Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Cybersecurity & CUI Protection for Healthcare Data

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract titled Cybersecurity & CUI Protection for Healthcare Data requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and Protected Health Information within a healthcare environment under the Defense Health Agency. Key responsibilities include system hardening, strict access control measures, and timely cyber incident reporting in alignment with federal cybersecurity standards. Work is performance-based in Portsmouth, Virginia, with a ZIP code of 23708, where the contractor must ensure the secure handling of sensitive health data subject to federal compliance requirements. The contract is classified as a subcontract under NAICS code 541512, indicating it involves computer systems design and related services, and is solicited by the Department of Defense. Responses must be submitted by July 27, 2026, at 1:00 PM, with the opportunity posted on July 22, 2026. The contractor must demonstrate proven capability in securing CUI and PHI within a DoD-affiliated healthcare context, with a focus on continuous monitoring, documentation, and adherence to NIST guidelines.

General Info

Implement NIST SP 800-171 controls to secure CUI and PHI for DoD healthcare in Portsmouth, Virginia.

Agency

Department Of Defense → Defense Health AgencyView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Portsmouth, VA, 23708, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Defense Health Agency
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Defense → Defense Health Agency
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implementation and maintenance of NIST SP 800-171 security controls to protect CUI and PHI, including system hardening, access controls, and cyber incident reporting.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
Azure Consulting IDIQThe Port of Seattle is preparing to engage a qualified cloud services partner through an IDIQ contract to assist with the adoption, modernization, and optimization of Microsoft Azure and hybrid cloud environments. The selected vendor will be responsible for evaluating the current Azure architecture, enhancing its design, and implementing new services in alignment with organizational standards, operational requirements, and long-term scalability goals. Key priorities include strengthening the security posture, improving system resiliency, ensuring compliance with best practices, and guiding the strategic use of Azure services to support evolving business needs. The contract will support ongoing IT infrastructure transformation efforts under the ICT Enterprise Infrastructure Services division, with the Port of Seattle serving as the lead agency. The primary point of contact is Carol Hassard, and Jim Dawson is listed as the Project Manager, both available for inquiries via provided phone numbers and email addresses. While no solicitation number has been issued yet, the forecast was posted on July 23, 2026, under NAICS code 541512, indicating a focus on computer systems design and related services. Place of performance details and set-aside information are not specified, but the work is expected to be delivered in support of the Port’s internal operations and digital strategy.
ICT Enterprise Infrastructure Services

POSTED

about 5 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System software, aiming to modernize and enhance the functionality of flight data displays across airport terminals. This initiative targets a critical operational system that provides real-time flight updates to passengers and staff, requiring a robust, scalable, and reliable software solution capable of integrating with current airport infrastructure. The solicitation falls under NAICS code 541512, indicating it involves custom software development and related services, with no specific set-aside designated for small or disadvantaged businesses at this forecast stage. Primary point of contact for inquiries is Farlis Lewis, reachable via email or phone, with Krista Sadler serving as the project manager for technical coordination. The project is currently in the pre-solicitation phase, with no formal solicitation number assigned yet and no official deadline or award timeline provided. While the exact place of performance is unspecified, the system will be implemented at Port of Seattle facilities, likely centered at Seattle-Tacoma International Airport. Interested vendors are encouraged to monitor the official portal linked for updates as the formal solicitation is expected to follow, with requirements likely emphasizing system compatibility, cybersecurity, uptime, and user interface usability for high-traffic public environments.
ICT Enterprise Infrastructure Services

POSTED

about 5 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
DCCSES modernizationThe District of Columbia Office of the Attorney General is forecasting the modernization of the DCCSES system, focusing on the development of core functionalities including case management, financials, and intake processes. This initiative aims to enhance operational efficiency and service delivery by upgrading legacy systems to a more integrated, scalable, and user-friendly platform that supports the full lifecycle of case handling and financial tracking. The effort is expected to modernize outdated infrastructure to better align with current technological standards and improve data accuracy, workflow automation, and interdepartmental coordination. The project is currently in the forecasting stage with no solicitation number assigned and no set-aside provisions specified, indicating that procurement details, including eligibility requirements and timelines, have not yet been finalized. The place of performance and point of contact information are not provided, suggesting that these will be determined during the subsequent procurement phases. While the NAICS code and organization type are unspecified, the work is anticipated to involve software development, systems integration, and possibly cloud-based deployment to support the attorney general’s operational needs across the district. Stakeholders should monitor the official portal for updates as the forecast progresses toward formal solicitation.
Attorney General (OAG)

POSTED

about 5 hours ago

DEADLINE

N/A
View Details

More opportunities from Department Of Defense → Defense Health Agency

Same awarding agency

NAICS: 518210
New
Federal
HIPAA-Compliant Medical Data ManagementThe contract establishes a binding agreement for the secure handling, storage, and transmission of patient audiometric records and protected health information in full compliance with HIPAA regulations. It mandates stringent data protection protocols including encryption, access controls, audit logging, and staff training to safeguard sensitive medical data throughout its lifecycle, ensuring confidentiality, integrity, and availability at all times. The subcontractor must demonstrate proven expertise in healthcare data management and maintain robust security measures aligned with federal standards to prevent unauthorized access, disclosure, or breaches. This procurement is a Total Small Business Set-Aside under FAR 19.5, designated for small business entities as defined by the SBA, and falls under NAICS code 518210 for data processing, hosting, and related services. The work is performance-based and must be executed at the designated location in Rock Island, Illinois, with a responsive deadline of August 5, 2026. The contracting activity is the Defense Health Agency under the Department of Defense, reflecting the federal government's commitment to secure and compliant management of personnel medical records. All parties are required to adhere to strict accountability standards, with noncompliance potentially resulting in contract termination or legal repercussions.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

1 day ago

DEADLINE

in 13 days
View Details
NAICS: 621399
New
Federal
Otoacoustic Emissions Testing (Distortion Product)The contract is for Distortion Product Otoacoustic Emissions (DPOAE) testing to evaluate cochlear function, primarily used for the early detection of hearing loss. This effort is classified as a subcontract under a Total Small Business Set-Aside as defined by the SBA, with the NAICS code 621399 indicating it falls under other miscellaneous health practitioners. The work is to be performed at Rock Island, Illinois, with a zip code of 61201, and is managed by the Defense Health Agency under the Department of Defense. The solicitation was posted on July 22, 2026, and responses are due by August 5, 2026, at 5:00 PM Eastern Time. All interested parties must be small businesses eligible under the SBA’s set-aside provisions, as the contract is reserved exclusively for small business contractors. No point of contact information is provided in the data, and geographic details such as state and country for the office address are unspecified, though performance is clearly localized to Rock Island. The procurement is part of broader health monitoring initiatives within the military healthcare system, ensuring auditory health standards are met through non-invasive diagnostic procedures. Contractors must be prepared to deliver DPOAE services in compliance with federal and defense health protocols, and submission must occur through the SAM.gov portal prior to the deadline.
Offices of All Other Miscellaneous Health Practitioners

POSTED

1 day ago

DEADLINE

in 13 days
View Details
NAICS: 621399
New
Federal
Basic Comprehensive Audiometry ServicesThe contract titled Basic Comprehensive Audiometry Services requires the provision of baseline and periodic hearing assessments for military personnel and their beneficiaries using standardized audiometric procedures in accordance with established protocols. Services must be delivered at the designated place of performance in Rock Island, Illinois, with all testing conducted to ensure compliance with military health standards and regulatory requirements. The work falls under NAICS code 621399 and is structured as a subcontract set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside provision, ensuring eligibility and participation are limited to certified small business concerns. The opportunity was posted on July 22, 2026, with a firm deadline for responses set for August 5, 2026, at 5:00 PM. The contracting entity is the Defense Health Agency under the Department of Defense, which will oversee the delivery of audiology services to support the health readiness and wellness of active duty service members and authorized dependents. All providers must be prepared to meet rigorous clinical standards, maintain accurate records, and operate in alignment with federal and military health guidelines without deviation. The contract does not specify a point of contact, and all inquiries or submissions must follow the official SAM.gov portal linked in the solicitation.
Offices of All Other Miscellaneous Health Practitioners

POSTED

1 day ago

DEADLINE

in 13 days
View Details