Security Compliance and Audit Support

The contract is for ongoing security patching, vulnerability management, audit support, and the delivery of quarterly Security & Compliance Packs to maintain FedRAMP compliance. It is structured as a subcontract under the Department of Transportation’s Maritime Administration, with performance centered in Kings Point, New York, zip code 11024. The work is focused on sustaining and demonstrating continuous compliance with federal security and privacy standards through proactive remediation, rigorous vulnerability tracking, and timely documentation tailored for audits. The contract requires the contractor to provide consistent, high-quality deliverables on a quarterly basis to ensure adherence to FedRAMP requirements and to support the agency’s readiness for external assessments. The solicitation was posted on July 1, 2026, with a response deadline of July 15, 2026, at 6:30 p.m. Eastern Time, and the North American Industry Classification System code is 541618, indicating it falls under Other Scientific and Technical Consulting Services. There is no stated set-aside type or specific point of contact provided, and the contracting office is operating under the broader DOT structure. The work is critical for maintaining an authorized cloud environment and supports the agency’s obligation to uphold federal cybersecurity frameworks through disciplined, repeated, and documented security practices.