SAM #1305M425F0011

NOAA Justification for Sole-Source Cybersecurity and CUI Compliance Support

NOAA's Office of the Chief Information Officer (OCIO) Cybersecurity Division is justifying an exception to fair opportunity for a follow-on contract to enhance cybersecurity and compliance for Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), and operational data. - The contract supports IT security policy development, Risk Management Framework (RMF) compliance, centralized cybersecurity services, and cloud activities (including FedRAMP package review). - Contractor will review System Security Plans (SSPs), develop CUI handling processes, create training materials, and support NOAA's Chief Data Officer, Chief Privacy Officer, and CISO. - The effort aims to strengthen NOAA's CUI program in line with federal, NARA, and NIST requirements, and improve accountability, visibility, and risk posture. - The contract is a firm-fixed price follow-on, awarded to Soliel LLC under a sole-source justification. - No specific OEMs, product part numbers, or purchase quantities are listed; this is a justification notice, not a solicitation or award. - Period of performance is from March 1, 2026, to January 9, 2028. - Primary place of performance and contracting office is NOAA's Corporate Services Acquisition Division in Silver Spring, Maryland.

Description

The NOAA Office of the Chief Information Officer (OCIO), Cybersecurity Division (CSD) requires a contractor that can provide the expertise, technical knowledge, staff support, and other related resources necessary to support NOAA's IT security policy development, maintenance and implementation. The objectives of this effort are to:

Maintain and improve centralized services for NOAA's RMF compliance review Maintain and improve centralized Cyber Security Services; administer and manage associated information and inventory Assist with cloud activities to include providing advice, reviewing FedRAMP packages, and making recommendations to CSD leadership Conduct oversight and compliance support of NOAA's Risk Management Program Strengthen and support NOAA’s Controlled Unclassified Information (CUI) Program by enhancing NOAA’s ability to safeguard CUI, in accordance with federal requirements, NARA, and NIST best practices

View original listing