Cybersecurity & RMF Compliance Implementation

The contract requires the implementation and ongoing maintenance of a Risk Management Framework to ensure compliance for systems handling Protected Health Information and Controlled Unclassified Information. Key responsibilities include producing annual System Authorization Report submissions, achieving and sustaining FedRAMP Moderate authorization, and deploying Security Technical Implementation Guides across all relevant systems. The work must be performed in support of the Department of Defense through Dha Enterprise Medical Support Ems-Cd, with performance centered in San Antonio. This is a subcontract opportunity under NAICS code 541512, with responses due by July 21, 2026, and the solicitation was posted on July 7, 2026. All activities must align with federal cybersecurity standards to safeguard sensitive data and maintain continuous compliance in a DoD environment.