Cybersecurity & Compliance Documentation Services

The contract involves providing services to prepare and maintain critical cybersecurity documentation to support compliance with Department of Defense Risk Management Framework (DoD RMF) and National Institute of Standards and Technology (NIST) standards. Responsibilities include creating and updating key artifacts such as the Risk Assessment Report (RAR), System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and the Department of Defense Privacy Assessment (DoD PA). These documents are then submitted through the Enterprise Mission Assurance Support Service (eMASS) to ensure ongoing adherence to cybersecurity requirements. This subcontract is issued by the Naval Supply Systems Command Fleet Logistics Center Sigonella Naples Office under the Department of Defense. It falls under NAICS code 541611, which pertains to administrative management and general management consulting services. The solicitation was posted on May 8, 2026, with a response deadline set for May 18, 2026, at 10:00 AM. Specific details regarding the place of performance and point of contact are not provided, but the work supports the DoD’s mission to maintain secure and compliant information systems through thorough documentation and continuous risk management.