DOE Security Control Compliance Validation

This subcontract opportunity, titled DOE Security Control Compliance Validation, is set aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 541690. The project involves performing security audits and validating Workday environment compliance for prime contractors on Department of Energy projects at Brookhaven National Laboratory in Upton, New York. The selected provider will be responsible for reviewing security controls, validating disaster recovery protocols, and ensuring that data hosting adheres to NIST, FISMA, and DOE-specific security standards. The successful contractor must possess CISSP or equivalent security certifications to deliver a comprehensive security compliance report and certification of controls. Interested parties must respond by September 18, 2026, following the posting date of September 2, 2026.