Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 2 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Compliance and Security Audit Services

Active

State & Local

Response Deadline09/09/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Compliance and Security Audit Services subcontract, issued by the F&A-IS Administration in California, focuses on conducting comprehensive compliance audits and producing formal attestations. The primary objective is to ensure that systems strictly adhere to critical regulatory standards, specifically HIPAA, PCI DSS, CCPA, and NIST 800-53. This opportunity was posted on August 12, 2026, with a response deadline of September 9, 2026. The services fall under NAICS code 541618, and further details regarding the procurement process can be accessed through the provided OpenGov portal link.

General Info

California F&A-IS subcontract for HIPAA, PCI DSS, CCPA, and NIST 800-53 compliance audits.

Agency

California → F&A-IS AdministrationView Agency

NAICS

541618 - Other Management Consulting ServicesView NAICS

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of 250424.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

OCTA Countywide Transportation Investment Fact Sheet

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 12

subcontract

Response DeadlineSep 9

Submission deadline

Response Deadline

09/09/2026, 09:00:00 PM UTCin 18 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia → F&A-IS Administration

ContactsNo contacts available

OfficeN/A

Organization / Agency

California → F&A-IS Administration

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Conduct compliance audits and produce attestations for HIPAA, PCI DSS, CCPA, and NIST 800-53, ensuring system adherence to regulatory standards.

Similar Contracts

Same NAICS industry code

Small Business Outreach & Subcontractor Recruitment

POSTED

DEADLINE

Technical Documentation & Training Material Development

Senate Sergeant At Arms

POSTED

DEADLINE

Vessel Security and Compliance Documentation

POSTED

DEADLINE

Public Agency Certification Verification

Internal Services Department

POSTED

DEADLINE

Nexus Study Update – Policy & Economic Analysis

POSTED

DEADLINE

in about 1 month

Preparation of a Nexus Study Update for the Affordable Housing Linkage Fee

Solicitation # 231605

POSTED

DEADLINE

in about 1 month

Compliance & Reporting Coordination

Austin Building

POSTED

DEADLINE

Compliance Monitoring & Audit Support

PACE-Risk Management

POSTED

DEADLINE

Regulatory Compliance and Ethics Oversight

POSTED

DEADLINE

in about 1 month

HDHP Plan Design and Financial Modeling Support

Human Resources

POSTED

DEADLINE

Fraud, Waste, and Abuse Reporting & Audit Support

City of Greensboro

POSTED

DEADLINE

Diversity and Socioeconomic Certification Support

Portland State University

POSTED

DEADLINE

More opportunities from California → F&A-IS Administration

Same awarding agency

Request for Quotes (RFQ) - Nintex Workflow Essentials Renewal

Solicitation # 260521

POSTED

DEADLINE

Supply of Cybersecurity Compliance Platform (Vanta or Equivalent)This subcontract opportunity, issued by the F&A-IS Administration in California, seeks the procurement of a commercial off-the-shelf cybersecurity compliance platform. The required solution must provide automated controls monitoring, reporting, and audit readiness, with specifications meeting Vanta or an equivalent brand name. The solicitation was posted on August 12, 2026, and requires responses by August 25, 2026. Classified under NAICS code 511210, the contract focuses on delivering a scalable platform to streamline cybersecurity compliance and oversight.

Software Publishers

POSTED

DEADLINE

Third-Party Risk Management (TPRM) Implementation ServicesThe Third-Party Risk Management (TPRM) Implementation Services subcontract, managed by the F&A-IS Administration in California, focuses on the deployment of comprehensive third-party risk assessment processes. The scope of work includes the establishment of vendor onboarding procedures, the development of risk scoring methodologies, the design of assessment questionnaires, and the configuration of monitoring dashboards. This opportunity is categorized under NAICS code 541611. The solicitation was posted on August 12, 2026, and requires a formal response by the deadline of August 25, 2026. Interested parties can find further details and submission guidelines through the provided OpenGov procurement portal.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Advanced Customization of Risk Management SoftwareThis subcontract, titled Advanced Customization of Risk Management Software, focuses on providing configuration and integration services to align a risk management tool with the specific workflows, compliance frameworks, and reporting requirements of OCTA. The project falls under NAICS code 541511 and is administered by the F&A-IS Administration for the state of California. The solicitation was posted on August 12, 2026, with a response deadline set for August 25, 2026. Interested parties can find further details and submission guidelines through the provided OpenGov procurement portal link.

Custom Computer Programming Services

POSTED

DEADLINE

Premium Support Services for Cybersecurity PlatformThe Premium Support Services for Cybersecurity Platform subcontract, issued by the F&A-IS Administration in California, focuses on providing ongoing technical and operational support for a cybersecurity risk management platform. The scope of work includes critical functions such as system monitoring, incident response coordination, regular system updates, and comprehensive user support to ensure platform stability and security. This opportunity falls under NAICS code 541512 and was posted on August 12, 2026. Interested parties must submit their responses by the deadline of August 25, 2026. Further details and application procedures are available through the OpenGov procurement portal.

Computer Systems Design Services

POSTED

DEADLINE

Request for Quotes (RFQ) - Vanta GRC Base Platform Subscription and Support

Solicitation # 260482

The Orange County Transportation Authority (OCTA) is soliciting quotes for RFQ 260482 to procure a Vanta GRC Base Platform Subscription and Support. This Firm Fixed Price contract, with an estimated value of 79,280.00 USD, includes line items for the Vanta Platform Fee, Premium Support, Risk Advanced Customization, and TPRM services. The performance period is scheduled from September 1, 2026, to August 31, 2027, with the place of performance located in Orange, California. The award will be based on a Lowest Price Technically Acceptable (LPTA) basis, with cost carrying 100% of the evaluation weight. Quotes must be submitted via the OpenGov Price Summary Sheet by 11:00 a.m. on August 25, 2026. All submissions must include pricing for all line items to be considered responsive and must agree to the terms in Exhibit A, OCTA General Provisions. The contract includes standard clauses for inspection and acceptance at the destination, indemnification, and termination for convenience. It is governed by the laws of the State of California and adheres to FTA Circular 4220.1F regarding brand name or equal specifications. Primary points of contact for this procurement are Monica Verduzco and Samantha Shaw.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Ongoing Support, Maintenance, and Environment ManagementThis subcontract opportunity, titled Ongoing Support, Maintenance, and Environment Management, is issued by the F&A-IS Administration in California. The primary objective is to secure continuous system support for Windows Server and SQL Server environments, encompassing critical operational tasks such as system monitoring, patching, backups, and incident response. The solicitation was posted on August 12, 2026, with a response deadline of September 9, 2026. Classified under NAICS code 541519, the contract focuses on providing specialized technical management and maintenance to ensure the stability and security of the specified server environments.

Other Computer Related Services

POSTED

DEADLINE

Project Implementation and Technical Support ServicesThe Project Implementation and Technical Support Services subcontract, issued by the F&A-IS Administration in California, focuses on the execution of eight specific project tasks. These responsibilities include system configuration, comprehensive testing, user training, and the provision of technical support throughout the deployment phase. The opportunity was posted on August 12, 2026, with a response deadline of September 9, 2026. Classified under NAICS code 541513, the contract outlines a structured approach to technical deployment and operational readiness for the agency.

Computer Facilities Management Services

POSTED

DEADLINE

Application Software Licensing and Third-Party Software ProcurementThe Application Software Licensing and Third-Party Software Procurement subcontract, managed by the F&A-IS Administration for the state of California, focuses on the acquisition and licensing of essential third-party software and application tools. The primary objective is to secure necessary components for system functionality, specifically targeting tools used for data processing, authentication, and reporting. This opportunity is categorized under NAICS code 423430 and was posted on August 12, 2026. Interested parties must submit their responses by the deadline of September 9, 2026. Further details and application procedures are available through the OpenGov procurement portal.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

GIS Integration and Mapping ServicesThe GIS Integration and Mapping Services subcontract, issued by the F&A-IS Administration in California, focuses on integrating GIS capabilities to facilitate the spatial visualization of transportation investment data. The primary objective is to establish a system that supports future scalability and the ability to implement geographic data layering. This opportunity is categorized under NAICS code 541370. It was posted on August 12, 2026, with a response deadline of September 9, 2026. Interested parties can find further details through the provided OpenGov procurement portal.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

Cloud Infrastructure and Authentication IntegrationThe Cloud Infrastructure and Authentication Integration subcontract, issued by the F&A-IS Administration in California, focuses on the implementation of a secure cloud environment. The project requires the integration of Azure AD and the enforcement of multi-factor authentication to ensure robust access control. Data security is a primary objective, necessitating the use of AES and RSA encryption for all information both at rest and in transit, with SFTP utilized for secure data transfers. This opportunity was posted on August 12, 2026, and has a response deadline of September 9, 2026. Classified under NAICS code 518210, the contract outlines specific technical requirements for infrastructure security and authentication to protect organizational data.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Centralized Data Management System DevelopmentThis subcontract opportunity, posted on August 12, 2026, by the F&A-IS Administration in California, seeks a provider to design and develop a custom centralized data management system. The primary objective is to automate the OCTA Countywide Transportation Investment Fact Sheet, transitioning current manual Excel-based processes into a scalable and traceable digital system. The project falls under NAICS code 541511 for custom computer programming services. Interested parties must submit their responses by the deadline of September 9, 2026. Further details regarding the solicitation can be accessed through the provided OpenGov procurement portal.

Custom Computer Programming Services

POSTED

DEADLINE