Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Cybersecurity Sustainment & ATO Management

Open
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity Sustainment and ATO Management subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The primary objective is to perform security vulnerability remediation and maintain the Risk Management Framework body of evidence to ensure mobile applications sustain their Authorization to Operate. This work requires remediating vulnerabilities according to DoD policy timelines using government-provided security scanning tools. Key deliverables include updated RMF documentation and detailed vulnerability remediation reports. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 19, 2026.

General Info

Subcontract for DHA mobile app vulnerability remediation and RMF Authorization to Operate maintenance.

NAICS

541519 - Other Computer Related Services

Place of Performance

4000, VA, USA

Set-Aside

NONE

Documents

This scope was carved out of BATDOK001.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

BATDOK Family of Systems (FoS)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Defense Health Agency
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs security vulnerability remediation and RMF body of evidence maintenance for prime contractors on Defense Health Agency (DHA) projects. Remediates vulnerabilities within DoD policy timelines to sustain the Authorization to Operate (ATO) for mobile applications. Utilizes government-provided security scanning tools. Delivers updated RMF documentation and vulnerability remediation reports.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
Federal
Hand Held Terminals / SOTI Software Requirement
Solicitation # HHT_SOTI
The Defense Commissary Agency (DeCA) is seeking market capabilities through a sources-sought request to establish an end-to-end operational solution for its worldwide enterprise mobile computing fleet. The primary objective is the management of approximately 2,709 Zebra Android Handheld Terminals (HHTs) utilizing the SOTI MobiControl Mobile Device Management (MDM) platform. The scope of work encompasses the provisioning of annual software subscriptions, the deployment and administration of dedicated production and test server environments, and the integration of devices with enterprise retail and warehouse systems. Additionally, the contractor must provide comprehensive depot repair, rapid-exchange warranty administration, and global technical help desk support. Key requirements include the ability to perform turnkey distribution and logistics for all CONUS and OCONUS locations, including secure packaging and customs clearance. The contractor must ensure strict adherence to cybersecurity standards, including Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) support to maintain the system's Authorization to Operate (ATO), with personnel meeting DoD 8140/8570 certifications. The requirement also includes optional life-of-contract technology refreshes for replacement hardware and accessories as equipment reaches end-of-life or end-of-sale status. Interested respondents must be authorized resellers or integrators of the proposed hardware and software, providing new OEM equipment and submitting a capability statement under NAICS 541519 or 541512 by November 9, 2026.
W6QK Acc-Apg Contr Ctr

POSTED

about 13 hours ago

DEADLINE

in 4 days
View Details
NAICS: 541519
New
Federal
Department of the Air Force Business and Enterprise Systems (BES) Commercial Solutions Opening (CSO)
Solicitation # FA8771-26-S-C0001
The Department of the Air Force Program Business and Enterprise Systems (BES) has established a multi-year framework via Commercial Solutions Opening (CSO) FA8771-26-S-C0001 to acquire innovative Commercial-Off-The-Shelf (COTS) IT and business solutions. This umbrella solicitation serves as an administrative framework rather than a direct request for proposals, with specific opportunities to be announced through individual open or closed Calls for Proposals published as amendments until March 2, 2030. Awards may be executed as FAR-based contracts or Other Transaction Agreements (OTAs) under 10 USC 2371b. The scope focuses on several key areas, including artificial intelligence, agile methodology, automation, scalability, security, and the reduction of total lifecycle costs of ownership. Eligible participants include traditional and non-traditional defense contractors, research institutions, and both large and small businesses. All offerors must maintain active registration in the System for Award Management (SAM). Evaluation of proposals will be based on the merit of the proposed concept in addressing specific Areas of Interest, focusing on technical soundness, commercial innovation, and price reasonableness, with funds availability serving as a mandatory pass/fail gate. The framework allows for iterative prototyping and the potential for follow-on production contracts, which may be negotiated with or without further competition. While the general framework is open, specific set-asides for small businesses will be determined at the individual call level.
FA8771 Aflcmc Gbk

POSTED

about 13 hours ago

DEADLINE

N/A
View Details
NAICS: 541519
New
Federal
Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services
Solicitation # W91CRB-27-B-A001
Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for several key systems, including the ATC Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The scope includes engineering analysis of hardware and software baselines, configuration management support, and architectural design. The period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with a possible six-month extension through May 22, 2032. The contract is a sealed bid acquisition requiring firm-fixed pricing based on an estimated 2,040 hours per year per labor category, with no allowance for travel or other direct costs. Bids must be submitted electronically by November 12, 2026. Evaluation is based on a pass/fail responsiveness check, which requires at least five years of RMF lifecycle reporting experience and three years of Top Secret environment documentation for the surge position. Key personnel must include a Senior IT Systems Solutions Architect serving as the Contract Manager. Security requirements are stringent, requiring a Secret clearance for most personnel and a Top Secret clearance for the surge position, with all work performed at Aberdeen Proving Ground. Invoicing must be processed through the Wide Area Workflow application.
W6QK Acc-Apg

POSTED

about 13 hours ago

DEADLINE

in 7 days
View Details
NAICS: 541519
New
Federal
PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions
Solicitation # N00019-26-RFPREQ-WPM281-0281
Naval Air Systems Command (NAVAIR), through PMX-281, is conducting market research via a Sources Sought Notice to identify capable providers for IT strategy, software modernization, and digital decision intelligence advisory subscriptions. The government intends to satisfy this requirement through an existing DoD Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) and is specifically evaluating whether there are sufficient small business BPA holders or authorized resellers to support a small business set-aside. The scope of work involves providing software engineering and decision intelligence tools, including digital platforms and benchmark data, alongside objective advisory and consulting services to support AI integration and enterprise software architecture for United States Naval Aviation. Key deliverables include one Team Leader license, five Executive Member licenses, five Advisory Member licenses, and on-demand specialized consulting services. Technical requirements specify that software platforms must meet DoD Cloud Computing Security Requirements Guide impact levels, such as FedRAMP Moderate or DoD IL4/IL5. Additionally, personnel providing advisory services must be eligible for Top Secret (SCI) clearances, and all providers must comply with DD Form 254 industrial security requirements and ITAR/EAR export controls. Interested parties must submit a structured capability statement not exceeding eight pages by November 4, 2026, detailing their BPA status, socioeconomic designations, and technical conformance.
Naval Air Systems Command

POSTED

about 13 hours ago

DEADLINE

in 6 days
View Details
NAICS: 541519
New
SLED
Measure K Website Services
Solicitation # 2027-RFP-00190
The County of San Mateo, through the County Executive's Office, is soliciting proposals under solicitation number 2027-RFP-00190 for dedicated website services for the Measure K website. The scope of work encompasses technical support, operations, recurring maintenance, and accessibility compliance and remediation to ensure the site remains functional and accessible. Qualified firms must demonstrate a minimum of four years of experience providing similar services within the last seven years and must be registered with the System for Award Management (SAM). Proposals are due by November 20, 2026, via the County's eProcurement portal. The contract will be awarded based on the overall best value, utilizing a points-based evaluation system by a selection committee. Key deliverables include a transition-in assessment and operating plan due within 10 business days of the notice to proceed, as well as quarterly updates to the technical inventory and access register. The agreement requires strict adherence to the Americans with Disabilities Act, Section 504 of the Rehabilitation Act, and HIPAA regulations. Additionally, selected vendors must comply with the Levine Act regarding campaign contributions and follow California Labor Code requirements for prevailing wages and payroll record-keeping. Pricing must be presented separately from any other County web-services agreements.
County Executive's Office

POSTED

1 day ago

DEADLINE

in 14 days
View Details

More opportunities from Department Of Defense → Defense Health Agency

Same awarding agency

NAICS: 722310
New
Federal
Nutrition Care Services; Military Treatment Facilities - Forts Irwin, Leonard Wood, Riley, Stewart, and West Point
Solicitation # HT940827RE003
The Defense Health Agency is soliciting proposals under RFP HT940827RE003 for non-personal nutrition care food services across five Military Medical Treatment Facilities: Weed Army Community Hospital (Fort Irwin, CA), General Leonard Wood Community Hospital (Fort Leonard Wood, MO), Irwin Army Community Hospital (Fort Riley, KS), Winn Army Community Hospital (Fort Stewart, GA), and Keller Army Community Hospital (West Point, NY). The scope of work includes dining facility management, therapeutic food preparation, patient tray assembly and delivery, clinical training, facility sanitation, and associated logistics and administrative functions. The contract is structured as a firm-fixed-price award with a transition period from December 1, 2026, to January 31, 2027, a base period from February 1, 2027, to September 30, 2027, and two twelve-month option periods extending through September 30, 2029. Multiple contracts may be awarded, with a maximum of one per facility. Proposals are due by November 13, 2026, at 12:00 PM Central. The government will utilize a streamlined best-value tradeoff process, where Technical Capability and Past Performance are weighted equally and are combined to be significantly more important than Price. Priority will be given to responsive State Licensing Agencies pursuant to the Randolph-Sheppard Act. Submissions must be organized into four volumes: Administrative, Technical Capability, Past Performance, and Price. Key requirements include the provision of qualified management and labor, adherence to the Tri-Service Food Code, and the implementation of robust contingency plans to ensure uninterrupted patient feeding during emergencies. Invoicing and payment will be processed electronically through the Wide Area WorkFlow system.
Food Service Contractors

POSTED

about 13 hours ago

DEADLINE

in 8 days
View Details
NAICS: 541511
New
Federal
BATDOK Family of Systems (FoS)
Solicitation # BATDOK001
The Defense Health Agency, through the Joint Operational Medicine Information Systems Program Management Office, is issuing a Request for Information (RFI) to conduct market research for the operations and sustainment of the Battlefield Assisted Trauma Distributed Observation Kit (BATDOK) Family of Systems. This mature capability includes BATDOK-J for point-of-injury casualty documentation on Android and iOS, BATDOK Link for data transfer to MHS GENESIS Theater or Operational Medicine Data Service via Windows plug-ins, and BAT-TAK for the Android Team Awareness Kit. The anticipated period of performance is scheduled to begin on 1 October 2027, consisting of a 12-month base period followed by four 12-month option periods. The government seeks to identify capable sources, particularly small businesses under NAICS code 541511, with experience in developing and integrating tactical mobile applications. Technical requirements include adherence to HL7 Version 2 and HL7 FHIR standards, the use of Modular Open Systems Approach (MOSA) formats such as JSON and XML, and the maintenance of a Risk Management Framework body of evidence to sustain the Authorization to Operate. Contractors will be expected to perform software code quality checks, automated testing, and contractor integration testing, with some work potentially required on-site at government test labs. Responses must be submitted by 1200 Eastern Time on 19 November 2026, adhering to a 15-page limit and specific formatting guidelines.
Custom Computer Programming Services

POSTED

about 13 hours ago

DEADLINE

in 14 days
View Details
NAICS: 561612
New
Federal
PANDHA-26-P-0000 046239 Security Support Services
Solicitation # PANDHA-26-P-0000_046239
The Defense Health Agency, through the Walter Reed Army Institute of Research, Europe Middle East (WRAIR-E-ME), intends to establish a sole source contract with the L. Sakvarelidze National Center for Disease Control and Public Health (NCDC) for security support services at the Richard G. Lugar Center for Public Health Research in Tbilisi, Georgia. This requirement is driven by a cost share obligation outlined in a 2015 Implementing Agreement, which mandates that WRAIR-E-ME reimburse up to 50 percent of the facility's operation and maintenance costs. Because WRAIR-E-ME is not a legal Georgian entity, the NCDC serves as the sole legal entity authorized to acquire and pay for these security services, including physical security, badging support, and patrol services under NAICS code 561612. Reimbursements will be calculated based on the total amount invoiced to the service provider, excluding Georgia Value Added Tax. This action is currently in the Notice of Intent to Sole Source phase, with a response deadline of November 23, 2026, for interested parties to submit capability statements. The primary points of contact for this requirement are Linda Hinson and Lance Nowell. If no competitive alternatives are identified, the contract will be awarded directly to the NCDC to ensure continued security operations at the Lugar Center.
Security Guards and Patrol Services

POSTED

1 day ago

DEADLINE

in 18 days
View Details
NAICS: 541715
New
Federal
Prototype development for Battlefield Wound Infection Prevention and Treatment (BWI P&T) Barrier Combination
Solicitation # HT9427-26-R-E020
The Defense Health Agency Contracting Activity is seeking a single award to develop a Battlefield Wound Infection Prevention and Treatment Barrier Combination prototype. This medical product must integrate a physical wound barrier with antimicrobial and antifungal properties to prevent the spread of organisms and systemic infections in combat scenarios. The project aims to advance technologies starting at Technology Readiness Level 5 or higher, with the ultimate goal of achieving TRL 7 or 8. Key requirements include the execution of preclinical testing and human clinical trials, the development of Chemistry, Manufacturing, and Controls documentation, and the successful submission for FDA approval or clearance. The procurement is conducted under prototype Other Transaction Authority 10 U.S.C. 4022, meaning it utilizes a tailored agreement rather than standard FAR-based contract structures. The estimated period of performance is 48 months, divided into three primary objectives: prototype demonstration, clinical studies and regulatory submissions, and final FDA clearance. The final deliverable includes up to 50 final design prototypes for operational testing. Packaging must be individual, waterproof, and capable of being opened with gloved hands in low-light environments, while maintaining sterilization and resisting temperatures between 0 and 110 degrees Fahrenheit. Proposals are evaluated based on technical capability, management capability, and cost. Eligible participants are typically small businesses or nontraditional defense contractors; otherwise, a one-third non-federal cost share is required. Awardees must maintain active SAM registration and comply with CMMC cybersecurity frameworks and DoD instructions for Controlled Unclassified Information. Payments are processed electronically via Wide Area Workflow within 30 days of an acceptable invoice.
Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 541715
New
Federal
Notice of Intent to Sole Source the Co-sponsorship of a Forum on Traumatic Brain Injury with the National Academies of Science, Engineering, and Medicine (NASEM)
Solicitation # DHA_TBI_Forum
The Defense Health Agency Contracting Activity intends to issue a sole source award to the National Academy of Science, Engineering, and Medicine to co-sponsor a Forum on Traumatic Brain Injury. This initiative aims to create a neutral environment where government stakeholders and subject matter experts from the public and private sectors can collaborate on strategic planning and collective action to advance TBI care and research across the entire continuum, from prevention to rehabilitation. The contract structure consists of a base year with four additional option years, with the forum convening two to three times annually. The requirement is linked to existing contract W81XWH22C0033, ensuring the Science and Technology Portfolio Management Division and other federal agencies have necessary access to these expert discussions. While the agency intends to proceed with a sole source award, interested firms capable of providing these services must submit detailed written notifications to the contracting office by November 18, 2026. The government maintains full discretion on whether to compete the requirement based on the responses received.
Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

1 day ago

DEADLINE

in 13 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS