Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Subcontract opportunity from Department Of Veterans Affairs was posted on August 24, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

LEAF Security Remediation and ATO Support

Closed
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

AI Contract Overview

Show more

The LEAF Security Remediation and ATO Support subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on providing security remediation and Authority to Operate support for prime contractors on LEAF platform projects. The scope of work involves identifying and fixing vulnerabilities using tools such as Nessus or Qualys and ensuring all documentation meets NIST SP 800-53 and FedRAMP compliance standards. Key deliverables include security remediation reports and an updated System Security Plan. Qualified personnel for this engagement must hold CISSP or CISM certifications. The opportunity is categorized under NAICS code 541519, with a response deadline of September 8, 2026.

General Info

VA subcontract for LEAF security remediation, ATO support, and NIST/FedRAMP compliance services.

NAICS

541519 - Other Computer Related Services

Place of Performance

NJ

Set-Aside

NONE

Documents

This scope was carved out of 36C10B26Q0790.

The full solicitation package (5 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

DA01--Light Electronic Action Framework Platform Support Services (VA-27-00002271)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs security remediation and Authority to Operate (ATO) support for prime contractors on Department of Veterans Affairs (VA) LEAF platform projects. Identifies and remediates vulnerabilities using Nessus or Qualys and maintains documentation for ATO compliance per NIST SP 800-53 and FedRAMP standards. Requires CISSP or CISM certifications. Delivers security remediation reports and an updated System Security Plan (SSP).

More opportunities from Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Same awarding agency

NAICS: 541519
New
Federal
R499--New Task Order - Qualtrics FedRAMP Survey Services (VA-26-00082605)
Solicitation # 36C10B27Q0107
The Department of Veterans Affairs Technology Acquisition Center is seeking information for a new task order to provide an integrated digital solution featuring Qualtrics FedRAMP survey services and Sestek KnowVU Virtual Agent capabilities. This solution will support up to 5,400 Orlando VA HCS users and employees, encompassing implementation and integration with VA Orlando systems and third-party APIs, survey-related support, and a large language model capacity of up to one billion tokens per contract year. The project is structured with one 12-month base period and four optional 12-month extension periods, with performance conducted remotely within an approved FedRAMP-authorized boundary. Compliance requirements are stringent, requiring adherence to FedRAMP, FISMA, and the VA Technical Reference Model. The contractor must ensure all data is transmitted via VA-approved cryptographic modules and maintain strict confidentiality of medical records under Title 38 U.S.C. § 5705 and § 7332. Key deliverables include a System Security Plan, implementation diagrams, and monthly license reports. Additionally, the contractor must provide a signed Statement of Attestation prior to any AI implementation and utilize tamper-evident packaging for any IT hardware deliveries. This effort is currently in the Request for Information stage for planning purposes, with a focus on identifying capable vendors, particularly certified SDVOSBs.
Other Computer Related Services

POSTED

2 days ago

DEADLINE

in 5 days
View Details

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS