Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

VA Healthcare Cybersecurity Compliance & ATO Support

Active

Federal

Response Deadline10/27/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The VA Healthcare Cybersecurity Compliance and ATO Support subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on providing critical security assessments and Authorization to Operate documentation for prime contractors managing healthcare IT projects. The scope of work includes conducting penetration testing, validating IPv6-Only environment capabilities, and generating Software Bill of Materials in NTIA format. To ensure rigorous security standards, the contractor must maintain compliance with HIPAA, FIPS 140-2/3, and NIST SP 800-66 Rev. 2. Key deliverables for this engagement include comprehensive security assessment reports, completed ATO documentation, and the required SBOM. This opportunity falls under NAICS code 541690 and requires responses by October 27, 2026.

General Info

VA healthcare cybersecurity subcontract for security assessments, ATO documentation, and compliance support.

Agency

Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

NJ

Set-Aside

NONE

Documents

This scope was carved out of 36C10B27Q0054.

The full solicitation package (4 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

DA10--HTM PO MED TECH - Tech Stdz Priority - Enterprise Point of Care Ultrasound PACS (VA-27-00007275)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 20

subcontract

Response DeadlineOct 27

Submission deadline

Response Deadline

10/27/2026, 09:00:00 PM UTCin 6 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments and ATO documentation for prime contractors on VA healthcare IT projects. Generates NTIA-format Software Bill of Materials (SBOM), conducts penetration testing, and ensures compliance with NIST SP 800-66 Rev. 2, HIPAA, and FIPS 140-2/3. Validates IPv6-Only environment capabilities. Delivers security assessment reports, SBOM, and completed ATO documentation.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, LLC

POSTED

about 6 hours ago

DEADLINE

Cybersecurity & Data Privacy ComplianceThis subcontract opportunity with the City of Augusta in Georgia focuses on providing cybersecurity audits and data privacy compliance for prime contractors involved in the city's fuel card program projects. The selected provider will be responsible for implementing rigorous data security protocols and ensuring all operations adhere to financial data standards, specifically PCI DSS. Key deliverables include the creation of comprehensive cybersecurity and fraud prevention documentation and the maintenance of a secure data environment. Interested parties should note the response deadline of November 12, 2026, and the classification of the work under NAICS code 541690.

City of Augusta

POSTED

about 12 hours ago

DEADLINE

GRC Security and Compliance AuditorThe GRC Security and Compliance Auditor subcontract for the Texas State Technical College System focuses on providing critical security monitoring and compliance auditing for prime contractors. The scope of work includes managing encryption, access controls, and vulnerability management, while ensuring strict adherence to FERPA, TX-RAMP, and TAC 206/213 regulations. Additionally, the contractor is responsible for developing disaster recovery and business continuity plans through the use of audit logging tools and vulnerability scanners, ultimately delivering comprehensive security audit reports and compliance certifications. This opportunity is categorized under NAICS code 541690 and was posted on October 20, 2026. Interested parties must submit their responses by the deadline of November 10, 2026. The contract is managed through the Texas State Technical College System and is listed on the Texas SmartBuy portal.

Texas State Technical College System

POSTED

about 16 hours ago

DEADLINE

Demographic Analyst / LEP SpecialistThis subcontract opportunity for a Demographic Analyst / LEP Specialist supports the City of Fairfax Title VI Program in Virginia. The selected contractor will be responsible for analyzing population data for prime contractors, specifically reviewing and updating demographic and language information. By utilizing U.S. Census Bureau and American Community Survey datasets along with specialized data analysis software, the contractor will perform Limited English Proficiency assessments and identify key outreach populations. The primary deliverables for this engagement include updated demographic profiles and comprehensive LEP assessment reports. Interested parties should note that the solicitation was posted on October 20, 2026, with a response deadline of November 10, 2026. The work falls under NAICS code 541690 and will be performed within the City of Fairfax.

City of Fairfax

POSTED

about 20 hours ago

DEADLINE

Medical Equipment Asset AuditorThe Medical Equipment Asset Auditor subcontract involves performing physical and digital audits of existing medical equipment for prime contractors working on Frimley Health NHS Foundation Trust projects. The primary objective is to verify the condition, age, and technical specifications of assets to ensure they align with new hospital design requirements. This process requires the use of asset tagging and valuation tools to produce a detailed Inventory List and a Comprehensive Asset Audit Report. Qualified candidates must hold certification in Clinical Engineering or Health Technical Memoranda. The opportunity was posted on October 20, 2026, with a response deadline of November 16, 2026. This engagement falls under NAICS code 541690 and is specifically designed to support the infrastructure and equipment mapping needs of the Frimley Health NHS Foundation Trust.

Frimley Health NHS Foundation Trust

POSTED

about 20 hours ago

DEADLINE

Archaeological Technical Support & ReportingThis subcontract for Archaeological Technical Support and Reporting involves providing administrative and technical assistance to prime contractors working on City of Delta infrastructure projects. The selected provider will be responsible for drafting Archaeological Overview Assessments and Preliminary Field Reconnaissance reports, as well as preparing documentation for Site Alteration Permits and Multi Assessment Permits. A critical component of the role includes coordinating with the Provincial Archaeology Branch and ensuring all work complies with the Heritage Conservation Act. The contract requires the delivery of completed permit applications and final archaeological reports. Interested parties should note that the response deadline is November 16, 2026. The project falls under NAICS code 541690 and is associated with the City of Delta and the Province of British Columbia.

POSTED

about 20 hours ago

DEADLINE

Archaeology Consulting Services

Solicitation # 26-122

The City of Delta is issuing solicitation 26-122 to establish a shortlist of qualified archaeology firms to provide professional consulting services on an as-and-when-requested basis. The scope of work includes archaeological investigation, monitoring, reporting, and permitting for various infrastructure and development projects, such as road upgrades and utility replacements, within the City of Delta. All services must comply with the Heritage Conservation Act, and firms must demonstrate eligibility to hold provincial permits, including Multi Assessment Permits and Site Alteration Permits. Key deliverables involve field assessments, coordination with the Provincial Archaeology Branch and First Nations, and the provision of heritage management training for City staff. The selection process utilizes a two-stage qualification method. To be considered, respondents must meet all mandatory criteria, including the timely submission of a signed Proposal Covering Letter. Qualified firms will be evaluated based on proponent capability and experience (50%), methodology (25%), and fees (25%), with minimum scores required for the first two categories. The City emphasizes the importance of professional certification, requiring at least one team member to be in good standing with a recognized organization like the British Columbia Association of Professional Archaeologists. Preference is given to consulting team members with five years of experience and lead archaeologists with ten years of experience. The resulting shortlist will remain valid until January 1, 2025, or for three years from the closing date. Once the list is established, the City will invite these qualified respondents to submit firm-priced tenders for specific projects. Proposals must be submitted as a single PDF to the purchasing department by 2:00 PM Pacific time on November 16, 2026. The pricing structure for the qualification stage includes hourly rates for principal archaeologists, field directors, technicians, and support staff, as well as lump sum rates for permit applications.

POSTED

about 20 hours ago

DEADLINE

Fare Revenue Modeling and Impact AnalystThis subcontract for a Fare Revenue Modeling and Impact Analyst involves providing specialized financial and ridership forecasting models for prime contractors working on Santa Clara Valley Transportation Authority projects. The scope of work includes developing revenue models for proposed fare structures, evaluating ridership elasticity, and utilizing transit demand modeling software to analyze the financial effects of changes to fare media. The primary deliverable for this engagement is the Revenue and Ridership Impact Analysis Report along with the associated models. This opportunity is categorized under NAICS code 541690 and is managed through the Finance agency in California, with a response deadline set for November 17, 2026.

POSTED

about 23 hours ago

DEADLINE

Water Security & International Water GovernanceThis subcontract opportunity with W4LD USA Hecsa under the Department of Defense focuses on providing specialized expertise in water security and Integrated Water Resources Management for USACE projects both domestically and internationally. The selected provider will be responsible for addressing complex water policy issues, mitigating trans-boundary water conflicts, and developing governance frameworks and policy recommendations. Success in this role requires a proven track record of collaborating with high-level entities, including the U.S. State Department, the United Nations, and various non-governmental organizations. Candidates must possess significant experience working with international institutions and a demonstrated ability to support multi-national force capacity development. The contract falls under NAICS code 541690, with a response deadline set for November 6, 2026. This engagement is designed to integrate technical water management expertise with diplomatic and strategic policy guidance to ensure water security across diverse global operational environments.

POSTED

DEADLINE

Economic & Socio-Economic AnalysisThis subcontract opportunity with W4LD USA Hecsa under the Department of Defense focuses on providing comprehensive economic and socio-economic analysis for USACE water resources projects. The scope of work involves performing project, regional, and national-level economic assessments, including Benefit-Cost Analysis, Value-to-the-Nation assessments, and financial analysis of public works infrastructure. The selected provider will utilize multi-criteria and risk-informed economic analysis to deliver critical financial feasibility studies and economic impact reports. The requirement is categorized under NAICS code 541690. Interested parties should note that the solicitation was posted on October 20, 2026, with a response deadline of November 6, 2026.

POSTED

DEADLINE

Safety & Security Specialized SupportThis subcontract opportunity, titled Safety and Security Specialized Support, is issued by the Department of Defense for the W074 Endist Wilmington. The contract focuses on providing specialized technical support and advisory services regarding safety and security protocols for prime contractors. Key deliverables include the performance of safety assessments and the production of security advisory reports to ensure site compliance using non-A&E methods. The project is designated as a total Small Business Set Aside under NAICS code 541690. Performance of the work will take place in the 28403 zip code area. This engagement is specifically designed to bolster the safety and security infrastructure of USACE Endist Wilmington projects through expert technical guidance.

W074 Endist Wilmington

POSTED

DEADLINE

SWAN Model Expansion and Mission Thread DecompositionThe SWAN Model Expansion and Mission Thread Decomposition subcontract, issued by the Department of Defense for the Space Rapid Capabilities Office, focuses on the technical decomposition of space-centric mission threads for prime contractors. The scope of work includes decomposing prioritized mission threads, validating performance metrics with operators, and collecting system program milestone data. Additionally, the contractor is responsible for integrating sustainment dependencies and DOTmLPF-P elements into the government-owned SWAN model and database to provide critical analytical outputs. Due to the sensitive nature of the projects, all personnel must possess TS/SCI/SAP security clearances. The opportunity was posted on October 20, 2026, with a response deadline of November 14, 2026. This effort falls under NAICS code 541690 and is dedicated to enhancing the analytical capabilities of the SpRCO through detailed database updates and mission thread validation.

FA2548 Spc Rpd Cpblts Offc Spc Rco

POSTED

DEADLINE

More opportunities from Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Same awarding agency

Data Integration Security and Authorization SupportThe Data Integration Security and Authorization Support subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on performing security assessments and managing authorization readiness for prime contractors on OIT projects. The scope of work includes conducting security audits, managing Authority to Operate documentation, and implementing privacy controls through the use of vulnerability scanners and GRC tools. All activities must comply with FedRAMP, NIST, and VA cybersecurity policies to ensure the delivery of comprehensive security assessment reports, ATO packages, and compliance certifications. This opportunity falls under NAICS code 541519, with a response deadline set for November 4, 2026.

Other Computer Related Services

POSTED

DEADLINE

AI-Ready Data Product EngineeringThe AI-Ready Data Product Engineering subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on converting raw authoritative data into high-quality data products tailored for prime contractors on OIT projects. The scope of work involves critical data preparation tasks, including data labeling and feature engineering, to ensure that information is optimized for consumption by Large Language Models and AI agents. To maintain operational standards, the project requires the creation of governed data catalogs utilizing vector databases and specialized AI governance platforms. The ultimate objective is the delivery of well-described, governed AI-ready data products and comprehensive metadata catalogs under NAICS code 541511. Responses for this opportunity are due by November 4, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Event-Driven and Streaming Data IntegrationThis subcontract opportunity, titled Event-Driven and Streaming Data Integration, is issued by the Department of Veterans Affairs Technology Acquisition Center Nj. The project focuses on implementing event-driven architectures for prime contractors on VA OIT projects to facilitate real-time data streaming. The selected provider will be responsible for configuring message brokers and developing producers and consumers utilizing technologies such as Apache Kafka, RabbitMQ, or Amazon Kinesis to deliver a fully operational streaming exchange environment. All work must adhere to strict VA cybersecurity standards and meet high-availability reliability metrics. The solicitation is categorized under NAICS code 541512, with a response deadline set for November 4, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Bulk Analytical Data Pipeline EngineeringThe Bulk Analytical Data Pipeline Engineering subcontract supports Department of Veterans Affairs OIT projects by migrating authoritative data into bulk analytical formats. The scope of work involves designing data lake architectures and building ETL/ELT pipelines utilizing technologies such as Snowflake, Databricks, or AWS Lake Formation. The primary objective is to deliver scalable data pipelines and a structured environment while ensuring strict adherence to VA privacy and records management standards to maintain data portability. This opportunity is issued by the Technology Acquisition Center Nj under NAICS code 541512. Interested parties must note the response deadline of November 4, 2026, for this specific engineering effort aimed at enhancing the data capabilities of prime contractors working with the Department of Veterans Affairs.

Computer Systems Design Services

POSTED

DEADLINE

Real-Time Transactional API DevelopmentThis subcontract opportunity with the Department of Veterans Affairs Technology Acquisition Center Nj involves the development and maintenance of real-time transactional APIs for prime contractors on OIT projects. The scope of work includes designing API schemas, implementing REST and GraphQL interfaces, developing API gateways, and establishing CI/CD pipelines using APIM platforms and schema registries. The final deliverables consist of secure, documented source code and fully functional transactional APIs. The project requires strict adherence to VA cybersecurity protocols, software supply-chain integrity standards, and Section 508 accessibility requirements. Interested parties must respond by November 4, 2026, for this effort categorized under NAICS code 541511.

Custom Computer Programming Services

POSTED

DEADLINE

VTC Hardware & Component SupplyThis subcontract opportunity, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on the supply of VTC hardware, replacement parts, and components for prime contractors working on VA Austin Information and Technology Center projects. The scope of work includes the procurement and shipping of VTC codecs, cameras, microphones, displays, and mobile cart components on a FOB Destination basis. The contract is set aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 423430. A critical technical requirement is that all cryptographic modules must be FIPS 140-3 compliant and adhere to federal procurement origin regulations. The solicitation was posted on October 20, 2026, with a response deadline of October 28, 2026.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

VTC System Installation & IntegrationThis SDVOSB set-aside subcontract, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on the installation and integration of VTC systems at the VA Austin Information and Technology Center. The selected contractor will be responsible for the physical installation of complete conference systems, the development of Project Work Plans, and the overall management of the installation phase to expand conference room capabilities for prime contractors. All work must strictly adhere to FISMA 2014 and FIPS standards, particularly regarding the requirements for classified spaces. The final deliverable consists of fully installed and tested conference room VTC systems. This opportunity falls under NAICS code 541512, with a response deadline of October 28, 2026.

Computer Systems Design Services

POSTED

DEADLINE

VTC System Maintenance & Field EngineeringThe VTC System Maintenance and Field Engineering subcontract involves providing comprehensive technical support, preventative maintenance, and repairs for both classified and unclassified video teleconferencing systems and mobile carts. Supporting prime contractors at the VA Austin Information and Technology Center, the scope of work includes annual maintenance and emergency response services with a strict six-hour window for troubleshooting and resolution to ensure all systems remain fully operational. This opportunity is set aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 811219 and is managed by the Department of Veterans Affairs Technology Acquisition Center Nj. All deliverables must adhere to rigorous security and privacy standards, including FIPS 140-3, FIPS 199/200, FISMA 2014, and HIPAA compliance.

Other Electronic and Precision Equipment Repair and Maintenance

POSTED

DEADLINE

VA Security & AI Compliance IntegrationThe VA Security and AI Compliance Integration subcontract, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on providing security auditing and compliance mapping for prime contractors involved in satellite deployments. The scope of work includes configuring systems to adhere to VA Directive 6500, ensuring strict HIPAA compliance for protected health information, and aligning all artificial intelligence components with the VA Trustworthy AI Framework. To achieve these goals, the contractor will utilize specialized encryption software and HIPAA-compliant data tools. The primary deliverables for this engagement consist of comprehensive security documentation and formal compliance certification reports. This effort falls under NAICS code 541512 and is designed to ensure that all deployed technologies meet the rigorous security and ethical standards required by the agency.

Computer Systems Design Services

POSTED

DEADLINE

Ruggedized Satellite Terminal Hardware SupplyThis subcontract through the Department of Veterans Affairs Technology Acquisition Center Nj involves the supply of ruggedized satellite terminals and hardware for prime contractors. The equipment must be manufactured to meet strict IP66 ingress protection and MIL-STD-810H standards to ensure resistance against corrosion and humidity. To maintain security and integrity, the provider is required to use tamper-evident packaging and supply comprehensive chain-of-custody documentation for all physical deliveries. The contract further mandates adherence to Energy Star or FEMP Low Standby Power standards for energy efficiency. Operating under NAICS code 334220, the project focuses on the delivery of specialized physical hardware designed for demanding environments. Interested parties should note the response deadline of October 28, 2026.

Radio and Television Broadcasting and Wireless Communications Equipment Manufacturing

POSTED

DEADLINE

LEO Satellite Connectivity ServicesThis subcontract, titled LEO Satellite Connectivity Services, is issued by the Department of Veterans Affairs through the Technology Acquisition Center Nj. The agreement focuses on providing Low Earth Orbit satellite data connectivity to prime contractors working on VA telecommunications projects. Key deliverables include the provision of satellite bandwidth via LEO constellations, the management of pooled-data plans, and the implementation of specific service suspension protocols. The service offerings include both encrypted end-to-end and non-encrypted data options to meet varying security needs. The contractor is responsible for maintaining active satellite data connections and providing detailed monthly service reports. This opportunity falls under NAICS code 517410 and was posted on October 20, 2026, with a response deadline of October 28, 2026.

Satellite Telecommunications

POSTED

DEADLINE

Clinical Imaging Data MigrationThis subcontract, titled Clinical Imaging Data Migration, is issued by the Department of Veterans Affairs through the Technology Acquisition Center Nj. The project focuses on the ETL migration of legacy POCUS images and patient data for prime contractors working on VA healthcare IT initiatives. The scope of work involves migrating ultrasound images and cine loops across 172 sites while ensuring that patient-encounter associations remain intact and data integrity is validated. The primary objective is to resolve missing records during synchronization to deliver a fully validated migrated dataset within the new Enterprise POCUS system. Classified under NAICS code 541512, the opportunity was posted on October 20, 2026, with a response deadline of October 27, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS