FISMA Assessment Services

The Department of Commerce is seeking a contractor to provide FISMA Assessment Services for a system categorized as Moderate for confidentiality, integrity, and availability, which also includes a High Value Asset overlay. The selected vendor will be responsible for conducting a comprehensive security and privacy control assessment covering 100 percent of the applicable controls. The primary objective of this engagement is to generate precise assessment findings that will support a formal Authority to Operate recommendation. To ensure full compliance with federal mandates, the contractor must possess deep expertise in NIST requirements, specifically NIST SP 800-37 Rev 2 and NIST SP 800-53A Rev 5, as well as applicable DOC and NOAA policies. This forecast identifies the work as falling under NAICS code 541512, with the place of performance located in Silver Spring.