Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Breach Detection and Incident Response

Active

State & Local

Response Deadline09/15/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the monitoring of systems for breaches involving unsecured protected health information and mandates a swift incident response process that includes immediate containment, thorough investigation, and complete reporting within five days of detection. The scope is focused on ensuring compliance and minimizing risk through timely and effective action when PHI is compromised. This subcontract is issued under the NAICS code 541519, indicating it pertains to other computer-related services, and is associated with the Kentucky agency located at 275 E. Main Street, with performance expected to occur at an unspecified location designated as Other. The solicitation was posted on August 7, 2026, and proposals must be submitted no later than September 15, 2026, at 6:00 PM Eastern Time. No set-aside type is specified, and no point of contact details are provided, with all relevant information accessible via the posted online link.

General Info

Monitor PHI breaches, respond within five days, comply, perform unspecified location, proposals due September 15, 2026.

Agency

Kentucky → 275 E. Main StreetView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

Other, KY, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 7

subcontract

Response DeadlineSep 15

Submission deadline

Response Deadline

09/15/2026, 06:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyKentucky → 275 E. Main Street

ContactsNo contacts available

OfficeN/A

Organization / Agency

Kentucky → 275 E. Main Street

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Monitor systems for breaches of unsecured PHI and provide rapid incident response including containment, investigation, and reporting within 5 days.

Similar Contracts

Same NAICS industry code

Technical Documentation & Knowledge TransferThis contract focuses on the development and delivery of comprehensive technical documentation, training materials, and hands-on knowledge transfer sessions designed to enable TxDOT staff to independently manage, operate, and troubleshoot the CDC system without external support. The work emphasizes building internal capacity through structured learning tools and practical instruction to ensure long-term operational sustainability. All deliverables must be tailored specifically to the needs of TxDOT personnel, ensuring clarity, usability, and alignment with existing workflows and technical environments. The contract is classified as a subcontract under NAICS code 541519, indicating it falls within other computer-related services, and was posted on August 7, 2026, with responses due by August 21, 2026. It is administered by the Texas Department of Transportation, with performance expected to support the agency’s operations in Texas. While specific location details for performance or the point of contact are not provided, the intent is clearly to empower TxDOT’s internal team to assume full ownership of the CDC system following the completion of the knowledge transfer activities.

Texas Department of Transportation

POSTED

about 14 hours ago

DEADLINE

Emergency and Non-Business Hours Service Call Labor

POSTED

about 22 hours ago

DEADLINE

24/7 Technical Support & Remote Monitoring Services

249-NETWORK Contract Office 9 (36C249)

POSTED

about 24 hours ago

DEADLINE

Help Desk & Operations Support (Tier 2/3)The contract calls for comprehensive 24/7 operational support for the eFax platform, encompassing real-time monitoring, incident management, and SLA-driven reporting under Tier 2 and Tier 3 technical support levels. The provider must ensure uninterrupted service, rapid resolution of technical issues, and consistent adherence to performance benchmarks, with all activities focused on maintaining the reliability and availability of the eFax system used by the Department of Health and Human Services. This includes proactive identification of system anomalies, escalation protocols for complex issues, and timely delivery of performance metrics to meet contractual obligations. The opportunity is structured as a subcontract under the Omas Strategic Buying Center - HHS Mission, with a NAICS code of 541519 indicating information technology services. The place of performance is designated as Rockville, Maryland, 20852, and responses must be submitted by August 17, 2026, by 8:00 PM. While the solicitation number is not provided, the contract remains open for proposals via the SAM.gov portal until the deadline, targeting firms qualified to deliver high-level technical support and operational continuity for mission-critical healthcare communications infrastructure.

Omas Strategic Buying Center - HHS Mission

POSTED

about 24 hours ago

DEADLINE

Single-Source XML Publishing Pipeline (JATS)The contract seeks the development and maintenance of an automated pipeline to convert manuscripts into JATS XML format, ensuring consistent and reliable rendering across preprint, publication, and archiving platforms. This work is critical for standardizing scholarly content formatting to support interoperability, long-term preservation, and seamless distribution across scientific publishing systems. The solution must handle diverse manuscript inputs, accurately extract structure and semantics, and produce compliant JATS XML that meets authoritative publishing standards without manual intervention. This is a subcontract under the National Institutes of Health, part of the Department of Health and Human Services, with performance required in Bethesda, Maryland, 20892. The North American Industry Classification System code is 541519, indicating it falls under other scientific and technical consulting services. The opportunity was posted on August 7, 2026, with a response deadline of August 27, 2026, and is open for submission through the SAM.gov portal. No set-aside provisions or agency contact details are specified, and the scope demands both initial development and ongoing maintenance to adapt to evolving formatting requirements and platform integrations.

National Institutes Of Health Olao

POSTED

about 24 hours ago

DEADLINE

Technical Support and Help Desk ServicesThe contract calls for the provision of Tier 1 and Tier 2 technical support services for digital resources, with a focus on learning management system integration, single sign-on configuration, software licensing management, and comprehensive troubleshooting across multiple global time zones. Support must be delivered efficiently to ensure continuous access and functionality of critical educational platforms utilized by the Department of Defense. The scope requires expertise in resolving complex technical issues related to digital infrastructure used in military and DoD-affiliated educational environments. This subcontract is issued under NAICS code 541519 for other computer-related services and is managed by the DOD Education Activity under the Department of Defense. The proposal must be submitted by August 21, 2026, with performance expected to center on Alexandria, Virginia, though support services will span international regions. The contract duration and exact deliverables are not specified beyond the scope of technical assistance, but the requirement implies 24/7 coverage readiness and adherence to DoD security and operational standards for digital service delivery.

DOD Education Activity

POSTED

about 24 hours ago

DEADLINE

National Provider Directory (NPD) Data Sourcing, Aggregation, and Quality Assurance Services

Solicitation # 75FCMC26R0063

The National Provider Directory (NPD) Data Sourcing, Aggregation, and Quality Assurance Services contract, solicited under number 75FCMC26R0063, is a five-year potential engagement with a base period of one year and four one-year option periods, running from September 25, 2026, through September 24, 2031. Operated by the Office of Acquisition and Grants Management within the Centers for Medicare & Medicaid Services (CMS), the contract aims to establish and maintain an accurate, comprehensive, and interoperable national directory of healthcare providers by sourcing, aggregating, validating, and correcting provider data from systems such as NPPES, PECOS, and state licensing boards. Work is to be performed using an agile delivery model with program increments, employing CMS tools including Confluence, Jira, and GitHub, and requires full compliance with Section 508 accessibility standards, FedRAMP authorization, and HIPAA Business Associate obligations. The scope includes delivering corrected data files, metadata-rich documentation, validation tools, dashboard configurations, and licensing agreements—all submitted electronically in accessible formats and governed by a detailed Quality Assurance Surveillance Plan (QASP) with strict performance metrics for timeliness, accuracy, and completeness. The solicitation mandates proposals be submitted via email only by 12:00 p.m. Eastern Time on August 12, 2026, in specific Microsoft Office or Adobe Acrobat formats, with strict page limits for the corporate experience narrative and requirements for transparent, formula-visible Excel pricing templates. Evaluation is non-price based, prioritizing corporate experience, proposed approach to the Performance Work Statement and QASP, and oral presentations, with award determined by best value rather than lowest price and with no numerical weighting assigned to factors. Key special requirements include mandatory background investigations for all personnel under HSPD-12 and FIPS 201, full compliance with federal data handling standards including NIST SP 800-88 for media sanitization, CMS-specific non-disclosure agreements, and annual scope and pricing reviews for option periods. The contract includes unique clauses such as HHSAR 352.239-71 for IT security, prohibitions on Kaspersky, ByteDance, and other covered entities, and requirements for whistleblower protections, small business subcontracting, accelerated payments to small business subcontractors, and fair labor standards including minimum wage enforcement under Executive Order 14026. Performance is to

Ofc Of Acquisition And Grants Management

POSTED

about 24 hours ago

DEADLINE

J063--CCTV SERVICE & MAINTENANCE

Solicitation # 36C26226Q1049

The Department of Veterans Affairs, through the Network Contract Office 22 in Mesa, Arizona, is conducting a sources sought announcement for comprehensive CCTV service and maintenance under solicitation number 36C26226Q1049, designated as a Service-Disabled Veteran-Owned Small Business (SDVOSB) set aside with NAICS code 541519. This is a presolicitation market research action intended to identify qualified vendors capable of providing maintenance, repair, technical support, upgrades, and system management for CCTV systems across the VA San Diego Healthcare System, including the La Jolla Hospital main campus and seven Community-Based Outpatient Clinics. The requirement encompasses support for Avigilon, Bosch, Pelco, and all legacy or compatible security systems, with the proposed contract structured as a one-year base period and four optional additional years. Vendors must demonstrate technical expertise and capability through a detailed capability statement and documentation proving experience with multi-site, multi-server surveillance systems and the ability to deliver both on-site and remote support, including software and firmware updates, Avigilon licensing, and on-demand work order responses for physical security components. Vendors interested in responding must be registered in the System for Award Management (SAM), complete the Online Representations and Certifications Application (ORCA), and, if applicable, be registered in the SBA-Dynamic Small Business Search (DSBS) Registry. Responses must be submitted via email to Felicia Simpson, Contracting Officer, no later than 1:00 PM Mountain Time on July 6, 2026, and must include company name, address, point of contact, phone, fax, email, DUNS number, CAGE code, tax ID number, and clear identification of small business status. While no pricing or contract value is disclosed due to the presolicitation nature of this announcement, vendors must detail their ability to meet strict performance requirements including submission of electronic Field Service Reports (FSR) within 48 hours after every preventative maintenance visit or on-site service call. Each FSR must contain a detailed description of services performed, replacement parts used, total service hours, safety checks, performance data, date of service, and vendor recommendations for maintaining optimal equipment operation. Additionally, technicians are required to report any unsafe conditions or signs of equipment misuse directly to the Contracting Officer’s Representative. This action does not constitute a solicitation or obligation to award a contract and is solely for market research purposes to inform future procurement activities.

262-NETWORK Contract Office 22 (36C262)

POSTED

about 24 hours ago

DEADLINE

26-SIMACQ-E30-0034 Cell Phone Repeater Removal and Replacement

Solicitation # N6339426Q4056

The Naval Surface Warfare Center Port Hueneme Division is seeking a small business contractor to remove and replace two existing end-of-life cellular repeater systems at Buildings 522 and 523 on the Dam Neck Annex in Virginia Beach, Virginia, under solicitation N6339426Q4056, issued as a total small business set-aside with a NAICS code of 541519. The requirement is for a firm fixed price contract to provide all labor, equipment, and incidental materials necessary for the de-installation and proper disposal of the current systems, followed by the installation of two new cellular repeaters with antennas and cabling capable of withstanding hurricane-force wind gusts. The new systems must rebroadcast signals for T-Mobile, Verizon, and AT&T and include frequency conditioners, auto-isolation detection, and auto-shutoff functions. All work must comply with OSHA regulations, local and federal building and electrical codes, and original equipment manufacturer specifications. The contract is classified as a DX-rated order under the Defense Priorities and Allocations System, prioritizing national defense and emergency preparedness needs. Offerors must demonstrate compliance with the Cybersecurity Maturity Model Certification Level 1 (Self-Assessed) through an active, verified status in SPRS, and are required to submit CMMC Unique Identifiers (CMMC UIDs) as part of their proposal. The evaluation process follows a Lowest Price, Technically Acceptable (LPTA) approach, where proposals must pass three mandatory gate criteria: Technical Capability, Past Performance, and CMMC Compliance; failure to meet any of these renders a quotation ineligible for award regardless of price. Proposals must be submitted electronically as a PDF via email to Jorge Ortiz at jorge.u.ortiz.civ@us.navy.mil by 3:00 p.m. Pacific Daylight Time on August 20, 2026, with no hard copies accepted. Prior to attending a mandatory site survey on August 11, 2026, vendors must submit a completed SECNAV 5512 form and a 2210/2 form by August 7, 2026, and obtain approval of a 2210/4 form PED to gain base access. All personnel must enroll in the Defense Biometric Identification System (DBIDS) to enter the installation and coordinate access through the Technical Point of Contact. Security and OPSEC protocols restrict photography, documentation

Commanding Officer

POSTED

about 24 hours ago

DEADLINE

DD01--WILMAC Call Recording Extraction Service Base New requirement

Solicitation # 36C10B26Q0450

The U.S. Department of Veterans Affairs is seeking solutions to extract, decrypt, and consolidate hundreds of millions of legacy call recordings from three on-premise platforms—Calabrio One, Avaya, and Verint—into a single, compliant cloud-based archive using the Continuity Replay system. These recordings, which encompass crisis, benefits, and healthcare interactions, must be preserved according to National Archives and Records Administration mandates with varying retention requirements by call type. The solution must standardize proprietary audio formats into an open format, enable secure long-term storage, and facilitate the eventual decommissioning of outdated systems. The base requirement includes a cloud-deployed Continuity Replay package, remote installation and training, and audio transcending services, with the government providing its own compliant storage. Optional tiered overages and annual software uplifts are available for scaling capacity. The acquisition is structured as a firm-fixed-price contract under a Total Small Business Set-Aside, aligned with NAICS code 561422, and includes a four-year performance period with optional years. All offerings must comply with VA’s Technical Reference Model, Zero Trust Security Controls, IPv6 and TIC requirements, and stringent ICTS supply chain prohibitions against transactions with foreign adversaries. The system must fully support Section 508 accessibility, NIST standards, and sustainability mandates under the Energy Independence and Security Act, Executive Order 14148, and related directives. AI systems or LLMs integrated into the solution must adhere to unbiased principles, truth-seeking standards, disclosure obligations, and robust monitoring protocols. Vendor submissions must be limited to a five-page capabilities statement including corporate details, contact information, and small business size certification, submitted via email by June 10, 2026. The government will not pay for RFI responses, and no binding contract will result from this solicitation, which serves solely as market research for a future competitive procurement.

Technology Acquisition Center Nj (36C10B)

POSTED

about 24 hours ago

DEADLINE

Motorola Radio Infrastructure handheld/mobile radio hardware maintenance

Solicitation # SP4701-26-R-0014

The Defense Logistics Agency is seeking a contractor to provide comprehensive maintenance and lifecycle support for its ASTRO25 Trunked Radio Systems, which serve as the critical communication backbone for DLA Emergency Services. The contract requires end-to-end technical support for the enterprise radio infrastructure, including repair, replacement, and ongoing maintenance of handheld and mobile radio hardware to ensure maximum operational availability and system integrity across all deployed locations. The contractor must deliver dedicated technical personnel and ancillary services aligned with the Statement of Work to sustain the readiness and efficiency of the DLA Enterprise Radio Communications network. The solicitation, identified as SP4701-26-R-0014, was posted on August 7, 2026, with responses due by August 14, 2026, and falls under NAICS code 541519 for other scientific and technical consulting services. The opportunity is administered by the Department of Defense through the DCSO Philadelphia office, located in Philadelphia, Pennsylvania, with primary performance expected in Virginia at zip code 23237. Primary point of contact is Donald Hinkson, reachable via email and phone, with Brian Dudek serving as the secondary contact. The contract is open for full and open competition without set-aside restrictions.

Dcso Philadelphia

POSTED

about 24 hours ago

DEADLINE

WASP ASSET CLOUD SYSTEM AND SERVICE

Solicitation # N0018926QL291

The Fleet Logistics Center Norfolk is seeking input from qualified vendors to inform the development of a potential contract vehicle for a cloud-based asset tracking system to support the Navy Public Affairs Support Element. The system must enable users to check materials in and out, manage inventory by adding or deleting items, and track asset locations in real time, with all transactions requiring CAC-enabled authentication for accountability. Given the high volume of daily transactions across multiple locations, the solution must be robust, uniform, and capable of reliably documenting material movement, assigned users, and timing of each transition. The Government is not issuing a solicitation under this notice; it is strictly a sources sought announcement to gather market information for planning purposes only, with no commitment to award a contract or reimbursement for responses. Vendors interested in providing input must submit a response by 2:00 p.m. on Wednesday, July 29, 2026, to the designated email address, including company details, CAGE code, size designation, a capability statement with relevant past performance on similar projects from the last three years—including contract numbers, dollar values, and performance dates—and any supporting documentation such as GSA contract references with task order details. Responses must not exceed five typed pages in 12-point font and must avoid generic brochures, focusing instead on demonstrable technical expertise and experience interfacing with required hardware and software systems. The government will not respond to questions or provide feedback on submissions, and submissions will remain unacknowledged. Information provided may be used to refine future solicitations, and details in the pre-solicitation synopsis may change prior to any formal announcement.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 24 hours ago

DEADLINE

More opportunities from Kentucky → 275 E. Main Street

Same awarding agency

PHI Data Disposal or Secure ReturnThe contract requires the secure return or complete destruction of all protected health information upon termination, with a mandate to implement indefinite protective measures if destruction is not technically feasible. This obligation applies to any entity handling PHI under the terms of the subcontract, ensuring compliance with privacy and security standards regardless of the contract’s duration or outcome. The agreement is governed under NAICS code 561990 and is posted by the Kentucky agency located at 275 E. Main Street, with response submissions due by September 15, 2026. The place of performance is designated as “Other,” indicating flexibility in where services may be rendered, but all PHI handling must adhere strictly to the contractual requirements for data disposition. There is no set-aside designation, and the solicitation is open to eligible subcontractors without specific organizational type restrictions.

All Other Support Services

POSTED

DEADLINE

in about 1 month

Individual Breach Notification SupportThe contract titled Individual Breach Notification Support requires the successful bidder to provide comprehensive support for notifying affected individuals within 60 days of discovering a data breach. This includes drafting official notification letters, managing all mailing logistics, and maintaining detailed records to ensure compliance and audit readiness. The work is expected to be performed in response to incidents affecting individuals whose personal information may have been compromised, with a focus on timely, accurate, and secure communication. This subcontract opportunity was posted on August 7, 2026, with a response deadline of September 15, 2026. It falls under NAICS code 561439, which categorizes it under other business support services, and is associated with the Kentucky agency located at 275 E. Main Street. The place of performance is designated as Other, indicating flexibility in where the work may be conducted, and no specific set-aside provisions apply. Interested parties must submit proposals through the provided online portal before the deadline to be considered for award.

Other Business Service Centers (including Copy Shops)

POSTED

DEADLINE

in about 1 month

HIPAA-Compliant Subcontractor ManagementSubcontractors handling protected health information must fully comply with HIPAA regulations, including the execution of a Business Associate Agreement and the implementation of comprehensive safeguards to protect data integrity, confidentiality, and availability. This subcontract opportunity, titled HIPAA-Compliant Subcontractor Management, requires strict adherence to federal privacy and security standards for any entity engaged in handling PHI on behalf of the Kentucky agency located at 275 E. Main Street. The solicitation is open for responses until September 15, 2026, and is classified under NAICS code 541611, indicating it pertains to management consulting services. Performance is expected to occur at an unspecified location described as Other, with no set-aside provisions or specific organizational type requirements identified. Interested parties must access the official portal via the provided link to submit proposals and ensure all compliance obligations are met prior to engagement.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

HIPAA-Compliant Data Security ImplementationThe contract seeks a subcontractor to design and implement comprehensive administrative, physical, and technical safeguards to ensure the protection of electronic Protected Health Information in full compliance with the HIPAA Security Rule. This engagement requires robust measures to secure ePHI across all stages of handling, including access controls, data encryption, audit logging, workforce training, and facility security protocols, all aligned with federal regulatory standards. The work must be executed with precision to mitigate risks of data breaches and maintain ongoing compliance in dynamic healthcare environments. The solicitation was posted on August 7, 2026, with responses due by September 15, 2026, and is categorized under NAICS code 541512 for computer systems design services. The contract is issued under the agency name 275 E. Main Street, affiliated with Kentucky, and the performance location is designated as Other, indicating flexibility in implementation scope. Though specific point of contact and detailed location information are not provided, bidders are directed to the official portal at https://vss.ky.gov/vssprod-ext/Advantage4 for submission and further details. The nature of the contract as a subcontract implies that the winning party will operate under a prime contractor’s framework, required to meet strict compliance benchmarks without deviation.

Computer Systems Design Services

POSTED

DEADLINE

in about 1 month

RFP-746-2700000006-1 | External Independent Third-Party Review (C6102)

Solicitation # RFP 746 2700000006

The contract solicitation RFP-746-2700000006-1 seeks an external independent third-party review under code C6102, issued by the Kentucky state agency located at 275 E. Main Street. The solicitation was posted on August 7, 2026, with responses due by September 15, 2026, at 6:00 PM Eastern Time. The work is to be performed in Kentucky, though the specific location within the state is listed as Other. This procurement is classified under the SLED category, indicating it is intended for state, local, or educational government entities, and there is no set-aside designation specified. Primary point of contact for questions and submissions is David Locker, reachable at david.locker@ky.gov or by phone at 502-564-7736; secondary contact information is also associated with the agency’s physical address. All submissions and inquiries must be directed through the official portal accessible via the provided UI link.

Other Management Consulting Services

POSTED

DEADLINE

in about 1 month