Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Vulnerability Assessment and POAM Management

Open
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Vulnerability Assessment and POAM Management subcontract is a Department of the Treasury project for the Bureau of the Fiscal Service, designated as an 8(a) set-aside under NAICS code 541519. The work is centered in Parkersburg, West Virginia, with a response deadline of November 16, 2026. The scope of work involves analyzing vulnerability scan results for prime contractors to provide guidance on closing security issues. Key responsibilities include developing Plan of Action and Milestones documentation, establishing remediation schedules and cost estimates, and performing root cause analysis. The contractor is required to verify closure evidence within GRC tools and deliver completed POAMs and verified remediation documentation.

General Info

Treasury subcontract for vulnerability assessment and POAM management in Parkersburg, West Virginia.

NAICS

541519 - Other Computer Related Services

Place of Performance

Parkersburg, WV, 26101, USA

Set-Aside

8A

Documents

This scope was carved out of SS-FSA-27-005.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Authentication Services for FISMA Support

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of The Treasury → Bureau Of Fiscal Service
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Analyzes vulnerability scan results for prime contractors on Bureau of the Fiscal Service projects. Provides guidance to close security issues, develops Plan of Action and Milestones (POAM) documentation, and establishes remediation milestones and cost estimates. Performs root cause analysis and attaches closure evidence in GRC tools. Delivers completed POAMs, remediation schedules, and verified closure evidence.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
Federal
Hand Held Terminals / SOTI Software Requirement
Solicitation # HHT_SOTI
The Defense Commissary Agency (DeCA) is seeking market capabilities through a sources-sought request to establish an end-to-end operational solution for its worldwide enterprise mobile computing fleet. The primary objective is the management of approximately 2,709 Zebra Android Handheld Terminals (HHTs) utilizing the SOTI MobiControl Mobile Device Management (MDM) platform. The scope of work encompasses the provisioning of annual software subscriptions, the deployment and administration of dedicated production and test server environments, and the integration of devices with enterprise retail and warehouse systems. Additionally, the contractor must provide comprehensive depot repair, rapid-exchange warranty administration, and global technical help desk support. Key requirements include the ability to perform turnkey distribution and logistics for all CONUS and OCONUS locations, including secure packaging and customs clearance. The contractor must ensure strict adherence to cybersecurity standards, including Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) support to maintain the system's Authorization to Operate (ATO), with personnel meeting DoD 8140/8570 certifications. The requirement also includes optional life-of-contract technology refreshes for replacement hardware and accessories as equipment reaches end-of-life or end-of-sale status. Interested respondents must be authorized resellers or integrators of the proposed hardware and software, providing new OEM equipment and submitting a capability statement under NAICS 541519 or 541512 by November 9, 2026.
W6QK Acc-Apg Contr Ctr

POSTED

about 17 hours ago

DEADLINE

in 4 days
View Details
NAICS: 541519
New
Federal
Department of the Air Force Business and Enterprise Systems (BES) Commercial Solutions Opening (CSO)
Solicitation # FA8771-26-S-C0001
The Department of the Air Force Program Business and Enterprise Systems (BES) has established a multi-year framework via Commercial Solutions Opening (CSO) FA8771-26-S-C0001 to acquire innovative Commercial-Off-The-Shelf (COTS) IT and business solutions. This umbrella solicitation serves as an administrative framework rather than a direct request for proposals, with specific opportunities to be announced through individual open or closed Calls for Proposals published as amendments until March 2, 2030. Awards may be executed as FAR-based contracts or Other Transaction Agreements (OTAs) under 10 USC 2371b. The scope focuses on several key areas, including artificial intelligence, agile methodology, automation, scalability, security, and the reduction of total lifecycle costs of ownership. Eligible participants include traditional and non-traditional defense contractors, research institutions, and both large and small businesses. All offerors must maintain active registration in the System for Award Management (SAM). Evaluation of proposals will be based on the merit of the proposed concept in addressing specific Areas of Interest, focusing on technical soundness, commercial innovation, and price reasonableness, with funds availability serving as a mandatory pass/fail gate. The framework allows for iterative prototyping and the potential for follow-on production contracts, which may be negotiated with or without further competition. While the general framework is open, specific set-asides for small businesses will be determined at the individual call level.
FA8771 Aflcmc Gbk

POSTED

about 17 hours ago

DEADLINE

N/A
View Details
NAICS: 541519
New
Federal
Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services
Solicitation # W91CRB-27-B-A001
Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for several key systems, including the ATC Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The scope includes engineering analysis of hardware and software baselines, configuration management support, and architectural design. The period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with a possible six-month extension through May 22, 2032. The contract is a sealed bid acquisition requiring firm-fixed pricing based on an estimated 2,040 hours per year per labor category, with no allowance for travel or other direct costs. Bids must be submitted electronically by November 12, 2026. Evaluation is based on a pass/fail responsiveness check, which requires at least five years of RMF lifecycle reporting experience and three years of Top Secret environment documentation for the surge position. Key personnel must include a Senior IT Systems Solutions Architect serving as the Contract Manager. Security requirements are stringent, requiring a Secret clearance for most personnel and a Top Secret clearance for the surge position, with all work performed at Aberdeen Proving Ground. Invoicing must be processed through the Wide Area Workflow application.
W6QK Acc-Apg

POSTED

about 17 hours ago

DEADLINE

in 7 days
View Details
NAICS: 541519
New
Federal
PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions
Solicitation # N00019-26-RFPREQ-WPM281-0281
Naval Air Systems Command (NAVAIR), through PMX-281, is conducting market research via a Sources Sought Notice to identify capable providers for IT strategy, software modernization, and digital decision intelligence advisory subscriptions. The government intends to satisfy this requirement through an existing DoD Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) and is specifically evaluating whether there are sufficient small business BPA holders or authorized resellers to support a small business set-aside. The scope of work involves providing software engineering and decision intelligence tools, including digital platforms and benchmark data, alongside objective advisory and consulting services to support AI integration and enterprise software architecture for United States Naval Aviation. Key deliverables include one Team Leader license, five Executive Member licenses, five Advisory Member licenses, and on-demand specialized consulting services. Technical requirements specify that software platforms must meet DoD Cloud Computing Security Requirements Guide impact levels, such as FedRAMP Moderate or DoD IL4/IL5. Additionally, personnel providing advisory services must be eligible for Top Secret (SCI) clearances, and all providers must comply with DD Form 254 industrial security requirements and ITAR/EAR export controls. Interested parties must submit a structured capability statement not exceeding eight pages by November 4, 2026, detailing their BPA status, socioeconomic designations, and technical conformance.
Naval Air Systems Command

POSTED

about 17 hours ago

DEADLINE

in 6 days
View Details
NAICS: 541519
New
Federal
Authentication Services for FISMA Support
Solicitation # SS-FSA-27-005
The Bureau of the Fiscal Service, under the Department of the Treasury, is issuing a Sources Sought Notice (SS-FSA-27-005) to identify 8(a) certified contractors capable of providing commercial engineer and project management services. The primary objective is to secure highly skilled technical support for Information System Security Officer (ISSO) duties and audit liaison services for the Authentication Services General Support System (AS GSS). The scope of work includes the development, maintenance, and oversight of the Authentication Services FISMA system, management of security controls and Continuity of Operations plans, and the administration of Identity, Credentialing, and Access Management (ICAM) functions. Key responsibilities involve managing FISMA lifecycle tasks within the Governance, Risk, and Compliance (GRC) tool, providing guidance on vulnerability scanning, and acting as a liaison for audits conducted by the OIG and GAO. The anticipated period of performance runs from February 5, 2027, to November 4, 2031, with services performed primarily via telework, supplemented by on-site support at designated Bureau of the Fiscal Service facilities. Contractors must adhere to NIST, Treasury, and Fiscal Service IT security standards, and ensure all sensitive deliverables are marked as Controlled Unclassified Information (CUI). Interested 8(a) sources must submit their company identification, socioeconomic status, and available contracting vehicles or price lists by November 16, 2026. This notice is for acquisition planning purposes only and is not a formal request for proposal.
Bureau Of Fiscal Service

POSTED

about 17 hours ago

DEADLINE

in 11 days
View Details

More opportunities from Department Of The Treasury → Bureau Of Fiscal Service

Same awarding agency

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS