Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Compliance Auditing

Open

State & Local

Response Deadline01/15/2027, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Cybersecurity and Compliance Auditing supports prime contractors on New Hampshire Department of Transportation E-ZPass projects. The scope of work involves independent security validation, vulnerability management, and regulatory compliance auditing, specifically requiring monthly vulnerability scans, quarterly penetration testing, and application security testing. The contractor must utilize automated tools and hold a Qualified Security Assessor certification to ensure PCI compliance. Key deliverables include penetration testing reports, vulnerability remediation logs, and PCI/SOC compliance certifications. The opportunity was posted on September 22, 2026, with a response deadline of January 15, 2027. It falls under NAICS code 541690 and is managed by the New Hampshire Department of Transportation.

General Info

Cybersecurity and compliance auditing subcontract for NH DOT E-ZPass projects, deadline January 15, 2027.

Agency

New Hampshire → Department Of Transportation

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of 2026-041.

The full solicitation package (150 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

DOT E-ZPASS BACK-OFFICE SYSTEM

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedSep 22

subcontract

Response DeadlineJan 15

Submission deadline

Response Deadline

01/15/2027, 07:00:00 PM UTCin 2 months

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew Hampshire → Department Of Transportation

ContactsNo contacts available

OfficeN/A

Organization / AgencyNew Hampshire → Department Of Transportation

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs independent security validation, vulnerability management, and regulatory compliance auditing for prime contractors on NHDOT E-ZPass projects. Conducts monthly vulnerability scans, quarterly penetration testing, and application security testing. Utilizes automated penetration testing tools and vulnerability scanners. Requires Qualified Security Assessor (QSA) certification for PCI compliance. Delivers penetration testing reports, vulnerability remediation logs, and PCI/SOC compliance certifications.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 2 hours ago

DEADLINE

Data Visualization and Statistical SpecialistThis subcontract for a Data Visualization and Statistical Specialist supports prime contractors on International Labour Office projects. The primary objective is to transform raw national and international labour market data into structured, editable datasets and publication-quality charts and tables. By utilizing statistical software, the specialist ensures data consistency across 12 Arab States, delivering both the finalized report graphics and the underlying editable data. The engagement is categorized under NAICS code 541690 and involves performance across multiple destinations. Managed by the ILO, the contract focuses on high-level data processing and visualization to ensure that complex labour market statistics are presented accurately and professionally for official reporting.

POSTED

about 16 hours ago

DEADLINE

Commercial Aviation Faculty TrainingThis subcontract for Angelo State University involves providing specialized instructional training for university faculty on the operation and management of an Advanced Aviation Training Device. The selected provider will deliver training modules focused on simulator software and mixed reality interfaces, specifically requiring subject matter expertise in DA42 flight systems to ensure faculty are fully capable of operating the equipment for the Commercial Aviation Program. The opportunity was posted on November 9, 2026, with a response deadline of November 30, 2026. Classified under NAICS code 541690, the project supports prime contractors in delivering technical proficiency to faculty members within the university's aviation infrastructure.

Angelo State University

POSTED

about 18 hours ago

DEADLINE

Digital Accessibility (ADA/WCAG) Compliance SpecialistThis subcontract opportunity is for a Digital Accessibility Compliance Specialist to perform testing and validation of POD software for prime contractors supporting University of Michigan HomeMed Pharmacy projects. The primary objective is to ensure that software interfaces comply with ADA requirements and WCAG 2.1/2.2 standards, with a specific mandate to verify that the system functions independently of accessibility overlays or specialized accessibility modes. The selected provider will be responsible for providing test access and provisioning support for accessibility validation, culminating in the delivery of a comprehensive accessibility audit report and a formal certification of compliance. This engagement falls under NAICS code 541690, with a response deadline set for November 18, 2026.

University of Michigan

POSTED

about 21 hours ago

DEADLINE

PEMS Technical TrainerThis subcontract opportunity is for a PEMS Technical Trainer to provide specialized staff training for prime contractors working on California Air Resources Board projects. The selected provider must possess subject matter expertise in PEMS operations and emissions data analysis to deliver four days of comprehensive instruction. The training curriculum focuses on instrument operations, troubleshooting, data retrieval, and data processing, utilizing demonstration PEMS units and software. The primary deliverables for this engagement include the successful training of personnel and the submission of completion reports. Interested parties should note that the response deadline is November 24, 2026. This requirement falls under NAICS code 541690 and is associated with the State Air Resources Board in California.

State Air Resources Board

POSTED

about 22 hours ago

DEADLINE

CCTV and Access Control Systems Design & ConsultancyThis subcontract involves providing technical consultancy services for prime contractors managing facility projects for the Newry, Mourne and Down District Council. The selected consultant will be responsible for conducting technical assessments of current CCTV and Access Control systems, developing detailed specifications for planned upgrades across various sites, and providing expert advice on the integration of hardware and software. Key deliverables include technical consultancy reports, comprehensive system design specifications, and strategic upgrade roadmaps. Qualified candidates must possess the necessary experience and certifications in security systems consultancy to perform these duties. The opportunity was posted on November 9, 2026, with a response deadline of December 2, 2026. This engagement falls under NAICS code 541690 and focuses on enhancing the security infrastructure of the council's facilities through professional design and technical guidance.

Newry, Mourne and Down District Council (NMD)

POSTED

DEADLINE

Digital Forensics & Chain-of-Custody IntegrationThe Digital Forensics and Chain-of-Custody Integration subcontract, issued by the Department of Defense via W6QM Micc-Fdo Ft Eustis, focuses on the technical integration and validation of data capture and archiving for Department of the Army Criminal Investigation Division projects. The selected provider will develop specialized methods for capturing ephemeral data and maintaining the technical integrity of the chain-of-custody for digital evidence. A critical component of the scope includes providing technical validation for data intended for use in federal or military courts, culminating in the delivery of a validated archiving system and detailed chain-of-custody reports. This opportunity is categorized under NAICS code 541690 and will be performed in Quantico. The solicitation was posted on November 9, 2026, with a response deadline set for December 9, 2026.

W6QM Micc-Fdo Ft Eustis

POSTED

DEADLINE

Supply Chain Risk Management (SCRM) and Cyber-Physical SecurityThis subcontract, titled Supply Chain Risk Management (SCRM) and Cyber-Physical Security, involves performing security audits and risk management for prime contractors on Department of Defense Multi-Channel Manpack projects. The scope of work includes conducting SCRM analysis, implementing cyber-physical security protocols, and utilizing security auditing tools to verify component provenance. All activities must strictly adhere to NIST SP 800-171 and DFARS 252.204-7012 standards, with final deliverables consisting of a detailed SCRM approach and a comprehensive cyber-physical security report. The project is managed under the Department of Defense and will be performed in Quantico, Virginia. Interested parties should note that the response deadline is December 11, 2026. The contract is categorized under NAICS code 541690, focusing on specialized security auditing and risk mitigation to ensure the integrity of critical defense hardware and software supply chains.

POSTED

DEADLINE

in about 1 month

Natural Resource Investigations in the Upper Mississippi River Basin, Mississippi Valley Division (MVD)

Solicitation # W912EK27TBD

The US Army Corps of Engineers, Rock Island District, is conducting a sources sought notice to identify qualified small business sources for natural resource investigations within the Upper Mississippi River Basin and potentially the lower Mississippi River. The scope of work involves specialized species surveys for federally endangered bats and freshwater mussels, requiring dive capabilities and specific permits from the USFWS and state agencies. Additionally, the requirement includes habitat evaluation, restoration design, biological data collection, GIS mapping, and the preparation of technical reports and mitigation plans in accordance with the National Environmental Policy Act. The government is utilizing this process to determine if a set-aside is appropriate for various small business categories, including HUBZone, 8(a), and veteran-owned entities. Interested parties must submit a tailored capability statement of no more than ten pages by December 4, 2026, detailing their performance approach and small business status. Key operational requirements include the ability to mobilize within seven days of a task order and the capacity to manage at least three simultaneous task orders. For teaming arrangements, the small business must incur at least 15 percent of the total contract value to comply with limitations on subcontracting.

W07V Endist Rock Island

POSTED

DEADLINE

Statistical Analysis & Data ExtrapolationThis subcontract, issued by the Vermont Department of Economic Development, focuses on statistical analysis and data extrapolation for transportation projects managed by the Chittenden County Regional Planning Commission. The selected provider will analyze survey results and apply expertise in margin of error calculations and statistical reliability to extrapolate findings across the total population of Chittenden County. The primary objective of this engagement is to produce a comprehensive final analysis report and a supporting data set that will inform the Metropolitan Transportation Plan. Interested parties must submit their responses by December 7, 2026, under NAICS code 541690.

Department of Economic Development

POSTED

DEADLINE

State IT Security & Privacy Compliance ServicesThis subcontract for State IT Security and Privacy Compliance Services supports the North Carolina Department of Environmental Quality on AI Permitting Pilot projects. The primary objective is to perform security assessments for prime contractors, which includes conducting Security Vendor Readiness Assessment Reports and verifying adherence to GovRAMP internal standards. The scope of work focuses on auditing data workflows to ensure the protection of personally identifiable information and confidential business data in accordance with State IT security standards. The selected provider will be responsible for delivering comprehensive security assessment reports and formal compliance certifications. This opportunity falls under NAICS code 541690 and was posted on November 9, 2026, with a response deadline of January 5, 2027.

Department of Environmental Quality

POSTED

DEADLINE

in about 2 months

Hospital Safety Program Operationalization ConsultingThis subcontract for Hospital Safety Program Operationalization Consulting involves the high-level design and implementation of safety programs for prime contractors working on New York State Department of Health projects at Helen Hayes Hospital. The selected provider will be responsible for developing comprehensive safety program frameworks, establishing operational protocols for Hospital Safety Officers, and creating essential reporting templates and key performance indicators to ensure program effectiveness. The project requires specialized expertise in healthcare safety regulations and hospital accreditation standards to deliver operational safety programs and all mandatory safety reports. Interested parties should note the response deadline of December 17, 2026, for this engagement categorized under NAICS code 541690.

NYS Department of Health

POSTED

DEADLINE

in about 1 month

More opportunities from New Hampshire → Department Of Transportation

Same awarding agency

RFP DOT 2025-067 Managed Security Service Provider (MSSP)

Solicitation # 2025-067

The New Hampshire Department of Transportation (NHDOT) is seeking a Managed Security Service Provider (MSSP) to provide 24/7 cybersecurity monitoring, threat detection, and incident response for its Bureau of Transportation Systems Management and Operations (TSMO) and Transportation Management Center (TMC). The scope of work focuses on protecting critical operational technology (OT) and Intelligent Transportation Systems (ITS) infrastructure, including traffic signals, Smart Work Zones, and associated wired and wireless communication networks. The selected vendor will supplement the NH Department of Information Technology (NH DoIT) team by ensuring operational resilience and compliance with state and federal security standards, specifically NIST SP 800-171 R3 and NIST SP 800-53 Revision 5. The contract is structured as a not-to-exceed agreement with a projected five-year performance period. Key requirements include the provision of specialized field technician support equipped with necessary network diagnostic tools and the adherence to strict Service Level Agreements (SLAs) for incident triage, mitigation, and resolution. Evaluation is based on a weighted scoring system rather than a low-bid award, prioritizing the proposed technical solution and the vendor's project management experience. Vendors must maintain significant insurance coverage, including cyber liability of up to 10 million dollars in the aggregate, and demonstrate compliance with GovRAMP or StateRAMP authorizations. Proposals are due by November 17, 2026.

Security Systems Services (except Locksmiths)

POSTED

DEADLINE

DOT E-ZPASS BACK-OFFICE SYSTEM

Solicitation # 2026-041

The New Hampshire Department of Transportation, Bureau of Turnpikes, is soliciting proposals under solicitation number DoIT 2026-041 for a new E-ZPass Back Office System (BOS). This firm-fixed-price contract seeks a vendor to design, implement, transition, and operate a modern BOS, Call Center, and Walk-In-Centers using a Software as a Service (SaaS) and Infrastructure as a Service (IaaS) model. The system must manage electronic toll collection, interoperability with national partners, invoice and violation processing, customer account management, and comprehensive financial reconciliation and auditing. Key requirements include a redesigned website, AI integration, and strict adherence to NHDOT business rules and state privacy laws. The project is structured in phases, including design, development, and a final acceptance phase involving hypercare and Operational Acceptance Testing. Vendors must comply with rigorous cybersecurity standards, including NIST SP 800-171 Revision 3, NIST Cybersecurity Framework 2.0, and Zero Trust Architecture. Additionally, all Walk-In-Center facilities must be ADA compliant. Proposals are due by January 15, 2027, and will be evaluated on a 200-point scale, with significant weight placed on product demonstrations. The price proposal requires detailed quotes for implementation, the establishment of Walk-In-Centers in the Hooksett-Concord and Portsmouth areas, and five years of operational costs from FY 31 through FY 35.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Transponder Fulfillment & LogisticsThis subcontract for the New Hampshire Department of Transportation focuses on the fulfillment and logistics of E-ZPass transponders for prime contractors working on NHDOT projects. The selected provider is responsible for managing the entire lifecycle of the transponders, including inventory management, packaging, and the final shipping and delivery to end-users. To ensure operational efficiency, the contractor must utilize specialized fulfillment center software and logistics systems to maintain strict accuracy and delivery timeline standards. This opportunity is categorized under NAICS code 493110, with a response deadline set for January 15, 2027.

General Warehousing and Storage

POSTED

about 2 months ago

DEADLINE

Image Review & Enforcement ServicesThe Image Review and Enforcement Services subcontract supports New Hampshire Department of Transportation E-ZPass projects by providing manual image review of toll transactions and processing unpaid tolls for prime contractors. The scope of work involves identifying toll evasion through image review software, processing enforcement notices, and utilizing skip tracing databases to locate individuals with outdated contact information. The contractor is responsible for delivering validated toll transactions and processed enforcement notices while adhering to strict quality assurance and accuracy standards. This opportunity falls under NAICS code 541611, with a response deadline of January 15, 2027.

Administrative Management and General Management Consulting Services

POSTED

about 2 months ago

DEADLINE

Financial Processing & Lockbox OperationsThis subcontract for the New Hampshire Department of Transportation focuses on financial processing and lockbox operations for E-ZPass projects. The selected provider will be responsible for processing payments and managing critical financial documents, including the General Ledger, Trial Balance, Balance Sheet, and Income Statements, while ensuring all subsidiary ledgers are properly reconciled. The role requires the use of specialized financial reporting software and payment gateway integrations to deliver accurate reconciled reports and processed payments. To ensure operational integrity, the contractor must adhere to SOC 1 Type II financial reporting controls. This opportunity is categorized under NAICS code 561110 and is open for responses until January 15, 2027.

Office Administrative Services

POSTED

about 2 months ago

DEADLINE

Walk-In Center Setup & ManagementThis subcontract for the New Hampshire Department of Transportation involves the setup and operational management of physical customer service walk-in centers for E-ZPass projects. The contractor is responsible for establishing and staffing centers in Hooksett-Concord, Portsmouth, and Nashua, where they will provide on-site account management and customer service. The scope of work includes the deployment of local networking, point-of-sale hardware, and customer-facing kiosks to ensure full operational capacity in accordance with NHDOT standards. The project is categorized under NAICS code 561110 and was posted on September 22, 2026. Interested parties must submit their responses by the deadline of January 15, 2027. Further details regarding this opportunity can be accessed through the New Hampshire procurement portal.

Office Administrative Services

POSTED

about 2 months ago

DEADLINE

Contact Center & Customer Service OperationsThis subcontract for the New Hampshire Department of Transportation focuses on providing essential staffing and technology to support E-ZPass call center and customer service operations. The scope of work includes managing customer accounts, processing transactions, and handling inquiries through the use of IVR systems, Virtual Assistant AI tools, and CRM software. The provider is responsible for delivering operational support and detailed performance reports while adhering to specific key performance indicators and service level agreements. The opportunity is categorized under NAICS code 561422 and was posted on September 22, 2026. Interested parties must submit their responses by the deadline of January 15, 2027. This contract is designed to support prime contractors on NHDOT projects by ensuring efficient customer interaction and technical management of the E-ZPass system.

Telemarketing Bureaus and Other Contact Centers

POSTED

about 2 months ago

DEADLINE

Cloud Infrastructure & Data Center HostingThis subcontract for Cloud Infrastructure and Data Center Hosting supports the New Hampshire Department of Transportation's E-ZPass Back Office System. The provider is responsible for supplying and maintaining a secure, highly available hosting environment featuring enterprise-scale transaction processing hardware, redundant power, cooling, and networking. Security is managed through continuous environmental monitoring and strict physical access controls using biometrics and badges. To ensure compliance and operational excellence, the provider must hold several critical certifications, including ISO/IEC 27001, ISO/IEC 9001, SOC 2 Type II, PCI DSS Level 1, and either ISO/IEC 50001 or LEED. The opportunity was posted on September 22, 2026, with a response deadline of January 15, 2027, falling under NAICS code 518210.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 2 months ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS