Security Assurance Suport Services (SASS)

IAD will utilize this contract to obtain experienced, skilled, certified technical cyber security professionals to further develop and operate the Agency Risk Management Framework, in accordance with Federal Information Security Management Act (FISMA), National Institute of Standard and Technology (NIST), Department of Homeland Security (DHS), and other applicable requirements. The contractor shall provide the program management functions, technical knowledge, and other related resources necessary to perform all duties as defined in the DHS 4300A, B, and C as applicable for the following: Financial Systems as designated by the Chief, Financial Officer (CFO); Systems that process Sensitive Personally Identifiable Information (SPII) and Law Enforcement Sensitive information; Securing and accrediting mobile applications; Systems in traditional Security Control Assessments as well as Ongoing Authorization; Maturing ICE Information Assurance (IA) program from an established compliance-based FISMA program to a program focused on risk based security that ensures compliance as a natural byproduct; The transition of established security authorization and risk assessment functions into an Agile Scrum and SecDevOps development methodology; The integration of Agile and Scrum methodologies into the agency's established Risk Management Framework processes. In addition, this contract shall support planning, conducting, and documenting information system security control assessments for technical and non- technical security controls as required for a variety of complex IT systems. The contractor shall conduct security assessments in coordination with system stakeholders and take precautions to minimize disruptions that result from system testing.