RMF Automation & Continuous ATO Support

The contract seeks to automate the Department of Defense Risk Management Framework process to achieve Continuous Authority to Operate for SDN and SDN-S systems, streamlining compliance and reducing manual overhead in security authorization workflows. The effort focuses on integrating automated tools and workflows that continuously monitor, assess, and document system security controls to maintain ongoing operational authorization without periodic re-accreditation cycles. This initiative is critical for modernizing DoD IT operations by enabling real-time risk visibility and adaptive control validation in dynamic environments. Performance of the work is designated for Coffeyville, Oklahoma with a ZIP code of 73145, and the contract falls under NAICS code 541611 for Management, Scientific, and Technical Consulting Services. The opportunity is structured as a subcontract with no set-aside designation, and responses are due by July 23, 2026. The contracting activity is under the Air Force Systems Command's Software office, indicating alignment with broader DoD digital transformation goals. The emphasis is on actionable automation that supports secure, resilient, and compliant software platforms without interrupting mission-critical operations.