Automated Security and Privacy Assessment and Authorization Tool

The Drug Enforcement Administration is pursuing a contract to implement an automated security and privacy assessment and authorization tool designed to modernize and streamline its existing processes for Authority to Test (ATT), Pilot (ATP), Use (ATU), Operate (ATO), and continuous ATO. This initiative aims to reduce administrative workload, speed up the secure deployment of mission systems, and maintain compliance with applicable laws, regulations, and policies. The current manual process is inefficient, time-consuming, and prone to increased risk, prompting the DEA to seek a commercial off-the-shelf solution with minimal customization requirements. The desired solution must support automation, integrate seamlessly with the DEA's enterprise cybersecurity and IT tools such as Qualys and Dynatrace, and provide enhanced visibility and audit capabilities in alignment with federal cybersecurity mandates. The contract forecast targets performance in Arlington, Virginia, with points of contact designated for small business outreach. This modernization effort plays a critical role in enabling the DEA to achieve timely, secure, and compliant deployment of its mission-critical systems.