Information Security & Data Compliance Services

The contract requires the development and ongoing maintenance of a comprehensive Information Security Plan that ensures all personally identifiable information and protected health information is encrypted both in transit and at rest, with continuous monitoring for potential data breaches and automated alerting systems to respond rapidly to security incidents. All data storage must be restricted to servers and facilities located within the contiguous United States to comply with jurisdictional and regulatory requirements. The effort is classified as a subcontract under NAICS code 541512, which corresponds to computer systems design and related services, and the performance location is designated as other, indicating flexibility in operational scope as long as data residency rules are strictly followed. The solicitation was posted on April 29, 2026, with a response deadline of August 6, 2026, and is administered by the Kentucky agency located at 275 E. Main St., Fkt, Ky, though no specific point of contact or set-aside details are provided.