Cybersecurity and C-SCRM Plan Development

The contract entails the development and ongoing maintenance of an Information System Security Plan and a Cyber Supply Chain Risk Management plan to align with NASA’s stringent cybersecurity and supply chain risk requirements. The work is performed under a subcontract arrangement for NASA Langley Research Center, with performance based in Hampton, ensuring that all security controls and risk mitigation strategies meet federal and agency-specific standards. The contractor is responsible for implementing, documenting, and continuously updating these plans to safeguard information systems and supply chain integrity against evolving threats. The solicitation was posted on July 22, 2026, with a deadline for responses set for September 4, 2026, and falls under NAICS code 541611, indicating it involves management consulting services, particularly those focused on cybersecurity advisory and planning. Although no set-aside designation or point of contact is specified, the work is critical to NASA’s mission assurance objectives, requiring deep expertise in federal cybersecurity frameworks and supply chain risk management practices. Performance will directly support the agency’s commitment to protecting sensitive data and infrastructure through robust, compliance-driven security planning.