Plan of Action and Milestones (POA&M) Development and Management

The contract entails the development and ongoing management of a Plan of Action and Milestones (POA&M) focused on identifying cybersecurity vulnerabilities and establishing corrective measures to achieve full compliance with the NIST SP 800-171 standard. This involves systematically documenting deficiencies, defining specific corrective steps, and setting milestone dates to track progress toward securing sensitive information and meeting the prescribed cybersecurity requirements. Issued by the Department of Defense’s ASC Supplier Oper OEM Division, the subcontract under NAICS code 541618 requires performance primarily in San Antonio, Texas, with a submission deadline of May 18, 2026. The scope emphasizes continuous oversight and updates to the POA&M as necessary to ensure the organization remains on track with its cybersecurity objectives, thereby maintaining regulatory adherence and strengthening overall security posture in alignment with federal guidelines.