ICT Security Compliance and FISMA Auditing

The ICT Security Compliance and FISMA Auditing subcontract is a small business set-aside opportunity with the Department of the Treasury's IT Strategy and Modernization agency. Based in Washington, the contract focuses on providing security compliance auditing for prime contractors working on Treasury IRS AV/VTC projects. Key technical requirements include the implementation of NIST 800-53 Rev. 5 controls and IRS Publication 4812 standards, as well as the validation of FIPS 140-3 cryptographic modules to ensure secure data encryption for information both at rest and in transit. The selected provider will be responsible for developing critical security documentation, including System Security Plans, Security Risk Assessments, and Software Bill of Materials in accordance with OMB Memo 22-18. Deliverables consist of comprehensive security certifications and audit reports. Candidates must possess MBI clearance to perform this work. The response deadline for this opportunity is September 14, 2026.