NASA IT Security and C-SCRM Compliance

The NASA IT Security and C-SCRM Compliance subcontract focuses on the development and maintenance of security plans and authorization reports for prime contractors supporting NASA Headquarters projects. The scope of work involves implementing the NIST SP 800-161 framework to establish Cyber-Supply Chain Risk Management plans, as well as producing Monthly Commercial IT Authorization Reports and Annual Capital Planning and Investment Control cost reporting to satisfy NASA OCIO Investment Manager requirements. Classified under NAICS code 541512, this opportunity requires the delivery of critical C-SCRM, CITAR, and CPIC reports. Interested parties should note the response deadline of November 3, 2026, for this specialized security and compliance effort.