SIN 54151HACS – Highly Adaptive Cybersecurity Services (HACS)

Our contract has all 5 Highly Adaptive Cybersecurity Services (HACS) on IT Schedule 70 to provide agencies quicker access to Cybersecurity services which include:

• High Value Asset Assessments

• Risk and Vulnerability Assessment

• Cyber Hunt

• Incident Response

• Penetration Testing

SIN 54151S – IT Professsional Services

MAS Information Technology's Special Item Number (SIN) 54151S for all IT Professional Services includes:

• Cognitive computing

• Conversion and implementation support

• Database planning and design

• Internet of Things (IoT)

• IT project management

• Migration services (of all kinds)

• Network services

• Programming

• Resources and facilities management

• Systems analysis, design, and implementation

• Other services relevant to 29 CFR 541.400

SIN 54151HEAL – Health IT Services

The Information Technology Category Health IT Services SIN 54151HEAL includes professional services and/or professional labor categories that perform the following services:

• Connected health

• Electronic health records

• Emerging research

• Health analytics

• Health informatics

• Health information exchanges

• Innovative solutions

• Personal health information management

• Other health IT services

SIN 541611 – Management and Financial Consulting, Acquisition and Grants Management Support, and Business Program and Project Management Services

541611 Provide operating advice and assistance on administrative and management issues. Examples include:

• Strategic and organizational planning

• Business process improvement

• Acquisition and grants management support

• Facilitation

• Surveys

• Assessment and improvement of financial management systems

• Financial reporting and analysis

• Due diligence in validating an agency's portfolio of assets and related support services

• Strategic financial planning

• Financial policy formulation and development

• Special cost studies

• Actuarial services

SIN 54151ENG – Engineering Services

541330ENG Services include:

• Applying physical laws and principles of engineering in the design, development, and utilization of machines, materials, instruments, processes, and systems. Services may involve any of the following activities:

  • Provision of advice,

  • Concept development,

  • Requirements analysis,

  • Preparation of feasibility studies,

  • Preparation of preliminary and final plans and designs,

  • Provision of technical services during the construction or installation phase

  • Inspection and evaluation of engineering projects, and related services.

SIN 541990 – All Other Professional, Scientific, and Technical Services (Non-IT)

541990 Services provided include professional, scientific, and technical services not covered under other SINs. Examples include, but are not limited to, the following:

• Appraisal services (except real estate)

• Crisis management

• Emergency preparedness

• Emergency management

• Commodity inspector services

• Mathematical (both theoretical and applied) and statistical (both theoretical and applied) Professional services

• Performance and impact evaluation services (related to a scientific or technical project) Public health planning services

• Weather forecasting services

 SIN 541990RISK – Risk Assessment and Mitigation Services

541990RISK Under this SIN, firms can assist the Ordering Agency with preventive measures in protecting Personally Identifiable Information (PII) and Protected Health Information (PHI) through the evaluation of threats and vulnerabilities to PII and PHI type of information; training of Government personnel on how to prevent data breaches and identity theft; vulnerability assessments; privacy impact and policy assessments; review and creation of privacy and safeguarding policies; prioritization of threats; maintenance and demonstration of compliance; and evaluation and analysis of internal controls critical to the detection and elimination of weaknesses to the protection of PII and PHI type of information.

Services include:

• Breach mitigation and analysis/forensic services

• Deployment of financial risk assessment and mitigation strategies and techniques

• Improvement of capabilities through the reduction, identification, and mitigation of risks

• Detailed risk statements, risk explanations and mitigation recommendations

• Design and development of new business applications, processes, and procedures in Response to risk assessments

• Ensuring compliance with governance and regulatory requirements.