Security Governance & Continuous Monitoring

The contract titled Security Governance & Continuous Monitoring requires the implementation of ongoing security monitoring, automated vulnerability scanning, and comprehensive compliance reporting in strict alignment with NIST SP 800-53 Rev. 5 and FedRAMP standards. The work is scoped to ensure continuous adherence to federal cybersecurity frameworks, with a focus on maintaining system integrity, detecting threats in real time, and delivering documented evidence of compliance for regulatory review. The subcontractor must possess the technical capability to integrate and maintain security tools that meet the rigor of these frameworks and provide actionable intelligence to support risk mitigation and audit readiness. This opportunity is issued by the State of Rhode Island under a subcontract classification and is classified under NAICS code 541611 for computer systems design services. The solicitation was posted on July 30, 2026, with responses due by August 27, 2026. While no specific location for performance or point of contact is provided, the work is expected to support state-level information systems requiring federal compliance. Potential bidders must demonstrate expertise in federal cybersecurity controls, experience with cloud environments subject to FedRAMP, and the ability to deliver consistent, auditable reporting outputs tied to NIST guidelines. The contract is open to qualified subcontractors seeking to support state government security operations under federally mandated cybersecurity protocols.