IT System Access Compliance & Risk Management Framework (RMF) Support

The contract seeks to provide advisory and compliance services to ensure that contractor IT access credentials align with the Department of Defense Risk Management Framework and established cybersecurity policies for Privileged, Enhanced, or Authorized User access levels. This involves assessing, documenting, and maintaining strict adherence to RMF controls across all stages of system authorization, including identification of system boundaries, assignment of security categorizations, implementation of security controls, continuous monitoring, and authorization decisions. The work will focus on validating that access rights are properly granted, reviewed, and revoked in accordance with DoD standards to mitigate risk and maintain compliance across critical IT environments. This is a subcontract under a Total Small Business Set-Aside as defined by the SBA and FAR 19.5, with the NAICS code 541512 indicating it falls under Custom Computer Programming Services. The performance location is designated as Groton, Connecticut, with a zip code of 06349, and the contracting activity is managed by the Naval Supply Systems Command Fleet Logistics Center Norfolk under the Department of Defense. The solicitation was posted on June 24, 2026, and responses are due by June 29, 2026, at 5:00 PM Eastern Time. The scope emphasizes operational compliance, not system development or deployment, requiring expertise in RMF implementation, DoD cybersecurity directives, and privileged access management within military IT infrastructure.