FDA Cybersecurity Risk Management and Compliance Services

The U.S. Food and Drug Administration (FDA) is seeking information from potential vendors to provide Cybersecurity Risk Management and Compliance Services. The services include system security authorization packages, security policy and data call support, enterprise governance risk and compliance support, cybersecurity risk management documentation, and transition in or out services. The FDA is looking for vendors with experience in providing similar services, particularly those with expertise in FedRAMP, security authorizations, and compliance with the Federal Information Security Modernization Act (FISMA) 2014. • The vendor should have experience in providing security authorization packages in accordance with FISMA 2014 and NIST Special Publications 800 series guidance documents. • The vendor should have expertise in FedRAMP and security authorizations. • The vendor should have experience in providing cybersecurity risk management documentation and compliance services. • The vendor should have the ability to provide transition in or out services. • The vendor should be registered in the System for Award Management (SAM) and have a GSA contract number.