FISMA Assessment Services

The requirement is for a contractor to conduct a full security and privacy control assessment, covering 100% of the controls for a Moderate / Moderate / Moderate FISMA system that has a High Value Asset overlay. The successful vendor must demonstrate the necessary skills and in-depth knowledge to ensure the assessment fully complies with federal mandates, including DOC and NOAA policies, and NIST requirements (such as NIST SP 800-37 Rev 2 and NIST SP 800-53A Rev 5). The primary goal is to produce accurate assessment findings that support an Authority to Operate (ATO) recommendation.1