Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

CMMC Level 2 Compliance and Cybersecurity Management

Active

Federal

Response Deadline11/06/2026, 12:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract focuses on providing cybersecurity infrastructure and auditing services for prime contractors operating on Defense Health Agency projects. The primary objective is the implementation of covered information systems in accordance with DFARS 252.204-7012, ensuring full compliance with FISMA and DoD Health Information Privacy Regulations. Key deliverables include the management of SPRS affirmations and the provision of a validated CMMC Level 2 certification. To qualify, providers must meet NIST SP 800-171 standards and possess CMMC Level 2 certification. The contract falls under NAICS code 541519 and is associated with the Department of Defense. Interested parties must submit their responses by November 6, 2026.

General Info

Cybersecurity infrastructure and auditing services for DHA projects requiring CMMC Level 2 certification.

Agency

Department Of Defense → Defense Health AgencyView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

CO, USA

Set-Aside

NONE

Documents

This scope was carved out of HT940226R0001.

The full solicitation package (20 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

TRICARE Medicare Eligible Program Second Generation (TMEP2)

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 23

subcontract

Response DeadlineNov 6

Submission deadline

Response Deadline

11/06/2026, 12:00:00 AM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Defense Health Agency

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → Defense Health Agency

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Supplies cybersecurity infrastructure and auditing for prime contractors on Defense Health Agency (DHA) projects. Implements covered information systems per DFARS 252.204-7012, manages SPRS affirmations, and ensures FISMA and DoD Health Information Privacy Regulation compliance. Requires CMMC Level 2 and NIST SP 800-171. Delivers validated CMMC Level 2 certification and annual SPRS affirmations.

Similar Contracts

Same NAICS industry code

Application Support & MaintenanceWM5G Limited is seeking a subcontractor for an Application Support and Maintenance contract to provide ongoing technical support and software maintenance for prime contractors working on NHS partner organization projects. The scope of work includes delivering Tier 2 and 3 technical support, implementing bug fixes, managing system updates, and conducting performance monitoring to ensure platform scalability across various regions. The selected provider will be responsible for utilizing ticketing systems and monitoring tools while adhering to strict service level agreements aligned with NHS operational requirements. The contract requires the delivery of consistent system availability and the maintenance of detailed technical support logs. Interested parties must respond by October 21, 2026, in accordance with the solicitation posted on September 23, 2026. This engagement falls under NAICS code 541519 and is focused on maintaining critical healthcare-related digital infrastructure.

POSTED

about 17 hours ago

DEADLINE

IPTV Technical Support and MaintenanceThis subcontract for the City of San Antonio involves providing technical support and maintenance for the Convention and Sports Facility Department at the Alamodome. The selected vendor will be responsible for live production support during events, performing software updates, troubleshooting systems, and conducting on-site staff training. To qualify, the provider must hold specific certifications for the IPTV platform. The agreement ensures five years of system availability and requires the maintenance of detailed training logs. This opportunity falls under NAICS code 541519 and is managed through the Texas state procurement system.

CITY OF SAN ANTONIO

POSTED

about 18 hours ago

DEADLINE

IBM Power/EMT Software Support ExtensionThis subcontract through the NASA IT Procurement Office provides software support extensions for prime contractors. The agreement specifically covers 24x7 Full Support Extensions for 62 units of IBM Power/EMT v1.4.1 Core Medium Tier, ensuring the delivery of active software support subscriptions and extensions. Eligible providers must hold authorized IBM software partner or OEM status and adhere to COTS software license price sharing terms. The opportunity is categorized under NAICS code 541519, with a response deadline of September 25, 2026.

NASA It Procurement Office

POSTED

about 20 hours ago

DEADLINE

OEM Technical Support & Software MaintenanceThis subcontract opportunity with the Department of Veterans Affairs Network Contract Office 16 focuses on providing OEM technical support and software maintenance for ScriptPro Robotic Prescription Dispensing Systems. The scope of work includes delivering technical and clinical application support, performing software updates, and managing database maintenance for prime contractors. Key deliverables involve the provision of active software licenses, updated databases, technical support logs, and ongoing interface maintenance and telephone support. To be eligible, providers must hold OEM Certification for ScriptPro systems. The contract falls under NAICS code 541519 and is associated with a response deadline of October 16, 2026. This engagement ensures the operational efficiency of pharmacy projects through specialized OS licensing and comprehensive system support.

256-NETWORK Contract Office 16 (36C256)

POSTED

about 20 hours ago

DEADLINE

IT Support Services Contract (ITSSC) Recompete

Solicitation # 28321326R00000022

The Social Security Administration Office of Acquisition and Grants is seeking to establish a multiple-award Indefinite-Delivery, Indefinite-Quantity contract for IT Support Services. This recompete effort, identified by solicitation number 28321326R00000022 and NAICS code 541519, is being procured under Revolutionary Federal Acquisition Regulation Overhaul Parts 12, 15, and 16. Recent amendments to the solicitation have addressed offeror questions, updated associated attachments, and added travel CLINs. The current response deadline for interested parties is October 12, 2026, at 2:00 PM. The primary point of contact for this requirement is Evan Aston.

SSA Ofc Of Acquisition Grants

POSTED

about 20 hours ago

DEADLINE

OFL (LMS) Lab Management Software

Solicitation # 36C26026Q0472

Solicitation 36C26026Q0472 is a Total Small Business Set-Aside request for quote issued by the Department of Veterans Affairs Network Contracting Office to procure Lab Management Software (LMS) and IOT digital lens calculation data for the VISN 20 Optical Fabrication Laboratory at the Boise VA Medical Center in Idaho. The scope of work includes the provision of all necessary software, licenses, and programming support to operate the LMS, Opticom, and VisionWeb systems. The software must support a wide range of lens materials, including CR-39 plastic, various index levels, polycarbonate, Trivex, and specialized blanks such as Polarized Transitions and SunSensor. A critical technical requirement is that the LMS must interface immediately upon award with governmental systems including CPRS, VISTA, and CERNER, and the contractor must provide evidence that the software is already accepted for use by VHA IT systems. The contract structure consists of a base period starting January 1, 2027, with multiple option years extending the total duration up to five years. Performance standards require the system to be operational at least 99 percent of the time, with digital lens calculation data maintaining 100 percent accuracy. Award will be based on a comparative evaluation of price and other factors to determine the most advantageous benefit to the government. Offerors must be registered in the System for Award Management and provide a signed SF 1449, a capabilities statement limited to five pages, and a narrative response to evaluation criteria. Invoicing is to be submitted monthly in arrears via the Electronic Invoice Presentation and Payment System or other X12 EDI conforming systems.

260-NETWORK Contract Office 20 (36C260)

POSTED

about 20 hours ago

DEADLINE

Data Innovations software (Instrument Manager™ and EP Evaluator®)

Solicitation # 12360736

The Defense Health Agency is conducting market research via a Sources Sought notice to identify qualified providers for a comprehensive laboratory middleware solution at the Walter Reed National Military Medical Center (WRNMMC) in Bethesda, Maryland. The objective is to implement Data Innovations Instrument Manager and EP Evaluator software to provide seamless bidirectional integration between clinical laboratory analyzers and the Military Health System Genesis Laboratory Information System. This integration is critical for maintaining 24/7 operations and ensuring compliance with CLIA, CAP, and Department of Defense quality management standards. The scope includes providing software licenses, connectivity drivers, installation, configuration on government infrastructure, user training, and ongoing technical support. The anticipated contract will be a Firm-Fixed-Price agreement consisting of a base period from September 30, 2026, to September 29, 2027, with four subsequent option periods extending through September 29, 2030. Key technical requirements include the configuration of at least 15 production and 7 test instrument connections, maintaining a minimum 98 percent system uptime, and achieving 100 percent accuracy for transmitted data. Interested sources under NAICS 541519, including small businesses and other than small businesses, must submit a capability statement by October 4, 2026. The government will use this information for planning purposes and may issue a formal Request for Quote based on the responses received.

Defense Health Agency

POSTED

about 20 hours ago

DEADLINE

Maintenance and Support Agreement for NIH Hazardous Waste Management Tracking Information Software (EnviroWare)

Solicitation # 75N98026Q01215

The National Institutes of Health is seeking a firm-fixed price contract for the annual maintenance and support of EnviroWare, a proprietary software application used to track and manage hazardous waste at the NIH main campus and off-site facilities. The scope of work includes providing technical phone support during business hours, implementing security patches, Oracle patches, and Java updates, and providing custom development enhancements to ensure compliance with US EPA and Maryland Department of Environment regulations. Services will be performed via remote connections or on-site at the NIH Hazardous Waste Management Facility in Bethesda, Maryland. This is a non-competitive procurement under statutory authority 41 U.S.C. 1901, with the intent to award a sole-source contract to Wastelinq, Inc., the proprietary owner of the software. The contract structure consists of a one-year base period starting September 28, 2026, with two optional one-year extensions for a total potential duration of three years. Interested sources must submit capability statements, quotations, or proposals to Jacob Balenson by 1400 Eastern Time on September 28, 2026, referencing presolicitation number 75N98026Q01213.

National Institutes Of Health Olao

POSTED

about 20 hours ago

DEADLINE

IBM HARDWARE MAINTENANCE AND SUPPORT RENEWAL

Solicitation # 80TECH26QA121

Solicitation 80TECH26QA121 is a combined synopsis and request for quotations issued by the NASA Information Technology Procurement Office for the renewal of IBM brand name hardware maintenance and support. This requirement is critical for the Artemis campaign, specifically supporting IBM Power Systems servers and Storage Area Network hardware at the Kennedy Space Center. The scope of work includes non-severable services such as troubleshooting, the replacement of failed components using OEM-approved parts, and access to original equipment manufacturer subject matter experts. The procurement is structured as a firm fixed price contract with a base period from October 1, 2026, to September 30, 2027, and two subsequent one-year option periods extending through September 30, 2029. The award will be determined using a Lowest Priced Technically Acceptable process, and the estimated total contract value is 82,000 dollars. While the requirement specifies IBM brand name products, the government will consider equal products provided they meet all salient physical, functional, and performance characteristics. Quoters must submit their responses as PDF documents by September 25, 2026, at 1:00 PM ET. The contract is subject to NAICS code 541519 and requires compliance with Section 508 of the Rehabilitation Act and various FAR and NASA clauses, including specific prohibitions on certain telecommunications and video surveillance equipment.

NASA It Procurement Office

POSTED

about 20 hours ago

DEADLINE

EPICOR IT Maintenance System

Solicitation # D-27-TC-0003

The Department of Justice Drug Enforcement Administration intends to award a sole source purchase order to EPICOR ITSM for the maintenance and licensing of its client ticketing software. This software is critical for supporting CSOS registrants and service desk personnel, and the procurement is necessary to ensure uninterrupted help desk operations. Under solicitation number D-27-TC-0003, the contract covers the period of performance from October 1, 2026, to September 30, 2027, with the place of performance located in Arlington, Virginia. The procurement is justified as a sole source action under FAR Part 13 because Epicor is the only authorized provider of this capability and does not permit third party providers. Market research confirmed that Epicor is the sole authorized reseller of the required maintenance. The opportunity was posted on September 23, 2026, with a response deadline of September 30, 2026, and falls under NAICS code 541519.

Drug Enforcement Administration

POSTED

about 20 hours ago

DEADLINE

Palo Alto Networks Software NGFW Credits and QuickStart Professional Services

Solicitation # 7571TE26Q00272

The National Institute of Health, through the Office of Science Technology Resource in the Center for Cancer Research, intends to award a firm-fixed-price sole source contract to Squadra Solutions, LLC. This procurement is conducted under the authority of FAR 13.106-1(b)(1)(i) as only one source is available to meet the government's needs. The objective is to modernize the technology environment for the Office of Research Services and Office of Research Facilities by implementing cloud-native firewall capabilities within Amazon Web Services. This effort will provide 305 Palo Alto Software Next-Generation Firewall credits and one QuickStart professional service to enhance network visibility, strengthen communication controls, and reduce the risk of unauthorized access or lateral movement. The solution is required to be Palo Alto brand name to ensure native compatibility with existing HHS cloud security infrastructure, specifically supporting VM-Series, CN-Series, Subscription Services, and Virtual Panorama capabilities. The contract includes a 12-month base period of performance and requires the transfer of operational knowledge to designated personnel. Award will be based on the Lowest Priced Technically Acceptable procedure, with all quotes submitted via NASA SEWP. Invoicing must be processed electronically through the Department of Treasury Invoice Processing Platform, and all resellers must be authorized Palo Alto partners.

Omas Strategic Buying Center - Information Technology

POSTED

about 20 hours ago

DEADLINE

in about 13 hours

7G21--Nursecall Replacement Purchase (VA-26-00046560)(New Work)

Solicitation # 36C10B26Q0557

The Contractor will provide the Department of Veterans Affairs Veterans Health Administration Birmingham VA Health Care System with a brand name or equal Hill-Rom Voalte nurse call system integrated directly with 107 existing Hill-Rom beds without third-party middleware, along with a code blue communication system, staging, installation, cable termination testing and labeling, server and switch implementation in the main server room, warranty, and comprehensive training. The project must be completed within 150 days of contract award, with deliverables including “as built” drawings, a statement of attestation, contractor staff roster, implementation project plan, master delivery schedule, electronic documentation, and compliance with VA’s Trustworthy AI Framework and the SHARE IT Act, which mandates full source code delivery rights. All equipment and services are to be delivered and performed at the Birmingham, Alabama facility, with title and risk of loss transferring upon arrival at destination under FOB destination terms. The system must comply with Section 508 accessibility standards, including WCAG 2.0 Level A and AA, and adhere to VA-specific technical and security mandates such as VA TRM, Critical Security Controls, FIPS 140-2, NIST SP 800-52, and VA Directive 0710. The solicitation is a Service-Disabled Veteran-Owned Small Business (SDVOSB) set-aside under NAICS 541519 with response due by August 21, 2026, and is managed by the Department of Veterans Affairs Technology Acquisition Center in Eatontown, New Jersey. The contract employs standard commercial item clauses under FAR 52.212-4 and incorporates the brand name or equal provision under FAR 52.211-6, indicating a firm-fixed-price structure despite pricing being listed as NSP or TBQ in the line items, suggesting final values will be determined post-award. Personnel must be cleared through VA’s vetting program including background checks, completion of VA Handbook 6500.6 training, signing of the Contractor Rules of Behavior, and possession of a PIV credential. Electronic invoicing is mandatory via the VA e-invoice portal with payment via EFT through SAM, and all shipments must be labeled with the VA IFCAP Purchase Order number, project description, and container sequencing. Security requirements extend to data protection with VA-approved encryption, compliance with cybersecurity safeguards for contractor information systems, and immediate disclosure of any prohibited telecommunications equipment use. Offerors must

Technology Acquisition Center Nj (36C10B)

POSTED

about 20 hours ago

DEADLINE

in about 4 hours

More opportunities from Department Of Defense → Defense Health Agency

Same awarding agency

TRICARE Beneficiary Customer Support ServicesThe TRICARE Beneficiary Customer Support Services subcontract supports prime contractors on Defense Health Agency projects by providing comprehensive telephonic and written customer service. The scope of work includes managing beneficiary inquiries related to eligibility and claims, conducting Voice of the Customer exercises, and performing call auditing through the use of CRM and IVR infrastructure. The contractor is responsible for delivering detailed customer service and beneficiary satisfaction reports while maintaining strict HIPAA compliance for all Protected Health Information. This opportunity falls under NAICS code 561422 and is associated with the Department of Defense, with a response deadline set for November 6, 2026.

Telemarketing Bureaus and Other Contact Centers

POSTED

about 20 hours ago

DEADLINE

in about 1 month

TRICARE Medicare Claims Processing ServicesThe TRICARE Medicare Claims Processing Services subcontract involves providing end-to-end adjudication and payment of healthcare claims for prime contractors supporting the Defense Health Agency. The service provider is responsible for verifying eligibility through DEERS and ensuring all claims are processed in strict accordance with Title 10 USC Chapter 55, 32 CFR Parts 199.4 and 199.5, and the TRICARE Reimbursement and Policy Manuals. To qualify for this engagement, the contractor must maintain CMMC Level 2 certification and ensure full compliance with the HIPAA Privacy Rule. The primary objective is the delivery of accurately adjudicated claims and processed payments under NAICS code 541990. The response deadline for this opportunity is November 6, 2026.

All Other Professional, Scientific, and Technical Services

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Healthcare Quality Assurance and Compliance MonitoringThe Healthcare Quality Assurance and Compliance Monitoring subcontract for the Defense Health Agency involves performing independent quality reviews and payment accuracy audits for prime contractors. The scope of work includes conducting quarterly compliance reviews, monitoring Acceptable Quality Levels, and reviewing reimbursement documentation for DRG, OPPS, and SNF. The selected provider must deliver quarterly compliance reports and QASP performance metrics. To be eligible, contractors must hold an ISO 9001 or CMMI Level 3 certification. This opportunity falls under NAICS code 541611 and was posted on September 23, 2026, with a response deadline of November 6, 2026.

Administrative Management and General Management Consulting Services

POSTED

about 20 hours ago

DEADLINE

in about 1 month

LIS Middleware Maintenance and Subscription SupportThis subcontract for the Defense Health Agency focuses on LIS Middleware Maintenance and Subscription Support, specifically providing technical support, software updates, and subscription renewals for prime contractors. The scope of work includes managing production and test environments and overseeing EP Evaluator subscription renewals through the Instrument Manager and EP Evaluator software suites. The contractor is responsible for delivering essential software patches and maintaining active subscription statuses while ensuring all operations adhere to CLIA and CAP accreditation standards. This effort is categorized under NAICS code 541513 and is performed in Bethesda, Maryland.

Computer Facilities Management Services

POSTED

about 20 hours ago

DEADLINE

Instrument Manager Core Training ServicesThe Instrument Manager Core Training Services subcontract focuses on providing technical and operational training for prime contractors supporting Defense Health Agency projects. The primary objective is to deliver specialized training within the Instrument Manager software environment to designated personnel, ensuring all instruction aligns with the specific operational requirements of the Department of Pathology. This engagement, categorized under NAICS code 611430, requires the delivery of fully trained personnel and the provision of official training completion certifications. The performance of these services is centered in Bethesda, with a response deadline set for October 5, 2026.

Professional and Management Development Training

POSTED

about 20 hours ago

DEADLINE

LIS Middleware Implementation and Integration ServicesThe LIS Middleware Implementation and Integration Services subcontract supports the Defense Health Agency by providing installation, configuration, and integration of Instrument Manager and EP Evaluator software. The scope of work includes executing new implementation services, providing on-site professional troubleshooting, and integrating 15 interface connections between laboratory instruments and software. To ensure system reliability and resilience, the project utilizes High Availability and Disaster Recovery configurations while adhering to DoD and DPALS quality management guidelines. This engagement, categorized under NAICS code 541513, focuses on delivering a fully operational and integrated software system. The performance of these services is centered in Bethesda, with a response deadline of October 5, 2026. The primary objective is to ensure seamless software integration for prime contractors operating within the Department of Defense healthcare infrastructure.

Computer Facilities Management Services

POSTED

about 20 hours ago

DEADLINE

Laboratory Information System (LIS) Middleware Software SupplyThis subcontract for the Defense Health Agency provides proprietary Laboratory Information System middleware software, including Instrument Manager and EP Evaluator. The scope covers the delivery of software license keys, installation media, and subscription access, ensuring critical interface connections for laboratory instruments. To maintain operational stability, the software includes High Availability and Disaster Recovery capabilities and adheres to CLIA, NCCLS, and CAP accreditation standards. The project is categorized under NAICS code 513210 and is performed in Bethesda. Prime contractors will utilize these licenses and subscriptions to support DHA projects, ensuring that all end-user software connections meet rigorous healthcare regulatory and technical requirements.

Software Publishers

POSTED

about 20 hours ago

DEADLINE

Prototype development for Battlefield Wound Infection Prevention and Treatment (BWI P&T) Barrier Combination

Solicitation # HT9427-26-R-E020

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 20 hours ago

DEADLINE

TRICARE Medicare Eligible Program Second Generation (TMEP2)

Solicitation # HT940226R0001

Pharmacy Benefit Management and Other Third Party Administration of Insurance and Pension Funds

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Combined Synopsis/Solicitation for Procurement of the Iridex PASCAL (Pattern Scan Laser) Synthesis 532nm Photocoagulator Laser System for the department of Ophthalmology at Alexander T. Augusta Military Medical Center (ATAMMC)

Solicitation # HT00240012484251

The Defense Health Agency is soliciting quotes under solicitation number HT00240012484251 for the procurement of an Iridex PASCAL Synthesis 532nm Photocoagulator Laser System for the Department of Ophthalmology at the Alexander T. Augusta Military Medical Center in Fort Belvoir, Virginia. This is a 100% Total Small Business Set-Aside conducted under Simplified Acquisition Procedures in accordance with FAR Part 13 and FAR Part 12. The requirement is designated as Brand Name or Equal, meaning that while the Iridex PASCAL system is specified, offerors may propose equivalent products provided they submit detailed technical specifications for evaluation. The procurement includes the laser system, a micropulse module, LIO RFID, safety glasses, and a wireless footswitch, as well as requirements for clinical training and system end point management software. Offers must be submitted via email to the Contracting Officer and Contract Specialist by 10:00 AM EST on September 24, 2026. The total quoted price must include all required accessories, shipping, and installation costs, with delivery terms set as F.O.B. Destination. Evaluation will focus on salient characteristics including laser wavelength and output, pattern-scanning photocoagulation, integrated SLIT lamp, and glaucoma treatment capabilities. Offerors are required to provide a complete copy of FAR 52.213-3 representations and certifications and must maintain an active registration in the System for Award Management. The government intends to award the contract without discussions, requiring the initial offer to represent the offeror's best technical and price terms.

Surgical and Medical Instrument Manufacturing

POSTED

DEADLINE

in about 6 hours

Maintenance Services for Medtronic Fusion Stereotactic Neuro Surgical Equipment

Solicitation # HT940626QE121

The Defense Health Agency is soliciting a firm-fixed price purchase order for preventative and corrective maintenance services for Medtronic Fusion stereotactic neuro surgical equipment at the Naval Medical Readiness Training Command in Portsmouth, Virginia. This small business set-aside under NAICS 811210 includes a base year running from October 22, 2026, to October 21, 2027, with four subsequent option years extending the period of performance through October 21, 2031. The contractor must be an OEM authorized dealer, distributor, or reseller and is required to use original equipment manufacturer parts and adhere to manufacturer specifications. Key deliverables include annual preventative maintenance, as-needed corrective maintenance, and the provision of software updates necessitated by safety-hazard recalls at no additional cost. Award evaluation is based on a best-value tradeoff where technical capability, past performance, and business summary are combined as significantly more important than price. Technical capability is the most critical non-price factor, followed by past performance and business summary. Offerors must submit their quotes in four separate volumes and provide a business summary including their CAGE code, Unique Entity ID, and a SAM.gov verification statement. Administrative requirements include electronic billing via WAWF, adherence to HIPAA and BAA regulations for protected health information, and the use of specific formatting for all submission materials.

Electronic and Precision Equipment Repair and Maintenance

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS