The Defense Counterintelligence and Security Agency has awarded a hybrid IDIQ contract worth up to $494.4 million to ASRC Research and Technology Solutions LLC to support the agency's Case Processing Operations Center, according to the Aug. 20, 2026 War Department contract announcement.
Background
DCSA runs the federal government's personnel security vetting mission, screening applicants and employees for more than 100 agencies across the executive branch. The agency's Case Processing Operations Center, known as CPOC, is the operational hub for that mission. It handles the intake of new background-investigation applications, maintains open cases as they move through adjudication, processes files after investigations close, and supports continuous vetting, the ongoing monitoring model DCSA adopted to replace periodic reinvestigations for cleared personnel.
The scale of that workload is large. DCSA processes roughly 2 million background-investigation cases annually, a volume that requires sustained contractor support for the administrative and case-management functions that keep files moving through the pipeline. The new contract also folds in program management duties and support for migrating CPOC functions to future IT systems, signaling that DCSA expects its case-processing technology stack to keep evolving over the life of the award.
Continuous vetting works by checking enrolled personnel's records against government and commercial data sources on a rolling basis, flagging issues such as financial distress, undisclosed foreign contacts or new criminal charges as they arise rather than waiting for a periodic reinvestigation years later to catch them. That shift from a periodic to a continuous model is one reason case-processing volume has stayed high even as the government works to modernize the broader vetting pipeline.
ASRC Research and Technology Solutions is the sole awardee on the new vehicle, one of three companies that submitted proposals for the CPOC support work. DCSA relies heavily on contractor labor to keep CPOC running, since the agency's in-house workforce alone cannot absorb a caseload measured in the millions each year.
Contracts like this one are the mechanism by which the agency staffs that operational core, and the five-year ordering period gives DCSA a stable vehicle to draw on rather than running repeated short-term procurements for the same recurring case-processing functions.
Key Details
DCSA Procurement Solutions in Quantico, Virginia, made the award on Aug. 20, 2026, structuring it as a hybrid firm-fixed-price and cost-reimbursement indefinite-delivery/indefinite-quantity (IDIQ) contract. The ceiling value is $494.4 million, with a minimum guarantee of $20 million to ASRC over the life of the contract. The ordering period runs five years, closing out on Oct. 31, 2031. An IDIQ structure like this one lets DCSA issue task orders against a pre-negotiated ceiling as needs arise, rather than running a fresh competition each time it needs additional case-processing support — a common approach for recurring operational work that does not fit neatly into a single deliverable-based contract.
The government ran this as a competitive procurement, soliciting proposals through a single solicitation and receiving three offers before selecting ASRC. That competitive dynamic matters for a support-services contract of this size, since the field of firms capable of taking on a case-processing operation handling 2 million cases a year is not large.
DCSA did not wait to start spending against the new vehicle. The government obligated $21.8 million in defense working capital funds at the time of award, funding the first task order rather than waiting for a follow-on solicitation cycle. Using working capital funds rather than annual appropriations lets DCSA move task-order money without being tied to a single fiscal year's appropriation cycle, which fits an operations center that runs continuously rather than on a project timeline.
Performance will happen at two locations named in the award: Boyers, Pennsylvania, and St. Louis, Missouri. Splitting the work across two sites may give DCSA some operational redundancy for a function that has little room to go dark.
The contract's scope statement, as described in the award notice, spans the full case lifecycle: application intake, case maintenance while an investigation is open, post-investigation processing once adjudicators have made a determination, and the continuous vetting activity that has become central to how DCSA monitors cleared personnel between formal reinvestigations. The program management and IT migration support components suggest DCSA is treating this award as a bridge contract that will carry CPOC through changes to the underlying case-management systems over the next five years.
What It Means for Contractors
The award confirms that DCSA continues to rely on a single, large-scale services vendor for CPOC rather than splitting the work across multiple awardees, even though it ran the procurement competitively. Firms that support background-investigation and personnel-security missions should note that DCSA received only three proposals for a contract worth nearly half a billion dollars at ceiling, a signal that the pool of companies with the cleared workforce and case-management infrastructure to credibly bid this kind of work remains narrow.
The hybrid pricing structure, mixing firm-fixed-price and cost-reimbursement contract line items, is worth watching for subcontractors and teaming partners. Cost-reimbursement elements typically apply to less predictable scope, such as the IT migration support tied to future systems changes, while the firm-fixed-price elements likely cover the steady-state case-processing volume DCSA can forecast with more confidence. Companies pursuing task orders under this vehicle should expect DCSA to structure individual orders differently depending on which side of that scope they fall under.
The $21.8 million task order obligated at the time of award is a useful data point for firms tracking how fast DCSA moves from contract award to funded work. A five-year ordering period with funding already in place suggests DCSA had task order requirements queued up and ready to execute once the base IDIQ was signed, rather than treating the award date as the start of a slower ramp-up.
Beyond ASRC itself, the award is a reminder to the broader personnel-security and background-investigation contractor base that DCSA's CPOC workload keeps growing. Two million cases a year is a volume that could keep climbing as continuous vetting enrollment expands. Firms positioning for future DCSA case-processing recompetes, subcontracting opportunities under this IDIQ, or related security-clearance modernization work should track how the Boyers and St. Louis performance locations evolve and whether DCSA issues additional task orders beyond the initial $21.8 million obligation as the contract's IT migration support requirements take shape.
