Cybersecurity and Risk Assessment for EHR Deployment

The contract pertains to cybersecurity and risk assessment activities specifically for the EHRM system, requiring the performance of comprehensive risk assessments, vulnerability scanning, and the implementation of security controls aligned with federal and Department of Veterans Affairs cybersecurity standards. The work is intended to ensure the integrity, confidentiality, and availability of sensitive health data within the EHRM environment under strict compliance protocols. This is a subcontract classified under the Service-Disabled Veteran-Owned Small Business Set Aside, with the NAICS code 541611 indicating it falls under Administrative Management and General Management Consulting Services, targeting small businesses owned by service-disabled veterans. The solicitation was posted on July 8, 2026, with a response deadline of July 9, 2026, indicating an extremely narrow window for submission. The place of performance is designated as Minneapolis, Minnesota, with the contracting authority being the Network Contract Office 23 under the Department of Veterans Affairs. Although no point of contact or specific address details are provided, the work must be executed in accordance with VA cybersecurity directives and federal requirements, emphasizing timely and precise execution to safeguard critical healthcare systems. Failure to meet compliance standards or submit responses by the deadline will result in automatic disqualification.