FedRAMP Security Authorization & Compliance

The contract requires achieving and maintaining FedRAMP Moderate compliance for the Clinical Trial Management System (CTMS), encompassing the development and upkeep of comprehensive security documentation, implementation of continuous monitoring controls, and full support for periodic audits. The work involves ensuring all technical, operational, and administrative safeguards align with FedRAMP standards to meet federal cloud security requirements, with a focus on sustaining authorization through ongoing compliance activities. The successful bidder must demonstrate the ability to manage the full lifecycle of security authorization, from initial assessment to recertification, while working within the framework of a subcontracting arrangement. The opportunity is issued under NAICS code 541611 by the CDC Office of Acquisition Services within the Department of Health and Human Services, with performance based in Atlanta, Georgia, 30333. The solicitation was posted on July 31, 2026, and responses are due by August 14, 2026, at 6:00 p.m. Eastern Time. While no set-aside designation is specified, the contract is explicitly structured as a subcontract, indicating the work may be performed by a third-party provider supporting a prime contractor or larger federal initiative. All activities must adhere to U.S. government security protocols and be tailored to the specific needs of the CTMS environment under federal scrutiny.