Security Compliance and Audit Support Services

The contract seeks a subcontractor to deliver ongoing security attestations, incident response coordination, and compliance reporting aligned with SOC 2, ISO/IEC 27001, NIST SP 800-171, and mandatory penetration testing standards. The services are focused on ensuring continuous adherence to recognized cybersecurity frameworks and maintaining audit readiness for the American Battle Monuments Commission, with all activities centered at the designated place of performance in zip code 22201. The subcontractor will be expected to provide timely, accurate documentation and validation of security controls, respond to security incidents in coordination with agency personnel, and deliver structured reports that meet regulatory and operational requirements. This opportunity is issued under NAICS code 541618 and is classified as a subcontract with a response deadline of July 15, 2026. The posting date is July 6, 2026, and all interested parties must submit proposals prior to the specified cutoff. While no set-aside designation or organization type is specified, the requirement demands proven expertise in multi-framework compliance, security auditing, and incident management. The work is critical to sustaining the agency’s cybersecurity posture and meeting federal compliance obligations, making experience with government-facing security programs essential for qualified vendors.