Plans of Action and Milestones (POA&M) Development & Management

The contract requires the development and ongoing management of a Plan of Action and Milestones to resolve security deficiencies identified through a NIST SP 800-171 assessment, ensuring all corrective actions are clearly defined, tracked, and completed within established timelines. The POA&M must include detailed milestones, responsible parties, and resources required to remediate each finding, with full integration into the Supplier Performance Risk System to maintain visibility and compliance across the Department of Defense supply chain. The successful contractor will be responsible for continuously updating the plan to reflect progress, adjusting timelines as necessary, and ensuring alignment with federal cybersecurity standards. This subcontract is issued under the NAICS code 541612, targeting information technology and cybersecurity consulting services, and is managed by the Maritime Supply Chain ESOc Buys unit within the Department of Defense. Responses are due by May 11, 2026, and while the place of performance and point of contact details are unspecified, the work is expected to support federal information system security objectives across DoD networks. Participation requires a thorough understanding of NIST 800-171 requirements and SPRS reporting protocols to ensure timely and accurate compliance documentation.