Compliance and Policy Analysis (INFOSEC, NIST, FISMA)

This contract requires strict adherence to federal information security standards including FISMA 2014, FIPS 200, and NIST SP 800-53 Rev 5 to ensure all benchmarking activities and data handling meet mandated compliance levels. Emphasis is placed on the proper protection of Controlled Unclassified Information and maintaining full audit readiness, with all processes and controls designed to align with current NIST guidance. The work scope centers on compliance and policy analysis within the information security domain, demanding thorough understanding and implementation of federal frameworks to safeguard sensitive data and support continuous monitoring requirements. The solicitation is issued as a subcontract under NAICS code 541618 by the GSA FAS ITC, with performance required in Washington, DC, at zip code 20405-0001. Responses must be submitted by August 10, 2026, at 5:00 PM Eastern Time, following the posting date of July 29, 2026. The contract does not specify a set-aside type, and no point of contact details are provided in the available data, though all submissions must be made through the FedConnect portal using the provided document link.