Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Solicitation opportunity from Department Of Transportation was posted on September 22, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS)

Awarded
GG000000-26-00063Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 513210
New
SLED
Commercial off the shelf (COTS) Health and Safety Management System Software
Solicitation # 27-494DOT-FINAD-B-54081
The Illinois Department of Transportation Occupational Safety and Health Unit is soliciting a customizable commercial off the shelf safety management system. The required software must include both a Safety Management Suite and a Chemical Management Suite, featuring capabilities for incident and hazard reporting with root cause analysis tools, configurable audit and inspection checklists, and a centralized searchable safety data sheet repository. The system must be accessible via web browsers and an Apple web-based app, and the vendor is responsible for software configuration, administrator training, and linking the system to the State of Illinois employee database. The contract is an invitation for bid where the award will be granted to the responsive and responsible bidder offering the lowest overall total price. Bidders must provide extensive documentation, including a Business Enterprise Program utilization plan and proof of authorization to transact business in Illinois. The total contract term, including all renewals and extensions, cannot exceed ten years. The state maintains a forty-five day testing period for deliverables, and vendors must provide quarterly performance reports and maintain a quality assurance system. Selected vendors must adhere to State of Illinois technology and security policies and maintain specific insurance coverages, including one million dollars per occurrence for general commercial liability and auto liability. Payments will be processed in accordance with the State Prompt Payment Act. The procurement process is managed through the BidBuy portal, and the award is subject to the bidder's ability to demonstrate financial responsibility and compliance with equal opportunity requirements.
FINADMIN494 - Finance & Administration

POSTED

about 13 hours ago

DEADLINE

in 16 days

AI Contract Overview

Show more

The Department of Commerce Shared Services Procurement Office is soliciting a commercial, cloud-based Governance, Risk, and Compliance (GRC) automation platform for the Office of Inspector General. This Firm-Fixed-Price purchase is for a Software as a Service (SaaS) solution designed to automate the Risk Management Framework (RMF) lifecycle, FISMA documentation, and continuous monitoring for up to five information systems. Key technical requirements include an active FedRAMP High authorization, AI-assisted drafting of System Security Plans and Security Assessment Reports, and secure FIPS-validated connectivity with Microsoft 365/Azure and the Joint Cybersecurity Authorization Management (JCAM) system. The contract consists of a 12-month base period with no option years. The selected vendor must achieve full operational capability within a twelve-week implementation timeline. Award will be based on a Best Value Tradeoff, evaluating technical understanding, the proposed SaaS solution, FedRAMP status, and the implementation and integration approach. Quotations must be submitted by September 28, 2026, and must be divided into a technical volume limited to three pages and a price volume limited to two pages, with separate itemization for software licensing and professional deployment services.

General Info

SaaS GRC platform for OIG to automate RMF and FISMA with FedRAMP High.

NAICS

513210 - Software Publishers

Place of Performance

Washington, DC, 20230, USA

Set-Aside

NONE

Documents

3
PDF, High priority: read this firstamendment
High
PDF, High priority: read this firstrfq
High
XLSX, High priority: read this first1 page · q-and-a
High

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

1 update
PhaseAwarded
Posted

Solicitation

Notice updated

Notice details unchanged. Attachments may have changed.

Awarded

Contract was awarded

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Transportation → Department Of Commerce Sspo
Contacts2 people available
OfficeWASHINGTON, DC, 20230, USA
Office AddressWASHINGTON, DC, 20230, USA
Contacts
Alicia Brister
Jameka Anderson

Full Description

Show more

This acquisition is for a commercial, cloud-based Governance, Risk, and Compliance (GRC) automation platform — not RMF assessment labor services — to automate FISMA documentation, AI-assisted control drafting, and continuous monitoring reporting for the requiring office's systems.

More opportunities from Department Of Transportation → Department Of Commerce Sspo

Same awarding agency

NAICS: 513210
New
Federal
Sources Sought Synopsis Notice - Mail Relay
Solicitation # OCIO-27-0001
The Department of Commerce, through the Office of the Chief Information Officer, is conducting market research via a Sources Sought Synopsis to identify vendors capable of providing a FedRAMP authorized Software as a Service (SaaS) Mail Relay solution. The required solution must support secure outbound mail handling across multiple Department of Commerce domains, utilizing IP-based whitelisting for access control without the requirement for SMTP authentication. Technical specifications include the ability to handle a peak load of 10,000 emails per hour, an average message size of 220 KB, and a monthly volume of approximately 250,000 emails. Key functional requirements include DKIM-signing for all outbound mail, inbound and outbound mail hygiene, and data loss prevention scanning on outbound email. This notice is for information gathering only and does not constitute a Request for Proposal or a commitment to issue a procurement action. Interested respondents must submit a capability statement not exceeding five pages to Danielle Green by November 20, 2026. Submissions must include the business name and address, company representative details, business size and socio-economic status, CAGE code, and a detailed capability statement addressing all technical requirements. The solicitation is categorized under NAICS code 513210 and is managed by the Shared Services Procurement Office in Washington, DC.
Software Publishers

POSTED

5 days ago

DEADLINE

in 17 days
View Details

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS