Cybersecurity and System Authorization (ATO) Support

The contract seeks support for achieving Authority to Operate for a charge card platform by preparing requisite cybersecurity documentation and conducting comprehensive testing aligned with NIST SP 800-53 controls and the Risk Management Framework. The work involves system authorization activities to ensure compliance with federal cybersecurity standards, including the development, review, and submission of all necessary artifacts required for ATO approval under RMF processes. The contractor will be responsible for coordinating with internal and external stakeholders to validate security controls, remediate findings, and maintain continuous compliance throughout the authorization lifecycle. The contract is classified as a subcontract under NAICS code 541330, focused on computer systems design services, and is managed by the General Services Administration through its FAS PSHC Contract Operations office. Performance will take place in Washington, DC, with a response deadline of April 30, 2026. No set-aside provisions are specified, and the opportunity is open to eligible subcontractors capable of delivering cybersecurity authorization services in a federal environment. All deliverables must meet stringent federal requirements to support secure operation of the charge card platform within GSA’s infrastructure.