Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Medical Device Cybersecurity & Patch Management

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires ongoing cybersecurity support for medical devices, focusing on vulnerability scanning, timely patch deployment, incident reporting, and strict adherence to NIST and Veterans Affairs security baselines. The work is intended to ensure the integrity, confidentiality, and availability of medical device systems by maintaining continuous compliance with federal cybersecurity standards and addressing emerging threats through proactive monitoring and response. This subcontract is solicited by the Department of Veterans Affairs under the 261-NETWORK Contract Office 21, with a NAICS code of 541512 for computer systems design services. The opportunity was posted on August 2, 2026, and responses are due by August 10, 2026. While no specific location is designated for performance, the contractor must align all activities with VA’s security requirements and deliver services that directly support the agency’s mission to safeguard patient-care systems.

General Info

Cybersecurity support for medical devices per NIST and VA standards with vulnerability scanning, patching, and incident response.

Agency

Department Of Veterans Affairs → 261-NETWORK Contract Office 21 (36C261)View Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

CA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Veterans Affairs → 261-NETWORK Contract Office 21 (36C261)
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Veterans Affairs → 261-NETWORK Contract Office 21 (36C261)
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Ongoing cybersecurity support including vulnerability scanning, patch deployment, incident reporting, and compliance with NIST and VA security baselines.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
Azure Consulting IDIQThe Port of Seattle is preparing to engage a qualified cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to support the adoption, modernization, and optimization of Microsoft Azure cloud and hybrid environments. The primary focus will be on evaluating and strengthening the existing Azure architecture, guiding the implementation of new services, and ensuring all deployments align with organizational standards, operational requirements, and long-term scalability goals. Key objectives include enhancing security posture, improving system resiliency, and optimizing cloud performance to meet evolving business needs. The partner will be expected to provide expert consultation throughout the lifecycle of Azure initiatives, from design and deployment to ongoing refinement and compliance validation. This engagement is managed by the Port of Seattle’s ICT Enterprise Infrastructure Services division, with primary point of contact Carol Hassard and Project Manager Jim Dawson overseeing the process. The solicitation is posted under NAICS code 541512 for computer systems design services, with all work expected to be performed in alignment with the Port’s internal frameworks and security protocols. The anticipated timeline for this initiative begins with a forecast posting in July 2026, signaling the upcoming availability of formal solicitation documents for qualified vendors.
ICT Enterprise Infrastructure Services

POSTED

about 7 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is preparing to replace its existing Flight Information Display System software with a new solution to enhance airport operations and passenger information capabilities. This initiative is classified under NAICS code 541512 for Custom Computer Programming Services and is currently in the forecasting stage with a posted date of July 31, 2026. The project involves developing and deploying modern software tailored to display real-time flight data across multiple terminals, ensuring accuracy, reliability, and seamless integration with existing airport systems. The primary point of contact is Farlis Lewis, reachable via email and phone, with Krista Sadler serving as the project manager for technical coordination and oversight. The software replacement aims to improve system performance, user interface clarity, and system scalability to meet future growth demands at the airport. While the specific technical requirements and procurement timeline have not yet been released, interested vendors should prepare to demonstrate expertise in aviation information systems, real-time data integration, and customer-facing display technologies. The place of performance is likely centered at Seattle-Tacoma International Airport, and there is no indication of a set-aside for small businesses or other socioeconomic categories at this stage. All inquiries and future solicitations will be coordinated through the provided contact information and the official solicitation portal linked in the data.
ICT Enterprise Infrastructure Services

POSTED

about 7 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance and CUI SafeguardingThe contract requires the implementation and ongoing maintenance of cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for the protection of Controlled Unclassified Information (CUI) on defense systems. This engagement is specifically focused on safeguarding sensitive data within nuclear reactor program operations, demanding a robust and auditable security posture that aligns with federal cybersecurity mandates. The successful contractor must demonstrate capabilities in configuring, monitoring, and updating systems to meet these rigorous requirements, with continuous adherence to control frameworks covering access control, audit, incident response, and data encryption among others. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside category, designated under NAICS code 541512 for computer systems design services. The opportunity was posted on August 2, 2026, with responses due by August 13, 2026. Performance is located in Tracy, California, with a zip code of 95304-5000. The contract is issued by the Department of Defense under the Nuclear Reactor Program, indicating its critical nature within national defense infrastructure. All activities must be executed in full alignment with federal acquisition regulations and the specified security standards, with emphasis on sustainable compliance and protection of CUI throughout the contract lifecycle.
NUCLEAR REACTOR PROGRAM

POSTED

about 19 hours ago

DEADLINE

in 10 days
View Details

More opportunities from Department Of Veterans Affairs → 261-NETWORK Contract Office 21 (36C261)

Same awarding agency

NAICS: 541990
New
Federal
J065--Notice of Intent to Sole Source Medtronic O-arm and S8 Service
Solicitation # 36C26126Q1048
The Department of Veterans Affairs Network Contracting Office 21, acting on behalf of the VA Palo Alto Health Care System, intends to award a sole source contract to Medtronic Inc. for corrective and preventative maintenance services on its Medtronic O-arm O2, S8 with EM, and S8 Planning Station systems. This action is authorized under Federal Acquisition Regulation 6.103-1, which permits sole source awards when only one responsible source exists and no other products or services can meet the agency’s requirements. The work will be performed at the VA Palo Alto facility and is governed by a draft Performance Work Statement that outlines the specific technical and service expectations. The procurement falls under NAICS code 541990 with a product service code of J065 for medical equipment maintenance and is subject to a small business size standard of $19 million in annual revenue. This notice serves solely as an informational announcement and is not a solicitation or invitation for bids. No competitive solicitation document is available, and unsolicited offers or quotations will not be considered for award. Any party wishing to challenge the sole source determination must submit written evidence demonstrating that competitive procurement would be advantageous to the government, addressing all elements of the performance work statement. Responses must be emailed to gary.christensen@va.gov with the specified reference number in the subject line by the deadline of August 10, 2026. The government retains full discretion to proceed without competition regardless of any responses received, and all submissions will be reviewed only to assess whether competition is warranted. No telephone inquiries will be accepted, and any award will be based exclusively on the government’s evaluation under the sole source authority.
All Other Professional, Scientific, and Technical Services

POSTED

about 24 hours ago

DEADLINE

in 7 days
View Details
NAICS: 238290
New
Federal
Seismic Bracing and Structural Support InstallationThe contract calls for the installation of seismic bracing and structural support systems on Steris sterilizers to ensure compliance with California’s seismic safety regulations and the requirements set forth by the Office of Statewide Health Planning and Development. This work is critical for healthcare facilities to maintain operational integrity and patient safety during seismic events, as mandated for medical equipment in high-risk geographic areas. The installation must meet stringent engineering standards to prevent movement, displacement, or failure of sterilization units during earthquakes, ensuring uninterrupted service and regulatory adherence. The project is classified as a subcontract under NAICS code 238290, indicating it involves other specialty trade contractors focused on structural installations. Performance is required at a facility located in Mather, California, with a zip code of 95655. The solicitation was posted on July 31, 2026, and responses are due by August 7, 2026, at 9:00 PM ET. The contracting office, part of the Department of Veterans Affairs and designated as 261-NETWORK Contract Office 21 (36C261), oversees this procurement. No set-aside provisions are specified, and the contract is open to eligible subcontractors capable of delivering certified seismic retrofitting solutions for medical-grade equipment.
Other Building Equipment Contractors

POSTED

3 days ago

DEADLINE

in 4 days
View Details