Section 508 Audit, Testing, and Training Services VA-24-00029932   2

Background
The Department of Veterans Affairs (VA) is seeking 508 Audit, Testing, and Training Services under solicitation number 36C10B24Q0121. The services are related to the Privacy Act and security of systems and technologies. The contract will involve hosting, operation, maintenance, or use of information systems on behalf of VA at non-VA facilities, with full responsibility for ensuring compliance with various security and privacy directives and handbooks.

Work Details
The contractor is required to perform various tasks related to the Privacy Act, including incorporating the Privacy Act notification in solicitations and subcontracts, ensuring the security of procured or developed systems and technologies throughout the contract period, notifying VA of any security exploits within 24 hours, applying security fixes as necessary, and ensuring compliance with HIPAA, FISMA, NIST, FIPS, and VA security and privacy directives. Additionally, the contractor must adhere to FISMA, FIPS, and NIST standards related to annual security controls assessment and update the Privacy Impact Assessment (PIA).