IT Consulting Services for HIPAA Assessment

The National Railroad Passenger Corporation, also known as Amtrak, is seeking IT consulting services to conduct an enterprise-wide security and privacy HIPAA risk assessment. The agency needs to establish a comprehensive, evidence-based understanding of how sensitive and regulated data is created, accessed, processed, stored, and transmitted across its systems, as well as any third-party systems or service providers managing such data on its behalf. This assessment will help the agency identify and mitigate security and privacy risks to ensure compliance with HIPAA regulations. The scope of work requires the selected contractor to perform both onsite and offsite services to evaluate the agency's data practices and third-party integrations. Eligible bidders must be onshore organizations based in the United States. The agency is accepting digital proposal submissions via email or through their online portal, and interested parties may obtain the detailed specification documents by email. The agency has not disclosed a specific budget and is looking for competitive cost proposals from qualified bidders. The source documents do not specify the evaluation criteria or key project dates. Bidders must request the full specification documents via email to obtain the complete details regarding submission deadlines and evaluation metrics.