future debilitating attacks. The NCIA plays a crucial role in maintaining NATO’s technological edge and ensuring the collective defence and crisis management capabilities of the Alliance. In pursuit of our mission, we require specialized advisory services to enhance our interim workforce capacity.

2. INTRODUCTION

The NCIA has been established with a view to meeting the collective requirements of some or all NATO nations in the fields of capability delivery and service provision related to Consultation, Command & Control as well as Communications, Information and Cyber Defence functions, thereby also facilitating the integration of Intelligence, Surveillance, Reconnaissance, Target Acquisition functions and their associated information exchange.

The NATO Cyber Security Centre (NCSC) is a team of over 200 members working to monitor and protect NATO networks. NCSC’s role is to deliver robust security services to the NATO Enterprise and NATO Allied Operations and Missions (AOM).

In order to execute this Service, NCIA is seeking additional support through contracted resources (or consulting) to support the service undertaken by the NATO Cyber Security Centre (NCSC) in the area of Communications and Information System (CIS) security, cyber defence and cyberspace operations. To support NCSC for the execution of tasks identified in the subject work package of the project, the NCIA is looking for subject matter expertise in the delivery of complex, foundational and novel Cybersecurity capability.

This contract is to provide consistent support on a deliverable-based (completion-type) contract, to NCSC contributing to its mission based on the deliverables that are described in the scope of work below.

3. OBJECTIVE

The objective of this statement of work (SoW) is to outsource the relevant Continuous Vulnerability Assessment (CVA) Deployable Communication System (DCIS) Tool Management function to support the NCSC which is responsible to defend NATO networks on a 24/7 basis and to share relevant cyber information with all its stakeholders.

To achieve these objectives, it requires a significant amount of coordination and decision making within and outside the boundaries of NCSC.

This Statement of Work (SoW) defines the expectations for this support to materialize.

4. SCOPE OF WORK

The aim of this SOW is to support NCSC with technical expertise specifically related to the operation and maintenance of Cyber Security Continuous Vulnerability Assessment (CVA) Deployable Communication System (DCIS) Tool Management Operation and maintenance activities with a deliverable-based contract to be executed in 2025.

This task includes data analysis and reporting of data reported by the Cyber Security Continuous

Vulnerability Assessment (CVA) Deployable Communication System (DCIS) Tool Management. For the provision of consistent support and the execution of the task, NCIA will get subject matter expertise from the industry with a service (deliverable based/completion type) based AAS framework contract in the delivery of requested capability.

The Cyber Security Continuous Vulnerability Assessment (CVA) Deployable Communication System (DCIS) Tool Management gives visibility and insight on the networks in NATO environment, which in turn is critical to effective management, strong security and compliance, and efficient migrations and consolidations.

More broadly, NATO needs to be able to monitor the configuration of its domain controllers in order to prevent exploitation by malicious threat actors.

Under the direction / guidance of the NCSC Point of Contact, a contractor will be the part of the NCSC Team supporting the following activities. This service will include the following activities:

Activity A1: