New Task Order - ICAMP Development and Technical Support(VA-25-00048422)   2

Background
The Department of Veterans Affairs (VA) is issuing this solicitation for the New Task Order - ICAMP Development and Technical Support (VA-25-00048422). The goal of this contract is to provide development and technical support services related to the Information Collection and Management Program (ICAMP), ensuring compliance with various federal regulations, including the Privacy Act.

Work Details
The contractor is required to perform the following tasks:

1. Include the Privacy Act notification in every solicitation and subcontract related to the redesign, development, or operation of a System of Records (SOR) on individuals.

2. Ensure security of all systems and technologies throughout the contract lifecycle, including applying necessary security fixes for vulnerabilities.

3. Notify VA within 24 hours of discovering any successful exploits that could compromise system security, with remediation actions taken within specified timeframes.

4. Ensure compliance with HIPAA, FISMA, NIST, and VA security directives for information systems hosted or operated on behalf of VA at non-VA facilities.

5. Conduct risk assessments, vulnerability scanning, system patching, and maintain contingency plans for each system.

6. Provide a Privacy Impact Assessment (PIA) for approval prior to operational use of any information system handling Personally Identifiable Information (PII).

7. Document any deficiencies in information security policies through the VA Plan of Action and Milestones (POA&M) process.

Period of Performance
The period of performance will be determined upon award but will encompass a timeframe suitable for the completion of all outlined tasks and services.

Place of Performance
The primary place of performance is at the contractor's facility as well as any non-VA facilities where information systems are hosted or operated.