U.S. General Services Administration
Chat or call
Hours for live chat and calls:
Sun 8 p.m. to Fri 8:30 p.m. Central time
IT security
Does your agency have unique or recurring IT security needs? We can help!
Our contract vehicles offer products and services that you can customize to help your agency enhance security, improve resilience, protect important information, and bring systems up to date.
Federal, state, local, and tribal governments may be eligible to buy IT security products and services through GSA’s contract vehicles and purchasing programs:
- Continuous Diagnostics and Mitigation Tools — high-quality hardware, software, and services.
- HACS SIN — quality cybersecurity support services to test systems, address issues that make your agency vulnerable, and stop attacks.
- Internet Protocol Version 6 — expanded IP address space with better mobility and security; can reduce network administration and security support costs.
- Trusted Internet Connections — provides TICs-compliant managed security services.
How do I buy IT Security?
Follow the National Institute of Standards and Technology Cybersecurity Framework, which organizes basic cybersecurity activities into high-level functions — Identify, Protect, Detect, Respond, Recover — that support cybersecurity risk management.
Guides
How do I sell IT Security?
Industry partners can offer cost-effective, innovative solutions for IT requirements through Governmentwide Acquisition Contracts and MAS Information Technology. We understand that getting a GSA contract is a large investment and we are committed to help you succeed.
- CDM tools vendor guide [DOCX - 43 KB] — a must-read for vendors interested in selling products under the CDM program.
- MAS Roadmap — MAS IT is one of the largest contracts agencies use to purchase commercial IT products, services, and solutions.
Resources
- Cybersecurity Terms and Definitions for Acquisition [PDF - 862 KB]
- Federal Public Key Infrastructure Management Authority
- Federal Risk and Authorization Management Program
- NIST Security Content Automation Protocol Validation Program
- Common Criteria Certified Products
- National Information Assurance Partnership