NIH awards $3.96M IT Cybersecurity Program Support contract to RELI GROUP INC

Contract Overview

Contract Amount: $3,957,776 ($4.0M)

Contractor: Reli Group Inc

Awarding Agency: Department of Health and Human Services

Start Date: 2026-02-15

End Date: 2027-02-14

Contract Duration: 364 days

Daily Burn Rate: $10.9K/day

Competition Type: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES

Number of Offers Received: 2

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: INFORMATION TECHNOLOGY CYBERSECURITY PROGRAM SUPPORT SERVICES (ITCPSS)

Place of Performance

Location: CATONSVILLE, BALTIMORE County, MARYLAND, 21228

State: Maryland Government Spending

Plain-Language Summary

Department of Health and Human Services obligated $4.0 million to RELI GROUP INC for work described as: INFORMATION TECHNOLOGY CYBERSECURITY PROGRAM SUPPORT SERVICES (ITCPSS) Key points: 1. Contract value represents a modest investment in critical cybersecurity infrastructure. 2. The contract was awarded under full and open competition, suggesting a competitive bidding process. 3. Potential risks include contractor performance and adherence to cybersecurity best practices. 4. This contract supports the National Institutes of Health's ongoing efforts to secure sensitive data. 5. The cybersecurity services sector is experiencing significant growth due to increasing cyber threats.

Value Assessment

Rating: good

The contract value of approximately $3.96 million over one year appears reasonable for specialized IT cybersecurity program support services. Benchmarking against similar contracts for cybersecurity support at agencies like NIH or other health-focused federal bodies would provide a more precise value-for-money assessment. However, given the critical nature of cybersecurity, the investment is likely justified to maintain robust defenses against evolving threats. The firm-fixed-price structure helps control costs, but the ultimate value will depend on the quality and effectiveness of the services delivered.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

This contract was awarded under 'Full and Open Competition After Exclusion of Sources,' indicating that the solicitation was broadly advertised, and all responsible sources were permitted to submit offers. While the specific number of bidders is not provided, this procurement method generally fosters a competitive environment, which can lead to better pricing and service quality. The exclusion of sources clause might suggest specific technical requirements that narrowed the field, but the overall approach aims for broad market engagement.

Taxpayer Impact: A full and open competition is generally favorable for taxpayers as it maximizes the pool of potential offerors, increasing the likelihood of receiving competitive bids and potentially lower prices.

Public Impact

The primary beneficiaries are the National Institutes of Health (NIH), which will receive enhanced cybersecurity program support. Services delivered will include support for the ITCPSS program, aiming to strengthen the agency's cybersecurity posture. The geographic impact is primarily within Maryland, where the contractor is located and services are likely performed. Workforce implications may include the need for specialized cybersecurity professionals within RELI GROUP INC. to fulfill the contract requirements.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Potential for scope creep if cybersecurity needs evolve beyond the initial contract parameters.
Reliance on contractor expertise could pose a risk if key personnel depart.
Ensuring continuous compliance with evolving federal cybersecurity regulations.

Positive Signals

Contractor's experience in providing IT and cybersecurity services.
Firm-fixed-price contract type helps manage cost predictability.
Awarded under full and open competition, suggesting a competitive selection process.

Sector Analysis

The IT cybersecurity services market is a rapidly growing sector driven by increasing digital transformation and the escalating sophistication of cyber threats. Federal agencies, including those within the Department of Health and Human Services, are significant spenders in this area to protect sensitive data and critical infrastructure. This contract fits within the broader category of IT professional services, specifically focusing on the specialized domain of cybersecurity program support. Comparable spending benchmarks would involve looking at other federal contracts for similar cybersecurity support services, often measured by annual contract value or total contract ceiling.

Small Business Impact

The data indicates that this contract was not set aside for small businesses (ss: false, sb: false). Therefore, there are no direct subcontracting implications for small businesses stemming from a small business set-aside. However, the prime contractor, RELI GROUP INC., may choose to subcontract portions of the work to small businesses as part of their overall business strategy, which could indirectly benefit the small business ecosystem.

Oversight & Accountability

Oversight for this contract will likely be managed by the National Institutes of Health (NIH) contracting officers and program managers. Accountability measures are typically embedded within the contract's performance work statement (PWS), outlining deliverables, service levels, and reporting requirements. Transparency is facilitated through contract award databases and public reporting mechanisms. The Inspector General for the Department of Health and Human Services may have jurisdiction for audits and investigations related to potential fraud, waste, or abuse.

Related Government Programs

Information Technology Professional Services
Cybersecurity Services
IT Program Management Support
Federal Cybersecurity Contracts
Health IT Services

Risk Flags

Potential for contractor performance issues.
Risk of data breaches due to contractor access.
Ensuring compliance with evolving federal cybersecurity mandates.

Frequently Asked Questions

What is this federal contract paying for?

Department of Health and Human Services awarded $4.0 million to RELI GROUP INC. INFORMATION TECHNOLOGY CYBERSECURITY PROGRAM SUPPORT SERVICES (ITCPSS)

Who is the contractor on this award?

The obligated recipient is RELI GROUP INC.

Which agency awarded this contract?

Awarding agency: Department of Health and Human Services (National Institutes of Health).

What is the total obligated amount?

The obligated amount is $4.0 million.

What is the period of performance?

Start: 2026-02-15. End: 2027-02-14.

What is RELI GROUP INC.'s track record with federal cybersecurity contracts?

Assessing RELI GROUP INC.'s track record with federal cybersecurity contracts requires a review of their past performance on similar awards. This would involve examining contract databases for previous awards, contract values, performance evaluations (if publicly available), and any history of contract modifications or disputes. A strong track record would include successful completion of prior cybersecurity projects, positive past performance reviews from government agencies, and a demonstrated ability to meet technical requirements and delivery schedules. Conversely, a history of performance issues, contract terminations, or significant disputes would raise concerns about their suitability for this new award. Without specific data on RELI GROUP INC.'s past federal cybersecurity contract performance, it is difficult to provide a definitive assessment.

How does the awarded amount compare to similar cybersecurity support contracts at NIH?

The awarded amount of approximately $3.96 million for one year of IT Cybersecurity Program Support Services (ITCPSS) needs to be benchmarked against similar contracts at the National Institutes of Health (NIH) or comparable agencies. Factors such as the scope of work, duration, specific services required (e.g., threat analysis, vulnerability management, incident response), and the level of expertise needed will influence pricing. If similar contracts for comparable services at NIH have been awarded in the range of $3-5 million annually, then this award appears to be within a reasonable market range. However, if comparable contracts are significantly lower or higher, it would warrant further investigation into the specific requirements and market conditions that might explain the variance. A detailed comparison would require access to more granular contract data.

What are the primary risks associated with this contract for the government?

The primary risks associated with this contract for the government include potential contractor underperformance, where RELI GROUP INC. may fail to deliver the required cybersecurity services at the expected quality or timeliness. Another risk is the potential for security breaches if the contractor's personnel or systems are compromised, which could expose sensitive NIH data. There's also a risk of cost overruns if the firm-fixed-price contract is not managed effectively or if unforeseen technical challenges arise that require additional resources. Furthermore, over-reliance on the contractor's expertise could create a knowledge gap within NIH if proper knowledge transfer mechanisms are not in place. Ensuring robust oversight and clear performance metrics are crucial to mitigating these risks.

How effective is the 'Full and Open Competition After Exclusion of Sources' method for cybersecurity contracts?

The 'Full and Open Competition After Exclusion of Sources' method aims to balance broad market engagement with the need for specialized capabilities. It allows all responsible sources to compete while acknowledging that certain technical requirements might inherently limit the pool of eligible bidders. For cybersecurity contracts, this method can be effective if the exclusion criteria are well-defined and justified, ensuring that only technically capable vendors participate. This can lead to a more focused competition among qualified providers, potentially resulting in better-tailored solutions and competitive pricing. However, if the exclusion criteria are overly restrictive or poorly justified, it could inadvertently limit competition and potentially lead to higher prices or less innovative solutions. The effectiveness hinges on the precise definition and necessity of the excluded sources.

What is the historical spending trend for cybersecurity services at NIH?

Analyzing historical spending trends for cybersecurity services at NIH is crucial for understanding the agency's commitment to cybersecurity and identifying potential patterns or anomalies. This would involve examining NIH's budget allocations and contract awards for cybersecurity-related services over several fiscal years. Trends might show an increasing investment in cybersecurity due to rising threats, or perhaps fluctuations based on specific program needs or budget cycles. Understanding these historical patterns can help contextualize the current $3.96 million award, indicating whether it represents a typical investment, an increase, or a decrease in spending for such services. Without access to NIH's historical cybersecurity spending data, a precise analysis cannot be provided.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Computer Systems Design and Related Services › Computer Systems Design Services

Product/Service Code: IT AND TELECOM - INFORMATION TECHNOLOGY AND TELECOMMUNICATIONS › IT AND TELECOM - APLLICATIONS

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Offers Received: 2

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 5520 RESEARCH PARK DRIVE, SUITE 105, CATONSVILLE, MD, 21228

Business Categories: 8(a) Program Participant, Category Business, Corporate Entity Not Tax Exempt, DoT Certified Disadvantaged Business Enterprise, HUBZone Firm, Minority Owned Business, Self-Certified Small Disadvantaged Business, Small Business, Special Designations, Subchapter S Corporation, Indian (Subcontinent) American Owned Business, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $21,606,442

Exercised Options: $3,957,776

Current Obligation: $3,957,776

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES PROCEDURES NOT USED

Parent Contract

Parent Award PIID: 75N98119D00027

IDV Type: GWAC

Timeline