Incident Response Services

The contract encompasses the provision of comprehensive incident response services to protect HRSA’s more than 60 IT systems, with special emphasis on High Value Assets that process sensitive health data. The contractor is expected to deliver rapid detection, in-depth analysis, immediate containment, and effective remediation of cybersecurity incidents to ensure the integrity, confidentiality, and availability of critical health information. Services must be available 24/7 and aligned with federal cybersecurity standards to address evolving threats in real time. Performance is centered in Rockville, Maryland, with the work falling under the NAICS code 541611 for management, scientific, and technical consulting services. This subcontract is awarded under the Department of Health and Human Services, specifically for HRSA Headquarters, and is open to qualified providers capable of meeting stringent security requirements for handling protected health information. The solicitation was posted on May 8, 2026, and the contractor must maintain readiness to respond to incidents across the full spectrum of HRSA’s IT infrastructure, ensuring compliance and continuity of operations for a vital public health agency.