Security and Compliance Consulting (PHI, BAA, NISPOM)

This contract involves providing advisory services focused on ensuring compliance with key Department of Veterans Affairs security policies, specifically related to handling of Protected Health Information (PHI), Business Associate Agreements (BAA), adherence to Federal Information Processing Standards (FIPS 140-2), requirements under the National Industrial Security Program Operating Manual (NISPOM), and guidelines from NIST 800-52. The consulting services are designed to support the VA in maintaining stringent security controls and regulatory compliance across these critical areas. The subcontract is designated as a total small business set-aside under FAR 19.5, identified by NAICS code 541611, which pertains to administrative management and general management consulting services. The solicitation was posted on June 3, 2026, with a response deadline of June 10, 2026, and is managed by the 256-NETWORK Contract Office 16 within the Department of Veterans Affairs. The place of performance is Fayetteville, zip code 72703. This opportunity underscores the VA’s commitment to safeguarding sensitive information and maintaining compliance with federal security and privacy standards through specialized consulting expertise.