Cybersecurity & Operational Compliance (Firewall, FIPS, HIPAA)

The contract requires the implementation and maintenance of robust cybersecurity controls for the ADT system, with specific emphasis on FIPS 140-2 encryption standards, HIPAA-compliant handling of protected health information, TIC 3.0 network security requirements, IPv6 protocol adoption, and HSPD-12 identity verification compliance. These controls must be fully integrated into the system’s architecture to ensure secure data transmission, access control, and regulatory adherence across all operational environments. The work involves ongoing monitoring, configuration management, and auditing to sustain compliance with federal cybersecurity mandates and to respond to evolving threat landscapes. The contract is structured as a subcontract under the Department of Veterans Affairs, managed by the Technology Acquisition Center NJ, with a submission deadline of May 11, 2026. It falls under NAICS code 541612, which designates computer systems design and related services. Performance of the work is expected to support federal information systems requiring stringent security and privacy protections, and all solutions must align with current federal standards without exception. While no set-aside provisions or point of contact details are specified, responders are expected to demonstrate proven experience in deploying and maintaining each of the mandated compliance frameworks within large-scale government IT environments.