This Subcontract opportunity from Oregon was posted on July 29, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity & Compliance Audit Support

Closed

State & Local

Submission Closed09/02/2026, 11:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541611

New

Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services (RFP-VC-26-006), Inland Empire Utilities Agency (California)

Solicitation # RFP-VC-26-006

Hagerty Consulting, Inc. is seeking a Disadvantaged Business Enterprise (DBE) subcontractor to support an engagement with the Inland Empire Utilities Agency (IEUA) in California. The project focuses on enhancing the agency's operational resilience framework through the development and review of a Business Impact Analysis (BIA), Disaster Recovery Plan (DRP), and Business Continuity Plan (BCP), as well as the creation of recovery playbooks. The scope of work includes participating in client workshops, conducting assessments, and facilitating in-person tabletop exercises to identify response gaps. Preference is given to firms with expertise in IT/OT resilience and experience within the water, wastewater, or critical infrastructure sectors. The engagement is funded by the Environmental Protection Agency (EPA) and requires strict adherence to federal and state regulations, including Build America, Buy America (BABA), Title VI of the Civil Rights Act, and Section 504 of the Rehabilitation Act. Technical deliverables must align with FEMA Continuity Guidance, CISA, and NIST standards, specifically the NIST Risk Assessment Framework. The contract is designated as a Prevailing Wage Contract under the California Labor Code, requiring consultants to be registered with the Department of Industrial Relations. The initial term of the contract is three years with an option to extend, and the agency intends to make a single award based on past performance, personnel qualifications, and cost-effectiveness.

Hagerty Consulting, Inc.

POSTED

DEADLINE

Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for IEUA

Solicitation # business-impact-analysis-disaster-recovery-business-continuity-plan-services-ieua

Carollo Engineers, Inc. is soliciting qualified disadvantaged business enterprise firms to provide specialized services for the Inland Empire Utilities Agency. The project focuses on the development and implementation of a Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan within the state of California. Specifically, the agency is seeking partners with expertise in risk assessment, emergency response and recovery planning, business continuity management, and information technology disaster recovery planning. This opportunity is set aside for various small business designations, including SBA certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone Small Businesses. Interested parties must submit their responses by November 16, 2026. The primary point of contact for this solicitation is Paola Machan, and the project falls under NAICS code 541611.

Carollo Engineers, Inc.

POSTED

DEADLINE

Business Impact Analysis/Disaster Recovery Plan/Business Continuity Plan Services

Solicitation # business-impact-analysisdisaster-recovery-planbusiness-continuity-plan-services

The Inland Empire Utilities Agency is seeking electronic proposals from qualified vendors to develop and implement a comprehensive Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan. The primary objective of this initiative is to strengthen organizational resilience, safeguard critical business functions, and ensure operational continuity in the event of significant disruptions. This solicitation is specifically set aside for various small business categories, including Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone certified small businesses. Interested parties must submit their responses by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Veronica Cordova.

Inland Empire Utilities Agency

POSTED

DEADLINE

Art Documentation Framework DeveloperThe City of North Vancouver is seeking a specialized subcontractor to serve as an Art Documentation Framework Developer. The selected professional will be responsible for establishing a comprehensive documentation framework and a structured maintenance schedule for prime contractors involved in public art projects. Key deliverables include the creation of standards for future artwork documentation, the planning of annual maintenance cycles, and providing expert guidance on the integration of QR codes and the coordination of plaques. Qualified candidates must possess significant expertise in managing public art programs on both a local and international scale. This subcontract focuses on ensuring the long-term preservation of public art through detailed lifespan planning and standardized reporting. Interested parties must submit their responses by December 10, 2026, to support the City of North Vancouver and the Province of British Columbia in maintaining their public art assets.

City of North Vancouver

POSTED

DEADLINE

Indigenous Cultural Protocol & Safety AdvisorThe City of North Vancouver is seeking an Indigenous Cultural Protocol and Safety Advisor to provide specialized guidance for prime contractors working on public art projects. The selected advisor will focus on cultural protocol, sovereignty, and safety, while analyzing the relationships between arts, culture, and local Indigenous communities to ensure appropriate treatment and preservation of Indigenous artworks. The successful candidate must possess recognized expertise in local Indigenous protocols and demonstrated cultural competency. Key deliverables include the provision of integrated guidance and detailed advisory reports. This subcontract opportunity is open for responses until December 10, 2026.

City of North Vancouver

POSTED

DEADLINE

Export Control and Customs Compliance ServicesThis subcontract for Export Control and Customs Compliance Services supports prime contractors on Texas A&M University projects involving the international movement of dual-use additive manufacturing systems. The primary objective is to ensure strict adherence to federal export laws, specifically the Export Administration Regulations and the International Traffic in Arms Regulations. The scope of work includes determining and verifying Export Control Classification Numbers and United States Munitions List categories. The selected provider is responsible for delivering validated classifications and completing all necessary export and import documentation to maintain regulatory compliance.

POSTED

DEADLINE

Recruitment Strategy and Communication PlanningThis subcontract for Recruitment Strategy and Communication Planning involves developing strategic frameworks and communication assets for prime contractors supporting University of Washington recruitment projects. The selected provider will be responsible for creating comprehensive search strategies, work plans, and communication plans designed to reach target demographics while clearly articulating leadership context and opportunities for specific roles. Successful execution requires specialized knowledge of higher education leadership structures and a commitment to inclusive hiring best practices. The primary deliverables include a written search strategy, a detailed work plan, and a communication plan. The solicitation was posted on November 12, 2026, with a response deadline of November 25, 2026, falling under NAICS code 541611.

University of Washington

POSTED

DEADLINE

Program Data Collection and ReportingThis subcontract for Program Data Collection and Reporting involves providing monthly data aggregation and performance reporting for prime contractors working on California Public Utilities Commission projects. The selected provider will be responsible for collecting program data and utilizing data analysis software and reporting dashboards to generate monthly performance reports while maintaining strict adherence to data privacy and security standards. The project is categorized under NAICS code 541611 and will be performed in Alameda. Interested parties should note that the solicitation was posted on November 12, 2026, with a response deadline of December 17, 2026.

Public Utilities Commission

POSTED

DEADLINE

Project Management & Quality Control ConsultingThis subcontract opportunity is for Project Management and Quality Control Consulting to support prime contractors on projects for the California Department of Corrections and Rehabilitation. The selected provider will be responsible for delivering specialized project management, scheduling, and quality assurance services, which include the development of comprehensive Project Management Plans covering systems design confirmation, QA/QC protocols, and detailed scheduling plans. Key deliverables for the contract include monthly progress reports and scheduling bar charts. Qualified candidates must possess demonstrated experience with public works projects and a thorough understanding of CDCR standards. The solicitation was posted on November 12, 2026, with a response deadline of February 1, 2027. This engagement falls under NAICS code 541611 and focuses on ensuring rigorous quality control and efficient project oversight for state correctional facility infrastructure.

California Department of Corrections & Rehabilitation

POSTED

DEADLINE

Student Assessment and Evaluation Tool DevelopmentThis subcontract opportunity involves the development of student assessment tools designed to measure learning outcomes for prime contractors working on State of Ohio education projects. The selected provider will be responsible for creating pre-tests, post-tests, and evaluation rubrics utilizing digital survey tools or specialized assessment software. All deliverables must adhere to established educational measurement and evaluation standards and include the final assessment tools and comprehensive evaluation reports. The project is managed under the Ohio Department of Public Safety, specifically involving the Traffic Safety Office and Procurement Services. Interested parties must submit their responses by December 18, 2026. The contract is categorized under NAICS code 541611, focusing on administrative and general management consulting services to support educational quality assurance.

Dps110000 Ohio Traffic Safety Office Cdsb, Dps714000 Procurement Services Cdsb, Dps-dept Of Public Safety

POSTED

DEADLINE

Devolution and Local Government Collaboration ConsultantThe Devolution and Local Government Collaboration Consultant is a subcontract opportunity with the Local Government Association focused on providing research and strategic analysis for prime contractors. The primary objective is to analyze the Rewiring the State Delivery Plan to establish a framework and practical principles for collaboration between local and strategic authorities, directly supporting broader devolution ambitions. All project deliverables must align with the priority goals of the Public Service Reform and Innovation Policy Committee. Interested parties should note that the response deadline is December 1, 2026, and the work falls under NAICS code 541611 for administrative management and general management consulting services.

Local Government Association (LGA)

POSTED

DEADLINE

Rewiring the State – principles for enabling the collaborative advantage

Solicitation # REWIRESTATE

The Local Government Association (LGA) is soliciting a project titled Rewiring the State – principles for enabling the collaborative advantage to support its Public Service Reform and Innovation Policy Committee Priority Goals for 2026/27. The primary objective is to develop practical principles for collaboration between local and strategic authorities, facilitating a devolution agreement that brings power closer to councils and communities. This initiative follows the Rewiring the State Delivery Plan and focuses on creating effective ways of working across overlapping responsibilities to maximize outcomes for people and places. The project will begin with a review of the published Delivery Plan to determine how to add the most value, and it is expected to run from December 21, 2026, to March 31, 2027. The contract has an estimated total value of 24,000 pounds including VAT and is particularly suited for small and medium-sized enterprises. Bids are evaluated based on a combination of quality and price, with the award going to the highest scoring overall quotation. The project falls under research and development and related consultancy services. Interested parties must submit their tenders electronically by the extended deadline of December 15, 2026. The primary point of contact for this solicitation is Anna Gunstone.

Local Government Association (LGA)

POSTED

about 14 hours ago

DEADLINE

in 18 days

AI Contract Overview

The contract titled Cybersecurity & Compliance Audit Support seeks a subcontractor to deliver third-party audit and compliance services aimed at achieving SOC 2 Type II certification, ensuring the security of API integrations, and maintaining strict adherence to industry-standard encryption and accessibility requirements. The work involves evaluating existing systems and processes against trusted frameworks, identifying gaps, implementing corrective measures, and preparing documentation for a successful third-party audit, with a focus on safeguarding sensitive data and ensuring operational integrity. The subcontractor must demonstrate proven expertise in cybersecurity compliance regimes and have a track record of delivering SOC 2 Type II certifications successfully. This opportunity is issued by Multnomah County in Oregon and is classified under NAICS code 541611 for administrative management and general management consulting services. The solicitation was posted on July 29, 2026, with a response deadline of September 2, 2026, allowing vendors time to prepare detailed proposals outlining their methodology, experience, and resource allocation. The contract is structured as a subcontract, indicating it will support a larger program or initiative within the county’s technology or service delivery infrastructure. All work must be performed in alignment with federal and industry best practices, with emphasis on continuous compliance, risk mitigation, and the protection of user data through robust technical and procedural controls.

General Info

Subcontractor needed for SOC 2 Type II audit support, API security, encryption, and compliance under Multnomah County contract.

Agency

Oregon → Multnomah County

NAICS

541611 - Administrative Management and General Management Consulting Services

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of RIP-10-2027.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Workforce Management Solution

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 29

subcontract

Response DeadlineSep 2

Deadline has passed

Submission Closed

09/02/2026, 11:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyOregon → Multnomah County

ContactsNo contacts available

OfficeN/A

Organization / AgencyOregon → Multnomah County

Office AddressN/A

ContactsNo contact information available

Full Description

Provide third-party audit and compliance support to ensure SOC 2 Type II certification, secure API integrations, and adherence to encryption and accessibility standards.