NIST 800-53 Compliance & Security Certification

This subcontract for the South Dakota State Government focuses on providing NIST 800-53 Compliance and Security Certification for prime contractors on BIT projects. The scope of work involves performing security audits and validating hosting environments by mapping facility controls to NIST SP 800-53 Rev. 5 frameworks, reviewing System Security Plans, and conducting vulnerability scans. The selected provider must ensure strict compliance with HIPAA, PCI, and IRS standards using specialized auditing tools to deliver essential compliance certificates, NIST mapping reports, and SOC reports. The opportunity is categorized under NAICS code 541690 and was posted on September 25, 2026, with a response deadline of November 3, 2026. This engagement is designed to secure the technical infrastructure of state projects through rigorous validation and certification processes.