SOC 2 Type II Attestation and Audit Services

The contract entails the annual performance of SOC 2 Type II audits to assess and validate the effectiveness of security, availability, and confidentiality controls within a SaaS platform. The provider is responsible for conducting thorough examinations of controls over a specified period, preparing detailed attestation reports that conform to AICPA standards, and supporting the client’s internal preparation efforts to ensure compliance readiness. The audits must comprehensively evaluate operational processes, technological safeguards, and policy adherence to meet the stringent requirements of the SOC 2 framework. The work is to be performed primarily at the place of performance in Alexandria, Virginia, with a NAICS code of 541211 indicating it falls under accounting, auditing, and bookkeeping services. The contract is structured as a subcontract under the Department of Commerce PTO and was posted on June 29, 2026. While no set-aside designation or specific point of contact is provided, the scope demands ongoing collaboration with the client to address findings, recommend improvements, and deliver timely, accurate reports that support regulatory and customer assurance needs.