Security Assessment & Authorization (A&A)

The contract entails performing comprehensive security control assessments for the FARM system to ensure ongoing compliance with NIST SP 800-53, FISMA, FedRAMP, and HHS IS2P standards, all critical to maintaining the system's Authority to Operate. Activities include developing detailed Security Assessment Reports that document the effectiveness of implemented controls, identifying gaps, and recommending remediation actions to meet federal cybersecurity requirements. The work is aligned with the FDA Center for Food Safety and Applied Nutrition under the Department of Health and Human Services and is performance-based within Silver Spring, Maryland, with a zip code of 20903. This is a subcontract classified under the 8(a) Set-Aside program as defined by FAR 19.8, designed to support small disadvantaged businesses, with the NAICS code 541618 indicating professional, scientific, and technical services related to administrative management and general management consulting. The solicitation was posted on August 3, 2026, with a response deadline of August 14, 2026, at 7:00 PM Eastern Time. Although no point of contact or specific funding details are provided, the requirement underscores a critical need for continuous cybersecurity authorization support to sustain federal operations under HHS oversight.