Cybersecurity Compliance and Incident Response

The contract requires the implementation and maintenance of cybersecurity controls aligned with NIST SP 800-53, the Federal Desktop Core Configuration and United States Government Configuration Baseline standards, and Department of Justice policies. This includes ongoing adherence to established security frameworks to ensure the protection of information systems and data integrity across all covered environments. Annual cybersecurity training for personnel is mandatory, alongside a strict requirement to report any security incidents within one hour of discovery, ensuring rapid response and mitigation of potential threats. The contract is structured as a subcontract under the Office Acquisition Management within the Department of Justice, with performance expected to occur in Detroit. The solicitation was posted on April 30, 2026, and proposals must be submitted by May 6, 2026, at 2:00 PM. The North American Industry Classification System code 541921 indicates the work falls under administrative management and general management services, emphasizing the operational and compliance nature of the engagement. All activities must be performed in full compliance with federal cybersecurity mandates, with no flexibility in meeting the referenced standards or reporting timelines.