This Solicitation opportunity from New York was posted on October 20, 2025. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

3rd Party Vendor Risk Management Tool

Closed

25/26-3563ITState & Local

Submission Closed11/10/2025, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 518210

New

SLED

RightFax FOIP Channel Licensing & ProvisioningThis subcontract opportunity is for the licensing and provisioning of RightFax FOIP enabled fax channels to support prime contractors on projects for the Ohio Bureau of Workers' Compensation. The selected provider must be an authorized RightFax partner responsible for delivering active, licensed, and functional channels, ensuring they are properly configured to integrate with existing network infrastructure and RightFax environments. A critical security requirement of this contract is that all data must remain within the United States. Interested parties must submit their responses by November 10, 2026, to support the Infrastructure and Operations group within the agency.

Bwc300300 Infrastructure And Operations Wgbl, Bwc-bur Of Workers' Compensation

POSTED

DEADLINE

FedRAMP Cloud Infrastructure & Managed HostingThe FedRAMP Cloud Infrastructure and Managed Hosting subcontract supports prime contractors on Department of State APS projects by providing and managing secure cloud environments. Utilizing AWS GovCloud or Azure Government platforms, the contract ensures a highly available hosting environment with a guaranteed 99.9% monthly system availability. To maintain strict security standards, the provider implements encryption and role-based access controls in accordance with 12 FAM 600. This effort falls under NAICS code 518210 and is managed through Acquisitions - Aqm Momentum for the Department of State, with a response deadline set for November 20, 2026.

Acquisitions - Aqm Momentum

POSTED

DEADLINE

Wellness Scheduling Software (SaaS)This subcontract, issued by the Department of the Interior under the Ibc Acq Svcs Directorate, involves the provision of a Software as a Service platform for wellness scheduling. The selected provider will supply and maintain an automated online appointment system designed for prime contractors managing multidisciplinary physical wellness support projects. Key deliverables include a functional booking portal featuring a digital interface for employee scheduling, calendar synchronization, and comprehensive user account management. Due to the nature of health-related scheduling, the platform must maintain strict HIPAA compliance to ensure the security and privacy of sensitive data. The project falls under NAICS code 518210 and was posted on October 27, 2026, with a response deadline of October 29, 2026.

Ibc Acq Svcs Directorate (00004)

POSTED

DEADLINE

Aberdeen Test Center - Data Collection Support Services (DCSS)

Solicitation # W91CRB-26-0000_043711

The U.S. Army Contracting Command, Aberdeen Proving Ground, is conducting market research via a Sources Sought and Request for Information notice to identify qualified providers for Data Collection Support Services (DCSS) at the Aberdeen Test Center. The anticipated requirement is for a single-award IDIQ contract with a five-year ordering period, utilizing firm-fixed-price or cost-plus-fixed-fee CLINs. The primary objective is to secure comprehensive data collection, technical writing, and administrative support across various directorates, including Automotive, Live Fire, Plans and Operations, and Virtual Test and Advanced Electronics and Warfighter. Key tasks involve data compilation, form development, test monitoring, editorial review of electronic and communication systems, computer operations, and range scheduling. Performance will occur primarily at Aberdeen Proving Ground, Maryland, with potential requirements at remote CONUS and OCONUS sites. The prime contractor must maintain a valid Secret Facility Security Clearance, and personnel must be U.S. citizens capable of obtaining Secret clearances. The contract includes a 45-day phase-in and phase-out period, with invoicing handled through the Wide Area Workflow system. Quality assurance will be managed via a Quality Assurance Surveillance Plan, requiring quarterly meetings and human validation of any AI-generated content. Interested respondents under NAICS 518210 must submit their capabilities and business size information by October 29, 2026, to help the government determine if the procurement will be a small business set-aside.

POSTED

DEADLINE

Secure Cloud Hosting and Infrastructure ProviderThe Secure Cloud Hosting and Infrastructure Provider subcontract supports prime contractors on State of Maine registration projects managed by the Motor Vehicles agency. The selected provider is responsible for delivering high-availability hosting environments and robust cybersecurity frameworks, which include the provision of secure cloud platforms, the implementation of comprehensive privacy plans, and the execution of business continuity and disaster recovery strategies. To ensure the highest security standards, the provider must maintain SOC2 compliance and hold security certifications that are either FedRAMP or State-equivalent. This engagement falls under NAICS code 518210 and requires a response by November 4, 2026.

POSTED

DEADLINE

Secure Electronic Application Review PlatformThis subcontract involves the provision and maintenance of a secure electronic application platform for prime contractors working on fellowship projects for the U.S. Department of State, Bureau of Human Resources. The primary objective is to deliver a fully functional, cloud-based review portal equipped with encryption and strict access controls, allowing panel members to score and evaluate applications while remaining compliant with federal data security standards. The project falls under NAICS code 518210 and was posted on October 27, 2026, with a response deadline of November 23, 2026. The contract ensures that the Bureau of Human Resources has a secure environment for managing sensitive application data throughout the review process.

Bureau Of Human Resources

POSTED

DEADLINE

Organizational Analytics Platform RFP

Solicitation # 8559

The University of Louisville is soliciting proposals under solicitation number 8559 for a hosted Organizational Analytics Platform. The objective is to acquire a system for periodic, point-in-time reviews of position structures, staffing levels, management spans, and administrative efficiency. The platform will utilize University-produced flat files, such as CSVs, rather than direct system integration. Key deliverables include position dashboards, spans-and-layers analysis, shared-services analytics, and internal staffing comparisons. The project timeline targets a contract effective date in the week of January 9, 2027, with substantial completion and initial go-live by March 31, 2027, and final completion by April 14, 2027. The University will award the contract based on best value, evaluating proposals across four equally weighted categories at 25 percent each: firm and product experience, technical and functional fit, total cost of ownership, and the implementation and support model. Offerors must submit a technical and financial proposal through the Workday Strategic Sourcing portal by November 9, 2026. Required documentation includes a signed non-collusion statement and a sample contract or subscription agreement. Additionally, the selected provider must ensure compliance with ADA standards and WCAG 2.1 Level AA. All communications must be directed to the contracting officer via the bidding platform.

University of Louisville

POSTED

DEADLINE

Secure Cloud Hosting & Platform SupportThis subcontract for Secure Cloud Hosting and Platform Support provides essential online infrastructure and technical maintenance for prime contractors working with the Alabama State Department of Education, CTE and Workforce Development. The primary scope of work involves providing secure cloud hosting for the ELC platform, managing license authentication and user access for 2,500 users, and utilizing Identity and Access Management systems to ensure consistent platform uptime and security. To maintain the integrity of the environment, the provider must hold specific security certifications, including SOC2, to deliver a functional and accessible online platform. This engagement falls under NAICS code 518210 and is focused on delivering a high-security technical foundation for state educational and workforce development initiatives.

Alabama State Department of Education, CTE \ Workforce Development

POSTED

DEADLINE

MHCC 27-010 Website Maintenance and Support

Solicitation # BPM059075

The Maryland Health Care Commission (MHCC) is soliciting proposals for website maintenance and support services under solicitation BPM059075. This is a Small Business Reserve Procurement limited to certified small businesses. The selected contractor will be responsible for maintaining a publicly available web environment used for disseminating health care information and collecting facility data via web-based surveys. The scope of work includes maintaining the current AWS environment, supporting Drupal 10 and .NET 8.0.27 applications, and providing technical guidance on cloud hosting needs. Key responsibilities encompass infrastructure management, security and compliance, application and database support, and backup and disaster recovery. The contract spans a duration of two years with a pricing structure consisting of Firm Fixed Prices for core deliverables and Time and Materials for specific labor categories, including Solutions Architects and Systems Engineers. The total evaluated price is expected to be at or below $100,000. To be eligible, offerors must demonstrate at least five years of experience meeting NIST, FISMA, or FedRAMP cybersecurity standards and provide three client references. Additionally, the contractor must maintain $1,000,000 in Cyber Security/Data Breach insurance and ensure all services comply with ADA Title II and Section 508 accessibility standards. Proposals are due by October 28, 2026, via the eMaryland Marketplace Advantage portal.

Department of Health - Administration, Boards & Commissions

POSTED

DEADLINE

1Password Management Platfor

Solicitation # FC0003905

Solicitation FC0003905 is a fixed-price request for the procurement of the 1Password Management Platform, a cloud-based security software solution for the Maryland Department of Information Technology. The objective is to implement a centrally managed password manager to standardize secure credential storage across state agencies, thereby reducing cybersecurity risks associated with weak or reused passwords and protecting sensitive citizen information. This is a secondary competition limited exclusively to Master Contractors currently awarded under the Commercial Off-the-Shelf Software (COTS 2012) contract 060B2490021. Eligible bidders must submit their proposals through the eMaryland Marketplace Advantage (eMMA) system by November 4, 2026, at 10:00 AM. Required submission documentation includes a Letter of Authorization from the 1Password manufacturer or distributor and a screenshot of the Manufacturer's Suggested Retail Price. The award will be granted to a responsive and responsible Master Contractor offering the most advantageous price. The contract requires compliance with COMAR 21.05.13.06 and includes a specific Data Use Agreement for SaaS products. Invoicing must be submitted via email and include detailed taxpayer and contract identification, with one-time pricing billed within 30 days of acceptance and annual pricing billed on the anniversary of the contract start.

DoIT - Dept Of Information Technology - Administration

POSTED

DEADLINE

CCaaS Technology ProviderThis subcontract opportunity with the Oklahoma Insurance Department seeks a CCaaS Technology Provider to supply and maintain a cloud-based contact center platform for State-Based Exchange projects. The selected provider will deliver a scalable environment featuring Automatic Call Distribution, Interactive Voice Response, telephony services, queue management, callbacks, and various digital channels to support prime contractors. To ensure security and regulatory adherence, the provider must maintain HIPAA compliance and hold either FedRAMP or StateRAMP certifications. Interested parties should note that the response deadline is November 19, 2026, and the project falls under NAICS code 518210.

Oklahoma Insurance Department

POSTED

DEADLINE

DOT E-ZPASS BACK-OFFICE SYSTEM

Solicitation # 2026-041

The New Hampshire Department of Transportation Bureau of Turnpikes is soliciting proposals under solicitation DoIT 2026-041 for a new E-ZPass Back Office System (BOS). This firm-fixed-price contract seeks a vendor to design, implement, transition, and operate a modern BOS, Call Center, and Walk-In-Centers using a Software as a Service (SaaS) and Infrastructure as a Service (IaaS) model. The scope includes managing electronic tolling revenue collection, invoice and violation processing, and the integration of AI and a redesigned website. The project timeline mandates that design, development, and implementation be completed by June 30, 2030, with a Go-Live date of July 1, 2030. The initial operation and maintenance period runs through June 30, 2035, with the state holding an option for three additional three-year extensions. The selected vendor must adhere to rigorous technical and security standards, including multiple NIST frameworks for cybersecurity, Zero Trust Architecture, and PII privacy protection. System acceptance is phased, requiring successful completion of User Acceptance Testing (UAT) and Operational Acceptance Testing (OAT), with all high-severity issues resolved prior to final acceptance. Proposals are due by January 15, 2027, and will be evaluated on a 200-point scale, with significant weight placed on product demonstrations. The contract is governed by the P-37 State of New Hampshire General Provisions and is subject to the exclusive jurisdiction of the Merrimack County Superior Court.

Department Of Transportation

POSTED

1 day ago

DEADLINE

in 3 months

AI Contract Overview

Stony Brook University Hospital is soliciting proposals for a Third Party Risk Management Tool to identify and mitigate risks associated with vendors, suppliers, and service providers. The primary objective of this tool is to facilitate the assessment, analysis, and continual monitoring of third parties to ensure strict adherence to HIPAA Security Rule compliance and the protection of patient electronic protected health information. The contract is for a one year term and covers all New York State counties. Interested vendors must contact the authorized campus representative, Anna Tedone, by November 10, 2025. This opportunity is not a Service-Disabled Veteran-Owned Set Aside, and it is noted that UpGuard has been awarded a similar procurement contract within the last five years.

General Info

Stony Brook University Hospital seeks a one-year Third Party Risk Management Tool proposal.

Agency

State University of New York (SUNY)

NAICS

518210 - Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

Place of Performance

All NYS counties, NY, USA

Set-Aside

NONE

Documents

No documents available

Documents will appear here when they are available.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedOct 20

Solicitation

Response DeadlineNov 10

Deadline has passed

Submission Closed

11/10/2025, 06:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyState University of New York (SUNY)

Contacts2 people available

OfficeN/A

Organization / AgencyState University of New York (SUNY)

Office AddressN/A

Contacts

Anna TedoneIT Vendor Contracts Manager

contact@example.gov

+1 (555) 000-0000

Anna TedoneIT Vendor Contracts Manager

contact@example.gov

+1 (555) 000-0000

Full Description

Stony Brook University Hospital is seeking a vendor to provide a 3rd Party Risk Management Tool. Third-party risk management (TPRM) is a form of risk management that focuses on identifying and reducing risks relating to the use of third parties (sometimes referred to as vendors, suppliers, partners, contractors, or service providers. The program includes assessment, analysis, and management of risk -in conjunction with HIPAA Security Rule compliance efforts. HIPAA requires vendor contracts to include privacy and security assurances. Conducting regular risk assessments and continual monitoring enables SBM to evaluate vendor readiness to comply with these security expectations and protect patient ePHI. If you believe you can provide these services, please contact the authorized Campus representative listed in this advertisement within 15 business days. Service-Disabled Veteran-Owned Set Aside: No Due date:11/10/2025 1:00 PM Contract term: 1 year County(ies): All NYS counties Business entities awarded an identical or substantially similar procurement contract within the past five years: Upguard