FISMA and IT Security Compliance

This contract requires ensuring that an echosounder system and its associated software comply with the Federal Information Security Modernization Act (FISMA) standards. Key responsibilities include conducting annual self-assessments, performing vulnerability analyses, and developing contingency plans in line with guidelines provided by NIST Special Publication 800-34. The focus is on maintaining robust IT security controls and risk management practices for the equipment and software involved. The contract is a subcontract opportunity issued as a Total Small Business Set-Aside under FAR 19.5, aligned with NAICS code 541512, which pertains to computer systems design services. It is managed by the Department of the Interior’s Office of Acquisition Grants-National, with responses due shortly after posting in mid-June 2026. Location details for performance and points of contact are unspecified, but interested small business entities can participate through the federal contracting portal provided.