Secure Data Transfer and Physical Media Management

The contract involves the secure handling, writing, and return of NIH-supplied hard drives containing sensitive imaging data, ensuring strict compliance with protocols for data protection and physical media management throughout the entire lifecycle. All activities must adhere to federal security standards, with emphasis on confidentiality, integrity, and controlled access to prevent unauthorized disclosure, loss, or damage to the data. The contractor is responsible for implementing secure procedures during data transfer, storage, and transportation, including encrypted writing, tamper-evident packaging, and authenticated chain-of-custody documentation. Performance of this subcontract is centered at Bethesda, Maryland, with the National Institutes of Health under the Department of Health and Human Services as the overseeing agency. The solicitation was posted on July 27, 2026, with a response deadline of August 5, 2026, and falls under NAICS code 518210 for data processing and related services. The contractor must demonstrate proven experience in secure data handling, possess appropriate certifications for federal data security, and be prepared to comply with all NIH-specific requirements regarding physical media control, audit readiness, and timely return of drives after data transfer completion. Failure to meet these standards may result in termination of the agreement and potential liability for data breaches.