Continuous Monitoring (ConMon) and Security Control Assessment

The contract supports the Nuclear Regulatory Commission in implementing and maintaining continuous monitoring of security controls for its classified systems, with a focus on ongoing control testing, accurate status reporting, and effective management of plans of action and milestones. This subcontract is designed to ensure that security controls remain aligned with federal requirements and that vulnerabilities are systematically identified, tracked, and resolved through documented remediation efforts. The work will be performed in Rockville, with the North American Industry Classification System code 541611 indicating it falls under management consulting services, specifically administrative management and general management consulting. The contract was posted on June 23, 2026, and is structured as a subcontract under the NRC’s broader security framework, with no set-aside provisions specified.