Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS) - DEPT OF COMMERCE SSPO | Prosal

ActiveSolicitation

Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS)

GG000000-26-00063

DEPARTMENT OF COMMERCE › OFFICE OF THE SECRETARY › DEPT OF COMMERCE SSPO

Washington, DC, 20230

Posted: Sep 17, 2026

Due: Sep 28, 2026, 3:00 PM(10 days)

Last Updated: Sep 17, 2026

Key Requirements

Response Deadline

Sep 28, 2026, 3:00 PM(EDT)10 days

Eligibility

NONE

Contract Type

Solicitation

Description

This acquisition is for a commercial, cloud-based Governance, Risk, and Compliance (GRC) automation platform — not RMF assessment labor services — to automate FISMA documentation, AI-assisted control drafting, and continuous monitoring reporting for the requiring office's systems.

Points of Contact

Primary Contact

Alicia Brister

abrister@doc.gov

Secondary Contact

Jameka Anderson

janderson1@doc.gov

Organization Details

DEPARTMENT OF COMMERCE

OFFICE OF THE SECRETARY

DEPT OF COMMERCE SSPO

Office of Acquisition Management, Shared Services Procurement

1401 CONSTITUTION AVE, NW

WASHINGTON, DC, 20230

Classifications

NAICS

513210

Software Publishers

51├Information

513├Publishing Industries

5132├Software Publishers

51321├Software Publishers

513210└Software Publishers

PSC

DJ10

IT AND TELECOM - SECURITY AND COMPLIANCE AS A SERVICE

DJ├IT AND TELECOM - SECURITY AND COMPLIANCE

DJ10└Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, to include Section 508, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.

Set-Aside

NONE

No Set aside used

Documents