Cybersecurity Engineering and ATO Sustainment

This subcontract, titled Cybersecurity Engineering and ATO Sustainment, supports prime contractors on Department of Veterans Affairs projects through the Technology Acquisition Center Nj. The scope of work focuses on cybersecurity engineering, vulnerability remediation, and the sustainment of Authority to Operate (ATO) certifications. Key technical requirements include executing continuous monitoring, ensuring RMF compliance, and performing vulnerability scanning in accordance with NIST guidance and VA security policies. The contractor is responsible for delivering critical security documentation, including vulnerability reports and a Software Bill of Materials (SBOM). Classified under NAICS code 541519, the contract ensures that all systems meet rigorous federal security standards to maintain operational authorization within the VA environment.