Risk Management Framework (RMF) Services

The Contractor shall provide the full suite of IT security support services listed in the Contractor Performance Requirements section for the National Institute of Standards and Technology (NIST). Critical components of these services include the development and maintenance of IT security processes, procedures and associated documentation that support compliance with the Federal Information Security Management Act (FISMA) of 2002 (Title III, Pub. L. No. 107-347). This contract is to support NIST's goal of automating the full suite of security and privacy Assessment & Authorization activities, to the best extent possible, and to provide real-time situational awareness to NIST stakeholders, while incorporating Agency-Wide Adaptive Risk Enumeration (AWARE) risk scoring approach to integrate threat intelligence data.