Cybersecurity Compliance & NIST Controls Implementation

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-53, FISMA, and FedRAMP standards for information systems within the Department of Justice. Key responsibilities include managing continuous monitoring activities, facilitating system authorization processes, and ensuring sustained audit readiness to meet federal compliance requirements. The work must be performed in Pennington Gap, Virginia, with a focus on secure, resilient, and compliant IT infrastructure supporting DOJ operations. This is a small business set-aside subcontract under the NAICS code 541611, with proposals due by May 7, 2026. The solicitation is issued by USP Lee and is restricted to eligible small businesses as defined by the SBA. All performance activities must adhere strictly to federal cybersecurity frameworks, with an emphasis on documentation, risk management, and operational integrity to support federal auditing and authorization authorities.