IT Security Plan Development & Accreditation

The contract involves the development of an IT Security Plan in accordance with NIST Special Publication 800-37, encompassing the full lifecycle of system accreditation and mandatory annual verification to ensure ongoing compliance with federal security standards. The work requires detailed risk assessments, control implementation, documentation of security controls, and formal authorization processes to achieve and maintain the system’s accreditation status. Annual verification activities will include reassessments of security controls, updates to documentation, and validation that the system continues to meet required security thresholds. This subcontract is issued by the Department of State through the American Embassy Bogota - Nas, with a focus on securing information systems critical to diplomatic operations. The North American Industry Classification System code 541512 indicates the scope centers on computer systems design services, specifically tailored to government cybersecurity needs. Proposals must be submitted by August 17, 2026, and the performance location is not explicitly defined, suggesting work may be conducted remotely or at the embassy’s designated secure facilities. The contract emphasizes adherence to federal cybersecurity frameworks and ongoing compliance, making experience with NIST SP 800-37 and system accreditation processes essential for qualified bidders.