USHMM issued this RFI solely for information gathering and planning; it is not an RFP, IFB, or binding contract obligation, and responders bear their own response costs. The market research will evaluate commercial capabilities, pricing benchmarks, labor rates, and contract vehicles for re-procuring comprehensive Managed IT Security, Multi-Cloud/DevSecOps Architecture, Network Engineering, and MSSP operations. The scope includes sustaining the current As-Is security infrastructure without disruption, conducting security architecture evaluations, threat modeling, gap and compliance assessments against NIST SP 800-53 r5, FISMA, PCI DSS v4.2.1, CISA Zero Trust Maturity Model, and CSF 2.0, and recommending a To-Be Zero Trust state with automation, tool consolidation, and a GOCO SOC framework. Respondents should address feasibility of a Firm-Fixed-Price monthly fee structure and provide fully burdened hourly commercial or GSA rates for CISO, Security Architect, DevSecOps Engineer, Security Analyst, and Network/System Engineer roles in the Washington, DC Metropolitan Area. Responses are limited to 15 pages excluding cover page and labor rate tables and must be submitted in PDF or Microsoft Word to Mary Green at magreen@ushmm.org.