Solicitation: 75N95020R00009
The National Center for Advancing Translational Sciences (NCATS) requires dedicated cybersecurity services support to apply information security, privacy, and risk managment measures to safeguard the confidentiality, integrity, and availability of its information and information systems.
This requirement involves day-to-day on site and off site information security support to provide (1) user-side support (training, program support, audit management, regulatory compliance, etc.) and (2) technical services (security engineering, infrastructure protection, penetration testing, incident detection/management/response). NCATS anticipates conducting the work through task orders under an IDIQ contract, probably using (1) a fixed-price task order providing for a level of effort equivalent to 2-3 full-time subject matter specialists to provide the day-to-day services, and (2) additional fixed-price completion-based task orders for discrete tasks (for instance, preparing an authority to operate package).