Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Healthcare IT Compliance & Cybersecurity Audit

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract mandates an independent audit and compliance verification of the Auto-Notify system to confirm adherence to HIPAA, DoD RMF, and NIST 800-53 cybersecurity standards, specifically for the protection of health information. The scope requires a thorough assessment of the system’s controls, policies, and technical configurations to ensure they meet the stringent requirements for safeguarding protected health information across federal healthcare and defense environments. The audit must validate both technical implementations and organizational processes to guarantee ongoing compliance and risk mitigation. This subcontract is under the Department of Defense’s W40M MRC0 West agency, with performance centered at Fort Hood, Texas, 76544. It is classified under NAICS code 541512, indicating it falls within computer systems design and related services. The posting date is June 30, 2026, and while no solicitation number is provided, the work will be executed by a qualified third party with demonstrated expertise in healthcare IT security frameworks. The audit must deliver actionable findings, remediation paths, and certification of compliance to support the DoD’s mission-critical health data infrastructure.

General Info

Independent audit of Auto-Notify system for HIPAA, DoD RMF, and NIST 800-53 compliance at Fort Hood, Texas.

Agency

Department Of Defense → W40M MRC0 West

NAICS

541512 - Computer Systems Design Services

Place of Performance

Fort Hood, TX, 76544, USA

Set-Aside

NONE

Documents

This scope was carved out of 0012419344.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

NOTICE OF AWARD

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedJun 30

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → W40M MRC0 West

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → W40M MRC0 West

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Independent audit and compliance verification of the Auto-Notify system to ensure alignment with HIPAA, DoD RMF, and NIST 800-53 cybersecurity standards for protected health information.

Similar Contracts

Same NAICS industry code

SDOH Data Analytics & ToolingThis subcontract for SDOH Data Analytics and Tooling supports prime contractors on Massachusetts Department of Mental Health projects by providing tools to track and analyze Social Drivers of Health. The scope of work involves deploying screening tools and integrating social determinants data into clinical workflows through the use of reporting dashboards and data analytics platforms. The selected provider is responsible for delivering analytical reports and tracking tools while maintaining strict data privacy certifications. This opportunity is associated with NAICS code 541512 and is managed by the Massachusetts statewide DMH office, with a response deadline of November 3, 2026.

DMH08 - STATEWIDE

POSTED

about 7 hours ago

DEADLINE

MetroAccess Fare Collection and Management System

Solicitation # WMATA-0000010941

The Washington Metropolitan Area Transit Authority is seeking proposals for the MetroAccess Fare Collection and Management System under solicitation number WMATA-0000010941. This project falls under NAICS code 541512, focusing on computer systems design services to enhance the transit authority's fare management capabilities. The solicitation was posted on October 20, 2026, with a strict response deadline of October 27, 2026. Interested parties must submit their responses through the official supplier portal to be considered for this Virginia-based agency initiative.

Washington Metropolitan Area Transit Authority

POSTED

about 9 hours ago

DEADLINE

Registration Services Booking and Management System

Solicitation # ocds-h6vhtk-0789d8

Herefordshire Council is seeking a Registration Services Booking and Management System to manage the end-to-end administration of registration appointments, ceremonies, customer self-service, payments, and reporting. The procurement includes both the software package and information systems as well as software implementation services. The contract is valued at an estimated 240,000 pounds including VAT. Award decisions will be based on a weighted evaluation of 70 percent for quality and 30 percent for price. The initial period of performance is five years, starting December 23, 2026, and ending December 22, 2031, with the possibility of two optional one-year extensions that could extend the term to December 22, 2033. These extensions are contingent upon satisfactory contractor performance and budget approvals. The service must comply with evolving legislation, statutory guidance, and national standards. Interested parties must submit their responses in English via the Supplying the Southwest Portal by the deadline of November 13, 2026, at 5:00pm.

Herefordshire Council

POSTED

about 9 hours ago

DEADLINE

AI Automation Platform Configuration SpecialistThe AI Automation Platform Configuration Specialist subcontract involves the technical configuration and integration of ACCELQ Enterprise features for prime contractors working on State of Ohio administration projects. The scope of work focuses on establishing a fully operational environment by configuring Single Sign On, validating mainframe testing support, and integrating Jira and Azure plugins. Additionally, the specialist is responsible for implementing critical quality assurance capabilities, including web performance validation, responsive validation on emulated devices, and accessibility testing compliant with WCAG standards. This engagement is categorized under NAICS code 541512 and is managed through the OhioBuys system.

Puc300000 Administration Puc4

POSTED

about 11 hours ago

DEADLINE

Cash Flow Management & Banking Technology ImplementationThis subcontract for Cash Flow Management and Banking Technology Implementation involves the design, implementation, and integration of technological initiatives for prime contractors supporting SUNY Stony Brook banking projects. The primary objective is to develop digital banking interfaces and integrate banking software with University ERP systems to enhance automated reporting and cash flow visibility, ultimately delivering a fully functional system for cash management. The project mandates strict adherence to financial data handling standards, specifically requiring GLBA compliance and SOC 2 Type II certification. Interested parties should note that the response deadline is December 8, 2026, and the work falls under NAICS code 541512 for the State University of New York.

State University of New York

POSTED

about 11 hours ago

DEADLINE

in about 2 months

VTC and Audiovisual (A/V) System IntegrationThis small business set-aside subcontract involves the modernization, installation, and integration of Video Teleconferencing and Audiovisual hardware and software for prime contractors supporting Air Force projects at Hanscom AFB. The scope of work includes installing AV equipment and integrating NIPR and SIPR Teams capabilities through a single codec, while maintaining strict physical and electrical separation between SIPR and NIPR lines to ensure a fully operational integrated system. Technical compliance is critical for this effort, requiring adherence to NSTISSAM TEMPEST/2-95 standards, DISA Video Services Policy STIG compliance, and JITC Approval. Managed under NAICS code 541512 for the Department of Defense, the project is overseen by the AFLCMC Hanscom PZI. Responses for this opportunity are due by December 4, 2026.

FA2835 Aflcmc Hanscom Pzi

POSTED

about 13 hours ago

DEADLINE

in about 1 month

Event-Driven and Streaming Data IntegrationThis subcontract opportunity, titled Event-Driven and Streaming Data Integration, is issued by the Department of Veterans Affairs Technology Acquisition Center Nj. The project focuses on implementing event-driven architectures for prime contractors on VA OIT projects to facilitate real-time data streaming. The selected provider will be responsible for configuring message brokers and developing producers and consumers utilizing technologies such as Apache Kafka, RabbitMQ, or Amazon Kinesis to deliver a fully operational streaming exchange environment. All work must adhere to strict VA cybersecurity standards and meet high-availability reliability metrics. The solicitation is categorized under NAICS code 541512, with a response deadline set for November 4, 2026.

Technology Acquisition Center Nj (36C10B)

POSTED

about 13 hours ago

DEADLINE

Bulk Analytical Data Pipeline EngineeringThe Bulk Analytical Data Pipeline Engineering subcontract supports Department of Veterans Affairs OIT projects by migrating authoritative data into bulk analytical formats. The scope of work involves designing data lake architectures and building ETL/ELT pipelines utilizing technologies such as Snowflake, Databricks, or AWS Lake Formation. The primary objective is to deliver scalable data pipelines and a structured environment while ensuring strict adherence to VA privacy and records management standards to maintain data portability. This opportunity is issued by the Technology Acquisition Center Nj under NAICS code 541512. Interested parties must note the response deadline of November 4, 2026, for this specific engineering effort aimed at enhancing the data capabilities of prime contractors working with the Department of Veterans Affairs.

Technology Acquisition Center Nj (36C10B)

POSTED

about 13 hours ago

DEADLINE

PHI Cybersecurity ImplementationThe PHI Cybersecurity Implementation subcontract, issued by the Department of Health and Human Services under BARDA, focuses on establishing robust cybersecurity frameworks to protect sensitive patient health information for medical device projects. The scope of work includes the deployment of secure cloud infrastructure, encryption protocols, and secure data transmission systems to ensure safe medical device connectivity. The selected provider will deliver a comprehensive secure data management system and a final cybersecurity certification. Strict adherence to regulatory and technical standards is required, specifically HIPAA compliance, NIST SP 800-53, and HITRUST standards. This opportunity falls under NAICS code 541512 and is based in Washington. Interested parties must submit their responses by November 18, 2026.

Barda - Aspr / Daappo / Barda Dcma

POSTED

about 13 hours ago

DEADLINE

Cloud & IT Systems Engineering (Decision Support Systems)This subcontract opportunity with W4LD USA Hecsa under the Department of Defense focuses on the development and maintenance of automated information management and decision support systems for prime contractors working on USACE water resources projects. The scope of work encompasses cloud systems engineering, IT systems architecture, and software development, with a specific requirement for all deliverables to be Section 508 compliant. Key technical requirements include the delivery of software applications, cloud infrastructure, and automated data tools, with a strict mandate for U.S.-based data storage in accordance with DFARS 239.7602-2. Interested parties should note the response deadline of November 6, 2026, for this effort categorized under NAICS code 541512.

POSTED

about 13 hours ago

DEADLINE

HSIN Interoperability and Integration SupportThe HSIN Interoperability and Integration Support subcontract, issued by the Department of Homeland Security Air and Marine Contracting Division, focuses on the technical integration of a SaaS platform with the Homeland Security Information Network for prime contractors on CBP projects. The scope of work involves developing interface-control documents and data-flow diagrams, while implementing data exchange through APIs, web services, and identity federation. Successful execution requires deep expertise in HSIN governance to deliver validated connections and comprehensive integration inventories. This opportunity is categorized under NAICS code 541512 and is based in Washington, DC. Interested parties must note the response deadline of November 10, 2026. The project ensures seamless interoperability between external software platforms and critical government information networks to support agency operations.

Air And Marine Contracting Division

POSTED

about 13 hours ago

DEADLINE

SaaS Platform Administration & OperationsThe SaaS Platform Administration and Operations subcontract, issued by the Department of Homeland Security Air and Marine Contracting Division, focuses on the daily administration and operational sustainment of a secure SaaS data platform for prime contractors on CBP projects. The scope of work includes managing user accounts, roles, permissions, and tenant administration, while ensuring platform availability and performance through the management of upgrades, releases, and patches within FedRAMP-authorized environments. Key deliverables include maintained platform availability, detailed configuration records, and regular operational status reports. This opportunity is categorized under NAICS code 541512 and is based in Washington, DC. Interested parties should note the posted date of October 20, 2026, with a response deadline of November 10, 2026.

Air And Marine Contracting Division

POSTED

about 13 hours ago

DEADLINE

More opportunities from Department Of Defense → W40M MRC0 West

Same awarding agency

Human Cadaver - Based Medical Training and Program Support Services for the 44th Medical Brigade stationed at Fort Bragg Army Base, North Carolina.

Solicitation # 0012468284

The Medical Acquisition Support Office – Alpha is seeking capable vendors to provide human cadaver-based medical training and program support for the 44th Medical Brigade. The scope of work includes the procurement and delivery of up to 20 ethically sourced, non-dissected perfused whole-body cadaver specimens annually, which must be serologically negative for HIV, Hepatitis B/C, and Syphilis. The contractor is responsible for providing refrigerated transportation to primary performance sites at Fort Bragg, NC; Fort Campbell, KY; Fort Stewart-Hunter Army Airfield, GA; and Fort Polk, LA. Additionally, the contractor must provide rental medical equipment and consumable Class VIII supplies, such as surgical packs, tourniquets, and simulated blood. The requirement includes providing highly qualified Subject Matter Experts (SMEs) to support up to 10 training events per fiscal year. These SMEs must be board-certified general surgeons with specific competencies in various trauma procedures, such as cricothyroidotomy and exploratory laparotomy, to serve as instructors and mentors. The anticipated contract structure consists of a base period followed by four one-year option periods. All personnel must comply with strict Installation Access Control System requirements, including Anti-Terrorism Level I and iWatch training, to gain access to military installations.

Blood and Organ Banks

POSTED

DEADLINE

Cadaver Medical Training SupportThe Cadaver Medical Training Support subcontract, issued by the Department of Defense under W40M MRC0 West, involves providing technical and logistical assistance to prime contractors for medical training projects. The scope of work focuses on operational support for training days, specifically the preparation and management of cadavers utilizing specialized medical training lab equipment. The contract specifies a delivery requirement of 10 units of support and 10 training days per year. To ensure installation access, personnel are required to complete Anti-Terrorism Level I and iWatch training. This opportunity falls under NAICS code 621991 and is performed in the 78234 zip code area. Interested parties should note the response deadline of October 30, 2026.

Blood and Organ Banks

POSTED

DEADLINE

Surgical Subject Matter Expert (SME) SupportThe Surgical Subject Matter Expert (SME) Support subcontract, issued by the Department of Defense under agency W40M MRC0 West, requires the provision of high-level surgical instruction and oversight for prime contractors on medical training projects. The selected provider must deliver expert guidance on specific surgical procedures, such as exploratory laparotomy and cricothyroidotomy, utilizing specialized training facilities and instruments. To qualify for this role, personnel must be Board-Certified General Surgeons. The contract stipulates a delivery of 10 units of SME support per year. Interested parties should note the response deadline of October 30, 2026, for this opportunity categorized under NAICS code 621111.

Offices of Physicians (except Mental Health Specialists)

POSTED

DEADLINE

Human Cadaver SupplyThis subcontract with the Department of Defense, specifically W40M MRC0 West, involves the procurement and delivery of human cadavers to support prime contractors on medical training projects. The selected provider is responsible for sourcing and transporting human remains in strict accordance with all applicable legal and ethical standards, ensuring that deliveries align with established workload data. The contract specifies a delivery requirement of 20 cadavers per year. The performance period consists of a base year with four additional option years. This opportunity is categorized under NAICS code 423450 and is associated with a place of performance in zip code 78234.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Calibration and Temperature Mapping

Solicitation # W81K0027QA015

Solicitation W81K0027QA015 is a request for firm-fixed-price commercial services to provide accredited calibration and temperature mapping for the Food Analysis and Diagnostic Laboratory at Fort Sam Houston, Texas. The scope of work includes the calibration and temperature mapping of up to five autoclaves, annual calibration for up to twenty-six analytical balances, calibration for a high volume of pipettes, offsite calibration for up to six reference weight sets, and onsite calibration for up to nine reference thermometers. All services and resulting reports must comply with ISO 17025:2017 and American Association for Laboratory Accreditation standards, with final reports delivered within five calendar days of service completion. The period of performance is scheduled from December 1, 2026, to November 30, 2027, with an estimated government value of 26,000 dollars. This unrestricted solicitation is open to all qualified firms, including Women-Owned Small Businesses, with a price evaluation preference granted to HUBZone small business concerns. Proposals must be submitted electronically to the designated point of contact by October 28, 2026. Evaluation is based on price and technical capability, requiring a technical quotation not exceeding ten pages and a fully completed pricing schedule. Award eligibility requires current registration in the System for Award Management.

Testing Laboratories and Services

POSTED

DEADLINE

Ground Ambulance Services at Ft. Polk, LA

Solicitation # W81K00-26-R-A051

Solicitation W81K00-26-R-A051 is a Firm Fixed Price contract for Ground Ambulance Services at Fort Polk, Louisiana, supporting the U.S. Army Medical Department Activity Operational Area-Ranges. The contractor is responsible for providing 24/7/365 advanced life support emergency medical services, including transports to and from aero-medical evacuation sites and participation in emergency exercises. Required staffing includes an Emergency Medicine physician medical director, a Senior Level Paramedic serving as the On-Site Program Manager, Paramedics, and EMTs. The contract consists of a base period from April 1, 2027, to September 30, 2027, with four subsequent option periods extending through September 2031. Award will be made on a Best-Value Tradeoff basis, where past performance is significantly more important than price. Technical proposals are evaluated for acceptability across four subfactors: technical capabilities, personnel qualifications, vehicle and equipment maintenance, and quality management. Offerors must demonstrate compliance with Army Regulation 40-3, Louisiana State Law, OSHA, and HIPAA. Proposals are due by 8:00 AM CDT on October 21, 2026, and must include a completed SF1449, a 90-day price validity statement, and evidence of recent relevant past performance from the last three years. This is an 8(a) set-aside for economically disadvantaged women-owned small businesses.

Ambulance Services

POSTED

DEADLINE

in about 12 hours

Prime Source Verification (PSV) and Credentialing SupportThis subcontract for the Department of Defense involves providing healthcare credentialing support for prime contractors on U.S. Army H2F projects. The primary scope of work includes conducting Prime Source Verification of professional licenses and certifications, maintaining Competency Assessment Folders, and performing eligibility screenings via the HHS/OIG LEIE and TRICARE Sanctions lists. The service provider must possess specialized knowledge of DHA or Joint Commission credentialing standards and adhere to strict HIPAA regulations regarding the handling of PII and PHI. The final deliverable consists of verified credential files. This opportunity is categorized under NAICS code 561110 and is associated with the W40M MRC0 West agency.

Office Administrative Services

POSTED

DEADLINE

OCONUS Athletic Training Staffing ServicesThe OCONUS Athletic Training Staffing Services subcontract involves providing certified Athletic Trainers to support U.S. Army H2F projects in overseas locations. These professionals are responsible for delivering on-site clinical care, including musculoskeletal triage, prophylactic taping, and bracing, all aimed at reducing lost duty time. Additionally, staff must maintain updated patient records and track readiness metrics and encounter counts within the H2FMS. To qualify for this role, personnel must be U.S. citizens with active athletic trainer certification and a favorable Tier 1 background investigation. This opportunity is managed under the Department of Defense for the W40M MRC0 West agency, with a response deadline set for October 6, 2027.

Offices of All Other Miscellaneous Health Practitioners

POSTED

DEADLINE

Athletic Trainer (AT) Support personal services - Europe

Solicitation # PANHCA26P0000033222

The Medical Acquisition Support Office is issuing a Sources Sought Notice to identify potential providers for Athletic Trainer (AT) Support Services for USAREUR. This requirement is a follow-on to a previous contract awarded to Cognito Systems LLC and aims to support the Holistic Health and Fitness (H2F) System to optimize Soldier readiness and mitigate musculoskeletal injuries. The contractor will be required to provide eighteen full-time equivalent certified Athletic Trainers and six Lead Athletic Trainers who meet Department of Defense and Defense Health Agency credentialing standards. These personnel will be embedded across six Brigades distributed among five military installations in Germany and Italy, specifically covering clusters in Vilseck, Sembach, Baumholder, Grafenwohr, and Vicenza. The anticipated contract will be a Firm-Fixed-Price personal services agreement starting May 12, 2027, consisting of a 60-day phase-in period, a 10-month base period, and four 12-month option periods. Key responsibilities include delivering high-quality musculoskeletal care, managing prophylactic taping and bracing, and formulating temporary physical profiles. Performance will be measured using a Clinical Competency Assessment Tool and a Performance Requirements Summary to ensure zero critical deficiencies. The contractor must also provide a Program Manager and Alternate Program Manager, maintain a comprehensive Quality Control Plan, and adhere to strict HIPAA and Privacy Act confidentiality standards. Under 10 U.S.C. § 1091, medical malpractice liability for these personal services is processed by the Department of Defense, and contractors are not required to maintain separate malpractice insurance.

Professional and Management Development Training

POSTED

DEADLINE

Medical Equipment & Vehicle MaintenanceThis subcontract for Medical Equipment and Vehicle Maintenance supports Army MEDDAC projects at Fort Polk, Louisiana, under the Department of Defense. The scope of work involves the inspection, cleaning, and maintenance of ambulances and onboard medical equipment, ensuring all vehicles adhere to healthcare sanitization standards and medical devices are tested according to manufacturer recommendations. The selected provider must execute comprehensive vehicle maintenance plans and deliver certified operational equipment along with detailed maintenance logs. Qualified personnel are required to hold ASE certification or manufacturer-specific certifications for medical devices. The response deadline for this opportunity is October 21, 2026.

Specialized Automotive Repair

POSTED

about 1 month ago

DEADLINE

in about 12 hours

EMS Medical Direction & OversightThis subcontract for EMS Medical Direction and Oversight supports Army MEDDAC projects at Fort Polk, Louisiana. The selected provider must be a board-certified Emergency Medicine Physician holding a valid Louisiana medical license. The primary responsibilities include providing medical oversight for EMTs and Paramedics, developing Army EMS protocols and standing orders, and managing quality assurance and continuous quality improvement processes to ensure high standards of patient care. The contract requires the delivery of formal medical oversight, approved clinical protocols, and detailed quality assurance reports. This opportunity is associated with the Department of Defense and falls under NAICS code 621111. The response deadline for this requirement is October 21, 2026.

Offices of Physicians (except Mental Health Specialists)

POSTED

about 1 month ago

DEADLINE

in about 12 hours

EMS Staffing Services (Paramedics & EMTs)This subcontract for EMS Staffing Services provides qualified Paramedics and EMTs to support Army MEDDAC projects at Fort Polk, Louisiana. The scope of work includes staffing two ground ambulances on a 24/7/365 basis, delivering advanced life support services, and providing coverage for community events and MASCAL exercises. Personnel are responsible for transporting patients to aero-medical evacuation sites and maintaining MEDDAC-approved patient care records. Managed under the Department of Defense for W40M MRC0 West, the contract falls under NAICS code 621910. The response deadline for this opportunity is October 21, 2026, with the primary objective of ensuring continuous emergency medical response and transport coverage for the installation.

Ambulance Services

POSTED

about 1 month ago

DEADLINE

in about 12 hours

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS