Cybersecurity & Compliance Management

The contract requires the implementation and maintenance of unified security controls across 400 applications to ensure compliance with USDA policy, NIST frameworks, and STRATUS Pool 2 requirements. The scope demands a comprehensive approach to cybersecurity that integrates industry-standard controls and aligns with federal guidance to protect sensitive data and systems. Work must be executed in alignment with strict regulatory benchmarks and delivered under a total small business set-aside as defined by the SBA, ensuring eligibility and participation by small business concerns. The solicitation is classified as a subcontract under NAICS code 541611, targeting organizations specializing in computer systems design and related services. The place of performance is centered in Alexandria, and responses are due by June 29, 2026. The contracting entity falls under the U.S. Department of Agriculture’s Office of Cybersecurity and Privacy - Procurement and Acquisition Management Branch, indicating the work supports critical federal cybersecurity infrastructure. The nature of the engagement requires proven experience in large-scale security program execution, adherence to federal protocols, and the ability to sustain compliance over time across a complex application portfolio.