Risk Assessment and Security Testing (ST&E) Services

The contract titled Risk Assessment and Security Testing (ST&E) Services is a subcontract under a Total Small Business Set-Aside by the Department of Veterans Affairs through the 257-NETWORK Contract Office 17 (36C257), designated for small business participation as defined by SBA regulations under NAICS code 541690. It requires the performance of comprehensive risk assessments and Security Test & Evaluation reporting to evaluate and ensure compliance with security standards across VA information systems, with the primary objective of identifying vulnerabilities and mitigating potential threats to system integrity and data confidentiality. The work is to be performed at a location in El Paso, Texas, with a zip code of 79930, and the proposal must be submitted by May 29, 2026, at 7:00 PM. This solicitation does not specify a solicitation number or point of contact, and the place of performance is limited to a single city without state or country designation beyond the provided zip code. The service delivery is focused on supporting the VA’s cybersecurity posture through systematic evaluation and reporting, emphasizing continuous compliance with federal information system standards. Bidders must be certified small businesses eligible for the set-aside, and the successful contractor will be expected to deliver detailed findings and remediation strategies aligned with federal security frameworks, ensuring that VA systems remain secure, resilient, and in accordance with evolving regulatory requirements.