Department of Education awards $63M for Cybersecurity Support to SkyePoint Decisions

Contract Overview

Contract Amount: $63,160,506 ($63.2M)

Contractor: Skyepoint Decisions, Inc.

Awarding Agency: Department of Education

Start Date: 2021-08-17

End Date: 2026-05-05

Contract Duration: 1,722 days

Daily Burn Rate: $36.7K/day

Competition Type: FULL AND OPEN COMPETITION

Number of Offers Received: 7

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: THE PURPOSE OF THIS CALL ORDER IS TO PROVIDE THE DEPARTMENT OF EDUCATION (DOED) FEDERAL STUDENT AID (FSA) WITH CYBERSECURITY RISK MANAGEMENT AND COMPLIANCE SUPPORT TO THE OPERATIONS OF THE DOED ENTERPRISE CYBERSECURITY GROUP (ESG).

Place of Performance

Location: STERLING, LOUDOUN County, VIRGINIA, 20166

State: Virginia Government Spending

Plain-Language Summary

Department of Education obligated $63.2 million to SKYEPOINT DECISIONS, INC. for work described as: THE PURPOSE OF THIS CALL ORDER IS TO PROVIDE THE DEPARTMENT OF EDUCATION (DOED) FEDERAL STUDENT AID (FSA) WITH CYBERSECURITY RISK MANAGEMENT AND COMPLIANCE SUPPORT TO THE OPERATIONS OF THE DOED ENTERPRISE CYBERSECURITY GROUP (ESG). Key points: 1. Cybersecurity risk management and compliance support for Federal Student Aid (FSA) operations. 2. Contract awarded to SkyePoint Decisions, Inc. under a BPA Call. 3. Significant investment in safeguarding sensitive student data and federal systems. 4. Focus on enhancing the Department of Education's Enterprise Cybersecurity Group (ESG) capabilities.

Value Assessment

Rating: good

The contract value of $63.2 million over approximately 4.7 years suggests a reasonable annual spend for specialized cybersecurity services. Benchmarking against similar government contracts for comprehensive risk management and compliance support would be necessary for a definitive assessment.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

The contract was awarded under full and open competition, indicating a competitive bidding process. This method generally promotes price discovery and ensures the government receives competitive pricing for the services rendered.

Taxpayer Impact: The use of full and open competition aims to secure the best value for taxpayers by leveraging market competition.

Public Impact

Ensures the security of federal student aid data, protecting millions of students. Strengthens the cybersecurity posture of a critical federal agency. Supports the operational integrity of the Department of Education's IT infrastructure. Contributes to national cybersecurity efforts by securing sensitive government systems.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Positive Signals

Sector Analysis

This contract falls within the Computer Systems Design Services sector, specifically focusing on cybersecurity. Government spending in this area has been steadily increasing due to the growing threat landscape and the digitization of federal services.

Small Business Impact

The contract was awarded to SkyePoint Decisions, Inc. and there is no indication of small business participation in this specific award. Further analysis would be needed to determine if subcontracting opportunities exist for small businesses.

Oversight & Accountability

The contract is managed by the Department of Education. Oversight will involve monitoring performance against the Statement of Work, ensuring compliance with cybersecurity standards, and managing contract modifications to ensure continued effectiveness and value.

Related Government Programs

Risk Flags

Tags

computer-systems-design-services, department-of-education, va, bpa-call, 10m-plus

Frequently Asked Questions

What is this federal contract paying for?

Department of Education awarded $63.2 million to SKYEPOINT DECISIONS, INC.. THE PURPOSE OF THIS CALL ORDER IS TO PROVIDE THE DEPARTMENT OF EDUCATION (DOED) FEDERAL STUDENT AID (FSA) WITH CYBERSECURITY RISK MANAGEMENT AND COMPLIANCE SUPPORT TO THE OPERATIONS OF THE DOED ENTERPRISE CYBERSECURITY GROUP (ESG).

Who is the contractor on this award?

The obligated recipient is SKYEPOINT DECISIONS, INC..

Which agency awarded this contract?

Awarding agency: Department of Education (Department of Education).

What is the total obligated amount?

The obligated amount is $63.2 million.

What is the period of performance?

Start: 2021-08-17. End: 2026-05-05.

What specific cybersecurity frameworks and standards will SkyePoint Decisions adhere to in providing risk management and compliance support?

The contract likely mandates adherence to established federal cybersecurity frameworks such as NIST (National Institute of Standards and Technology) guidelines, including the Cybersecurity Framework and relevant special publications (e.g., SP 800-53 for security controls). Compliance with FISMA (Federal Information Security Modernization Act) requirements will also be paramount, ensuring the Department of Education meets its legal obligations for information security.

How will the effectiveness of the cybersecurity risk management and compliance support be measured and evaluated throughout the contract period?

Effectiveness will likely be measured through key performance indicators (KPIs) tied to risk reduction metrics, compliance audit findings, incident response times, and the successful implementation of security controls. Regular reporting, performance reviews, and independent assessments will be crucial for ongoing evaluation and ensuring the contractor meets defined objectives.

What is the potential impact on the Department of Education's cybersecurity posture if SkyePoint Decisions experiences significant operational disruptions or data breaches?

Significant operational disruptions or data breaches by the contractor could severely compromise the Department of Education's cybersecurity posture, potentially leading to unauthorized access to sensitive student data, disruption of critical services, and reputational damage. Robust security clauses, contingency plans, and clear liability terms in the contract are essential to mitigate these risks.

Industry Classification

NAICS: Professional, Scientific, and Technical ServicesComputer Systems Design and Related ServicesComputer Systems Design Services

Product/Service Code: IT AND TELECOM - INFORMATION TECHNOLOGY AND TELECOMMUNICATIONSIT AND TELECOM - SECURITY AND COMPLIANCE

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Offers Received: 7

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 45240 BUSINESS CT STE 160, DULLES, VA, 20166

Business Categories: Category Business, Small Business, Special Designations, Subchapter S Corporation, U.S.-Owned Business

Financial Breakdown

Contract Ceiling: $74,893,435

Exercised Options: $63,160,506

Current Obligation: $63,160,506

Actual Outlays: $57,942,765

Subaward Activity

Number of Subawards: 42

Total Subaward Amount: $7,605,168

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES

Parent Contract

Parent Award PIID: 91003121A0017

IDV Type: BPA

Timeline

Start Date: 2021-08-17

Current End Date: 2026-05-05

Potential End Date: 2026-12-05 00:00:00

Last Modified: 2026-04-10

More Contracts from Skyepoint Decisions, Inc.

View all Skyepoint Decisions, Inc. federal contracts →

Other Department of Education Contracts

View all Department of Education contracts →

Explore Related Government Spending