HIPAA and Cybersecurity Training Compliance Services

The contract requires the delivery and ongoing tracking of annual cybersecurity, privacy, and Rules of Behavior training for contractor personnel working under the Department of Veterans Affairs. Training must align with VA directives and enforce compliance with FIPS 140-2 encryption standards to ensure secure handling of sensitive information. The scope centers on maintaining regulatory adherence through consistent, documented training programs that account for evolving threats and VA-specific policies, with accountability tied to contractor staff performance and certification records. The solicitation is issued under the NAICS code 611430 for other schools and instruction, targeting subcontractors capable of providing specialized compliance training services. It is managed by the 249-NETWORK Contract Office 9 located in Battle Creek, Michigan, with a response deadline of May 29, 2026. The type of contract is classified as a subcontract, indicating it supports a larger prime contracting arrangement under the VA’s broader network and security infrastructure. Successful proposers must demonstrate proven experience in designing, deploying, and tracking training systems that meet federal cybersecurity and privacy requirements.