Fisma and fiscam

The Department of Justice Bureau of Prisons seeks proposals to provide continuous monitoring and assessment services to support compliance with the Federal Information Security Management Act and Federal Information Security Control Audit Manual. Vendors must assess NIST SP800-53 Rev 4 controls for five information systems, implement a continuous monitoring program, perform security control assessments and documentation, and utilize the Cyber Security Assessment and Management tool. Proposals are due by April 22, 2019 and must demonstrate experience with similar professional management and administrative support contracts.

This total small business set-aside procurement has a place of performance in Washington, D.C. and period of performance of one base year with four option years. Vendors should possess NAICS 541511 and PSC D302 experience. No budget or potential value was provided, though the solicitation seeks assessment and compliance services for the Federal Prison Industries office. Questions were due by April 12, 2019, with all proposals due to the Bureau of Prisons by the stated April 22nd deadline.