Plans of Action and Milestones (POA&M) Management

This contract focuses on the development, updating, and tracking of Plans of Action and Milestones (POA&Ms) to address security vulnerabilities and ensure that control deficiencies are remediated in a timely manner. The work is aimed at integrating these efforts into NOAA’s existing risk management workflows to maintain and enhance organizational security posture. The contract type is a subcontract under the Department of Commerce, specifically for the National Oceanic and Atmospheric Administration (NOAA). The contract falls under the NAICS code 541611, which indicates management consulting services. The place of performance is Silver Spring, Maryland, with a ZIP code of 20910. The contract was posted on April 28, 2026, and although the solicitation number and set-aside details are not provided, the scope clearly involves ongoing security management tasks crucial for compliance and risk mitigation within NOAA’s operational framework.