DOD - Risk Management Framework - Market Research

The Naval Computer and Telecommunications Station San Diego is seeking cybersecurity/risk management framework (RMF) program management support. The contractor will provide all necessary personnel, equipment, supplies, and services to perform CS/RMF program management support. This includes creating and maintaining RMF packages to obtain authorizations to operate (ATO), coordinating with system representatives, and providing subject matter expertise in RMF life cycle management. The period of performance for this contract is one base year with four option years. The work will be performed at Naval Base Coronado/Naval Air Station North Island in San Diego, CA.

The contractor will support the NCTSSD N00SM3 Cybersecurity Program Manager (CPM) and Information System Security Manager (ISSM) in activities such as assessment and accreditation, security tests and evaluations, authorizations to connect, system validation authorization to operate, and interim authorizations to test. They will also assist in the creation and maintenance of RMF packages, recommend security posture improvements, and mitigate vulnerabilities. The contractor must have a TOP SECRET security clearance and meet all cybersecurity workforce qualification requirements.

The contractor will be responsible for developing and maintaining an effective quality control program to ensure services are performed according to the contract requirements. The government will evaluate the contractor's performance through a quality assurance surveillance plan. The contractor's work hours are Monday through Friday from 0730 to 1630 PST, excluding federal holidays. The primary location of work is at Naval Base Coronado/Naval Air Station North Island in San Diego.

Overall, this opportunity provides a chance for a contractor to support the Naval Computer and Telecommunications Station San Diego in their cybersecurity/RMF program management efforts. The contractor will play a crucial role in ensuring the security of major communications systems and supporting enterprise modernization initiatives.