IRON VINE SECURITY LLC

CYBERSECURITY ASSESSMENTS AND COMPLIANCE (CA&C), DE-OBLIGATION OF OPTION YEAR TWO (2)

CYBERSECURITY ASSESSMENT MANAGEMENT (CSAM) SUPPORT

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

NESS TCP CYBER SECURITY SERVICES

THE PURPOSE OF THIS MODIFICATION IS TO EXERCISE OPTION IV FROM 09/23/25 - 09/22/26 AND INCREMENTALLY FUND FIRST 3 MONTHS IN THE AMOUNT OF $885,541.34 AND INCREMENTALLY FUND ODCS FOR $11,249.92.

THE PURPOSE OF THIS MODIFICATION IS TO DE-OBLIGATE UNLIQUIDATED OBLIGATION (ULO) FUNDS WHICH HAVE NOT BEEN SPENT AND ARE NOT NEEDED ON CONTRACT AS OF THE END OF FISCAL YEAR 2025.

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

MODIFICATION TO INCREMENTALLY FUND CLIN 0002F IN OP5.

THE PURPOSE OF THIS MODIFICATION IS TO DE-OBLIGATE UNLIQUIDATED OBLIGATION (ULO) FUNDS WHICH HAVE NOT BEEN SPENT AND ARE NOT NEEDED ON CONTRACT AS OF THE END OF FISCAL YEAR 2025.

MODIFICATION TO MOVE CEILING FROM CLIN 0003B TO 0003F AND TO INCREMENTALLY FUND CLIN 0003F.

THE PURPOSE OF THIS MODIFICATION IS TO EXERCISE AND FULLY FUND OPTION PERIOD IV FROM SEPTEMBER 16, 2025 THROUGH SEPTEMBER 15, 2026.

CMS CYBERSECURITY INTEGRATION CENTER OPERATIONS (CCICOPS) SERVES AS A CENTRALIZED FOCAL POINT FOR DETECTING ATTACKS, PERFORMING INCIDENT RESPONSE, MANAGING INCIDENTS AND PROVIDING OVERSIGHT OF ALL CMS SECURITY OPERATIONS.

SOLE SOURCE - SUPPORT FOR THE IMPLEMENTATION OF MILLENNIUM CHALLENGE ACCOUNT (MCA) MIS PROGRAM

NESS TCP CYBER SECURITY SERVICES

MODIFICATION TO INCREMENTALLY FUND OPTIONAL CLIN 0003F IN OPTION 5.

PROFESSIONAL MANAGEMENT SERVICE SUPPORT.

CYBERSECURITY AND PRIVACY SOLUTIONS

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

MODIFICATION TO DE-OBLIGATE FUNDING FROM OPTION 4.

THE PURPOSE OF THIS MODIFICATION IS TO FUND THE REMAINDER OF OPTION PERIOD III FROM 06/23/25 - 09/22/25 AND INCLUDE THE ADDITION OF THE CONTRACTING OFFICERS REPRESENTATIVE (COR) CYNTHIA FRESHLEY.

MODIFICATION TO INCREMENTALLY FUND OPTION 5 AND UPDATE ATTACHMENTS J3 AND J4.

NHLBI - RISK MANAGEMENT FRAMEWORK SERVICES TASK ORDER 1 (TASKS 1 AND 3 WITH OPTIONAL 4, 5, AND 6)

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

CYBERSECURITY ASSESSMENTS AND COMPLIANCE (CA&C) MODIFICATION TO EXERCISE OPTION YEAR THREE (3)

NESS TCP CYBER SECURITY SERVICES

MODIFICATION TO INCREMENTALLY FUND OPTION 5.

LOGICAL FOLLOW-ON FOR THE INFORMATION SECURITY SUPPORT SERVICES (ISPSS) CONTRACT.

CMS CYBERSECURITY INTEGRATION CENTER OPERATIONS (CCICOPS) SERVES AS A CENTRALIZED FOCAL POINT FOR DETECTING ATTACKS, PERFORMING INCIDENT RESPONSE, MANAGING INCIDENTS AND PROVIDING OVERSIGHT OF ALL CMS SECURITY OPERATIONS.

PROFESSIONAL MANAGEMENT SERVICE SUPPORT.

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

MODIFICATION TO EXERCISE AND INCREMENTALLY FUND OPTION 5.

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

THE PURPOSE OF THIS MODIFICATION IS TO PROVIDE INCREMENTAL FUNDING FOR OPTION PERIOD III UNDER CLIN 3001 FROM 03/23/25 TO 06/22/25 AND UPDATE CLAUSE SECTION.

NESS TCP CYBER SECURITY SERVICES

CMS CYBERSECURITY INTEGRATION CENTER OPERATIONS (CCICOPS) SERVES AS A CENTRALIZED FOCAL POINT FOR DETECTING ATTACKS, PERFORMING INCIDENT RESPONSE, MANAGING INCIDENTS AND PROVIDING OVERSIGHT OF ALL CMS SECURITY OPERATIONS.

CMS CYBERSECURITY INTEGRATION CENTER OPERATIONS (CCICOPS) SERVES AS A CENTRALIZED FOCAL POINT FOR DETECTING ATTACKS, PERFORMING INCIDENT RESPONSE, MANAGING INCIDENTS AND PROVIDING OVERSIGHT OF ALL CMS SECURITY OPERATIONS.

MODIFICATION TO DEOBLIGATE FUNDS FROM OPTION 4.

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)

AS A RESULT OF THIS MODIFICATION THE OBLIGATED FUNDING FOR OPTION YEAR III IS INCREASED BY $868,700.55, FROM $913,700.59, TO $1,782,401.14. THE TOTAL OBLIGATED FUNDING OF THE CONTRACT IS INCREASED BY $868,700.55 FROM $9,645,868.51 TO $10,514,569.06 A

CYBERSECURITY ASSESSMENTS AND COMPLIANCE (CA&C) MODIFICATION TO DE-OBLIGATE CLIN 0003, CLIN 0007, CLIN 1003, AND CLIN 1007 AND CORRECT MODIFICATION P00006 LANGUAGE FOR CLIN 3004 MONTHLY UNIT PRICE AND TOTAL.

CYBERSECURITY AND PRIVACY SOLUTIONS

MODIFICATION FOR INCREMENTAL FUNDING AND UPDATE KP.

MODIFICATION TO ADD ADDITIONAL SUPPORT UNDER TASK C.2, C.3 AND C.4 FOR OY2 (9 MONTHS), OY 3 AND OY4 FOR CYBERSECURITY ASSESSMENTS AND COMPLIANCE (CA&C)

CMS CYBERSECURITY INTEGRATION CENTER OPERATIONS (CCICOPS)

CYBERSECURITY AND PRIVACY SOLUTIONS

THE PURPOSE OF THIS MODIFICATION IS TO EXERCISE OPTION PERIOD 3 (OP3) AND INCREMENTALLY FUND CLIN 3001 (LABOR) FOR $868,700.59 FROM 9/23/24-12/22/24 AND FULLY FUND CLIN 3002 (ODC) FOR $45,000.00, FOR A TOTAL OBLIGATION OF $913,700.59 FOR OP3.

SOLE SOURCE - SUPPORT FOR THE IMPLEMENTATION OF MILLENNIUM CHALLENGE ACCOUNT (MCA) MIS PROGRAM

THE PURPOSE OF THIS MODIFICATION IS TO EXERCISE OPTION PERIOD 3 FROM 9/16/24 TO 9/15/25 IN THE TOTAL AMOUNT OF $6,442,332.80: FULLY FUNDS LABOR CLIN 3001-LABOR FOR $6,292,332.80 AND FULLY FUNDS ODC-TRAVEL CLIN 3002 FOR $150,000.00.

BPA - INFORMATION TECHNOLOGY SECURITY COMPLIANCE (ITSC)