VA taps familiar face as acting health secretary overseei...

Overview

The Veterans Health Administration has appointed John Figueroa as acting Under Secretary for Health following John Bartrum’s resignation; Figueroa will oversee the continued rollout of the Federal Electronic Health Record (FEHR) modernization program. The program plans to deploy to 19 sites by the end of year with full deployment targeted for 2031. This leadership transition may change program priorities, schedules, procurement timelines, or technical direction for the multi-billion dollar EHR modernization effort and other VHA technology initiatives. Contractors supporting FEHR and related VHA IT work should assume increased scrutiny on schedules, risk posture, and compliance requirements. Action is needed now to monitor official communications, revalidate contract assumptions and POCs, and ensure security and compliance readiness across FedRAMP (Federal Risk and Authorization Management Program), NIST 800-171 (NIST Special Publication 800-171), HIPAA, FISMA, and NIST 800-53 surfaces. Early engagement, rapid reassessment of deliverables, and capture plan updates will reduce disruption risk as VHA leadership settles.

Immediate Actions (This Week)

[ ] Monitor official VA/VHA announcements and FEHR program statements for any directives, schedule changes, or procurement notes; subscribe to VHA press channels and program briefings where available.
[ ] Confirm current contract scope, milestones, and points of contact with primes, subcontractors, and VHA program managers supporting FEHR sites scheduled for deployment to 19 sites by end of year.
[ ] Perform a rapid program risk review focused on near-term deliverables (site cutovers, data migrations, integration activities) and document contingency actions if leadership priorities shift.

Short-Term Actions (30 Days)

[ ] Update capture and pursuit plans to reflect the leadership change: re-score active opportunities for VA/VHA alignment and validate fit against relevant NAICS and contract vehicles (review alignment with listed vehicles such as T4NG, VETS 2, OASIS+, 8(a) STARS III, Alliant 2).
[ ] Revalidate security and compliance posture for any systems or services supporting FEHR: confirm FedRAMP/FISMA status where cloud services are used, ensure NIST 800-171 and NIST 800-53 controls are in place for nonfederal systems, and verify HIPAA protections for protected health information.

Long-Term Actions (90+ Days)

[ ] Maintain sustained engagement with VHA program leadership and primes to influence technical direction and schedule decisions ahead of full deployment targeted for 2031; update staffing, skills, and subcontractor relationships to match expected long-term needs.
[ ] Invest in documentation, audit readiness, and scalable architectures that support FEHR requirements and the multi-billion dollar modernization program — include measurable performance metrics, continuous monitoring plans, and evidence packages for authorizations and audits.

Compliance Checklist

[ ] FedRAMP — maintain or attain necessary authorization for any cloud services used in FEHR-related work; ensure continuous monitoring and SSP currency.
[ ] NIST 800-171 — document and validate implementation of required controls for controlled unclassified information on nonfederal systems; maintain POA&Ms where gaps exist.
[ ] HIPAA — enforce administrative, physical, and technical safeguards for protected health information processed or stored on behalf of VHA.
[ ] FISMA — ensure federal system components comply with applicable FISMA requirements and authorization-to-operate expectations where VA-owned systems are in scope.
[ ] NIST 800-53 — align applicable system security controls and evidence packages to support system authorizations and audits.

Resources

VA / VHA official communications and FEHR modernization program statements — monitor VHA program pages and press releases for leadership and schedule updates.
FedRAMP, NIST 800-171, HIPAA, FISMA, and NIST 800-53 official guidance — review the respective program guidance pages for control baselines, authorization requirements, and continuous monitoring expectations.

How Cabrillo Club Automates This

Cabrillo Signals War Room — Already detected this event and delivered this briefing within minutes. War Room continuously monitors VA/VHA announcements, FEHR-related press, and policy feeds so you receive immediate alerts when leadership changes, deployment milestones, or procurement notices appear. Use War Room to maintain a real-time incident/activity timeline for this leadership transition.
Cabrillo Signals Match Engine — Automatically rescales your opportunity pipeline when events like this shift the competitive landscape. Match Engine will re-score VA/VHA opportunities and adjust keyword relevance (e.g., FEHR, EHR modernization, VHA), surface at-risk pursuits tied to near-term site deployments, and reprioritize opportunities tied to the contract vehicles and NAICS footprints identified.
Cabrillo Signals Intelligence Hub — Tracks affected agencies, NAICS codes, and contract vehicles. Save searches for VA/VHA FEHR-related solicitations and set alerts for vehicles listed in this event profile (T4NG, VETS 2, OASIS+, 8(a) STARS III, Alliant 2). Intelligence Hub will notify you when related solicitations, amendments, or program updates hit SAM.gov (System for Award Management) or agency notice channels.
Proposal Studio (Proposal OS) — Generates compliance matrices, maintains your win-theme library, and produces first-draft technical approaches using your past performance tied to healthcare IT and EHR modernization. Proposal Studio’s bid/no-bid engine automatically factors events like the VHA leadership change into opportunity scoring and draft prioritization so capture teams can act quickly.
Proposal Studio Workflow Tracker — Triggers a 9-gate capture workflow when FEHR-related solicitations or high-impact program updates appear. Workflow Tracker routes compliance reviews to contracts and legal, tracks supplier certifications (FedRAMP, NIST 800-171 remediation status, HIPAA training), and compiles audit-ready documentation packages for proposals and authorizations.

Call to action: Use your Cabrillo Signals War Room briefing and saved searches in the Intelligence Hub to prioritize which opportunities and contracts to re-score first, then run Proposal Studio to generate updated compliance matrices and capture artifacts. Contact your Cabrillo Club account team to enable tailored saved searches and capture workflows for FEHR/VHA coverage.