Healthcare IT Compliance & Cybersecurity Audit

The contract mandates an independent audit and compliance verification of the Auto-Notify system to confirm adherence to HIPAA, DoD RMF, and NIST 800-53 cybersecurity standards, specifically for the protection of health information. The scope requires a thorough assessment of the system’s controls, policies, and technical configurations to ensure they meet the stringent requirements for safeguarding protected health information across federal healthcare and defense environments. The audit must validate both technical implementations and organizational processes to guarantee ongoing compliance and risk mitigation. This subcontract is under the Department of Defense’s W40M MRC0 West agency, with performance centered at Fort Hood, Texas, 76544. It is classified under NAICS code 541512, indicating it falls within computer systems design and related services. The posting date is June 30, 2026, and while no solicitation number is provided, the work will be executed by a qualified third party with demonstrated expertise in healthcare IT security frameworks. The audit must deliver actionable findings, remediation paths, and certification of compliance to support the DoD’s mission-critical health data infrastructure.