The contract covers several program components like optimizing the department's risk management framework and information security and continuous monitoring.