Cybersecurity for Building Access Control Systems (BACS)

The contract mandates the implementation of robust cybersecurity measures for Building Access Control Systems to ensure they are fully isolated from federal IT networks and hardened in accordance with NIST, CIS, and FIPS 140-2 standards. Key requirements include the enforcement of strong encryption protocols, the disabling of all non-essential services and ports, and the consistent application of security patches and updates to mitigate vulnerabilities. These actions are designed to reduce attack surfaces and maintain compliance with federal cybersecurity frameworks without relying on network connectivity to broader government systems. The work is classified as a subcontract under NAICS code 541512, issued by the General Services Administration through its PBS R00 Center for Broker Services. The response deadline is May 12, 2026, and performance is expected to occur in Barrigada. Although the solicitation number and point of contact are not provided, bidders must prepare to demonstrate technical capability in securing physical access infrastructure while adhering strictly to federal security benchmarks, with no allowances for integration or reliance on federal network infrastructure.