Notice of Intent to Award a WOSB Sole Source - Underrepresented NAICS

The Court Services and Offender Supervision Agency (CSOSA) intends to award a sole-source purchase order to Business Operational Concepts, LLC, a certified Women-Owned Small Business (WOSB), under NAICS code 541519, which is designated by the SBA as substantially underrepresented by WOSBs. This action is authorized under FAR 6.302-5(b)(7) and Section 8(m) of the Small Business Act, eliminating the need for competitive bidding and making award contingent solely on the contractor’s WOSB certification and demonstrated capability to deliver specialized cybersecurity, privacy engineering, and program management services. The contractor must be actively certified as a WOSB in SAM.gov under NAICS 541519 and provide evidence of at least one relevant project involving Caveonix GRC, migration to NIST Cybersecurity Framework 2.0, delivery of Authorization to Operate (ATO) packages for a minimum of 15 federal systems within a 12-month period, or staffing qualified personnel with certifications including PMP, CISSP, CISM, CISA, or SAFe. The work requires on-site performance at CSOSA’s facility at 800 North Capitol Street, NW, Washington, DC, 20002-4260, and includes engineering continuous monitoring workflows, implementing an agency-wide AI Threat Strategic Plan and Playbook per Executive Order 14110, conducting Privacy Threshold Analyses and Privacy Impact Assessments, and preparing full FISMA audit packages for 45 enterprise information systems transitioning from static to continuous authorization models. All proposed personnel must hold required certifications, and the Program Manager must have seven years of progressive federal cybersecurity program management experience with demonstrable expertise in RMF, NIST SP 800-53, and compliance reporting. The response must be submitted by August 5, 2026, to catherine.collins@csosa.gov and include project titles, descriptions, performance periods, contract values, and client references, along with resumes of proposed staff, with no telephone inquiries accepted. The contract value is not specified, payment mechanisms are not detailed, and no formal evaluation factors or weighting system apply—award is based strictly on mandatory pass/fail compliance with these statutory and technical requirements. The acquisition is non-competitive, with inspection and acceptance conducted by CSOSA at the performance location based on adherence to NIST CSF 2.0, RM