IT Security Compliance & Certification and Accreditation (C&A)

The contract requires the performance of system categorization, development of Certification and Accreditation (C&A) documentation, and periodic re-accreditation every three years or following significant system changes, all in strict alignment with NIST standards and Department of the Interior requirements. The work is focused on ensuring ongoing IT security compliance through structured risk management processes and documentation rigorously tied to federal cybersecurity frameworks. This is a subcontract designated as a Total Small Business Set-Aside under SBA guidelines, with the North American Industry Classification System code 541611 indicating it falls under Management Consulting Services. The opportunity was posted on July 13, 2026, and responses are due by July 16, 2026. The contracting office is the Office of Acquisition Grants – National within the Department of the Interior, and while no specific place of performance or point of contact is provided, the work is expected to support federal information systems under DOI oversight.