DOT IT System security authorizations and assessments

This contract modification extends the existing Blanket Purchase Agreement under GSA Schedule GS-35F-0490T for cybersecurity support services to the Department of Transportation by six months, through December 14, 2026. The action is justified as a sole-source logical follow-on under FAR 8.401(b), emphasizing continuity of operations due to the incumbent contractor’s deep institutional knowledge of DOT’s information systems, past performance in achieving a FY24 FISMA “B” rating, and the critical need to maintain uninterrupted security authorizations and assessments. The scope includes ongoing support for System Authorization Packages, Plan of Action and Milestones tracking, compliance with NIST SP 800-53 controls, and coordination with System Owners and Information System Security Officers to ensure systems remain authorized to operate. Performance is centered in Washington, D.C., with hybrid on-site and remote activities supporting both on-premises infrastructure and FedRAMP-authorized SaaS platforms. The contracting activity is managed by the FHWA IT Acquisition Center of Excellence, with primary point of contact Ajmal Khan and secondary contact Kyle Griggs. No specific pricing details are provided, as costs are governed by existing GSA Schedule and BPA rates, and no line-item pricing or contract value is disclosed. The modification reflects an embedded extension option, with no competitive process conducted due to the necessity of sustaining uninterrupted service during DOT’s internal IT transition. Security clearance levels are not formally mandated, but contractor personnel must possess expertise in federal cybersecurity frameworks and have access to sensitive federal systems. No key personnel are formally named, though the retention of the existing Kingfisher/Crimson Phoenix team is critical to the justification. No packaging, delivery, or inspection requirements beyond technical compliance with FISMA and NIST standards are specified, and no socioeconomic, size, or representation details regarding the contractor are provided.