System Security & Compliance Implementation

The contract titled System Security & Compliance Implementation requires the successful bidder to implement a comprehensive set of security controls aligned with FedRAMP Moderate requirements and NIST SP 800-53 Rev. 5 standards. Key responsibilities include deploying multifactor authentication, enforcing data encryption at rest and in transit, establishing a robust incident response capability, and developing a detailed System Security Plan that documents the organization’s security posture and control implementation. These measures are critical to achieving and maintaining a compliant federal security authorization posture for systems operated under the State of Rhode Island. The work must be executed as a subcontract, with full adherence to the specified frameworks and documentation requirements. The solicitation was posted on May 12, 2026, with a response deadline of June 9, 2026, and falls under NAICS code 541512 for custom computer programming services. The performance location is not specified beyond the state level, but the work is intended to support the Rhode Island agency’s cybersecurity objectives. Bidders must demonstrate proven experience with federal compliance frameworks and the technical ability to deliver and document security controls in a structured, audit-ready manner. There is no set-aside designation indicated, and the opportunity is open to qualified subcontractors capable of delivering end-to-end security implementation services in a government context.