Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Healthcare Cybersecurity & Privacy Compliance Audit

Active

State & Local

Response Deadline10/07/2026, 07:50:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Healthcare Cybersecurity and Privacy Compliance Audit is a subcontract with Gwinnett County Government focused on providing independent security auditing and privacy validation for prime contractors on Fire and Emergency Services projects. The scope of work includes performing yearly internal process audits to ensure strict compliance with NIST SP 800-53, NIST SP 800-171, and HIPAA standards. Additionally, the contractor must validate that all patient-facing portals meet ADA and WCAG 2.1 Level AA accessibility requirements. Utilizing specialized security auditing tools and compliance frameworks, the contractor is responsible for delivering annual internal process audit reports and official security certifications. This opportunity, categorized under NAICS code 541690, was posted on September 16, 2026, with a response deadline of October 7, 2026.

General Info

Subcontract for Gwinnett County providing NIST, HIPAA, and accessibility compliance security auditing.

Agency

Georgia → Gwinnett County GovernmentView Agency

NAICS

541690 - Other Scientific and Technical Consulting ServicesView NAICS

Place of Performance

GA, USA

Set-Aside

NONE

Documents

This scope was carved out of RP028-26.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RP028-26 Provision of Emergency Medical Patient Billing Services on an Annual Contract

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 16

subcontract

Response DeadlineOct 7

Submission deadline

Response Deadline

10/07/2026, 07:50:00 PM UTCin 21 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyGeorgia → Gwinnett County Government

ContactsNo contacts available

OfficeN/A

Organization / Agency

Georgia → Gwinnett County Government

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Provides independent security auditing and privacy validation for prime contractors on Gwinnett County Fire and Emergency Services projects. Performs yearly internal process audits and validates compliance with NIST SP 800-53, NIST SP 800-171, and HIPAA. Ensures ADA and WCAG 2.1 Level AA compliance for patient-facing portals. Uses security auditing tools and compliance frameworks. Delivers annual internal process audit reports and security certifications.

Similar Contracts

Same NAICS industry code

Consulting (Various) On-Call Services

Solicitation # 20260916018

The County of Santa Cruz General Services Department, Capital Projects Section, is seeking qualified consulting firms for various on-call professional services to support the development and maintenance of county facilities and infrastructure. This solicitation covers 26 disciplines, including architecture, engineering, environmental consulting, land surveying, and construction management. Selected firms will be placed on a master on-call list for a three-year term, with individual project contracts negotiated as needed. Statements of Qualifications must be submitted electronically via the OpenGov portal by October 16, 2026, at 4:00 PM. Evaluation is conducted by a County Selection Committee based on a point system covering consultant qualifications, experience, ability to adhere to budgets and schedules, and references, with a pass/fail assessment for response completeness and conflict of interest statements. Qualified personnel must hold appropriate California state licensure and possess at least five years of demonstrated experience in their field. Compensation is based on a proposed fee schedule provided by the consultant and paid on a monthly basis. The contract incorporates specific local requirements, including adherence to the Santa Cruz County Code regarding the presentation of claims, living wage provisions, and Board of Supervisors approval for total compensation exceeding 200,000 dollars.

County of Santa Cruz General Services Department

POSTED

about 13 hours ago

DEADLINE

Regulatory & GMP/GLP Compliance ConsultingThis subcontract for the Advanced Research Projects Agency for Health (ARPA-H) focuses on providing specialized regulatory and compliance consulting for prime contractors involved in COSMOS projects. The primary objective is to ensure that the development of microphysiological systems occurs under Good Manufacturing Practice and Good Laboratory Practice conditions to secure future FDA regulatory approval for reproducible disease models. The selected provider must possess extensive expertise in FDA regulatory standards specifically related to in vitro testing models. Key deliverables include the creation of regulatory compliance roadmaps and alignment reports to guide the project toward successful regulatory buy-in. The opportunity is categorized under NAICS code 541690, with a response deadline of October 7, 2026.

Advanced Research Projects Agency For Health (arpa-H)

POSTED

about 17 hours ago

DEADLINE

HRSA/MCHB Newborn Screening Systematic Evidence Review IDIQ and Task Order 1

Solicitation # 75R60226R00026

The Health Resources and Services Administration, Maternal and Child Health Bureau (HRSA/MCHB) is soliciting proposals under solicitation 75R60226R00026 to establish a multiple-award Indefinite-Delivery, Indefinite-Quantity (IDIQ) contract pool of three to five contractors. The primary objective is to secure specialized scientific methodologies and systematic clinical evidence reviews to support the Secretary of Health and Human Service’s Recommended Uniform Screening Panel (RUSP). The master IDIQ has a five-year period of performance, including a 12-month base period and four sequential 12-month option periods, with a total collective ceiling value of 15,111,361.00 dollars. Concurrently, the government will award Task Order 1 as a firm-fixed-price contract to provide support for evidence reviews and newborn screening processes, including a specific clinical evidence review for biliary atresia and the development of a manual of procedures. This procurement is conducted as a full and open competition under FAR Part 12 and FAR Part 15. Amendment 0001 has modified the solicitation by removing the GSA MAS prerequisite, absorbing AI compliance requirements into Task 2, and updating the pricing template in Attachment 2a. Proposals must be submitted in three volumes: a technical proposal limited to 25 pages, a past performance volume, and a price proposal. Technical evaluation is significantly more important than past performance, which is in turn more important than price. Offerors must designate a single Primary Principal Investigator and adhere to strict electronic submission guidelines by the deadline of September 22, 2026, at 5:00 PM EDT. Large business prime contractors are required to submit a formal Small Business Subcontracting Plan.

Hrsa Headquarters

POSTED

about 17 hours ago

DEADLINE

Psychological Health and Safety Data Analysis

Solicitation # W912P626QA032

The USACE Chicago District intends to award a sole source contract to TOR INTELLIGENCE, LLC for expert-level human factors analysis, safety analytics, and psychological health program evaluation. The scope of work involves analyzing at least five years of safety and accident data, auditing psychological health programs, and performing cross-system correlation analysis between training completion rates and incident occurrences. The contractor will provide actionable recommendations, white papers, and executive summaries designed to mitigate workforce risk and reduce worker compensation costs. This requirement is categorized under NAICS code 541690 and PSC R410, with a size standard of 19 million dollars. While the government intends to utilize a sole source procurement under FAR 12.102(a), it will consider other responsible sources that can demonstrate the ability to fulfill the requirements without compromising quality. Interested parties must be registered in the System for Award Management and submit their capabilities via email to the designated points of contact by 10:00 am Central Time on September 15, 2026.

W072 Endist Chicago

POSTED

about 17 hours ago

DEADLINE

Peer-review of NASA Guidelines for Establishing SMACs and SWEGs and Evaluation

Solicitation # 80NSSC26942495Q

NASA Shared Services Center

POSTED

about 17 hours ago

DEADLINE

Public Health Data Integration SpecialistThe Public Health Data Integration Specialist subcontract supports prime contractors within the California Health - Public Health, Policy & Planning agency. The role focuses on analyzing public health data to determine community needs, integrating County data inventories, and validating findings for Community Health Assessment reports. Key deliverables include comprehensive data analysis reports and integrated data sets. Technical requirements for this position emphasize expertise in data stewardship, secure file transfer, and strict data destruction protocols. This opportunity falls under NAICS code 541690, with a response deadline of October 2, 2026.

Health - Public Health, Policy & Planning

POSTED

DEADLINE

Third-Party Risk Management (TPRM) Framework DevelopmentThis subcontract opportunity with the state of New Mexico focuses on the development of a scalable, multi-tenant Third-Party Risk Management framework for prime contractors working on Office of Cybersecurity projects. The goal is to standardize the processes by which local entities discover, tier, assess, and continuously monitor various external partners, including software providers, resellers, managed service providers, and third-party vendors. The project requires specialized expertise in multi-tenant architecture and supply-chain cybersecurity risk management to ensure a secure and efficient program design. The final deliverable consists of a fully documented TPRM framework and program design. Interested parties must respond by October 16, 2026, under NAICS code 541690.

POSTED

DEADLINE

Data Management & Evaluation SpecialistThis subcontract for a Data Management and Evaluation Specialist supports the Massachusetts Executive Office of Public Safety and Security by managing data collection and reporting infrastructure for prime contractors on EARI projects. The selected provider is responsible for creating and managing submission platforms via Qualtrics or REDCap, validating submitted data, and coordinating site information to produce a final annual legislative report. The opportunity was posted on September 15, 2026, with a response deadline of October 9, 2026. Operating under NAICS code 541690, the contract is managed by the Office of Grants and Research. Key deliverables include a fully functional data platform, cleaned datasets, and the completed legislative report.

EPS1100 - Office of Grants & Research

POSTED

DEADLINE

Emergency Response Planning ConsultantThe Emergency Response Planning Consultant subcontract focuses on reviewing and recommending revisions to Organizational Response Plans for prime contractors working on Sarasota County Emergency Services EMS projects. The selected consultant will analyze existing plans, suggest updates based on operational needs and industry best practices, and collaborate directly with the Sarasota County Fire Department to integrate these changes. The primary objective is the delivery of a comprehensive, revised Organizational Response Plan. This opportunity is managed by the Florida Emergency Services agency under NAICS code 541690. The solicitation was posted on September 15, 2026, with a response deadline of October 19, 2026. Candidates must possess specialized expertise in emergency management and organizational response structures to successfully execute the requirements of this contract.

Emergency Services

POSTED

DEADLINE

in about 1 month

EMS Protocol ConsultantThe EMS Protocol Consultant subcontract involves the review, drafting, adoption, and implementation of clinical protocols for prime contractors supporting Sarasota County Emergency Services EMS projects. The selected consultant will be responsible for evaluating existing medical protocols, creating new clinical guidelines, establishing adoption timelines, and ensuring adherence through clinical audits. This role requires extensive expertise in current EMS clinical standards as well as state and national medical guidelines to produce an updated EMS Protocol Manual and comprehensive compliance monitoring reports. This opportunity is categorized under NAICS code 541690 and is managed by the Florida Emergency Services agency. The solicitation was posted on September 15, 2026, with a response deadline of October 19, 2026. Interested parties can find further details through the provided OpenGov procurement portal.

Emergency Services

POSTED

DEADLINE

in about 1 month

Quality Control and Remediation ServicesThis subcontract for Quality Control and Remediation Services supports the Department of Defense Land Supply Chain ESOC Buys. The primary objective is to perform quality inspections and the removal of unauthorized government identification from supplies delivered by prime contractors. Specifically, the provider must execute RQ011 requirements to remove markings, stamps, and labels from non-accepted supplies while ensuring part integrity is maintained and items are verified against DLA Master List R and I requirements. The scope of work includes the delivery of certified inspection reports and the provision of cleaned supplies. Performance will take place in Chambersburg, Pennsylvania, under NAICS code 541690. The solicitation was posted on September 15, 2026, with a response deadline of September 28, 2026.

LAND SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Technical Documentation & Manual DevelopmentThe Technical Documentation and Manual Development subcontract, issued by the Department of Defense under the ASC Supplier Oper AE and AF Division, focuses on creating comprehensive operating and maintenance instructions for prime contractors on DLA Aviation projects. The scope of work includes drafting technical manuals, installation guides, and operation manuals, with a specific emphasis on documenting form, fit, and function data while adhering to aviation technical writing standards and government documentation requirements. This opportunity is categorized under NAICS code 541690 and was posted on September 15, 2026, with a response deadline of October 21, 2026. The primary objective is the delivery of finalized operating and maintenance instructions and manuals to support aviation project requirements.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

in about 1 month

More opportunities from Georgia → Gwinnett County Government

Same awarding agency

Oversized Tree Transport and Delivery

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 13 hours ago

DEADLINE

Norway Spruce Tree Supplier

Nursery and Tree Production

POSTED

about 13 hours ago

DEADLINE

IWQ 138150 Christmas Trees

Solicitation # IWQ #138150

Gwinnett County Government issued Informal Written Quotation IWQ 138150 on September 16, 2026, for the procurement of one symmetrical, fresh-cut Norway Spruce Tree measuring between 30 and 35 feet tall. Quotes are due by September 22, 2026, and must be submitted in a sealed envelope to the Gwinnett County Purchasing Division. The award will be granted to the lowest responsive and responsible vendor, with evaluation factors including price, quality, conformity to specifications, suitability, and delivery terms. The selected supplier must coordinate with the Gwinnett County Department of Community Services to ensure delivery or pickup occurs during the first week of November 2026. Delivery is required at the Gwinnett County Historic Courthouse in Lawrenceville, Georgia, between 7:30 A.M. and 3:30 P.M., Monday through Friday. If the vendor opts for pickup, the location must be within one day's trip of Lawrenceville. The unit price must be all-inclusive of shipping, delivery, and pickup costs. Required submittal documents include the County Quote/Bid/Fee Schedule, compliance sheets, a certification of non-collusion, and three references. Depending on the contract value and fulfillment method, a Contractor Affidavit and Agreement, an Ethics Affidavit, and a Certificate of Insurance may be required. Payment will be made via electronic payment only after the items are delivered and the contract of carriage is completed.

POSTED

about 13 hours ago

DEADLINE

EMS Billing & Revenue Cycle ManagementThis subcontract for EMS Billing and Revenue Cycle Management supports prime contractors on Gwinnett County Fire and Emergency Services projects. The selected provider will manage end-to-end emergency medical patient billing, which includes inputting billing data, transmitting electronic invoices to insurance carriers, and handling the appeals process for denied claims. To qualify, the provider must utilize electronic billing software, maintain strict HIPAA compliance, and demonstrate at least five years of professional ambulance billing experience. The primary objective of the contract is the delivery of processed claims and the successful recovery of payments. This opportunity is associated with the Gwinnett County Government in Georgia under NAICS code 541219. Interested parties must submit their responses by October 7, 2026.

Other Accounting Services

POSTED

about 13 hours ago

DEADLINE

RP028-26 Provision of Emergency Medical Patient Billing Services on an Annual Contract

Solicitation # RP028-26

Gwinnett County is soliciting competitive sealed proposals for the provision of comprehensive emergency medical patient billing and records management services for the Department of Fire and Emergency Services. The contract consists of an initial one-year term with four optional one-year renewals. The selected service provider will be responsible for end-to-end billing operations, including inputting billing information, processing and transmitting invoices to insurance carriers, managing denied claims appeals, and overseeing Ambulance Supplemental Payment Program services. A critical technical requirement is the ability to interface with the Gwinnett County Fire and Emergency Services ESO Solutions ePCR system to receive data in NEMSIS format. The award will be granted to the highest scoring firm based on a three-phase evaluation process involving a technical evaluation, a cost evaluation where the lowest cost receives the most points, and an optional interview or demonstration. Proposals must be submitted in sealed envelopes by October 7, 2026, and must include a company profile, evidence of five years of ambulance billing experience, and a signed contractor affidavit. Providers must adhere to strict security and privacy standards for Protected Health Information, maintain specific insurance ratings, and provide necessary bid, performance, and payment bonds. Firms on the Gwinnett County ineligible source list are prohibited from submitting proposals.

Other Accounting Services

POSTED

about 13 hours ago

DEADLINE

Tapping Sleeve SupplierThis subcontract agreement involves the supply of specialized tapping sleeves for prime contractors working on water infrastructure projects for the Gwinnett County Government in Georgia. The scope of work specifically requires the delivery of 30 inch by 12 inch tapping sleeves with an outer diameter range of 31.52 to 32.22, identifying the ROMAC FTS420 Item FTS420-32.22 or an approved equivalent as the required standard. The opportunity was posted on September 16, 2026, with a response deadline of September 18, 2026. Classified under NAICS code 334210, the contract focuses on the procurement and delivery of these critical components to support the county's water system infrastructure.

Telephone Apparatus Manufacturing

POSTED

about 16 hours ago

DEADLINE

30" Ductile Iron Pipe SupplierThis subcontract agreement is for the supply of large diameter ductile iron piping to prime contractors working on water infrastructure projects for the Gwinnett County Government in Georgia. The specific requirement is for the delivery of six units of 30 inch by 20 foot Class 250 Ductile Iron Pipe featuring slip joints and cement lining. To qualify, the supplier must strictly adhere to Class 250 specifications and provide three professional references for projects of a similar scope. The solicitation was posted on September 16, 2026, with a response deadline of September 18, 2026.

POSTED

about 16 hours ago

DEADLINE

IWQ 138607 Large Diameter Ductile Parts

Solicitation # 138607

Gwinnett County Government is soliciting informal written quotations for the procurement of large diameter ductile parts, specifically 30 inch by 20 foot DIP slip joint cement lined class 250 pipes and various tapping sleeves and gland retainers, including ROMAC FTS420 models or approved equivalents. Quotes are due by 3:00 PM on September 18, 2026. The award will be granted to the lowest responsive and responsible vendor, with the county reserving the right to split the award or award quotes in their entirety. Evaluation factors include the quality of articles, conformity with specifications, suitability to county requirements, and delivery terms. Vendors must provide a minimum of three references for work of similar size and scope and submit a signed certification of non-collusion. For service contracts exceeding 2,499.99 dollars, a notarized Contractor Affidavit and Agreement is required. Deliveries must be made Monday through Friday between 9:00 AM and 4:00 PM and are shipped F.O.B. Destination, Freight Prepaid and Allowed. Payment is processed upon acceptance at the destination, with electronic payment options available via ePayables or direct deposit. Submittals must be delivered in a sealed envelope to the Gwinnett County Purchasing Division, as emailed or faxed quotes will not be considered.

Fabricated Pipe and Pipe Fitting Manufacturing

POSTED

about 16 hours ago

DEADLINE

Delivery and Logistics ServicesThis subcontract for Delivery and Logistics Services involves the transport and delivery of commercial furniture for prime contractors supporting Gwinnett County Department of Parks and Recreation projects. The selected provider will be responsible for loading, hauling, and unloading furniture using freight trucks at the Best Friend Park Hudlow Tennis Center located in Norcross, Georgia. The contractor must maintain full DOT compliance and carry appropriate commercial hauling insurance to ensure safe and legal transport to the designated site. This opportunity is categorized under NAICS code 484220 and is managed by the Gwinnett County Government in Georgia.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Furniture Supplier (Chairs and Tables)This subcontract with the Gwinnett County Government involves the supply of commercial-grade chairs and tables for prime contractors working on Department of Parks and Recreation projects. The supplier is required to provide furniture that meets or exceeds the quality standards of Uline items H-6522BL and H-6270BL, and must provide necessary documentation if proposing equivalent product substitutions. All specified furniture must be delivered to the Hudlow Tennis Center. The opportunity was posted on September 14, 2026, with a response deadline of September 21, 2026, falling under NAICS code 423220.

Home Furnishing Merchant Wholesalers

POSTED

DEADLINE

IWQ 133316, Purchase of Chairs and Tables

Solicitation # IWQ #133316

Gwinnett County is soliciting competitive quotes under Informal Written Quote IWQ 133316 for the purchase of 40 stackable chairs and 10 cafe tables for the Department of Parks and Recreation. The furniture must be delivered to the Best Friend Park Hudlow Tennis Center in Norcross, Georgia. While Uline products are listed to establish the quality standard and basis of design, equivalents that meet or exceed these specifications are acceptable, provided the supplier proves their quality. The award will be granted to the lowest responsive and responsible vendor, with evaluation factors including product quality, conformity to specifications, suitability for county requirements, and delivery terms. Quotes must be submitted in a sealed envelope to the Gwinnett County Purchasing Division by 3:00 P.M. on September 21, 2026. Required documentation includes the County Fee Schedule, compliance sheets, three professional references, and a signed certification of non-collusion. Depending on the specific requirements, a 5 percent bid bond, a contractor affidavit, and an ethics affidavit for solicitations over 100,000 dollars may be necessary. Shipping must be F.O.B. Destination, Freight Prepaid and Allowed, with the seller retaining title and risk of transportation. Payment will be processed electronically via direct deposit or virtual credit card. The contract includes provisions for termination for cause with 10 days notice or for convenience with 30 days notice.

Furniture Merchant Wholesalers

POSTED

DEADLINE

Water Main Gland Retainers and Tapping Sleeves SupplyThis subcontract for the Gwinnett County Government involves the supply of specialized water infrastructure components for prime contractors. The scope of work requires the delivery of eight 30 inch MJ DI gland retainers conforming to EBBA 1130 and one 30 inch by 12 inch tapping sleeve, specifically ROMAC FTS420 or an equivalent model. Suppliers must provide full identification including the brand name, model, and catalog number for all equipment. The project falls under NAICS code 221310 and is associated with the Gwinnett County Department of Financial Services water infrastructure projects.

Water Supply and Irrigation Systems

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS