Universal Automated Control Assessment, Validation and Risk Correlation Platform

The United States Patent and Trademark Office is seeking a universal automated control assessment, validation, and risk correlation platform. The agency needs to solve the problem of manual data mapping by automating the ingestion of raw outputs from standard tools, such as Nessus, ACAS, and SCAP, and automatically mapping those findings to relevant security controls. The requested platform must operate identically in cloud-native, enterprise on-premise, and disconnected or austere environments while maintaining a unified data structure regardless of the target's location. The scope of work requires data portability capabilities to ensure assessment data can be securely synchronized from tactical edge environments to strategic governance hubs for aggregation and trend analysis. Performance of the work will take place offsite. Only onshore organizations based in the United States are eligible to participate in this procurement. The agency is currently looking for proposals to determine the budget for this project. The evaluation criteria and key dates are not specified in the initial solicitation details.