Risk Assessment Content Development & Methodology Design

The contract seeks the development of standardized risk assessment questionnaires, scoring models, and evaluation criteria tailored to align with NIST frameworks, SIG Lite standards, and public sector compliance obligations. The work requires designing methodologies that are consistent, scalable, and capable of supporting consistent risk evaluation across organizational units, with an emphasis on practical implementation for government and contractor environments. The deliverables must ensure interoperability with existing regulatory and cybersecurity compliance structures while enabling clear, quantifiable risk outcomes. This is a subcontract under NAICS code 541611, with a response deadline of August 28, 2026, and a posting date of July 20, 2026. The agency involved is Johnson County in Kansas, though specific location details for performance or contact information are not provided. The solicitation does not specify a set-aside type or additional eligibility requirements beyond the subcontract classification. Interested parties must submit proposals by the stated deadline to meet the county’s objectives for standardized, compliant, and actionable risk assessment tools.