Cybersecurity Validation and Hardening for Medical Imaging Devices

The contract requires the execution of comprehensive cybersecurity validation, operating system hardening, patching, and secure network integration for nine upgraded Zeiss medical imaging devices, all in strict adherence to federal standards including FISMA, NIST SP 800-53, and VA TIC requirements. The work is focused on ensuring that each device meets the highest security benchmarks post-upgrade, minimizing vulnerabilities and maintaining compliance with Department of Veterans Affairs security policies throughout the lifecycle of the devices. The contractor must deliver verified, documented proof of compliance for all tasks performed, with an emphasis on reducing attack surfaces and enabling secure connectivity within government network environments. The subcontract is issued under the 242-NETWORK Contract Office 02 (36C242) within the Department of Veterans Affairs and falls under NAICS code 541611 for management, scientific, and technical consulting services. The solicitation was posted on July 22, 2026, with proposals due by July 28, 2026, and the performance location is not specified, though the devices are expected to be integrated into VA-controlled networks. All activities must align with federal cybersecurity frameworks, and the work is intended to support the secure operation of critical medical imaging equipment within VA healthcare infrastructure.