Recovery Act: New work regarding Information Security and FISMA requirements to be added to existing contract with PricewaterhouseCoopers, Task Order Number GS-23F-0165

This contract modification to the existing GSA Contract GS-23F-0165, Task Order HHSM-500-2008-00370G, involves support for the Centers for Medicare & Medicaid Services (CMS) in aligning with updated Federal Information Security Management Act (FISMA) requirements. The primary objective is to help CMS develop a strategic approach to comply with the revised guidance by first gaining a comprehensive understanding of its current IT and cybersecurity environment. The work includes mapping information flows within the organization with an emphasis on financial data and protected health information, conducting an engineering study of CMS's IT enterprise encompassing key components such as Enterprise Data Centers, Fiscal Intermediaries, Carriers, Medicare Advantage Contractors, and QualityNet, and identifying pivotal stakeholders involved in CMS’s cybersecurity program. Additionally, the contract requires an assessment of both current and planned cybersecurity initiatives that support CMS’s environment, including collaboration with entities like the Centers for Disease Control Incident Response and HHS’s Secure One program. This initiative aims to strengthen CMS's compliance posture and vulnerability management as it adapts to new federal cybersecurity mandates. The work is financed through the American Recovery and Reinvestment Act and is performed in McLean, Virginia. The contract specialists and officers supporting this task can be contacted via provided phone numbers and emails, facilitating direct coordination for effective contract execution.