Risk Assessment and Security Testing (ST&E) Services

This contract involves providing comprehensive risk assessment and Security Test & Evaluation (ST&E) services aimed at ensuring the compliance and security of information systems used by the Department of Veterans Affairs. The primary objective is to identify vulnerabilities and assess risks within VA systems through rigorous testing and reporting processes. The work will be performed as a subcontract under a Total Small Business Set-Aside, adhering to the Small Business Administration guidelines, specifically under NAICS code 541690, which covers other scientific and technical consulting services. The contract is managed by the 257-NETWORK Contract Office 17 (36C257) of the Department of Veterans Affairs and is set to be performed in El Paso, with the postal code 79930. The solicitation was posted on May 4, 2026, with responses due by May 29, 2026. This contract emphasizes the critical nature of maintaining security within federal information systems by requiring thorough evaluations to detect and mitigate potential risks, thereby safeguarding sensitive veterans’ data and supporting the VA’s mission.