Gen3 FedRAMP 3PAO

University of Chicago is seeking a qualified Third‑Party Assessment Organization (3PAO) to perform a FedRAMP assessment for its Gen3 cloud environment. The contractor will conduct security assessment, produce the required Security Assessment Report (SAR), and support any remediation activities to achieve FedRAMP Authorization. This is a time‑sensitive engagement with a short response window, targeting organizations with proven FedRAMP experience. • Scope includes a full FedRAMP security assessment (readiness, documentation review, penetration testing, and SAR production). • Deliverables: assessment report, remediation guidance, and final authorization package. • Timeline: RFP released 09/23/2022, responses due 10/12/2022; work expected to begin shortly after award. • Contractor must be an accredited 3PAO with prior FedRAMP authorizations. • No explicit budget disclosed; typical FedRAMP 3PAO engagements range from $150K to $500K depending on system complexity.