Information Technology Security and Compliance Support Services (ITSCSS)

Provide expert Information Technology (IT) Security support to ensure Cybersecurity and Infrastructure Security Agency (CISA) s systems maintain their Authority to Operate (ATO) with a security posture in accordance with Department of Homeland Security (DHS) 4300A and National Institute of Standards and Technology (NIST) Special Publication (SP) guidance. This support shall include providing Subject Matter Expert (SME) IT security assessment and IT security audit functions to ensure Federal Information Security Modernization Act (FISMA compliance), SME support in developing and maintaining documentation in support of Certification & Accreditation (C&A) as required by FISMA; ensuring all C&A and system security documentation is kept up to date; and ensuring systems meet all security requirements mandated by DHS 4300A and DHS Management Directives.