Compass Federal Consulting LIMITED Liability Company

Compass Federal Consulting Limited Liability Company, a for-profit cybersecurity and risk management services provider headquartered in Shamong, New Jersey, has been registered as a federal contractor since September 2014. The firm specializes in delivering comprehensive information security and compliance solutions to civilian federal agencies through prime contract awards and subcontractor engagements. Compass Federal Consulting focuses on Risk Management Framework (RMF) support, security assessments, vulnerability management, information systems security officer (ISSO) services, and security documentation updates that help federal agencies maintain compliance with current cybersecurity standards and protect their information technology infrastructure.

Compass Federal Consulting has established an extensive portfolio of federal contract work across multiple civilian agencies, including the National Institutes of Health, Smithsonian Institution, Consumer Product Safety Commission, and the National Institute of Environmental Health Sciences. The company has delivered services encompassing Risk Management Framework assessments and implementations, security control assessments, security documentation refresh initiatives, vulnerability testing and support, supply chain risk management (C-SCRM) support, Splunk systems administration, security training and awareness programs, and general information security support. Contract awards have been issued without small business set-aside designations, reflecting the company's status as a standard commercial entity competing on open market terms. Notable prime contract awards include a $4.1 million firm fixed-price BPA call from the Office of the Director for system security documentation and technical support services, a $399.2 thousand delivery order from the Consumer Product Safety Commission for NIST Special Publication 800-53 Revision 4 to Revision 5 migration support, and multiple delivery orders from the Smithsonian OCIO totaling over $850,000 across supply chain risk management, vulnerability support, and ISSO contractor services. Additionally, Compass Federal has served as a subcontractor to major defense and technology firms including General Dynamics Information Technology, Inc. and Deloitte Consulting LLP on cybersecurity and identity, credential, and access management (ICAM) initiatives at the NIH Center for Information Technology.

Compass Federal Consulting maintains two primary federal contract Indefinite Delivery Vehicles that serve as the foundation for significant task order activity. The company holds a single-award Indefinite Delivery Contract with the Smithsonian Institution Office of the Chief Information Officer for IT security services, under which it has received multiple delivery orders totaling over $850,000 to date for services including supply chain risk management support, vulnerability management, and information systems security officer support, with work performed in Washington, D.C. More substantially, Compass Federal holds a multiple-award Blanket Purchase Agreement under the National Institutes of Health Office of the Chief Information Officer Risk Management Framework master vehicle with a ceiling value of $86.1 million. Under this BPA, the company has received task orders valued at over $21 million from various NIH institutes including the National Heart, Lung and Blood Institute, National Library of Medicine, National Institute of Environmental Health Sciences, and the National Institute of General Medical Sciences. Task orders under the NIH RMF BPA have included Risk Management Framework support and implementation services, annual security risk assessments, security assessment and testing, security documentation refresh initiatives, and general information security support services with performance periods extending through 2027. These IDVs position Compass Federal as an established provider of recurring cybersecurity and compliance support services across the federal civilian sector.

Compass Federal Consulting provides Information and Cyber Security and Program Management Office services to federal and commercial clients. We specialize in FISMA Compliance, including all aspects of the Risk Management Framework (RMF) and have expertise with NIST 800 Series and FIPS document compliance. We perform independent Security Control Assessments (SCA) and offer independent Penetration Testing and Vulnerability Management Services.