HIPAA/Security Compliance Validation and Penetration Testing

This subcontract opportunity with Integral Care in Texas involves performing security validations and compliance audits for prime contractors. The selected provider will be responsible for conducting penetration testing and vulnerability management, while specifically verifying the implementation of TLS 1.2+ and AES-256 encryption. Key deliverables include security assessment reports, penetration test results, and formal compliance certifications. The scope of work focuses heavily on regulatory adherence, requiring the validation of HIPAA and 42 CFR Part 2 compliance, as well as audits of Role-Based Access Control and Multi-Factor Authentication. To qualify, providers must meet SOC 2 and HITRUST standards. Responses for this engagement are due by January 8, 2027.