NIAMS Information Technology Security Support Services

The contract is a sole-source modification under the Federal Supply Schedule (FSS) for IT Security Support Services to the National Institute of Arthritis and Musculoskeletal and Skin Diseases (NIAMS), awarded to Effectual Public Sector, Inc. and JHC Technology, Inc. as the incumbent provider, with a base period of performance from February 1, 2026, to July 31, 2026, and an option to extend for an additional six months under FAR Clause 52.217-8, bringing the total potential value to $270,738.00. Services include comprehensive IT security documentation, program management, Security Assessment and Authorization (SA&A) support, Continuous Diagnostics and Mitigation (CDM) activities, and related cyber services, all aimed at maintaining compliance with FISMA 2014, FIPS 200, NIST guidelines, and HHS and NIH security policies. Deliverables encompass System Security Plans (SSPs), Risk Management Framework (RMF) artifacts, security policies, vulnerability assessments, incident response plans, training materials, and audit-ready reporting. The work is to be performed at the NIH/NIAMS facility in Bethesda, Maryland, with acceptance by the government at the same location. The contract was awarded under FAR 8.405-6(a)(1)(i)(B) due to the incumbent's unique and irreplaceable capability to ensure uninterrupted mission-critical support, as any transition would pose significant operational risk and exceed a 60-day feasibility window for knowledge transfer and system onboarding. No formal evaluation factors, weights, or solicitation response requirements were published, as it is a direct modification to an existing FSS order, with pricing based on pre-negotiated rates. The contracting office is located in Bethesda, Maryland, with Kara Brannon as the primary point of contact, and institutional knowledge tied to existing personnel is critical to service continuity. No packaging, delivery, or invoicing specifics beyond electronic compliance with GSA systems are outlined, and no socioeconomic or size certifications from the offerors are included in the documentation.