DLP Policy Development and Configuration

The contract requires the development and implementation of Data Loss Prevention (DLP) policies designed to discover, classify, and protect sensitive data across all states—data in motion, at rest, and in use—while ensuring full alignment with HIPAA, PCI DSS, and NIST security standards. The work involves configuring technical controls and processes that enforce data handling rules consistent with federal regulatory frameworks, focusing on safeguarding personally identifiable information, healthcare data, and payment card data from unauthorized access, disclosure, or exfiltration. The solution must be scalable, auditable, and integrated into existing infrastructure to support continuous compliance and risk mitigation. This is a subcontract opportunity issued by the Department of Veterans Affairs through the Technology Acquisition Center NJ, with a response deadline of May 14, 2026. The North American Industry Classification System (NAICS) code 541512 indicates the work falls under Computer Systems Design and Related Services, suggesting the contractor will be responsible for both strategic policy design and technical implementation. The place of performance and point of contact are not specified, and no set-aside criteria are indicated, meaning the contract is open to all qualifying entities. The solicitation is accessible via the SAM.gov portal, and all proposals must be submitted before the stated deadline to be considered.