FISMA/NIST Security Compliance and Privacy Impact Assessment

This subcontract opportunity with the Department of Veterans Affairs, managed by Rpo Central, focuses on FISMA/NIST security compliance and Privacy Impact Assessments for VHA information systems. The selected provider will be responsible for security design, documentation, and auditing for prime contractors, ensuring all security controls are implemented according to FIPS 199, FIPS 200, NIST SP 800-37, and VA Handbook 6500 standards. Key deliverables include the completion of Privacy Impact Assessments for VA Privacy Service approval using Risk Management Frameworks, as well as the delivery of approved System Security Plans and Authorization to Operate documentation. This requirement falls under NAICS code 541519, with a response deadline of November 3, 2026.