Cybersecurity Compliance Monitoring and Reporting

This contract requires the provision of cybersecurity services focused on maintaining compliance with Department of the Interior (DOI), National Institute of Standards and Technology (NIST), and Continuous Diagnostics and Mitigation (CDM) standards. The contractor will be responsible for performing monthly authenticated vulnerability scans to identify potential security risks, alongside continuous monitoring efforts to ensure ongoing protection and threat detection. Additionally, the contract involves generating detailed compliance reports that document adherence to these regulatory frameworks. Beyond scanning and reporting, the scope includes comprehensive patch and configuration management to address identified vulnerabilities and maintain system security postures. This subcontract falls under the NAICS code 541611, and it is managed by the "It Services Fws" division of the Department of the Interior. The contract was posted on June 5, 2026, with a response deadline set for June 17, 2026. Specific location details for performance or points of contact are not provided.