Cybersecurity and IT Compliance Support

The contract seeks cybersecurity and IT compliance support services to ensure adherence to the NIST Risk Management Framework, the South Carolina Department of Transportation’s IT Security Policy, and the DD37 acknowledgment process for all subcontractors accessing agency systems. This effort is critical to maintaining the integrity, confidentiality, and availability of sensitive transportation infrastructure data and systems, requiring vendors to demonstrate expertise in institutionalizing standardized security controls, conducting continuous monitoring, and validating subcontractor compliance through formal documentation. Performance is expected to occur in Clarendon, South Carolina, with the work classified under NAICS code 541512 for computer systems design services. As a subcontract opportunity, this contract does not specify a set-aside category or point of contact, and all responses must be submitted by the deadline of August 11, 2026. The requirement emphasizes operational alignment with federal and state cybersecurity mandates, compelling proposers to provide clear evidence of prior experience implementing NIST RMF controls within government environments and managing third-party compliance through the DD37 process. Proposals must outline methodologies for ongoing policy enforcement, incident response readiness, and system access governance to meet the South Carolina Department of Transportation’s stringent security posture expectations.