NAICS @ PSC Codes

North American Industry Classifications (NAICS)
Business Area
NAICS Code
Description Summary
Cloud Hosting & Colocation/Data Processing
518210
Provides cloud storage, IaaS, web/data hosting services and colocation
Managed IT & Cybersecurity Services
541519
Covers managed IT, cyber consulting, DR, helpdesk, cloud support
Systems Integration & IT Architecture
541512
For systems integration, secure cloud infrastructure planning & deployment
Custom Software Development (if applicable)
541511
For bespoke application design, scripting, APIs, and host-integration software
Product Services Codes (PSCS)
PSC CODE
Description
Reference
D305 – Teleprocessing, Timeshare, and Cloud Computing
Covers mainframe/cloud environments and shared computing services
D306 – Systems Analysis
Includes IT system architectural design, including cloud-based planning and analysis
D307 – IT Strategy and Architecture
Focuses on overarching IT strategy, including cloud adoption, compliance, and architectural support.
D308 – Programming
Covers custom software development and integration for cloud-hosted solutions
D310 – Cybersecurity and Data Backup
Specifically targets security, backup, and data protection services vital for hosting environments
D312 – Cloud and Managed Services
Explicitly tied to managed cloud offerings aligned with NAICS 518210 and 541519 (cloud & IT services).
D322 – Internet
Includes web hosting, internet service provisioning, and related managed hosting solutions
D325 – Data Centers and Storage
Designed for colocation, data center infrastructure, and storage as a service—core to hosting services
Services Codes
Category D
IT and Telecom – Information Technology And Telecommunications
Category DK
DK IT and Telecom – Storage PSC Codes Description DK01 IT and Telecom – Storage Support Services (Labor) Support services used for offline storage; archive, backup & recovery to manage data loss, data corruption, disaster recovery and compliance requirements of the distributed storage Mainframe storage system services local storage such as SAN, NAS and similar technologies for the distributed compute infrastructure
Category DK10
IT and Telecom – Storage As A Service Cloud solutions delivered as a service. Includes: Mainframe storage as a service. Software that is licensed for use over a defined period of time. This can also be referred to term, temporary, provisional, or short-term.

Notes:

Software as a Service, Service Contracts, Subscription based software provisioning, and device rentals are considered services

Stay ahead of the curve!—follow and subscribe to our social media channels below to remain digitally engaged.

You have been successfully Subscribed! Ops! Something went wrong, please try again.
Maryland (MD) MBE/WBE/ACDBE/SBE/DBE/SBR/ # 23-293

Maryland (MD) MBE/WBE/ACDBE/ SBE/DBE/SBR/ # 23-293

MD TEDCO #T031304062412

MD IT Reseller #19674498

Virgina (NOVA) –

US Federal Government – CAGE # 7F0U0 / UEI  #XY1XDER4WPJ6

EAMC Resources

EAMC PARTNERS

AWS Marketplace

Microsoft

Dell Technologies

IVANTI

GSA Schedule 70 –

Maryland:

120 Waterfront Street National Harbor, MD 20745

Washington, DC:

1629 K St. NW Washington, DC 20006

© 2025 EAMC – Managed. Secured. Assured. All rights reserved.

Zachman Enterprise Framework
Zachman Enterprise Framework

The Zachman Framework organizes enterprise architecture using a Two-Dimensional Classification Schema, with six interrogatives (What, How, When, Who, Where, Why) in a 6x6 Matrix Structure. It serves as an Enterprise Ontology, defining essential components, but is Not a Methodology, focusing on structuring architectural artifacts rather than guiding implementations.

The Open Group Architecture Framework
The Open Group Architecture Framework

TOGAF (The Open Group Architecture Framework) is a globally recognized enterprise architecture credential. It provides a structured approach to designing, planning, implementing, and governing IT architecture. TOGAF follows a high-level design approach, modeled at four levels: Business, Application, Data, and Technology, emphasizing modularization, standardization, and leveraging proven technologies and products.

Federal Enterprise Architecture Framework (FEAF)
Federal Enterprise Architecture Framework (FEAF)

FEAF: Standardized Enterprise Architecture for U.S. Government

Enterprise architecture consists of four key components: Business Architecture, defining roles, processes, and objectives; Data Architecture, managing the information used for operations; Application Architecture, overseeing software applications processing data; and Technology Architecture, supporting all layers with hardware and communication technology. Together, these components ensure efficient, structured, and scalable business operations.

Department of Defense Architecture Framework (DODAF) v2.0
Department of Defense Architecture Framework (DODAF) v2.0

Department of Defense Architecture Framework (DODAF)

The Department of Defense Architecture Framework (DODAF) is a comprehensive framework used by the U.S. DoD to develop and manage enterprise architectures. It provides a structured approach for representing and visualizing DoD systems, ensuring all stakeholders have a clear, consistent understanding of system structure and behavior for effective decision-making and operations.

Governance, Risk & Compliance (GRC)
Governance, Risk & Compliance (GRC)

Governance, Risk, and Compliance (GRC) is a structured approach aligning IT and business goals while managing risks and meeting regulations. Governance sets policies and accountability, risk management identifies and mitigates threats, and compliance ensures adherence to laws. Integrating these enhances decision-making, efficiency, and business continuity while minimizing risks and regulatory issues.

NIST Risk Management Framework (RMF)
NIST Risk Management Framework (RMF)

The Risk Management Framework (RMF) integrates security, privacy, and cyber supply chain risk management into the system development life cycle. It follows a risk-based approach to control selection, considering legal, policy, and regulatory constraints. RMF applies to new and legacy systems across all technologies and organizations, ensuring effective information security and privacy management.

Flip Box Title
Flip Box Title

Flip Box Heading

Enter your content here. This area supports rich text formatting.

AWS 6 Pillars of a “Well-Architected” Framework
AWS 6 Pillars of a “Well-Architected” Framework

The AWS Well-Architected Framework helps assess whether a specific architecture aligns with cloud best practices. It provides a consistent approach to evaluating systems based on modern cloud standards and identifies necessary improvements. As AWS evolves, the framework is continually refined to incorporate learnings from customer experiences and advancements in cloud technology.

Operational Technology & Security Framework
Operational Technology & Security Framework

Operational Technology & Security

Operational Technology (OT) cybersecurity focuses on protecting the hardware and software that manage and control physical devices and processes in industrial environments. 

Key aspects of OT cybersecurity include:

  1. Ensuring Continuity and Safety: OT security practices aim to maintain the continuous operation of critical infrastructure and industrial processes, ensuring they run safely and efficiently.
  2. Protecting Legacy Systems: Many OT environments use older systems that were not designed with cybersecurity in mind. 
  3. Managing Unique Protocols: OT environments often use specialized communication protocols that differ from traditional IT networks. 
Enterprise Data Architecture Framework (EDAF)
Enterprise Data Architecture Framework (EDAF)

Enterprise Data Architecture Framework (EDAF)

Transform data into actionable insights with advanced analytics and data governance solutions that drive informed decision-making.

An enterprise data architecture framework (EDAF) is a structured approach to managing and organizing data within an organization. It encompasses the entire data lifecycle, from collection and storage to processing and analysis.

Zero Trust Architecture (ZTA)
Zero Trust Architecture (ZTA)

The NIST Zero Trust Architecture (ZTA) is a cybersecurity framework that emphasizes the principle of "never trust, always verify." It focuses on securing resources, users, and assets by assuming no implicit trust based on network location or ownership. You can explore the official NIST publication on Zero Trust Architecture here. Additionally, you might find a detailed guide and diagram in the NIST Special Publication 800-207.

Technology Road-mapping
Technology Road-mapping

A Technology Roadmap is a strategic plan that outlines the technology initiatives an organization plans to undertake over a specific timeframe. It helps align technology projects with business goals, ensuring that all stakeholders understand the “what”, “why”, and “when” of IT initiatives.

Here are some key benefits of a Technology Roadmap:

  1. Strategic Alignment: Ensures that technology initiatives support overall business objectives.
  2. Communication: Clearly communicates plans and timelines to stakeholders, helping to gain their support.
  3. Prioritization: Helps prioritize investments and resources by outlining the most critical projects.
  4. Risk Management: Identifies potential risks and dependencies early, allowing for better planning and mitigation.
IT Infrastructure Modernization
IT Infrastructure Modernization

IT Modernization Framework Model 1

The Modernizing Government Technology (MGT) Act is a new federal act that mandates federal agencies to accelerate their IT modernization efforts. The act allows agencies to reprogram unused budget allocation to fund future IT modernization projects. It also updates the uses of the Technology Modernization Fund (TMF) to pay for retiring and replacing older information technology (IT) systems.

SAFe 6.0
SAFe 6.0

SAFe 6.0

Product vision – Describes the desired future state of the product and guides Agile ARTs and teams toward a common goal.

 Product strategy – Defines how the organization will deliver against the product vision, providing clear direction while retaining the agility needed to evolve based on feedback and market conditions.

Product design – Combines customer centricity, design thinking, and lean user experience (lean UX) design to understand the problem to be solved deeply and discover solutions with the best product-market fit.

Product delivery – Accelerates value realization by ensuring that new ideas flow quickly from idea to impact through a Continuous Delivery Pipeline.

Product marketing – Raises awareness and excitement in the market by amplifying the features and benefits of product innovations.

Product innovation culture – Fosters continuous learning, experimentation, and a spirit of relentless improvement across the organization.

© Scaled Agile, Inc.

IT Modernization Framework Model 2
IT Modernization Framework Model 2

The Modernizing Government Technology Act reforms and reauthorizes the Technology Modernization Fund (TMF) and its governing board, the Technology Modernization Board (TMB), which were established by the bipartisan Modernizing Government Technology Act of 2017 (P.L. 115-91). The bill includes several measures to improve the administration of the TMF and ensure program operations adhere to original congressional intent. The bill requires TMF awards to be reimbursed at the level needed to ensure the Fund is operational and creates a new requirement that agency’s reimburse administrative fees. The bill also establishes a Federal Legacy IT Inventory, a new oversight tool that will allow Congress to evaluate agency and government-wide priority items for legacy IT modernization and to assess how well the TMF does in funding these projects. Finally, this bill reauthorizes the TMF and TMB and establishes a December 2031 sunset.

Federal Information Security Modernization Act
Federal Information Security Modernization Act

FISMA compliance refers to adhering to a set of policies, standards, and guidelines to protect government information and systems. It is mandatory for federal agencies and their contractors. The key steps to achieve FISMA compliance include:

  • Establish an inventory of IT systems.
  • Conduct a security categorization of information assets.
  • Develop a system security plan.
  • Implement required security controls.
  • Conduct risk assessments to evaluate successful implementation/planned changes.