Compliance and Security Certification Maintenance

The contract encompasses the ongoing maintenance and renewal of critical security certifications including HITRUST, SOC 2, and ISO 27001, ensuring continuous adherence to industry-standard security frameworks. It also requires strict compliance with evolving federal and state healthcare regulations, particularly those impacting the handling, storage, and transmission of sensitive health information. The scope demands proactive monitoring of regulatory changes and implementation of necessary control updates to maintain certification integrity and operational compliance. This subcontract is associated with the Department of Community Health in Georgia under NAICS code 541611, which corresponds to management consulting services. The solicitation was posted on May 12, 2026, with a response deadline of May 25, 2026, indicating urgent need for qualified vendors to support the state’s healthcare compliance infrastructure. While specific performance locations and point of contact details are not provided, the contractual obligations center on sustaining certification validity and regulatory alignment across all relevant healthcare data systems and processes.