Cybersecurity and PII Compliance Services

The Cybersecurity and PII Compliance Services subcontract supports prime contractors on GSA SmartPay 4 projects by providing security auditing, PII protection, and privacy assessments. The scope of work includes preparing Privacy Threshold Assessments, implementing NIST SP 800-53 security controls, and performing continuous vulnerability monitoring. To execute these tasks, the contractor must utilize encryption tools and SIEM systems to deliver Security Compliance Reports and maintain an Authority to Operate. This opportunity is managed by the General Services Administration under the GSA/FAS/PSHC/Contract Operations office, with performance located in Washington, DC. The project falls under NAICS code 541519. Interested parties must submit their responses by the deadline of October 5, 2026.