Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

HIPAA and Security Compliance Monitoring

Active

State & Local

Response Deadline11/30/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity involves providing specialized reporting and compliance auditing services for prime contractors working on projects for the District of Columbia Department of Health Care Finance. The primary objective is to ensure strict adherence to HIPAA, CMS MARS-E, and NIST SP800-53 standards, while also executing all necessary Business Associate Agreement requirements. The selected provider will be responsible for delivering detailed compliance reports and comprehensive audit documentation. Qualified candidates must possess a CISSP or a similar certification specializing in health-data compliance. This opportunity is categorized under NAICS code 541690 and was posted on August 13, 2026, with a response deadline of November 30, 2026.

General Info

Compliance auditing and reporting services for DC Health Care Finance requiring CISSP certification.

Agency

District of Columbia → Health Care Finance (DHCF)

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

DC, USA

Set-Aside

NONE

Documents

This scope was carved out of Doc842014.

The full solicitation package (14 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

FY 27 - DCAS - District Direct Contact Center - RFP

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedAug 13

subcontract

Response DeadlineNov 30

Submission deadline

Response Deadline

11/30/2026, 10:00:00 PM UTCin 28 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDistrict of Columbia → Health Care Finance (DHCF)

ContactsNo contacts available

OfficeN/A

Organization / AgencyDistrict of Columbia → Health Care Finance (DHCF)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs specialized reporting and compliance auditing for prime contractors on District of Columbia Department of Health Care Finance projects. Ensures adherence to HIPAA, CMS MARS-E, and NIST SP800-53 standards and executes Business Associate Agreement (BAA) requirements. Requires CISSP or similar health-data compliance certifications. Delivers compliance reports and audit documentation.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 1 hour ago

DEADLINE

PQC Risk Assessment & Gap AnalysisThis subcontract, titled PQC Risk Assessment and Gap Analysis, is issued by the Government of Ontario through the Public and Business Service Delivery and Procurement agency. The project focuses on analyzing the vulnerability of current encryption standards, specifically RSA and ECC algorithms, against quantum computing threats for prime contractors. A primary objective is to evaluate these systems against NIST Post-Quantum Cryptography standards and assess the risks associated with harvest now, decrypt later attacks to prioritize system upgrades based on data sensitivity. The successful contractor will be responsible for delivering a comprehensive Quantum Risk Assessment Report and a Prioritization Matrix. The solicitation was posted on November 2, 2026, with a response deadline of November 30, 2026. The work is categorized under NAICS code 541690 and will be performed within Canada.

Public and Business Service Delivery and Procurement

POSTED

about 11 hours ago

DEADLINE

Security Intelligence and Deployment PlanningThis subcontract for Security Intelligence and Deployment Planning supports prime contractors on Transport for Wales Rail Limited projects. The scope of work involves analyzing security data to identify high-risk areas, monitoring emerging threats across the rail network, and utilizing specialized risk assessment software and intelligence gathering tools. The primary objectives are to develop risk-based deployment plans and provide optimized schedules to enhance network security. The selected provider will be responsible for delivering comprehensive intelligence reports and detailed risk assessments. This opportunity is categorized under NAICS code 541690 and is managed by Transport for Wales Rail Limited. Interested parties must submit their responses by the deadline of January 14, 2027.

Transport for Wales Rail Limited (Utility Buyer)

POSTED

about 15 hours ago

DEADLINE

Housing Data StatisticianThe Town of Eastham in Massachusetts is seeking a Housing Data Statistician for a subcontracting role to support prime contractors on municipal projects. The selected provider will be responsible for collecting and analyzing census data, housing inventory statistics, and demographic trends. Key deliverables include the production of statistical datasets, comprehensive demographic reports, and quantitative findings derived from the use of advanced software such as SPSS, SAS, R, or Excel. Qualified candidates must possess a degree in Statistics or Mathematics or hold a professional statistical certification. This opportunity was posted on November 2, 2026, with a response deadline of December 3, 2026. The work will be performed in Eastham, Massachusetts, under NAICS code 541690.

Town of Eastham

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Trained Narcotics and Contraband Detection CaninesThis subcontract involves the provision of ten trained tracking canines for prime contractors working on Oklahoma Department of Corrections projects. The selected provider is responsible for sourcing dogs from the United States or non-high-risk CDC countries, specifically selecting canines between 9 and 24 months of age. The scope of work includes specialized training in narcotics and contraband detection, as well as the management of all shipping logistics. To qualify, the provider must possess at least 36 months of relevant experience and ensure all canines meet the proficiency requirements outlined in ODOC policy OP-040120. The contract is categorized under NAICS code 541690, with a response deadline set for December 2, 2026.

Oklahoma Department of Corrections

POSTED

about 18 hours ago

DEADLINE

Specialist Consultant for Hemiptera and ColeopteraThis subcontract opportunity with the Department of Agriculture Northern Research Station seeks a Specialist Consultant to provide expert identification of select Hemiptera and complex Coleoptera for USDA Forest Health Protection projects. The consultant will be responsible for verifying difficult specimens and offering taxonomic opinions on invasive or rare species, delivering the final results through annotated identification lists or expert verification reports. Qualified candidates must possess an advanced degree in Entomology and have access to specialized holotype and paratype reference collections. This requirement falls under NAICS code 541690, with a response deadline set for December 3, 2026.

Northern Research Station

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Respirator Fit Testing

Solicitation # 36C24527Q0051

The Department of Veterans Affairs is seeking a contractor to provide industrial hygiene support for the Louis A. Johnson Medical Center in Clarksburg, West Virginia. The primary objective is to conduct quantitative respirator fit testing for approximately 700 to 1,000 employees. The contractor is responsible for providing all necessary equipment, including TSI PortaCount machines and Controlled Air Purifying Respirators (CAPRs) for those who cannot use N95 masks. Additionally, the contractor may be required to provide training on qualitative fit testing techniques and CAPR usage. All services must adhere to OSHA 29 CFR 1910.134 standards, the OSHA Act of 1970, and other relevant environmental and health standards. The contract consists of a one-year base period starting November 23, 2026, with four subsequent option years. Performance is required Monday through Friday, with staggered hours to accommodate second and third shifts, and a critical requirement to respond within 24 to 48 hours during disease outbreaks. Award will be based on a comparative evaluation of price and technical conformity. The contractor must maintain strict confidentiality of medical records under Title 38 U.S.C. and comply with VA cybersecurity and data destruction directives. Payment will be processed via Electronic Funds Transfer following the electronic submission of payment requests.

245-NETWORK Contract Office 5 (36C245)

POSTED

about 20 hours ago

DEADLINE

Monitoring and Evaluation of Russian River Coho Salmon

Solicitation # W912P727QA002

The U.S. Army Corps of Engineers San Francisco District is soliciting quotations for a non-personnel services contract to provide monitoring and evaluation for the Russian River Coho Salmon Captive Broodstock Program. Based at the Don Clausen Fish Hatchery in Sonoma County, California, the contractor will be responsible for evaluating the program's effectiveness in maintaining or increasing naturally spawned coho salmon populations. Key technical requirements include estimating juvenile survival using PIT tags and antenna arrays, conducting winter spawner and redd surveys to evaluate spawning success, operating downstream migrant traps near Hopland, and managing approximately 100 landowner access agreements and necessary endangered species permits. The contract structure consists of a 12-month base year starting December 1, 2026, with four subsequent 12-month option years. Award will be based on the best value to the government, evaluating technical approach, past performance, and price. Offerors must demonstrate the ability to coordinate with agencies such as NMFS and CDFW and comply with Sonoma County Service Contract Act wage rates. Key deliverables include a Quality Control Plan, a detailed annual research plan, and seasonal study reports on abundance, survival, and escapement. The government retains unlimited rights to all produced materials and software source codes.

W075 Endist San Fran

POSTED

about 20 hours ago

DEADLINE

6635--Dosimetry and Exposure Monitoring Services - VISN 1 BPA

Solicitation # 36C24127Q0042

The Department of Veterans Affairs, through Network Contracting Office 1, has issued a special notice of intent to award a contract on a sole source basis for dosimetry and exposure monitoring services. This requirement is intended to support VA Medical Centers located within VISN 1. The action is categorized under NAICS code 541690 and PSC/FSC H344, with the authority for restricting competition based on FAR 12.102 and publicizing the action per FAR Part 5. Prospective firms must be registered in the System for Award Management and the Veteran Small Business Certification database prior to award. Additionally, vendors must be vendorized by completing Form 10091. Any vendor claiming small business status under the Veteran's First Contracting Program must be verified by the Small Business Administration. Interested parties are directed to register via the SAM.gov interested vendors list by November 9, 2026, at 3:00 PM Eastern Time. The final determination to conduct a competitive procurement remains at the discretion of the Contracting Officer.

241-NETWORK Contract Office 01 (36C241)

POSTED

about 20 hours ago

DEADLINE

Fire Risk Assessment ServicesThis subcontract for Fire Risk Assessment Services involves performing comprehensive fire risk evaluations for prime contractors managing the Poplar HARCA building portfolio. The scope of work includes conducting on-site building inspections, evaluating existing fire safety measures, and producing detailed reports that provide remedial action recommendations in strict accordance with UK fire safety legislation. To be eligible, service providers must employ qualified Fire Risk Assessors and maintain professional indemnity insurance. The primary deliverable for this engagement is the submission of completed Fire Risk Assessment reports. Interested parties must submit their responses by the deadline of January 11, 2027.

POSTED

about 21 hours ago

DEADLINE

Ecological Simulation & Risk Modeling ConsultantThis subcontract opportunity is for an Ecological Simulation and Risk Modeling Consultant to support prime contractors on USGS Rocky Mountain CESU projects. The selected consultant will be responsible for developing scientific tools and simulation models, specifically focusing on habitat selection, population demographics, and Chronic Wasting Disease risk assessment. All work must be performed using advanced statistical and GIS software while adhering to DOI or FGDC geospatial data standards. The project deliverables include functional simulation models for various management scenarios and specialized risk assessment tools. This opportunity is associated with the US Geological Survey under the Department of the Interior, falling under NAICS code 541690. Interested parties should note the response deadline of December 2, 2026.

US Geological Survey

POSTED

DEADLINE

Deep-Sea Sediment Sampling and CollectionThis subcontract for the US Geological Survey involves the field collection of sediment samples to support marine mineral environment projects. The selected contractor will be responsible for deploying specialized equipment, including deep-sea corers, sediment traps, and ROVs, from research vessels to gather seabed minerals and sedimentary organic carbon samples. All operations must be conducted in strict accordance with maritime safety certifications and the USGS Fundamental Science Practices. The primary deliverables for this engagement include the physical sediment samples along with all corresponding field logs and metadata. This opportunity is categorized under NAICS code 541690 and is managed by the Department of the Interior. Interested parties must submit their responses by the deadline of December 23, 2026.

US Geological Survey

POSTED

DEADLINE

in about 2 months

More opportunities from District of Columbia → Health Care Finance (DHCF)

Same awarding agency

Data Reporting & AnalyticsThis subcontract opportunity for Data Reporting and Analytics supports prime contractors on projects for the District of Columbia Health Care Finance Administration. The scope of work focuses on the extraction, formatting, and delivery of critical operational and regulatory reports, specifically including PDMS Operational and Annual Reports. A key performance requirement is the timely delivery of annual reports, which must be submitted by 8:00 a.m. the business day following the end of the year. The procurement falls under NAICS code 541511 and was posted on October 8, 2026. Interested parties must submit their responses by the deadline of November 9, 2026. This engagement is designed to ensure the agency maintains rigorous data reporting standards and meets all regulatory compliance timelines.

Custom Computer Programming Services

POSTED

DEADLINE

Technical Training ServicesThis subcontract for Technical Training Services supports the District of Columbia Health Care Finance Administration by providing specialized development and delivery of training for system users and administrators. The scope of work includes the creation of comprehensive training manuals and the execution of training sessions tailored for District staff and healthcare providers. The project falls under NAICS code 611430 and is managed by the District of Columbia. Interested parties should note that the response deadline is November 9, 2026, with the solicitation having been posted on October 8, 2026.

Professional and Management Development Training

POSTED

DEADLINE

Provider Processing & Support ServicesThis subcontract for Provider Processing and Support Services supports prime contractors on projects for the District of Columbia Health Care Finance Administration. The scope of work focuses on administrative provider data management, which includes managing provider enrollment data and overseeing the processing of provider records. Key deliverables include the execution of the Annual Screening and Enrollment Plan and the implementation of the Provider Outreach Plan. The contract is categorized under NAICS code 561110, with a response deadline set for November 9, 2026.

Office Administrative Services

POSTED

DEADLINE

System Operations & Maintenance (O&M) SupportThis subcontract opportunity for System Operations and Maintenance Support focuses on providing technical support, system administration, and maintenance for the PDMS utilized by prime contractors on District of Columbia Health Care Finance Administration projects. The scope of work involves managing daily system operations within a service-oriented architecture environment to ensure consistent uptime and the execution of necessary system updates and patches. The selected provider will be responsible for maintaining strict adherence to service level agreements, which includes the delivery of monthly system availability metrics and SLA report cards. This requirement falls under NAICS code 541513 and is associated with the District of Columbia Health Care Finance agency, with a response deadline set for November 9, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

IT Project Management & Compliance ConsultingThis subcontract for IT Project Management and Compliance Consulting supports prime contractors on projects for the District of Columbia Health Care Finance Administration. The scope of work focuses on project oversight and regulatory compliance mapping, specifically ensuring adherence to the Social Security Act under 42 USC 1396b. Key responsibilities include the development of Project Management Plans based on PMBOK standards and the maintenance of the Requirements Traceability Matrix. The selected provider will be responsible for delivering comprehensive Project Management Plans and Requirements Validation documents. This opportunity falls under NAICS code 541611 and is associated with the District of Columbia government. Interested parties should note the response deadline of November 9, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Quality Assurance & System TestingThis subcontract opportunity for the District of Columbia Health Care Finance Administration involves providing independent testing and validation services for the PDMS. The selected contractor will be responsible for developing and executing system test plans, conducting User Acceptance Testing, and managing a Quality Control and Assurance Issue Log to ensure all service level agreements are met. Key deliverables include comprehensive system testing reports and formal UAT sign-off. The project falls under NAICS code 541512 and is associated with the District of Columbia government. Interested parties should note that the response deadline is November 9, 2026. This engagement focuses on maintaining high quality standards and system reliability for prime contractors operating within the DHCF framework.

Computer Systems Design Services

POSTED

DEADLINE

Software Engineering & System DevelopmentThis subcontract for Software Engineering and System Development supports prime contractors on projects for the District of Columbia Health Care Finance Administration. The scope of work involves the design, coding, and implementation of the PDMS, requiring the translation of requirements into design specifications and the development of the system using Service-Oriented Architecture. Key technical requirements include the implementation of X12 standards for electronic communication and strict adherence to Risk Management Framework standards to ensure secure and functional software module delivery. The opportunity is categorized under NAICS code 541511 and was posted on October 8, 2026, with a response deadline of November 9, 2026. Interested parties can find further details through the District of Columbia's official contracting portal.

Custom Computer Programming Services

POSTED

DEADLINE

RFP - Provider Data Management System and Services

Solicitation # Doc847596

Solicitation Doc847596 is a request for proposals issued by the District of Columbia Department of Health Care Finance for a Provider Data Management System (PDMS) and associated services. The project is designated as a CBE set-aside, requiring certified prime contractors to perform at least 35 percent of the work using their own resources. The contract is structured as a firm fixed unit price agreement featuring a one-year base period for design, development, and implementation, with a goal of going live within nine months of the kick-off meeting. The District may extend the contract for up to four one-year option periods to cover operations, maintenance, and provider support services. The scope of work requires a system utilizing Service-Oriented Architecture and X12 standards, ensuring ADA compliance and strict adherence to HIPAA and HITECH regulations through a Business Associate Agreement. Key deliverables include a comprehensive list of 48 operational reports and a Requirements Traceability Matrix. Performance is governed by Service Level Agreements that define system availability and response-time targets, with penalties tied to unmet levels. Award decisions are based on a 100-point scale evaluating price, technical approach, and preference points for certified small or resident-owned businesses. Offerors must comply with various District mandates, including the Living Wage Act, First Source Employment Agreement, and EEO requirements.

Computer Systems Design Services

POSTED

DEADLINE

Contact Center Innovation and Analytics ServicesThe Contact Center Innovation and Analytics Services subcontract supports prime contractors on projects for the District of Columbia Department of Health Care Finance. The scope of work focuses on the evaluation, prototyping, and optimization of contact center business processes through workflow assessments and market research on public sector operations. Key technical requirements include the development of advanced analytics and dashboards using PowerBI or Tableau to track performance and operational efficiency. The selected provider is responsible for creating Innovation Requests that incorporate detailed risk assessments and success metrics. Deliverables include the submission of quarterly innovation reports and the maintenance of analytics dashboards. This opportunity is categorized under NAICS code 541611, with a response deadline set for November 30, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

AI and Automation Technology IntegrationThe AI and Automation Technology Integration subcontract supports prime contractors for the District of Columbia Department of Health Care Finance. The scope of work involves the deployment of a comprehensive AI and automation suite integrated into the DDCC workflow, featuring conversational IVR, voice AI, intelligent chatbots, agent assist tools, and automated call summarization. Additionally, the project requires the implementation of predictive analytics for demand forecasting and speech analytics to ensure quality monitoring. Strict adherence to HIPAA and NIST SP800-53 compliance standards is mandatory for this engagement. The opportunity is categorized under NAICS code 541512, with a response deadline set for November 30, 2026.

Computer Systems Design Services

POSTED

DEADLINE

DDCC Operational Staffing and ManagementThe DDCC Operational Staffing and Management subcontract involves the day-to-day staffing and operation of the District Direct Contact Center for the District of Columbia Department of Health Care Finance. The selected provider will be responsible for implementing staffing models to meet demand, managing secure remote environments, and assisting individuals with enrollment in health and human service programs via the DC Access System. To ensure operational success, the contractor must deliver a contact center that consistently meets established service level agreements. Strict adherence to regulatory standards is required, including HIPAA Privacy Compliance, CMS MARS-E, and NIST SP800-53. This opportunity falls under NAICS code 561110, with responses due by November 30, 2026.

Office Administrative Services

POSTED

DEADLINE

FY 27 - DCAS - District Direct Contact Center - RFP

Solicitation # Doc842014

Solicitation Doc842014 is a Request for Proposals issued by the District of Columbia Office of Contracting and Procurement on behalf of the Department of Health Care Finance. The contract seeks a qualified provider to staff, operate, and continuously improve the District Direct Contact Center, which supports individuals enrolling in health and human service programs through the District of Columbia Access System. The project utilizes Amazon Connect for its Automatic Call Distributor and requires the contractor to provide daily dashboards, weekly status reports, monthly performance reports, and quarterly forecasting and innovation reports. The contract structure consists of a one-year base term with four optional one-year extensions, for a maximum total duration of five years. The award will be based on a maximum of 112 points, with 90 points allocated to technical criteria, 10 points for price, and 12 preference points for certified business enterprises. Technical evaluation focuses on the expertise of key personnel, including a Project Manager with a bachelor's degree, and a minimum of five years of experience in similar call center operations. Compliance requirements are extensive, including adherence to the District of Columbia Living Wage Act, Equal Employment Opportunity standards, and strict HIPAA and HITECH regulations for handling protected health information. Additionally, prime contractors must perform at least 35 percent of the work using their own resources, and projects over 250,000 dollars must subcontract at least 35 percent of the value to Small or Certified Business Enterprises.

Telemarketing Bureaus and Other Contact Centers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS