These are eTrepid capability domains. Availability under MAS must be confirmed against the applicable SIN, awarded products or labor categories, current price list, solicitation, and task-order requirements.
Cybersecurity & HACS
Security assessment, engineering, testing, incident-related, assurance, and supporting professional services where awarded and within order scope.
GRC & CMMC readiness
Governance, control ownership, evidence discipline, remediation planning, and managed compliance operations without promising certification.
Managed IT & security
Service management, supported operations, monitoring, remediation, escalation, and evidence-producing workflows as contracted.
Cloud & collaboration
Cloud professional services, migration, administration, configuration, supported security, and shared-responsibility definition.
Continuity & resilience
Backup, recovery, continuity planning, resilience operations, and validation aligned to stated business requirements.
AI governance
Governed-AI methodology and implementation support. Schedule availability and awarded scope require explicit acquisition review.