Security & Compliance Implementation

The contract titled Security & Compliance Implementation requires the bidder to implement and maintain security controls aligned with NIST 800.53 Moderate, HIPAA, HITRUST, and SOC 2 standards, ensuring regulatory compliance across sensitive systems and data handling practices. The work involves a comprehensive assessment of existing controls, identification of gaps, and execution of remediation measures to meet the rigorous requirements of these frameworks, with an emphasis on continuous monitoring and documentation to support audit readiness. The contract is structured as a subcontract with a NAICS code of 541690, indicating it falls under other professional, scientific, and technical services, and is linked to the West Virginia agency based in Charleston. The solicitation was posted on June 18, 2026, with a response deadline of July 7, 2026, at 2:30 PM, leaving a limited window for preparation and submission. The place of performance is designated as Charleston, though no specific office address or point of contact is provided in the contract data. There is no set-aside designation, meaning the opportunity is open to all eligible subcontractors regardless of size or ownership status. Interested parties must access the full solicitation details through the provided UI link, as no additional specifications or requirements are outlined in the public data beyond the compliance standards and geographic scope.