GCC AI Governance and Readiness Assessment
A fixed-price, 3-week structured review of your Microsoft 365 GCC environment covering AI deployment readiness, NIST AI Risk Management Framework gaps, and WaTech DATA-04 vendor governance documentation. $35,000. Fits Washington Direct Buy Level 1 (no competition required). VOSB, SAM active, UBI 605891962.
WaTech DATA-04, adopted December 11, 2025, requires Washington state agencies to designate an AI contact, maintain an AI system inventory, run risk assessments on high-risk AI, and align to responsible-AI principles drawn from the NIST AI Risk Management Framework. The Washington State AI Task Force interim report (December 2025) recommends vendors provide NIST-aligned disclosures, data-source documentation, and evidence of governance and monitoring controls. These are now contract expectations, not aspirational goals.
Most agencies know they need to address this. Few have a practical first step. This assessment is that step. It is scoped, priced, and structured so a Washington purchasing officer can sole-source it under Direct Buy Level 1 today, without an RFP, competitive bid, or lengthy justification process.
Three Weeks. Four Deliverables. One Fixed Price.
No hourly billing. No scope creep. Price agreed before work begins.
DELIVERABLE 01
GCC Tenant AI Readiness Audit
Configuration review of Entra ID, Exchange, SharePoint, Teams, Purview, and Power Platform against AI deployment prerequisites. DLP gaps, sensitivity label coverage, connector policy, licensing posture, and Copilot readiness. Technical findings with specific remediation steps per item.
DELIVERABLE 02
NIST AI-RMF Gap Review
Structured review against the four NIST AI RMF core functions (Govern, Map, Measure, Manage) as they apply to your current and planned AI tools. Documents gaps, existing controls, and specific steps to reach a defensible posture. Formatted for your AI contact and information security officer to use directly.
DELIVERABLE 03
WaTech DATA-04 Vendor Governance Documentation
Documentation package aligned to WaTech DATA-04 vendor governance expectations: data source identification, AI system inventory entries, high-risk generative AI classification rationale, monitoring and audit logging configuration, and a vendor attestation statement your agency can file with its AI contact and ISO.
DELIVERABLE 04
90-Day Remediation and AI Deployment Roadmap
Prioritized action plan: what to fix first, what to build first, in what order. Ties remediation items to specific governance requirements and maps high-value automation use cases to your actual workflows. Gives your leadership and IT team a defensible next-step plan.
All deliverables are written in plain language suitable for leadership briefing and technical review. Executive summary included. Readout session with your team at close.
$35,000 Fixed Price
Price is agreed before work begins. No hourly billing. No change orders for scope changes within the defined deliverables.
Washington Direct Buy Level 1 $35,000 < $40,000 CEILING
At $35,000, this engagement fits within the Washington Direct Buy Level 1 threshold (up to $40,000, any vendor, no competition). Any Washington state agency, county, city, court, school district, or tribe can award this without a competitive solicitation, a formal RFP, or a sole-source justification. The simplest procurement path available. DES Policy POL-DES-125-03.
Federal Simplified Acquisition FAR PART 13
For federal agencies and federal contractors, $35,000 falls within FAR Part 13 simplified acquisition thresholds. Fixed-price contracts are straightforward to structure under SAP. Available under FFP, T&M, and micro-purchase vehicles. UEI SU4QWJZWXY97, CAGE 17DX6, VOSB, SAM active.
Who Orders This Assessment
Washington State Agencies Under DATA-04
Your agency has deployed or is planning to deploy AI tools. DATA-04 now requires you to document them, classify high-risk generative AI, and align to NIST AI-RMF. This assessment produces that documentation in one fixed-price engagement.
Agencies Starting Their AI Journey
You have M365 Copilot or Power Platform licenses but have not yet deployed AI in production. The assessment identifies what you actually have, what is blocking deployment, and the right first workflow to build.
Agencies Preparing for a GCC AI Jumpstart
This assessment is the standard predecessor to the GCC AI Jumpstart. Agencies that complete the governance assessment begin the Jumpstart with a pre-scoped workflow list and an already-satisfied governance requirement.
Washington Procurement Identifiers
Ready to Address DATA-04 and Get Your GCC AI Posture Documented?
Book a 20-minute scoping call. We confirm scope, provide a written SOW, and start within two weeks of award. Response within one business day.