Cybersecurity Compliance and Framework Implementation

The Department of Natural Resources is seeking a subcontractor for the Cybersecurity Compliance and Framework Implementation project. This engagement focuses on the development, implementation, and ongoing maintenance of a comprehensive information security program. The selected provider must ensure alignment with recognized industry standards, including NIST 800-53, NIST 800-171, NIST CSF, ISO 27001, CIS Controls, or CMMC. Key deliverables for this contract include the creation of security policies, the execution of detailed risk assessments, the establishment of robust access controls, and the preparation of the organization for formal audits. Interested parties must submit their responses by September 1, 2026, under NAICS code 541512.