Annual Security Self-Assessments & Vulnerability Analysis

The contract requires the performance of annual security self-assessments and vulnerability analyses in alignment with Department of the Interior guidance and NIST SP 800-53 standards, emphasizing thorough documentation and support for incident reporting. The work must be conducted annually to ensure compliance with federal cybersecurity frameworks and to identify, evaluate, and mitigate potential security weaknesses within systems and operations. All deliverables must be rigorously documented to support audit readiness and continuous improvement of the organization’s security posture. This is a subcontract under a Total Small Business Set-Aside, meaning only small businesses certified by the Small Business Administration are eligible to respond. The North American Industry Classification System code is 541612, indicating the work falls under management consulting services, specifically security assessment and analysis. The solicitation was posted on July 13, 2026, with a response deadline of July 16, 2026. The contracting organization is the Office of Acquisition Grants-National within the Department of the Interior, and while specific performance location details are not provided, the work is expected to support federal information systems under DOI’s jurisdiction.