Cybersecurity Vulnerability Assessment and Remediation

The contract seeks a subcontractor to conduct proactive identification and remediation of system misconfigurations and vulnerabilities across IT systems at the U.S. Naval Academy in Annapolis, Maryland, with the primary objective of ensuring compliance with CORA security requirements. The scope involves continuous monitoring, assessment, and resolution of cybersecurity weaknesses within the academy’s infrastructure, requiring technical expertise in vulnerability scanning, configuration hardening, and patch management to maintain robust defensive postures. All work must prioritize timely remediation to mitigate risks and align with federal cybersecurity standards applicable to Department of Defense environments. The opportunity is classified as a subcontract under NAICS code 541690, with a response deadline of May 1, 2026, at 2:00 p.m., and was posted on April 30, 2026. The awarding entity is the Naval Supply Systems Command Fleet Logistics Center Norfolk, acting on behalf of the Department of Defense, with performance strictly limited to the Annapolis location. While no set-aside type is specified, the contract requires a vendor capable of operating in a secure, high-accreditation military environment with strict adherence to timing and compliance protocols. No point of contact details are provided, and all inquiries must be directed through the designated SAM.gov portal linked in the posting.