Automated Security and Privacy Assessment and Authorization Tool

The Drug Enforcement Administration is seeking a commercial-off-the-shelf turn-key solution to modernize and automate its security and privacy assessment and authorization processes. The goal is to streamline the Authority to Test, Pilot, Use, and Operate workflows to reduce administrative burdens and accelerate the secure deployment of mission systems. The agency intends to replace resource-intensive manual workflows with an automated system that ensures ongoing compliance with federal cybersecurity mandates and reduces overall risk exposure. The required solution must offer minimal customization and integrate seamlessly with existing enterprise cybersecurity and information technology tools such as Qualys and Dynatrace. Key priorities include enhanced visibility and auditability across the system. This opportunity is listed as a forecast under NAICS code 423430, with the place of performance located in Arlington, Virginia.