Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Controlled Unclassified Information (CUI) Protection & Data Privacy

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract titled Controlled Unclassified Information (CUI) Protection & Data Privacy requires the implementation of comprehensive safeguards to secure Controlled Unclassified Information and Personally Identifiable Information in alignment with federal standards. This includes deploying robust encryption methods, enforcing strict access controls, and establishing capabilities for forensic reconstruction of user activity to ensure accountability and compliance. The work must adhere to applicable federal guidelines governing data protection and privacy, with a focus on maintaining the integrity, confidentiality, and availability of sensitive information throughout its lifecycle. This is a subcontract under the CDC Office of Acquisition Services within the Department of Health and Human Services, with a NAICS code of 541612 indicating information technology consulting services. The solicitation was posted on July 28, 2026, and responses are due by August 13, 2026. While specific location details are limited, the place of performance is indicated as 2946, suggesting a physical or operational site associated with the CDC’s operations. The contract does not specify any set-aside status and provides no point of contact, requiring potential offerors to reference the official SAM.gov link for full submission details and requirements.

General Info

Implement CUI and PII protections per federal standards with encryption, access controls, and forensic capabilities for CDC IT consulting.

Agency

Department Of Health And Human Services → CDC Office Of Acquisition ServicesView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

2946, GA, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Health And Human Services → CDC Office Of Acquisition Services
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Health And Human Services → CDC Office Of Acquisition Services
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implement safeguards for CUI and PII, including encryption, access controls, and forensic reconstruction of user activity in compliance with federal standards.

Similar Contracts

Same NAICS industry code

NAICS: 541612
New
SLED
Employee Assistance Program ProviderThe Port of Seattle is seeking a provider to deliver its Employee Assistance Program as part of its Total Rewards Package, designed to enhance employee well-being and support the organization’s mission under the Century Agenda. The program offers confidential, 24/7 access to assessment, support, and referral services for employees and their families, covering lifestyle and daily living resources, family support, crisis intervention, and financial and legal assistance. Services are accessible via phone or a dedicated website, ensuring flexibility and convenience. The program is intended to promote employee engagement, retention, and effectiveness by addressing personal and professional challenges that may impact job performance and overall quality of life. The solicitation, posted on July 29, 2026, falls under NAICS code 541612 and is managed by the Port’s Human Resources department. Primary contact for the opportunity is Mazarine Ebengho Kyalumba, with Kecia Reichstein serving as Project Manager. The provider will be expected to deliver comprehensive, seamless support aligned with the Port’s commitment to being a highly effective public agency, ensuring that employees receive timely, professional, and confidential assistance whenever needed. The program’s success is tied directly to the Port’s broader goals of attracting and retaining critical talent through meaningful, holistic employee support services.
Human Resources

POSTED

about 11 hours ago

DEADLINE

N/A
View Details
NAICS: 541612
New
Federal
Cybersecurity Compliance Assessment & ReportingThe contract requires the performance of NIST SP 800-171 Rev 1 self-assessments for Department of Defense contractors to evaluate their cybersecurity posture against specified security controls. The contractor must thoroughly document implemented controls, calculate a compliance score out of 110 possible points, and formally submit the assessment results through either SPRS or WAWF as required by DoD policy. Timeliness and accuracy in scoring and reporting are critical to ensure contractors remain in compliance with federal cybersecurity standards. In the event of a challenge or rebuttal from the DoD, the contractor is obligated to respond comprehensively within 14 business days to address any discrepancies or concerns raised. This subcontract is classified as a Small Business Set Aside under SBA regulations and is associated with NAICS code 541612, indicating it is for management consulting services related to cybersecurity. The primary place of performance is Bremerton, Washington, with the contracting activity led by DLA Maritime - Puget Sound under the Department of Defense. The opportunity was posted on July 28, 2026, with a strict response deadline of July 29, 2026, suggesting a rapid procurement timeline. The nature of the work demands precision, familiarity with federal cybersecurity frameworks, and the ability to coordinate closely with DoD contractors to ensure accurate and timely compliance submissions.
DLA Maritime - Puget Sound

POSTED

1 day ago

DEADLINE

in about 4 hours
View Details
NAICS: 541612
New
DIBBS
Cybersecurity Compliance for Covered Contractor SystemsThis contract requires the implementation and ongoing maintenance of cybersecurity safeguards aligned with NIST SP 800-171 for systems processing Controlled Unclassified Information, ensuring compliance with federal standards for protecting sensitive data within defense contractor environments. The scope encompasses all technical, administrative, and physical controls necessary to secure CUI across covered contractor systems, including continuous monitoring, assessment, and reporting to meet evolving threats and regulatory requirements. The contractor must demonstrate proven experience in deploying and sustaining NIST 800-171 controls and be prepared to support audits or evaluations by federal oversight bodies. The contract is structured as a subcontract under the Department of Defense, with the Defense Logistics Agency as the overseeing entity, and is classified under NAICS code 541612 for management, scientific, and technical consulting services. The solicitation opened on July 27, 2026, with responses due by August 7, 2026, and performance is expected to occur at unspecified locations in support of defense-related operations. All work must be performed in accordance with federal cybersecurity mandates, with emphasis on documentation, employee training, incident response readiness, and integration with existing defense information systems.
Defense Logistics Agency

POSTED

2 days ago

DEADLINE

in 9 days
View Details

More opportunities from Department Of Health And Human Services → CDC Office Of Acquisition Services

Same awarding agency

NAICS: 541690
New
Federal
AI Risk Management & Compliance PlanningThe contract titled AI Risk Management & Compliance Planning requires the development and implementation of a comprehensive AI Compliance and Risk Management Plan focused on ensuring the ethical use of artificial intelligence, mitigating algorithmic bias, and enhancing transparency in alignment with federal AI governance standards. The work must be executed under the auspices of the CDC Office of Acquisition Services within the Department of Health and Human Services, with performance expected to occur in a location designated as 2946, though no specific city or state is provided. The solicitation falls under NAICS code 541690 for other scientific and technical consulting services and is classified as a subcontract, indicating it is part of a broader contractual arrangement. All proposals must be submitted by the deadline of August 13, 2026, at 7:00 PM, following the posting date of July 28, 2026. The plan must address the full lifecycle of AI systems used in federal health-related applications, incorporating documented processes for auditing, monitoring, and reporting on fairness, accountability, and explainability. While no set-aside status or point of contact is specified, the expectation is for a highly specialized contractor capable of integrating technical AI expertise with federal regulatory requirements to support public health integrity and trust.
Other Scientific and Technical Consulting Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 541611
New
Federal
Cybersecurity Incident Response & MonitoringThe contract titled Cybersecurity Incident Response & Monitoring requires the provision of continuous monitoring, detection, and rapid response capabilities for cybersecurity threats targeting CDC data systems. The vendor must deliver 24-hour vigilance for indicator of compromise (IOC) incidents with a strict requirement to report any confirmed breach within one hour of discovery, ensuring minimal exposure and swift mitigation of potential data compromises. This subcontract is issued under NAICS code 541611 for other management consultancy services and is sponsored by the CDC Office of Acquisition Services within the Department of Health and Human Services, emphasizing its critical role in safeguarding public health data infrastructure. The opportunity was posted on July 28, 2026, with a response deadline of August 13, 2026, at 7:00 PM, and the place of performance is designated as location 2946, though no specific city or state is provided. There is no set-aside designation specified, and no point of contact information is listed in the solicitation. The contract mandates high-reliability cybersecurity operations aligned with federal standards for federal health systems, with a strong emphasis on real-time threat mitigation and accountability in breach reporting timelines. Potential responders are expected to demonstrate proven capabilities in enterprise-scale cybersecurity monitoring and incident response tailored to sensitive government data environments.
Administrative Management and General Management Consulting Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 518210
New
Federal
Daily-Updated, Longitudinal, Patient-Level Electronic Health Record DataThe Centers for Disease Control and Prevention is soliciting proposals for a Firm-Fixed-Price contract to acquire Daily-Updated, Longitudinal, Patient-Level Electronic Health Record Data under solicitation number 75D30126R78929, with an estimated value exceeding $9 million. The acquisition follows FAR RFO Subpart 12.2 and incorporates procedures from FAR Part 15 due to the contract’s value, and is classified under NAICS code 518210 with a $40 million size standard. The Government has issued a notice of intent to award the contract on a sole-source basis to Truveta, Inc., based on market research and a Justification for Other Than Full and Open Competition, which concludes that Truveta is the only known source capable of meeting the minimum requirements outlined in the Statement of Work. However, other responsible offerors may still submit capability statements and proposals to demonstrate they can satisfy those same requirements, and the Government retains the right to shift to a competitive acquisition if another qualified source emerges. The deadline for submitting capability statements is August 4, 2026, at 3:00 p.m. Eastern Time, and proposals are due no later than August 13, 2026, at the same time. All submissions must be sent electronically to the Contracting Officer, Latoya Michel, at zrb5@cdc.gov; telephone inquiries are not accepted. The contract will be awarded based on best value to the Government, with evaluation criteria tied to the ability to meet the specified technical and operational requirements for data delivery, timeliness, and patient-level accuracy. The performance location is in Atlanta, Georgia, and the acquisition is not set aside for any specific small business category. Interested parties are directed to www.acquisition.gov for the full text of referenced clauses and provisions.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 325414
New
Federal
Notice of Intent to Sole Source the Procurement of Weekly Delivery of Turkey, Chicken, Guinea Pig, and Horse Red Blood CellsThe Centers for Disease Control and Prevention intends to award a sole-source firm fixed price contract to Lampire Biological Laboratories for the weekly delivery of turkey, chicken, guinea pig, and horse red blood cells used in hemagglutination inhibition assays critical to influenza surveillance. These red blood cells must meet exacting biological performance standards to ensure compatibility with validated CDC assay protocols and to maintain the integrity of longitudinal data used for FluView reporting and vaccine strain selection. Lampire is the only known manufacturer whose products have been proven to consistently support these assays, and switching to an alternative supplier would require extensive and time-consuming validation to confirm equivalency, risking disruption to ongoing surveillance efforts. No competitive solicitation will be issued for this requirement, as the government has determined that Lampire Biological Laboratories is the sole source capable of meeting its operational needs without compromising data continuity. This notice serves solely to assess whether any other responsible sources could meet the technical and performance criteria, with any responses due by August 4, 2026, at 3:00 p.m. Eastern Time to the Contract Specialist at cbp0@cdc.gov. The procurement under NAICS code 325414 and PSC 6505 is managed by the CDC Office of Acquisition Services in Atlanta, Georgia, and all feedback received will be evaluated solely to determine whether a competitive process is warranted, with the final decision resting entirely at the government’s discretion.
Biological Product (except Diagnostic) Manufacturing

POSTED

1 day ago

DEADLINE

in 6 days
View Details
NAICS: 493120
New
Federal
Merck Stockpile Vaccine Storage and Rotation ContractThe Centers for Disease Control and Prevention plans to award a sole source firm fixed price contract to Merck Sharp and Dohme LLC for the storage and rotation of pediatric vaccines within the national Vaccines for Children stockpile. As the sole manufacturer of the vaccine, Merck is uniquely positioned to manage the timely rotation of expiring doses into active inventory and replenish the stockpile to ensure continued vaccine viability. This action is authorized under FAR Part 12.102(b) due to Merck’s exclusive capability to perform the required tasks without compromising quality, reliability, or schedule. The contract is part of a mandatory federal program designed to maintain a stable supply of pediatric vaccines. Interested parties may submit a written capability statement referencing solicitation number 75D30126R73481 by August 7, 2026, at 1:00 p.m. ET, to be reviewed for potential competition, though the government retains sole discretion to proceed with a sole source award. Responses must be sent via email to the designated contracting officers and must clearly demonstrate relevant experience, assets, and ability to meet all performance requirements. No telephone inquiries will be accepted, and submissions are not compensated. All firms must be registered in the System for Award Management to be eligible. The work will be performed in Atlanta, Georgia, under the oversight of the CDC’s Office of Acquisition Services within the Department of Health and Human Services.
Refrigerated Warehousing and Storage

POSTED

1 day ago

DEADLINE

in 9 days
View Details
NAICS: 541512
New
Federal
Section 508 Accessibility Compliance & ICT RemediationThe contract titled Section 508 Accessibility Compliance & ICT Remediation requires full adherence to Section 508 accessibility standards for all electronic deliverables, including reports, software, and multimedia content. Contractors must provide Accessibility Conformance Reports (ACRs) to document compliance and undertake remediation efforts to correct any non-compliant elements, ensuring accessibility for individuals with disabilities. The work is governed by the NAICS code 541512, indicating it falls under computer systems design services, and is structured as a subcontract under the CDC Office of Acquisition Services within the Department of Health and Human Services. Performance is expected to meet federal accessibility requirements without geographic limitations specified. The solicitation was posted on July 27, 2026, with a response deadline of August 10, 2026, at 4:00 PM. No set-aside type or organizational preferences are indicated, and the place of performance details are not provided, suggesting work may be performed remotely or at the contractor’s location. The contract does not include a designated point of contact, and all inquiries should be directed through the official SAM.gov workspace link provided. Compliance with Section 508 is mandatory, and failure to submit accurate ACRs or remediate identified accessibility barriers could result in non-acceptance of deliverables or contract termination.
Computer Systems Design Services

POSTED

2 days ago

DEADLINE

in 12 days
View Details
NAICS: 541830
New
Federal
Scientific Reporting & Technical WritingThe contract under the title Scientific Reporting & Technical Writing requires the preparation of a comprehensive final report that details the methods utilized, results obtained, any deviations encountered, and concluding analyses, with an emphasis on technical accuracy, clarity, and full compliance with government submission standards. The deliverable must meet federal expectations for documentation, ensuring that all information is presented in a manner suitable for official review and archival by the agency. The work is structured as a subcontract under NAICS code 541830, falling under the Department of Health and Human Services, specifically the CDC Office of Acquisition Services, and is intended to support scientific and technical communication efforts aligned with public health objectives. The solicitation was posted on July 27, 2026, with a response deadline of August 10, 2026, at 4:00 PM, indicating a narrow window for proposal submission. The place of performance and point of contact details are not specified, suggesting flexibility in location or that coordination will be handled post-award. There is no set-aside designation, meaning the opportunity is open to all eligible contractors. While no specific performance location is outlined, the deliverable is expected to meet stringent federal reporting requirements, implying that the contractor must be adept at navigating federal scientific documentation protocols and capable of producing high-quality, audit-ready technical content.
Media Buying Agencies

POSTED

2 days ago

DEADLINE

in 12 days
View Details