The government authority in Washington, DC is seeking a vendor to provide comprehensive IT and cybersecurity support services. The selected provider will supply personnel, management, and materials necessary to support IT operations, cybersecurity, compliance, and ongoing modernization initiatives. Key responsibilities include continuous cybersecurity monitoring, developing and maintaining audit-ready documentation, and supporting the full lifecycle of Security Assessment and Authorization (SA&A), such as system security plans and risk assessments.

The vendor will support FISMA reporting and facilitate the integration of relevant data into the Continuous Diagnostics and Mitigation (CDM) dashboard to enhance cyber posture visibility. Additional areas of focus include insider threat and privileged access management, developing cybersecurity policies to meet federal standards, coordinating incident response, and sharing threat intelligence with stakeholders. Role-based security training, configuration management, change control, project management, and ongoing technical support to align the IT infrastructure with the agency's mission objectives are also required. The provider must ensure compliance with IT policies, administrative controls, and all applicable regulatory requirements for the duration of the contract.