Cybersecurity Plan of Action & Milestones (POA&M) Development

The contract seeks the development of a detailed Plan of Action & Milestones (POA&M) to resolve deficiencies identified during a NIST SP 800-171 cybersecurity assessment, with the goal of achieving full compliance. The POA&M must outline specific corrective actions, assign clear responsibilities to personnel or teams, establish realistic timelines for implementation, and include a robust framework for tracking and reporting progress toward remediation. This effort is critical for aligning the organization’s cybersecurity posture with federal standards governing the protection of controlled unclassified information. The work is being conducted as a subcontract under the Department of Defense, specifically by the SUBSISTENCE FSE SUPPLY CHAIN, with performance required at Quantico, Virginia, 22134-5061. The North American Industry Classification System code is 541611, indicating the work falls under management, scientific, and technical consulting services. The solicitation was posted on May 11, 2026, and responses are due by May 15, 2026, with no set-aside type specified. The contract has been issued through the DIBBS system under solicitation number SPE3SE26T0773.