FedRAMP & VA Security Compliance (3PAO & ATO Support)

The contract requires the delivery of comprehensive FedRAMP High compliance artifacts essential for securing a Department of Veterans Affairs Authority to Operate, including the System Security Plan, Security Assessment Plan, Security Assessment Report, and Plan of Action and Milestones. These deliverables must align with stringent federal cloud security standards and be prepared under the oversight of a Third-Party Assessment Organization to ensure rigorous adherence to compliance requirements. The work is focused on supporting the VA’s ATO process and ongoing continuous monitoring activities to maintain authorized status and address identified security weaknesses in a timely and effective manner. The contract is classified as a subcontract under NAICS code 541611, which corresponds to computer systems design and related services, and is issued by the Technology Acquisition Center NJ on behalf of the Department of Veterans Affairs. Responses must be submitted by May 11, 2026, at 6:00 p.m. Eastern Time, with no set-aside designation specified. The place of performance and point of contact details are not provided, indicating flexibility in execution location and direct communication channels to be established post-award. Successful performance will be critical to sustaining the VA’s compliance posture and ensuring secure cloud operations across its digital infrastructure.