Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cyber Third-Party Risk Management

Active

StateOfNewMexico-OCS2026.01State & Local

Response Deadline10/16/2026, 11:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The New Mexico Office of Cybersecurity has issued solicitation OCS2026.01 for the design, development, and delivery of a scalable, multi-tenant Third-Party Risk Management framework. This project is intended to standardize supply-chain cybersecurity risk management for various local entities, including municipal, county, tribal governments, and higher education institutions. The primary objective is to establish a comprehensive framework capable of managing third-party risks across these diverse organizational types. Interested parties must submit their quotes by the deadline of October 16, 2026, directing all submissions to Melissa Gutierrez at Melissa.Gutierrez@cyber.nm.gov. The solicitation is categorized under NAICS code 541512 and is managed by the state of New Mexico. James Ortega serves as the primary point of contact for the procurement process.

General Info

New Mexico OCS seeks a scalable Third-Party Risk Management framework by October 16, 2026.

Agency

New MexicoView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Not specified

Set-Aside

NONE

Documents

(1)

OCS2026.01 - Cyber Third-Party Risk Management

PDF•3 pages•rfq

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

PhaseSolicitation

PostedSep 15

Solicitation

Response DeadlineOct 16

Submission deadline

Response Deadline

10/16/2026, 11:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew Mexico

Contacts1 person available

OfficeN/A

Organization / Agency

New Mexico

View Agency Profile

Office AddressN/A

Contacts

James Ortega

contact@example.gov

Full Description

Show more

Project will result in the design, development and delivery of a scalable, multi-tenant Third-Party Risk Management framework. Please send all quotes to: Melissa.Gutierrez@cyber.nm.gov

Similar Contracts

Same NAICS industry code

INSTALLATION AND EQ

Solicitation # SPE8EN-26-T-3164

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

about 10 hours ago

DEADLINE

Utilization Management Technical Solutions RFI

Solicitation # utilization-management-technical-solutions-rfi

Noridian Healthcare Solutions, LLC is issuing a Request for Information (RFI) to identify qualified technology providers and strategic partners capable of delivering configurable technical solutions for end-to-end utilization management (UM) workflows. The primary objective is to modernize the evaluation of medical necessity, appropriateness of care, provider compliance, and program integrity for federal and state healthcare programs. The scope of the RFI covers a wide range of capabilities, including clinical operations such as intake, prior authorization, and appeals, as well as workflow automation, provider engagement portals, data interoperability using HL7, FHIR, and X12 standards, and the integration of AI and advanced intelligence. This opportunity is open to a broad range of small business entities, including SDB, WOSB, HUBZone, VOSB, and SDVOSB certifications, under NAICS code 541512. Interested respondents must notify Noridian via email to gain access to the Agiloft Contract Management System, where all official correspondence and submissions must be conducted. Responses are required to be submitted using a specific templated spreadsheet by September 21, 2026. Following a comprehensive review of the submissions, Noridian may invite selected respondents to participate in solution demonstrations during the fourth quarter of 2026. Respondents must certify that they are not debarred or suspended and have no conflicts of interest that would prohibit contracting with Noridian.

Noridian Healthcare Solutions, LLC

POSTED

about 11 hours ago

DEADLINE

Database Migration and Conversion SpecialistThis subcontract for a Database Migration and Conversion Specialist involves performing technical database conversions for prime contractors on Ohio EPA projects. The primary scope of work includes transitioning database architecture from SQL Server to PostgreSQL and migrating legacy data from three separate services into a single consolidated system. The contractor must ensure all data integrity and mapping adhere to the specific data handling and privacy standards outlined in Supplement S. The final deliverable is a validated PostgreSQL database containing all legacy operator and facility data. This opportunity was posted on September 15, 2026, with a response deadline of October 1, 2026. The project falls under NAICS code 541512 and is associated with the EPA PM-ITS Info Tech Service and PM-Fiscal Administration units.

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

POSTED

about 11 hours ago

DEADLINE

SCADA and Controls IntegratorThe SCADA and Controls Integrator subcontract involves the integration of Supervisory Control and Data Acquisition systems and process controls for water treatment plant projects within the City of Cartersville. The selected provider will be responsible for programming and configuring SCADA software, integrating new chemical feed and control building equipment into the existing plant network, and utilizing PLC and HMI panels. All work must include integrated testing according to Section 01 91 13 to ensure a fully operational system. The final deliverables for this project include a functional SCADA system and comprehensive operator training manuals. This opportunity is categorized under NAICS code 541512 and is associated with the City of Cartersville in Georgia. The response deadline for this subcontract is October 16, 2026.

City of Cartersville

POSTED

about 13 hours ago

DEADLINE

in about 1 month

GIS & Asset Management Software ImplementationThis subcontract for the City of Suffolk in Virginia focuses on the implementation of GIS and asset management software for prime contractors working on roadway projects. The selected provider will develop a roadway asset management database linked to Esri/ArcGIS and ensure seamless data integration with the Cityworks Respond platform through an API. The scope of work includes the creation of reporting dashboards and the development of mobile application access to support field staff operations. The final deliverables consist of a GIS-compatible database and comprehensive reporting tools. This opportunity was posted on September 15, 2026, with a response deadline of October 15, 2026, under NAICS code 541512.

City of Suffolk

POSTED

about 15 hours ago

DEADLINE

FISMA Compliance and SCADA Cybersecurity ServicesThis subcontract for the Department of the Interior's Upper Colorado Regional Office focuses on providing FISMA compliance and SCADA cybersecurity services for Bureau of Reclamation water treatment plant projects. The selected provider will perform cybersecurity auditing, risk mitigation, and compliance documentation, specifically implementing security, accountability, and access monitoring controls for the NG ICS SCADA system according to the 2024 POA&M. Key responsibilities include updating network diagrams based on RMSD feedback and ensuring the delivery of a fully FISMA-compliant system. The role requires specialized expertise in the federal risk management framework and physical and logical asset controls. This opportunity falls under NAICS code 541512 and has a response deadline of October 16, 2026.

Upper Colorado Regional Office

POSTED

about 15 hours ago

DEADLINE

in about 1 month

Static IP and Network Configuration ServicesThis subcontract for Static IP and Network Configuration Services supports prime contractors on Department of Justice DEA projects located in Seattle, Washington. The scope of work involves the technical configuration and integration of Static IP services, including the setup of routers, firewalls, DNS, and routing tables, as well as connectivity and latency testing using network analyzers and management consoles. The primary objective is to deliver a fully operational and configured network environment. This opportunity is designated as a Total Small Business Set Aside under NAICS code 541512. Qualified personnel must hold either a CCNA or CompTIA Network+ certification. The solicitation was posted on September 15, 2026, with a response deadline of September 17, 2026.

Department Of Justice

POSTED

about 15 hours ago

DEADLINE

MFRC A/V Upgrade

Solicitation # FA810126Q0012

The Air Force Sustainment Center at Tinker Air Force Base is seeking quotations for a turnkey commercial Audio/Visual and Video Teleconferencing system upgrade for the Military and Family Readiness Center in Building B6001. The project involves the removal of legacy equipment and the procurement, installation, custom programming, testing, and training for a modernized system across three divisible classrooms, including a three-year extended warranty. This opportunity is a 100 percent Small Business Set-Aside under NAICS Code 541512. Eligible vendors must be registered in SAM.gov and adhere to the specifications outlined in the Performance Work Statement. Following a solicitation amendment to align documentation, the proposal submission deadline has been extended to September 18, 2026.

FA8101 Afsc Pzioa

POSTED

about 15 hours ago

DEADLINE

DBH - HVAC Software Server Move

Solicitation # SRC0000041541

The Ohio Department of Behavioral Health is seeking bids from suppliers to provide and install the latest Honeywell software and migrate existing services and settings to a new virtual server. The scope of work involves a multi-stage upgrade process moving from R400 to R600 and finally to R2025, including database upgrades, graphics migration, point-to-point verification, and a final cutover. Bidders must provide a detailed Statement of Work as an attachment that outlines the estimated hours for each specific line item. The contract will be awarded to the lowest-cost responsive and responsible supplier, with all delivery, setup, and warranty costs included in the submission. All pricing must be entered accurately into the OhioBuys item grid to avoid disqualification, and substitutions are prohibited unless explicitly authorized. All vendor inquiries must be submitted through the OhioBuys Inquiry Field, and in the event of a tie, the award will go to the first valid bid received.

Dmh104200 Financial Management Jrst11, Dmh711090 Cin Information Svcs Office Subh

POSTED

about 15 hours ago

DEADLINE

Two (2) Information technology security research and development specialists, Level 3, one (1) Satellite communication specialist, Level 3 and one (1) Telecommunication system specialist, Level 3

Solicitation # W8486-270825/A

Defence Research Development Canada is seeking the services of four Level 3 specialists: two in information technology security research and development, one in satellite communication, and one in telecommunication systems. The intent is to establish up to four contracts with a duration of three years each. This procurement is open exclusively to pre-qualified suppliers under the Task-Based Informatics Professional Service Supply Arrangement and is conditionally set aside for certified Indigenous businesses. The work will be performed in the National Capital Region and Trenton, Ontario. Due to the nature of the requirements, suppliers must hold Secret, Top Secret, or NATO Secret security clearances and adhere to Canadian or Five Eyes citizenship restrictions. Interested pre-qualified bidders must submit their proposals to the contracting authority, as documents are not available on the CanadaBuys portal.

Department of National Defence

POSTED

about 22 hours ago

DEADLINE

Point Solution Integration ServicesThis subcontract for Point Solution Integration Services, managed by the Oregon Administrative Services, focuses on integrating specialized health point solutions for prime contractors on Association of Oregon Counties medical TPA projects. The scope of work involves the technical integration of care coordinators, PBMs, and wellness applications through the use of HL7/FHIR data exchange protocols and API integrations to ensure synchronized TPA workflows and a seamless benefits package. The project requires strict adherence to HIPAA compliance and falls under NAICS code 541512. Interested parties must respond by October 15, 2026, following the posting date of September 14, 2026.

Administrative Services

POSTED

DEADLINE

Affiliation Agreement and Clinical Placement Management for School of Nursing RFP

Solicitation # RFP-0012408-TECH-2026

The University of Michigan School of Nursing is soliciting proposals under RFP-0012408-TECH-2026 for a centralized, scalable system to manage affiliation agreements and clinical placements. The goal is to replace manual processes with a digital system of record for approximately 400 graduate-level nurse practitioner students, with potential future expansion to include 875 undergraduate students. The project requires a solution that emphasizes configuration over custom development and includes critical data migration from existing spreadsheets and secure API integrations with Typhoon, Complio, custom ESR, and institutional SSO and email systems. The contract is envisioned for an initial three-year term with the possibility of two one-year extensions. Evaluation will be based on the technical solution, personnel qualifications, experience, and pricing, which must remain firm for the initial three-year period. The University requires compliance with ADA, Section 508, and WCAG 2.1 Level AA standards. Payment will be processed via a virtual card program with Net 0 terms upon invoice approval. Proposals are due by October 12, 2026, and must include a detailed project organization chart, staff resumes, and a completed pricing spreadsheet.

University of Michigan

POSTED

DEADLINE

More opportunities from New Mexico

Same awarding agency

TPRM Legal and Contracting SupportThe TPRM Legal and Contracting Support subcontract for the state of New Mexico focuses on providing specialized legal expertise to standardize contracting processes between local entities and third-party vendors for projects under the Office of Cybersecurity. The primary objective is to develop standardized contract language, cybersecurity clauses, and compliance requirements to ensure consistency and security across the Third-Party Risk Management program. The selected provider must possess deep expertise in government contracting and cybersecurity law to deliver comprehensive legal guidelines and contracting templates. This opportunity was posted on September 15, 2026, with a response deadline of October 16, 2026, falling under NAICS code 541110.

Offices of Lawyers

POSTED

about 8 hours ago

DEADLINE

in about 1 month

TPRM Toolset Development and DeliveryThis subcontract opportunity with the state of New Mexico focuses on the development and delivery of a technical toolset designed to execute a Third-Party Risk Management framework for prime contractors. The project requires the implementation of software capabilities for vendor discovery, tiering, assessment, and continuous monitoring of cybersecurity risks. The successful provider must demonstrate the ability to develop software for multi-tenant environments and ensure seamless integration with existing cybersecurity monitoring tools to deliver a fully functional platform. The procurement is categorized under NAICS code 541511 and was posted on September 15, 2026. Interested parties must submit their responses by the deadline of October 16, 2026. Further details and application processes are managed through the SciQuest bidding portal.

Custom Computer Programming Services

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Third-Party Risk Management (TPRM) Framework DevelopmentThis subcontract opportunity with the state of New Mexico focuses on the development of a scalable, multi-tenant Third-Party Risk Management framework for prime contractors working on Office of Cybersecurity projects. The goal is to standardize the processes by which local entities discover, tier, assess, and continuously monitor various external partners, including software providers, resellers, managed service providers, and third-party vendors. The project requires specialized expertise in multi-tenant architecture and supply-chain cybersecurity risk management to ensure a secure and efficient program design. The final deliverable consists of a fully documented TPRM framework and program design. Interested parties must respond by October 16, 2026, under NAICS code 541690.

Other Scientific and Technical Consulting Services

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Surveying and Mapping ServicesThis subcontract for Surveying and Mapping Services supports prime contractors on New Mexico Facilities Management Division space management projects. The scope of work involves performing boundary surveying, topographic mapping, and site analysis utilizing GIS software, GPS equipment, and total stations. To be eligible, the provider must hold a Professional Land Surveyor license and is responsible for delivering comprehensive boundary reports, survey maps, and GIS data. The opportunity is categorized under NAICS code 541370 and is associated with the state of New Mexico. Interested parties must submit their responses by October 2, 2026, following the posting date of September 14, 2026. Detailed procurement information and submission portals are available through the New Mexico SciQuest bidding system.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

Prefabricated Building Supply and InstallationThis subcontract involves the supply and installation of prefabricated buildings for prime contractors working on New Mexico Facilities Management Division state projects. The scope of work encompasses the entire lifecycle of the modular structures, including manufacturing, delivery, and on-site assembly utilizing cranes and necessary foundation materials. All deliverables must adhere to strict building code compliance and include required manufacturer certifications to ensure the delivery of fully installed, compliant structures. The opportunity is listed under NAICS code 321992 for the state of New Mexico. Interested parties must submit their responses by the deadline of October 2, 2026, following the posting date of September 14, 2026. Further details and application processes are managed through the state's SciQuest bidding portal.

Prefabricated Wood Building Manufacturing

POSTED

DEADLINE

IT Infrastructure and Systems ImplementationThis subcontract for IT Infrastructure and Systems Implementation supports prime contractors on New Mexico Facilities Management Division space management projects. The scope of work involves the supply and implementation of IT hardware and software, specifically focusing on system implementation, software deployment, and the installation of server hardware and networking equipment. To qualify, providers must hold the necessary system implementation and software vendor certifications to deliver fully configured IT systems, operational hardware, and software licenses. The opportunity is issued by the state of New Mexico with a response deadline of October 2, 2026. Classified under NAICS code 541512, the contract focuses on delivering integrated technical solutions to ensure the operational success of facility space management initiatives.

Computer Systems Design Services

POSTED

DEADLINE

Architectural and Engineering (A&E) Design ServicesThis subcontract for Architectural and Engineering (A&E) Design Services supports prime contractors on state enterprise space management projects for the New Mexico Facilities Management Division. The scope of work includes providing facilities design, civil engineering, and general engineering services utilizing CAD software and BIM tools to deliver comprehensive design plans, blueprints, engineering specifications, and space management layouts. Qualified providers must hold Professional Engineer or Registered Architect licenses. The opportunity is categorized under NAICS code 541330 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 2, 2026.

Engineering Services

POSTED

DEADLINE

State Enterprise Space Management Program

Solicitation # 27-350-26-00001

The State of New Mexico Facilities Management Division is soliciting proposals for the State Enterprise Space Management Program under solicitation number 27-350-26-00001. This multidisciplinary project encompasses a broad scope of work including architectural and engineering services, IT hardware and software, and the provision of prefabricated buildings, categorized under NAICS code 531312. The solicitation was posted on September 14, 2026, with a response deadline of October 2, 2026. All inquiries should be directed to the FMD Procurement Manager, Joseph Lovato, and all responses must be submitted through the Bonfire procurement portal. Submission via eProNM is explicitly prohibited. Primary point of contact duties are handled by Yuliastuti Wulandari. Interested parties are directed to the official procurement portal for full RFP attachments and detailed specifications.

Nonresidential Property Managers

POSTED

DEADLINE

Supply of Isotopically Labeled ChemicalsThis subcontract involves the supply of isotopically labeled chemicals to prime contractors supporting scientific laboratory projects for the New Mexico Department of Health. The scope of work focuses on providing chemical compounds containing radionuclides or deuterium, which function as internal standards for quantifying substances in biological matrices using chromatography and mass spectrometry. All materials provided must strictly adhere to purity and labeling specifications required for scientific laboratory applications. The opportunity is categorized under NAICS code 325199 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 8, 2026. Further details and application processes are hosted through the New Mexico SciQuest bidding portal.

All Other Basic Organic Chemical Manufacturing

POSTED

DEADLINE

Supply of Forensic Analytical Standards and CRMsThis subcontract involves the supply of certified reference materials, reference materials, and analytical standards for prime contractors supporting New Mexico Department of Health scientific laboratory projects. The scope focuses on providing high-purity chemical standards validated for the forensic analysis of licit and illicit drugs within human biological samples, specifically blood and urine. All materials must adhere to strict precision and accuracy requirements necessary for forensic laboratory certification. The opportunity is listed under NAICS code 424690 and was posted on September 10, 2026, with a response deadline of October 8, 2026. Interested parties can find further details through the State of New Mexico's procurement portal.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

Infrastructure Material Supply (Concrete & Metal)This subcontract for Infrastructure Material Supply focuses on providing raw materials and pre-cast components for infrastructure repair projects within New Mexico General Services Department cemeteries. The scope of work involves the delivery of specific concrete culverts and metal irrigation piping directly to the project sites to support prime contractors. The opportunity is managed by the state of New Mexico and is categorized under NAICS code 327320. Interested parties must submit their responses by the deadline of October 13, 2026, following the posting date of September 10, 2026.

Ready-Mix Concrete Manufacturing

POSTED

DEADLINE

Pavement Marking & StripingThis subcontract opportunity involves providing pavement marking and striping services for prime contractors working on New Mexico General Services Department cemetery projects. The scope of work includes the removal of existing markings and the application of plastic stripes, legends, and reflective adhesive-backed tape to ensure the delivery of completed pavement markings. The project is categorized under NAICS code 237310 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 13, 2026, with the solicitation having been posted on September 10, 2026.

Highway, Street, and Bridge Construction

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS