Continuous Monitoring

The U.S. Department of State awarded Telos Corporation a 12-month contract for customer-hosted, customer-managed Xacta 360 subscriptions and cybersecurity services. The award points to agency demand for integrated authorization, assessment, compliance documentation, and continuous-monitoring capabilities; its value and contract number were not disclosed.

Federal cybersecurity is shifting from periodic certification and manual GRC reviews to ongoing security operations built around automated controls, continuous monitoring, vulnerability remediation and current evidence. The change, reinforced by FedRAMP 20x and continuous authorization, signals sustained service and customer-coordination needs for contractors, but the sources identify no active solicitation, award or contract value.

The U.S. Army Information Systems Engineering Command (USAISEC) describes Risk Management Framework as a Service (RMFaaS), supporting cybersecurity engineering, compliance, continuous monitoring, and ongoing authorization. The announcement outlines an existing service model—not a solicitation or award—so contractors should treat it as capability context rather than an active procurement.