Cybersecurity and Risk Planning

The contract seeks the development and maintenance of a comprehensive Cybersecurity and Risk Plan aligned with National Security Memorandum 22, emphasizing integrated mitigation strategies for both physical and cyber threats. The work requires a detailed framework that identifies, evaluates, and addresses risks across all relevant operational domains, ensuring compliance with federal cybersecurity standards and promoting resilience against evolving threats. The plan must be concise, actionable, and regularly updated to reflect changes in threat landscapes, technology, and organizational structure. This is a subcontract under the NAICS code 541512, with a solicitation window opening on July 31, 2026, and responses due by August 30, 2026. The contracting entity is the Department of Transportation, operating through the 69A350 OSDBU office, and performance location details are unspecified. The subcontractor will be expected to deliver a mature, auditable risk management solution that supports federal compliance objectives, with no set-aside restrictions indicated. The opportunity is posted publicly via Grants.gov for prospective offerors to review and respond within the designated timeframe.