Cybersecurity Compliance & Reporting

The contract focuses on cybersecurity compliance and reporting, specifically addressing vulnerability management and ensuring adherence to key federal standards. The contractor is required to report directly to the Airport Chief Information Security Officer (CISO) and maintain compliance with the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (CISA KEV) catalog, Department of Homeland Security (DHS) and Transportation Security Administration (TSA) standards, as well as SOC-2 audit and reporting requirements. This ensures a robust framework for identifying, managing, and mitigating cybersecurity risks within the airport environment. Classified as a subcontract under the NAICS code 541512, the solicitation was posted on April 9, 2026, with a response deadline of May 8, 2026. The contracting agency is related to design and construction project management based in California, although specific location details are not provided. The contract emphasizes adherence to high cybersecurity standards and integrates federal compliance mandates, reflecting a comprehensive approach to safeguarding critical infrastructure against vulnerabilities and ensuring ongoing risk assessment and reporting.