Plan of Action & Milestones (POA&M) Development

The contract requires the development of a formal Plan of Action and Milestones document to achieve full compliance with NIST SP 800-171 and a SPRS score of 110. This includes identifying and prioritizing security risks, outlining specific corrective actions, assigning clear responsibilities to individuals or teams, and establishing realistic timelines for completion. The POA&M must be comprehensive, actionable, and aligned with federal cybersecurity requirements to ensure the organization meets mandatory data protection standards. The work is under a subcontract within the Department of Defense, managed by the ASC Commodity Division, with performance expected at Hill AFB, Utah, 84056-5734. The solicitation was posted on May 12, 2026, and responses are due by May 20, 2026. The North American Industry Classification System code 541611 indicates this involves management, scientific, and technical consulting services, specifically focused on cybersecurity planning and readiness. The effort is critical to securing federal information systems and must be executed with precision to satisfy compliance benchmarks and audit readiness.