4ecaac4e-cc6e-49b2-b156-91f24b05f04d.jpg

This document is a Statement of Objectives (SOO) for a federal contract opportunity from the Centers for Medicare & Medicaid Services (CMS). The procurement seeks a qualified contractor to provide comprehensive support for Information Security and Privacy Group (ISPG) initiatives, with primary objectives including strengthening privacy and security policy management, managing privacy service line agreements, enhancing the CyberGeek platform, implementing cybersecurity awareness and training programs, and supporting incident response efforts.

The scope of work is divided into two main areas: 1) Program and Policy Management, which involves applying Agile principles to policy development, providing project management oversight, developing and updating CMS privacy policies, and implementing quality assurance measures; and 2) Privacy Service Line and Agreement Management, focusing on streamlining privacy agreement lifecycle management, maintaining an inventory of privacy agreements, supporting drafting and reviewing, and automating agreement tracking with compliance reviews. The contractor will be expected to leverage AI-driven automation, modernize methodologies, and ensure seamless transitions in contract services.