Cybersecurity Assessment & Authorization (A&A)

This subcontract opportunity involves performing cybersecurity validation for prime contractors on Air Force IBDSS projects. The primary scope of work includes executing Assessment and Authorization support under the DoD Risk Management Framework and validating security against ATO baselines. Key technical responsibilities involve implementing STIGs and SRGs, utilizing advanced standards such as PQC, SBOM, and TLS 1.3, and delivering approved ATO or validated security baseline reports. To qualify for this role, personnel must hold DoD 8570.01 IA certification and ensure CMMC compliance. This is a partial Small Business Set Aside subcontract under NAICS code 541519, issued by the Department of Defense agency FA2381 Force Protection Aflcmc/hbuk. Interested parties must submit their responses by the deadline of October 14, 2026.