RMF Cybersecurity Engineering and ATO Support

This subcontract for RMF Cybersecurity Engineering and ATO Support involves providing specialized cybersecurity engineering and documentation services for prime contractors supporting the US Air Force 48th Contracting Squadron. The primary objective is to develop Risk Management Framework packages and perform security assessments for unclassified and Controlled Unclassified Information environments. By utilizing DoD RMF toolsets and FedRAMP frameworks, the contractor will manage the necessary processes to secure an Interim Authority to Test or a final Authority to Operate. The project is based at RAF Lakenheath in the United Kingdom and falls under NAICS code 541519. The successful provider is responsible for delivering a fully completed RMF package and ensuring the granting of an Authority to Operate. Interested parties should note the response deadline of December 1, 2026, for this Department of Defense requirement.