HIPAA/SOC 2 Compliance and Security Assessment

This subcontract for HIPAA/SOC 2 Compliance and Security Assessment involves performing critical security attestations for prime contractors working on Calvert County Health Department projects. The scope of work focuses on conducting SOC 2 Type II assessments and auditing the implementation of Role-Based Access Control, Multi-Factor Authentication, and Single Sign-On. Additionally, the contractor is responsible for verifying encryption standards for data both at rest and in transit. The primary objective is to prepare comprehensive technical documentation for review by the Maryland Department of Health CISO, culminating in the delivery of an approved security and hosting documentation package. This engagement falls under NAICS code 541690 and is managed through the state of Maryland, with a response deadline of November 6, 2026.