Cloud GRC and FISMA Compliance Automation Platform

The U.S. Department of Commerce Office of Inspector General is seeking a FedRAMP High-authorized cloud GRC platform with FISMA documentation automation, continuous monitoring, AI-assisted control drafting, integrations, and implementation services.

United States of America > COMMERCE, DEPARTMENT OF > OFFICE OF THE SECRETARY > DEPT OF COMMERCE SSPO (Office of Acquisition Management, Shared Services Procurement)


General
Open (active)
GG000000-26-00063
Sep 28, 2026 03:00 PM
Sep 17, 2026 08:22 PM
1 year
Request for Quote/Qualifications (RFQ)
Federal
Ask AI about this solicitation
Contact
abrister@doc.gov
1401 Constitution Avenue NW, Washington, DC, USA
Submission Instructions
Description

The Department of Commerce Office of Inspector General requires a commercial, cloud-based Governance, Risk, and Compliance platform authorized at the FedRAMP High level. The platform must support up to five information systems and automate FISMA and Risk Management Framework documentation, including System Security Plans, Security Assessment Reports, control implementation narratives, continuous-monitoring evidence collection, control validation, and Plan of Action and Milestones generation. AI-assisted drafting must include human review and explicit approval of each generated statement. The requirement also includes a fixed-scope implementation engagement covering connectivity setup, configuration, system onboarding, JCAM integration and testing, training, and pilot validation within 12 weeks of award. The solution must provide FIPS-validated encryption, private non-public-internet connectivity, and integration with Microsoft 365/Azure, Entra ID, and Microsoft Graph using least-privilege OAuth. Quotations must identify the proposed commercial SaaS solution and modules, provide the applicable FedRAMP Marketplace package ID, address mandatory requirements, include at least two federal customer references for comparable implementations, and provide separate software subscription and implementation pricing. The base period is 12 months from award.

Classification Codes
NAICS513210Software Publishers
PSCDJ10Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.
Smart Codes
grc software platformfisma compliance automationfedramp high saas
Specifications
Supply & Service
No
Timeline
Sep 17, 2026 08:22 PM-Published Date
Sep 21, 2026 03:00 PM-Questions Due Date
Sep 28, 2026 03:00 PM-Offers Due Date
Oct 13, 2026-Inactive Date
Requirements
Required
  • Minimum 2 references
No
Documents
TitleDate Posted
Competitive Solicitation_GG000000-26-00063_vF.pdfSep 17, 2026 12:00 PM
Opportunities Near Arlington County, Virginia
Artificial Intelligence Consulting and Support Services

Universal Service Administrative Company is seeking proposals for artificial intelligence consulting...

Due in 8 daysUnited States of America > FEDERAL COMMUNICATIONS COMMISSION > FCC
Explosive Testing Capability Using Unmanned Aerial Systems

The U.S. Department of State is seeking market research responses from qualified vendors capable of ...

Due in 20 daysUnited States of America > STATE, DEPARTMENT OF > ACQUISITIONS - AQM MOMENTUM
Richmond Highway BRT Construction Support and Quality Assurance Services

Fairfax County Department of Transportation is seeking engineering services for construction support...

Due in 16 daysFairfax County
PIEE Solicitation Module Submission Instructions

The United States of America is seeking submissions via the PIEE Solicitation Module for Notice ID H...

Due in 10 monthsUnited States of America > DEPT OF DEFENSE > WASHINGTON HEADQUARTERS SERVICES (WHS) > WASHINGTON HEADQUARTERS SERVICES (ACQUISITION DIRECTORATE)
Multi-Mission Rotary-Wing Aircraft Market Research

The United States Coast Guard is conducting market research for commercially available rotary-wing a...

Due in 16 daysUnited States of America > HOMELAND SECURITY, DEPARTMENT OF > US COAST GUARD > HQ CONTRACT OPERATIONS (CG-912)(000
Psychological Evaluation and Testing Services

Fairfax County is requesting proposals for psychological evaluation and testing services through its...

Due in 16 daysFairfax County
Computerized Maintenance Management System

Fairfax County Public Schools is seeking information from computerized maintenance management system...

Due in 27 daysFairfax County Public Schools
Comprehensive ITS, Electrical and Traffic Engineering Services

The Maryland Transportation Authority is seeking professional services for comprehensive Intelligent...

Due in 20 daysMaryland Transportation Authority
Sole-Source IMESAFR Explosives Testing and Technical Support

The Bureau of Alcohol, Tobacco, Firearms and Explosives is seeking sole-source explosives testing su...

Due in 1 dayUnited States of America > JUSTICE, DEPARTMENT OF > ATF ACQUISITION AND PROPERTY MGMT DIV
I-95/I-695 Interchange Express Toll Lanes - Ramps MB & MH

The Maryland Transportation Authority is seeking a contractor to construct ramps MB and MH for the I...

Due in 29 daysMaryland Transportation Authority
Habitable Worlds Observatory Instrument Concept Assessments

NASA is seeking proposals for instrument concept assessments for the Habitable Worlds Observatory, w...

Due in 23 daysUnited States of America > NATIONAL AERONAUTICS AND SPACE ADMINISTRATION > NASA HEADQUARTERS
International Programs to Combat Human Trafficking

The Department of State's TIP Office is seeking grant applications for international programs to com...

Due in over 72 yearsUnited States of America > STATE, DEPARTMENT OF
S&P RatingsDirect Subscriptions

The Office of the Comptroller of the Currency intends to sole-source three S&P RatingsDirect subscri...

Due in about 22 hoursUnited States of America > TREASURY, DEPARTMENT OF THE > OFFICE OF THE COMPTROLLER OF THE CURRENCY
SmartBenefits and Transit Fare Media Services

The U.S. Department of Transportation intends to award a sole-source contract to the Washington Metr...

Due in 2 daysUnited States of America > TRANSPORTATION, DEPARTMENT OF > OFFICE OF THE SECRETARY
Global Talent Acquisition System

The U.S. Department of State is seeking information on global talent acquisition and applicant track...

Due in 20 daysUnited States of America > STATE, DEPARTMENT OF > ACQUISITIONS - AQM MOMENTUM
K-12 Education Sole Source Statement - Hanover Research

Hanover Research is offering a sole-source subscription for K-12 education research and professional...

Hanover Research
Campus-Wide Waste Collection and Composting Services

The Architect of the Capitol is conducting market research for campus-wide building, construction, f...

Due in 17 daysUnited States of America > 0100
100 Mbps Dedicated Telecommunications Lease

The Defense Information Systems Agency is seeking a small-business contractor to provide, install, a...

Due in 23 daysUnited States of America > DEPT OF DEFENSE > DEFENSE INFORMATION SYSTEMS AGENCY (DISA) > TELECOMMUNICATIONS DIVISION- HC1013
Maryland Speed Safety Program Automated Speed Enforcement Services

The Maryland State Highway Administration is seeking a turnkey automated speed enforcement system an...

Due in 14 daysMaryland > Maryland State Highway Administration
Countywide Employee Training Services

Arlington County Government is seeking as-needed training and organizational development services fo...

Due in 3 daysArlington County
Arlington County Security Services

Arlington County Government is seeking bids for security services under IFB-128778 (N1482).

Due in 23 daysArlington County
Regional Water Supply Resiliency Project

The Maryland Washington Suburban Sanitary Commission is seeking information and pricing for the Regi...

Due in 13 daysWashington Suburban Sanitary Commission
Statewide Dental Plan Administration and Insurance Services

The State of Maryland Department of Budget and Management is seeking contractors to administer fully...

Due in 1 dayMaryland > Department of Budget and Management > Central Collection Unit
National Security Fund Finance Program

The Office of Strategic Capital is seeking professionally managed debt investment fund managers for ...

Due in about 1 monthUnited States of America > DEPT OF DEFENSE > WASHINGTON HEADQUARTERS SERVICES (WHS)
Comments
Correspondences
Custom Fields