Cybersecurity Framework & ATO Certification Services

This subcontract for Cybersecurity Framework and ATO Certification Services supports prime contractors on Department of Veterans Affairs projects through the Technology Acquisition Center Nj. The primary objective is to perform security hardening and Authority to Operate preparation, ensuring all systems meet FISMA compliance and OMB A-123 internal control standards. The scope of work involves implementing security controls based on NIST SP 800-53 Rev. 5 and adhering to FIPS 140-3 requirements. Technical execution includes vulnerability scanning using tools such as Fortify to identify and mitigate risks. The final deliverables consist of a completed ATO package and the necessary security certifications to validate the system's integrity.