Cybersecurity and Compliance Assessment

The contract requests an independent cybersecurity review, vulnerability scanning, and compliance validation for the LeadsOnline software environment, ensuring alignment with NIST SP 800-171, HIPAA, and Department of Veterans Affairs-specific security policies. The work scope focuses on assessing the current security posture of the software environment to identify risks, validate adherence to federal and agency requirements, and provide actionable remediation guidance. All activities must be conducted with precision to meet the stringent data protection and privacy standards mandated for handling sensitive veteran health and operational information. This subcontract opportunity is issued by the Department of Veterans Affairs through the 250-NETWORK Contract Office 10 (36C250) with a NAICS code of 541511 for computer systems design services. The solicitation was posted on May 13, 2026, and responses are due by 7:00 PM Eastern Time on May 15, 2026. While no set-aside designation or point of contact is specified, performance is expected to be conducted remotely or via secure access to the LeadsOnline environment, with no geographically restricted place of performance indicated. Contractors must demonstrate proven expertise in federal cybersecurity frameworks and experience with healthcare and VA compliance environments to be considered for award.