Secure Data Management and System Authorization (A&A)

The contract requires the development and ongoing maintenance of a secure system compliant with standards for handling Controlled Unclassified Information, including the creation and management of a System Security Plan, Plan of Action and Milestones, and a complete Authorization to Operate package. Continuous compliance is enforced through monthly vulnerability scans and rigorous configuration management practices to ensure the system remains hardened against threats and meets federal security requirements. This effort is critical to sustaining authorization and operational integrity in a regulatory environment where data protection is paramount. Awarded as a subcontract under the FDA Office of Acquisition and Grant Services within the Department of Health and Human Services, the solicitation is categorized under NAICS code 541512 for Computer Systems Design Services. Proposals must be submitted by August 10, 2026, with the opportunity posted on August 4, 2026. The place of performance and point of contact details are unspecified, requiring potential bidders to review the SAM.gov link for further information. The contract does not specify a set-aside type, making it open to all qualified subcontractors regardless of business size or status.