Regulatory Compliance & Risk Management Reporting

The contract requires the performance of annual security self-assessments and completion of an Enterprise Risk Analysis to ensure ongoing adherence to federal regulatory standards including FDA, FIPS, and NIST guidelines. All resulting documentation must be accurately compiled and submitted to the VA Contracting Officer’s Representative or Contracting Officer for review and recordkeeping. The work is scoped as a subcontract under the Department of Veterans Affairs’ 261-NETWORK Contract Office 21, with compliance tasks centered on maintaining robust cybersecurity and risk management practices aligned with federal mandates. The solicitation was posted on August 2, 2026, with a firm response deadline of August 10, 2026, at 5:00 PM, and is classified under NAICS code 541611 for management consulting services.