- Telos has landed new HHS cybersecurity work
- HHS to adopt the full Xacta suite
- The 2026 Healthcare Summit will explore AI governance and more
Telos has received a task order from the Department of Health and Human Services to help HHS update its cyber governance, risk and compliance, or GRC, and authority to operate workflows.

Federal health agencies are weighing how artificial intelligence, cybersecurity and modern IT systems can support their missions and the populations they serve. Government and industry leaders will examine these priorities, including AI governance, federal health IT modernization and access to care, at the Potomac Officers Club’s 2026 Healthcare Summit on Dec. 3. Reserve your seat now to join the discussion.
What Is the Scope of the HHS Contract?
The company said Monday the 18-month task order is valued at $13.7 million and will support the Office of Information Security within the HHS Office of the Chief Information Officer.
The award calls for Telos to deploy all three components of its Xacta suite: Xacta 360, Xacta.io and Xacta.ai. The company will also provide cybersecurity support, training, enterprise integration and data migration services to help HHS implement and adopt the Xacta suite.
The Xacta tools are intended to automate cyber risk and compliance tasks at HHS, such as security authorization workflows, compliance documentation, control assessments and continuous monitoring. The suite will also collect data from security tools throughout the department and apply AI to cut manual work and generate risk insights.
John Wood, chairman and CEO of Telos, said the departmentwide deployment shows the reach of the company’s cyber GRC platform across sizable federal agencies.
“This award reflects the need for an integrated approach to cyber risk management that brings automation, enterprise security data and AI together in a secure cloud environment,” Wood said.
What Is Xacta?
Xacta is Telos’ cyber GRC platform, made up of Xacta 360, Xacta.io and Xacta.ai. The suite holds Federal Risk and Authorization Management Program, or FedRAMP, authorization at the High impact level, which allows agencies to use the platform’s software-as-a-service capabilities in environments containing sensitive unclassified information.
Xacta 360 received FedRAMP High authorization in July 2025. Xacta.io and Xacta.ai were approved at the same level in April.
In June 2025, Telos received a one-year, $3.7 million contract option to continue providing the Air Force with access to Xacta.
What Other Cybersecurity Contracts Has Telos Secured Recently?
The latest contract follows an Office of Naval Intelligence award for Telos to expand its cyber risk management support. Wood said the award expands the company’s role in supporting ONI’s cybersecurity mission.
The Air Force earlier selected Telos for a $37.8 million contract to modernize cybersecurity frameworks and integrate AI tools for Air Combat Command through January 2031.


