Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cloud Security & Compliance Auditing

Active

Federal

Response Deadline11/30/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cloud Security and Compliance Auditing subcontract supports Department of the Air Force Enterprise IT projects by providing security assessments and cybersecurity compliance services. Key responsibilities include conducting vulnerability scans via Nessus or ACAS, ensuring STIG compliance, and developing Risk Management Framework documentation to deliver Security Assessment Reports and ATO support. This opportunity is managed by the Department of Defense under the FA8726 Aflcmc Hnk C3IN agency and is based at Hanscom AFB. Qualified personnel must hold a CISSP, CISM, or meet DoD 8570 compliance standards. The response deadline for this subcontract is November 30, 2026.

General Info

Air Force subcontract for cybersecurity auditing and compliance services at Hanscom AFB.

Agency

Department Of Defense → FA8726 Aflcmc Hnk C3IN

NAICS

541519 - Other Computer Related Services

Place of Performance

Hanscom AFB, MA, 01731, USA

Set-Aside

NONE

Documents

This scope was carved out of FA8726-26CSO-CPSP.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

AFLCMC Cloud Productivity Suite Pilot CSO

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedDec 10

subcontract

Response DeadlineNov 30

Submission deadline

Response Deadline

11/30/2026, 10:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → FA8726 Aflcmc Hnk C3IN

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → FA8726 Aflcmc Hnk C3IN

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments and cybersecurity compliance for prime contractors on Department of the Air Force (DAF) Enterprise IT projects. Conducts vulnerability scans using Nessus or ACAS, ensures STIG compliance, and develops Risk Management Framework (RMF) documentation. Requires CISSP, CISM, or DoD 8570 compliance. Delivers Security Assessment Reports (SAR) and ATO support documentation.

Similar Contracts

Same NAICS industry code

Building Automation Systems (BAS) SupportThis subcontract for Building Automation Systems (BAS) Support involves the operation and maintenance of BAS for prime contractors on Transbay Joint Powers Authority facility projects. The selected provider will be responsible for managing BAS consoles, data gathering panels, and remote sensors to optimize system set-points for enhanced energy efficiency and occupant comfort. Key deliverables include the provision of optimized building control systems and the delivery of detailed operational data reports. Qualified candidates must hold relevant BAS Certification, such as Niagara, and ensure full compliance with DIR Prevailing Wage requirements. The solicitation was posted on October 23, 2026, with a response deadline of December 4, 2026. This opportunity falls under NAICS code 541519 and is managed through the California Procurement agency.

POSTED

DEADLINE

in about 1 month

RFO #5895537584 Senior Test Analyst

Solicitation # 5895537584

The California State Teachers' Retirement System (CalSTRS) is soliciting a Senior Test Analyst under solicitation number 5895537584 to support the BenefitConnect pension administration system. The selected professional will act as a Test Coordinator, utilizing the System Development Life Cycle (SDLC) methodology to develop test strategies, plans, cases, and traceability matrices. Key responsibilities include performing quality reviews of test cases, managing risk-based testing, documenting defects via Problem Incident Reports, and supporting regression testing during maintenance releases. The role requires proficiency in Test Application Lifecycle Management tools such as Jama, HP ALM, or Rational Requisite Pro. Eligible respondents must hold a current Information Technology California Multiple Award Schedule (CMAS) agreement and submit their offers by November 6, 2026. The award process is structured in five phases, beginning with a pass/fail minimum qualifications review, followed by a technical qualification score (70 points) and a cost comparison (30 points). Top candidates may undergo optional interviews and reference checks before final cost negotiations. The contract includes strict compliance requirements regarding background investigations, information security and privacy addendums, and California state laws, including the Political Reform Act and the Child Support Compliance Act. Invoicing is managed monthly in arrears through the SAP Business Network.

State Teachers' Retirement System

POSTED

DEADLINE

Accessibility Quality Assurance (QA) and Manual TestingThis subcontract for Accessibility Quality Assurance and Manual Testing involves providing independent verification and validation of remediated documents for prime contractors working on San Bernardino County projects. The selected provider will perform automated accessibility checks and manual testing utilizing JAWS and NVDA screen readers to ensure all deliverables conform to ADA Title II Rule H and DOJ regulations. The final output consists of certified compliant documents and detailed QA Validation Reports. The opportunity is categorized under NAICS code 541519 and requires the contractor to hold either SOC 2 Type II or ISO 27001 certification. Interested parties must submit their responses by November 13, 2026, for work to be performed in San Bernardino, California.

POSTED

DEADLINE

Electronic Document Accessibility Remediation (Production)This subcontract for Electronic Document Accessibility Remediation involves providing technical remediation services for prime contractors working on San Bernardino County projects. The scope of work focuses on ensuring that native PDF, Word, Excel, and PowerPoint files are fully compliant with ADA Title II Rule H and DOJ regulations. Key tasks include setting document properties, creating navigational bookmarks, and correcting tagged hyperlinks to deliver accessibility-compliant electronic documents. To qualify for this engagement, service providers must utilize specialized accessibility remediation software and maintain either SOC 2 Type II or ISO 27001 certification. The project is categorized under NAICS code 541519 and is managed by the Purchasing agency in California, with the place of performance located in San Bernardino. The response deadline for this opportunity is November 13, 2026.

POSTED

DEADLINE

Video Analytics and Technical Support ServicesThis subcontract for Broward County, Florida, involves providing specialized video analytics and technical support services to prime contractors managing county security projects. The scope of work focuses on the configuration of appliance-based execution environments designed for real-time person-of-interest tracking, alongside the delivery of configured analytics profiles and adherence to established technical support service level agreements. To ensure system integrity and security, the contractor is responsible for performing ongoing Nessus vulnerability assessments. The contract mandates that all technical support be provided by factory-certified personnel. Interested parties must respond by November 16, 2026, under NAICS code 541519.

POSTED

DEADLINE

AV Systems Integration and ConfigurationThis subcontract for AV Systems Integration and Configuration involves providing specialized technical setup and signal routing services for prime contractors on projects at Texas A&M University-Kingsville. The scope of work focuses on the configuration of LED controllers, pixel pitch mapping, and the integration of display walls with university media servers or AV feeds through the use of control software and signal processors. The ultimate goal is the delivery of a fully calibrated and operational visual display system. The project is categorized under NAICS code 541519 and requires strict adherence to the university's insurance standards. Interested parties should note that the solicitation was posted on October 23, 2026, with a response deadline set for November 7, 2026.

Texas A&M University – Kingsville

POSTED

DEADLINE

Horizon3.ai NodeZero Autonomous Penetration Testing Annual Subscription Renewal

Solicitation # IQ20261023

The City of Tamarac is soliciting quotes for a one year renewal of the Horizon3.ai NodeZero Autonomous, Continuous Penetration Testing Annual Subscription under solicitation number IQ20261023. The subscription, identified by part number N0-AS-XXXX-491, covers a license size of 1,000 IP addresses for a term beginning November 28, 2026, and ending November 27, 2027. Responses to this solicitation are due by November 6, 2026. To be eligible for award, offerors must provide several mandatory certifications and legal affidavits. These include a non-collusive affidavit, an anti-human trafficking affidavit, and an affidavit of compliance with foreign entity laws ensuring the entity is not owned or controlled by a foreign country of concern. Additionally, contractors must certify compliance with Florida Statutes regarding scrutinized companies, specifically confirming they do not boycott Israel and have no prohibited activities in Sudan, Iran, or Syria. Contractors and their subcontractors are also required to register with and use the E-Verify system for employee work authorization. Corporations must submit a certified resolution to verify that the individual executing the bid is properly authorized to do so on behalf of the entity.

City of Tamarac

POSTED

DEADLINE

Learning Management System (LMS) Administration & SupportThis subcontract for Learning Management System (LMS) Administration and Support involves providing and managing a digital platform for prime contractors working on NHS England education and training projects. The selected provider will be responsible for uploading content, managing user enrollments, tracking completion rates, and offering ongoing technical support to ensure a functional online learning environment. Key requirements include proficiency in LMS platforms and strict compliance with GDPR and the UK Data Protection Act. The provider is expected to deliver monthly training metric reports to track progress. This opportunity was posted on October 23, 2026, with a response deadline of November 10, 2026.

POSTED

DEADLINE

Technical Support & Service Desk OperationsThis subcontract opportunity with the Government of Ontario Ministry of Transportation focuses on providing technical support and service desk operations for prime contractors on BMS projects. The selected provider will be responsible for managing incident intake and tracking, executing escalation procedures, and overseeing problem, change, and release management processes. All operations must align with OPS service management processes and adhere to specific support coverage hours. Key deliverables include the provision of resolved incident tickets and detailed SLA compliance reports. Interested parties should note that the response deadline is December 4, 2026, and the work is to be performed within Canada under NAICS code 541519.

POSTED

DEADLINE

in about 1 month

Project Management Software SubscriptionThis subcontract agreement provides the City of Bedford Engineering Department with a scalable, cloud-based project management application designed for use by prime contractors. The software includes a comprehensive suite of tools for portfolio management, task tracking, resource allocation, and user administration, featuring Microsoft Entra SSO integration for secure access. Additionally, the platform supports operational efficiency through automated email notifications and the use of customizable logic-based forms. The contract focuses on the delivery of active software licenses and continuous cloud platform access. Identified under NAICS code 541519, the solicitation was posted on October 23, 2026, with a response deadline of November 20, 2026.

City of Bedford

POSTED

DEADLINE

Identity Verification & Security ReportingThis subcontract, titled Identity Verification and Security Reporting, is issued by the Human Capital division of the Department of Homeland Security. The project focuses on implementing employee identity verification and security performance reporting for prime contractors working on TSA projects. The primary objective is to integrate identity verification workflows to ensure that only authorized employees have access to funds, while maintaining strict adherence to federal security standards. The scope of work includes the delivery of a dedicated identity verification module and the creation of security reporting dashboards to track performance. Interested parties should note that the response deadline is November 4, 2026, and the project falls under NAICS code 541519.

POSTED

DEADLINE

Cybersecurity Operations and Compliance MonitoringThe Cybersecurity Operations and Compliance Monitoring subcontract supports prime contractors on HUD Ginnie Mae projects through comprehensive security oversight and risk management. The scope of work includes network vulnerability scanning, patch management, and the administration of HIDS/HIPS, alongside log aggregation and AI risk mitigation. All activities are performed under SOC 2 criteria and must strictly adhere to FIPS 200 and various NIST SP 800 standards, specifically revisions 800-53 rev 5, 800-18, 800-30, and 800-34. Managed by the Department of Housing and Urban Development's GNMA Support Division, the contract requires the delivery of critical compliance documentation, including vulnerability reports and POA&M updates. The place of performance is located in Alexandria, Virginia, under NAICS code 541519. Interested parties must note the response deadline of November 6, 2026.

Cpo : Gnma Support Division

POSTED

DEADLINE

More opportunities from Department Of Defense → FA8726 Aflcmc Hnk C3IN

Same awarding agency

AFLCMC/HNIT seeks expressions of interest regarding a potential commercial coworking space in the environs of Concord, Massachusetts.

Solicitation # EITAAS_CCS-RFI-001

The Department of the Air Force is seeking information from vendors for a potential short-term commercial coworking space service contract to support the Enterprise IT as a Service program. The anticipated award is expected in the summer of 2027, with a projected start date of August 2, 2027. The requirement is for a turn-key, non-exclusive, unclassified facility of approximately 30,000 square feet located within a 6-mile radius of Concord, Massachusetts. The space must accommodate 190 or more workstations, with the capacity to scale up to 200 individuals. Required facilities include 6 to 8 private office pods, 4 small collaborative spaces, 6 to 8 meeting rooms, a commercial lactation pod, a break/dining area with a shared kitchen, and a dedicated, private, fully enclosed office for authorized personnel. The contractor will be responsible for comprehensive property management, including administrative and janitorial services, front desk staffing, and the provision of software licenses, network services, and commercial Wi-Fi. IT support requirements include on-site technical staffing to maintain workstations and conference equipment, with a mandate to provide repair plans within two business days of equipment failure. The facility must comply with the Architectural Barriers Act and implement Controlled Unclassified Information protection measures. The projected period of performance consists of an initial one-year term with four 6-month option periods. This effort is categorized under NAICS 531120 and PSC X1AB, in accordance with Department of the Air Force Contract Policy Memo 24-C-10.

Lessors of Nonresidential Buildings (except Miniwarehouses)

POSTED

DEADLINE

Office Furniture and Modular Workspace SupplyThis subcontract involves the supply and delivery of office furniture and modular workspaces to support prime contractors on Department of the Air Force EITaaS projects. The scope of work includes providing over 190 workstations, six to eight private enclosed office pods, and various furniture pieces designed for meeting rooms and collaborative spaces. All deliverables must be provided either installed or delivered and must strictly adhere to accessibility standards set by the Architectural Barriers Act and the Rehabilitation Act of 1973. Managed under the Department of Defense through the AFLCMC HNK C3IN agency, the project falls under NAICS code 423610. The solicitation was posted on October 13, 2026, with a response deadline of October 27, 2026.

Electrical Apparatus and Equipment, Wiring Supplies, and Related Equipment Merchant Wholesalers

POSTED

DEADLINE

Office Administration and Reception ServicesThis subcontract for Office Administration and Reception Services supports prime contractors on Department of the Air Force EITaaS projects under the Department of Defense. The scope of work focuses on managing front-of-house operations, including greeting visitors, providing general administrative support, and coordinating space access and meeting room bookings through specialized visitor management software. A critical requirement of the contract is the strict adherence to Controlled Unclassified Information protection measures regarding visitor access and information handling. The project falls under NAICS code 561110 and is managed by the AFLCMC HNK C3IN agency.

Office Administrative Services

POSTED

DEADLINE

Commercial Facility Maintenance and Janitorial ServicesThis subcontract for Commercial Facility Maintenance and Janitorial Services supports prime contractors on Department of the Air Force EITaaS projects under the Department of Defense. The scope of work involves the daily cleaning and upkeep of 30,000 square feet of office space, specifically targeting restrooms, shared kitchens, meeting rooms, and open seating areas to ensure a sanitized professional environment. Key responsibilities include restocking kitchen supplies and maintaining commercial coffee and beverage dispensers while adhering to all commercial health and safety standards. The opportunity is categorized under NAICS code 561720, with a response deadline set for October 27, 2026.

Janitorial Services

POSTED

DEADLINE

Managed IT and Network ServicesThe Managed IT and Network Services subcontract supports prime contractors on Department of the Air Force EITaaS projects under the Department of Defense. The scope of work involves the installation, maintenance, and support of critical digital infrastructure, including the provisioning of secured wireless Wi-Fi, network services, and IT support for workstations and conference equipment. Additionally, the contractor is responsible for managing meeting room booking platforms and maintaining both government and contractor hardware. A primary objective of the contract is the delivery of a secure and operational IT network, which includes the implementation of Controlled Unclassified Information protection measures through established standard operating procedures. This effort falls under NAICS code 541512 and is managed by the AFLCMC HNK C3IN agency.

Computer Systems Design Services

POSTED

DEADLINE

User Adoption & Technical TrainingThe User Adoption and Technical Training subcontract supports Department of the Air Force end-users transitioning to new productivity suites. Based at Hanscom AFB and managed under the Department of Defense, the scope involves comprehensive change management, the development of training manuals, and the execution of webinars and train-the-trainer sessions via Learning Management Systems. Key deliverables include the training curriculum and detailed user adoption reports. To qualify, personnel must hold instructional design certifications. The contract falls under NAICS code 611430, with a response deadline set for November 30, 2026.

Professional and Management Development Training

POSTED

DEADLINE

in about 1 month

Cloud Migration & Integration ServicesThe Cloud Migration and Integration Services subcontract, managed by the Department of Defense agency FA8726 Aflcmc Hnk C3IN, focuses on the technical migration of data and the integration of productivity suites for prime contractors on Department of the Air Force Enterprise IT projects. The scope of work includes executing data mapping, API integration, and the migration of legacy emails and documents utilizing secure tunnels and API gateways to establish an operational cloud environment. Performance for this contract will take place at Hanscom AFB, and the project requires specific DoD Impact Level certifications, such as IL4 and IL5. Classified under NAICS code 541512, the opportunity was posted on December 10, 2025, with a response deadline set for November 30, 2026.

Computer Systems Design Services

POSTED

DEADLINE

in about 1 month

Cloud Productivity Software Licensing & ProvisioningThis subcontract opportunity, titled Cloud Productivity Software Licensing and Provisioning, involves providing cloud-based productivity software suites as a service for prime contractors working on Department of the Air Force Enterprise IT projects. The scope of work includes the delivery of the software platform, configuration of cloud tenants, and the provision of user licenses. A critical requirement for this contract is that all cloud services must maintain FedRAMP certification for Department of Defense use. The contract is managed by the Department of Defense under the agency FA8726 Aflcmc Hnk C3IN, with the primary place of performance located at Hanscom AFB. It falls under NAICS code 518210. The response deadline for this opportunity is November 30, 2026.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

in about 1 month

AFLCMC Cloud Productivity Suite Pilot CSO

Solicitation # FA8726-26CSO-CPSP

The AFLCMC Cloud Productivity Suite Pilot (CPSP) Commercial Solutions Opening (CSO), solicitation number FA8726-26CSO-CPSP, seeks innovative commercial products and services to provide an Impact Level 5 (IL5) scalable alternative to the DAF365/Office integrated productivity suite for the Department of the Air Force. The objective is to establish a pilot tenant program featuring secure collaborative platforms, zero trust security architectures, and robust enterprise integration and data portability tools to facilitate the migration of emails, files, and calendars from Microsoft Office 365. The effort is divided into three primary topics: the delivery of a cloud-native productivity and collaboration suite, the implementation of IL5 accreditation and zero trust security, and the development of scalable architectures for enterprise-wide adoption. This competitive solicitation is open through November 2026 and utilizes a two-step submission process consisting of a white paper and a subsequent full technical and price proposal. Technical capability is the most critical evaluation factor, with a specific focus on feature parity and interoperability with existing Microsoft tools across email, chat, conferencing, and office productivity software. While no specific Technology Readiness Level is required, solutions must be viable for rapid transition and must achieve IL5 approval by the end of the effort. Awards are expected to be issued as FAR Part 12 commercial contracts, subject to the availability of funds, with a performance structure typically consisting of a one-year base period and an optional second year.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

in about 1 month

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS