SoS is interested in contracting with an organization that has significant commercial experience and success performing: security assessments to the NIST 800-53 V3 standard, application and infrastructure penetration testing, assessment of business processes, development of risk assessment reports and meaningful risk mitigation strategies to address identified risks.