cisa procurement analysis