VA Security and Privacy Compliance Validation

The VA Security and Privacy Compliance Validation is a small business set-aside subcontract under the Department of Veterans Affairs, specifically managed by Network Contract Office 19. Based in Salt Lake City, the contract focuses on performing critical security audits for prime contractors to ensure adherence to VA Handbook 6500.6. Key technical responsibilities include conducting vulnerability scans, validating data encryption for proximity data, and ensuring strict HIPAA compliance for the protection of patient information. The primary objective of the engagement is the delivery of comprehensive security compliance reports and the preparation of security authorization packages required for Authorization to Operate documentation. This effort falls under NAICS code 541690 and requires a response by September 18, 2026.