General Services Department

Exempt w/ Plan

450 employeesLast assessed Jan 28, 2026Procurement / Contracts

Medium

62%Compliant

Families Implemented

Partially Implemented

Not Implemented

Overall Control Implementation156 of 236 controls (66%)

NIST SP 800-53 Control Families

Access Control

16/25

Partially Implemented

Audit and Accountability

10/16

Partially Implemented

Awareness and Training

4/5

Implemented

Configuration Management

7/11

Partially Implemented

Contingency Planning

8/13

Partially Implemented

Identification and Authentication

9/12

Partially Implemented

Incident Response

7/10

Partially Implemented

Maintenance

4/6

Partially Implemented

Media Protection

5/8

Partially Implemented

Physical and Environmental Protection

14/20

Partially Implemented

Planning

6/9

Partially Implemented

Personnel Security

6/8

Partially Implemented

Risk Assessment

5/7

Partially Implemented

Security Assessment and Authorization

6/9

Partially Implemented

System and Communications Protection

28/44

Partially Implemented

System and Information Integrity

11/17

Partially Implemented

Program Management

10/16

Partially Implemented