Security Compliance and Control Mapping

The contract seeks comprehensive documentation and implementation of control mappings aligned with NIST SP 800-53 and the HIPAA Security Rule, ensuring full compliance with federal security and privacy standards. The scope includes identifying, mapping, and documenting existing controls to meet regulatory requirements, as well as establishing processes for audit readiness and the generation of timely, accurate compliance reports. The effort is focused on enabling the organization to demonstrate consistent adherence to both frameworks through structured, traceable control implementation and ongoing monitoring. The work is classified as a subcontract under NAICS code 541611, indicating it falls within the management consulting services category, and is solicited by the Atlanta Regional Commission through the Georgia state procurement system. The opportunity was posted on July 15, 2026, with a response deadline of August 14, 2026, allowing potential contractors a four-week window to submit proposals. Performance location details are not specified, but the contractual obligations will center on achieving regulatory compliance and audit preparedness for the agency’s information systems. No set-aside designation or point of contact information has been provided, and the contract is not tied to a specific geographic location beyond the agency’s jurisdiction.