Audits, Assessments & A&A Support

This subcontract entails conducting security control assessments, audit readiness reviews, and providing support for Authorization and Accreditation (A&A) packages specifically for NIH systems. The work also includes managing Plans of Action and Milestones (POA&M) to ensure proper tracking and resolution of security deficiencies. The contract supports the National Institutes of Health, particularly the NICHD division, under the Department of Health and Human Services, with the place of performance located in Bethesda. The contract falls under NAICS code 541611, which covers administrative management and general management consulting services. While specifics such as solicitation number and set-aside details are not included, the role emphasizes critical support for maintaining cybersecurity compliance and readiness within NIH systems through comprehensive assessments and accreditation processes, helping to uphold federal standards and regulations.