NIST RMF Security Control Assessments (SCA)

The contract calls for end-to-end Risk Management Framework assessments under the NIST SP 800-37 and FISMA standards to support USAF information systems. This includes comprehensive control evaluation, vulnerability scanning, and authorization support to ensure systems meet federal cybersecurity requirements. The work is focused on identifying, analyzing, and mitigating risks throughout the system lifecycle, with deliverables aligned to formal authorization processes and continuous monitoring obligations. The contract is identified as a subcontract under NAICS code 541330, awarded by the Department of Defense through the FA8604 Aflcmc Pzi office, with performance required at Wright Patterson AFB, Ohio, zip code 45433. The solicitation was posted on July 21, 2026, and responses are due by August 5, 2026. No set-aside provisions or point of contact details are specified, and the work is expected to support critical national defense systems with strict compliance and documentation standards.