Security Assessment Reporting (SAR) & ATO Support

This contract involves the production of Security Assessment Reports (SARs) that document control evaluation findings, which are essential for supporting Authorization to Operate (ATO) decisions within Department of Transportation (DOT) systems. The work is focused on identifying and assessing security controls to ensure compliance and facilitate risk management in DOT's IT environment. The contract is a subcontract issued by the It Acquisition Center Of Excellence (ACE) under the Department of Transportation, classified under the NAICS code 541611, which pertains to administrative management and general management consulting services. The contract supports the DOT's efforts to maintain secure operations by providing detailed evaluations that inform ATO approvals, ultimately contributing to the overall cybersecurity posture of DOT systems. While specific location details are limited, the place of performance has a zip code of 20590, indicating the work is likely conducted in or near Washington, D.C. The contract was posted on June 11, 2026, and serves an ongoing need within the DOT to systematically analyze security controls and ensure compliance with federal cybersecurity requirements.