Assessment and Authorization (A&A)

Alaska Northstar Resources (ANR) is an SBA 8(a)-certified subsidiary of Shee Atiká, an Alaska Native Corporation, and a Small Disadvantaged Business. ANR delivers agile, secure IT solutions for government agencies, including cloud architecture, DevSecOps, cybersecurity, and enterprise IT services, serving clients such as the U.S. Air Force, Army, DISA, and USDA.

Agile SDLCapplication migrationApplication Servicesautomated software testingcloud orchestration and automationCybersecurityDatabase development and migrationdata encryptionDevSecOpsEnterprise Cloud Servicesfirewall managementIDS/IPSnetwork hardeningnetwork servicesRisk Management Framework (RMF)routing and switchingsecurity automationSTIG compliancewireless network deployment

Asyncrob Corporation is a service-disabled veteran-owned (SDVOSB) consulting firm founded in 2001 and headquartered in Fairfax, VA. It specializes in the convergence of technology and Artificial Intelligence with enterprise architecture, providing records and information management, health care IT, data management, telecommunications consulting, language translation, and cybersecurity services to commercial and federal clients.

claims auditing and recoverycybersecurity trainingdata analysis and financial reportinginformation governanceinfrastructure cabling installationlanguage translationmedical coding and billingpenetration testingprogram and project managementRecords managementtelecom/IT consultingvulnerability testing

DeltaStrac LLC is a Service Disabled, Veteran Owned, Small Disadvantaged Business and SBA-certified 8(a) that provides professional and program management services for federal agencies with a specialized focus in the healthcare domain. It delivers program management and technical services to operate, modernize, and sustain complex systems, including cybersecurity, health IM/IT modernization, acquisition program management, and medical research support.

Acquisition strategy development and source selection supportBiostatistical analysis and scientific writingContinuous monitoring and vulnerability managementContract administration and performance monitoringMarket research and Analysis of AlternativesMedical device cybersecurity integration and validationMedical device integration analysis and interface managementMHS Genesis EHR worldwide deployment supportNIST SP 800-53 and CMMC compliance assessmentProgram Management Office (PMO) supportRisk Management Framework (RMF) implementation and oversight

Diamond Information Systems is a minority-owned small business founded in 1998 that serves as a partner and trusted advisor to federal government and commercial clients. It delivers integrated, flexible, and economical solutions combining people, processes, and technology, and holds ISO 9001-2015, CMMI-SVC Level 3, and CMMI-DEV Level 3 certifications.

Artificial Intelligence (AI) / Machine Learning (ML)business intelligenceCloud migrationcloud-native architecturecomputer visionCybersecurityData Analyticsdata modelingdata visualizationIncident responseInformation Assurance and Compliance (RMF, NIST)Infrastructure as a Service (IaaS)Moving Target Defensenatural language processingpenetration testingPlatform as a Service (PaaS)Server-less computingSoftware-as-a-Service (SaaS)zero trust

Direct Enterprise Solutions (DES) is a Next-Gen Mentor-Protégé Joint Venture (MPJV) that executes technology and industry best practices to assure customer missions across Federal, State, and Local Government sectors. DES provides cybersecurity solutions and government IT support, with certifications including ISO 9001:2015, ISO 14001:2015, ISO/IEC 20000-1:2018, ISO/IEC 27001:2022, CMMI ML3 DEV/SVC, and CMMC L2 (C3PAO).

AI and MLautomated vulnerability/patch managementcloud security deploymentCybersecurity OperationsISCM/CDMITIL executionIT service managementlogistics and trainingRisk Management Framework (RMF)Robotic Process Automation (RPA)SOARZero Trust automation

Federal Mission Solutions (FMS) is an 8(a) joint venture resulting from an SBA-certified mentor-protégé relationship between SD Solutions, LLC and E3 Federal Solutions LLC, and Avantus Federal, LLC. FMS provides mission-focused services and solutions to Federal clients, including engineering and technical services, cybersecurity, IT modernization, change management, strategy and governance, and consulting services.

Application development and software engineeringchange managementCISO advisory and cybersecurity governanceCloud Security and FedRAMPCloud services and Big Data solutionscomputer forensicsContinuous Diagnostics and Mitigation (CDM)CybersecurityEnterprise architectureFISMA program supportIdentity and Access Management (IdAM)IT ModernizationLegacy systems decommissioningPKI and cryptographic planning and implementationQA, testing services and Independent Verification and Validation (IV&V)Risk management framework and POAMs managementsecurity architecture and engineeringVulnerability assessment and incident managementweb and mobile development

GRAVICOM LLC is a company focused on Cyber Security, Risk Management, and Engineering Services, providing products and services for Government and Commercial customers. It is a Navy Qualified Validator (NQV) and USMC Validator company offering senior Information Assurance professionals to build, populate, validate, and maintain Risk Management Framework (RMF) packages. It has 10+ years of corporate experience operating as a Software Support Activity (SSA) for Navy afloat systems and provides Information Security Systems Engineering for DoD Enterprise sys

ACASAutomation and Solutions EngineeringComputer Aided Drafting and SimulationComputer Network DefenseeMASSinformation assurancePatent Protection and Intellectual Propertyprocess controlProgrammable Logic Controllers (PLCs)Risk Management Framework (RMF)roboticsSCAPSTIGsSystems Integrationvulnerability management

I-Assure is a Service-disabled Veteran-owned Small Business (SDVOSB) founded in 2005 that provides fixed-price Assessment and Authorization (A&A) and Risk Management Framework (RMF) solutions to help organizations achieve Authority to Operate (ATO). The company offers proprietary automation tools, policy development, and DISA STIG compliance support, and reports over 425 successful ATOs.

ATO sustainmentDISA STIG compliance automationeMASS supportpolicy developmentRisk Management Framework (RMF)security lockdown scripting