Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Compliance Auditing

Active

State & Local

Response Deadline10/13/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity for Cybersecurity and Compliance Auditing supports prime contractors on projects for the Virginia Department of Social Services. The selected provider will perform security assessments and audits based on NIST SP 800-53, while ensuring strict compliance with IRS Publication 1075 for tax data and VITA Security Requirements for the protection of PHI and PII. Key deliverables include risk assessments, compliance certifications, and detailed security audit reports. Qualified candidates must hold certifications in NIST frameworks to be eligible. The solicitation was posted on September 11, 2026, with a response deadline of October 13, 2026. The work will be performed within the Commonwealth of Virginia under NAICS code 541690.

General Info

Cybersecurity and compliance auditing subcontract for Virginia DSS requiring NIST framework certifications.

Agency

Virginia → Department of Social Services

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Commonwealth of Virginia, VA, USA

Set-Aside

NONE

Documents

This scope was carved out of FAM-25-038.

The full solicitation package (29 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

FAM-25-038 Comprehensive Child Welfare Information System (CCWIS)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedSep 11

subcontract

Response DeadlineOct 13

Submission deadline

Response Deadline

10/13/2026, 08:00:00 PM UTCin 18 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyVirginia → Department of Social Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyVirginia → Department of Social Services

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments for prime contractors on Virginia Department of Social Services (VDSS) projects. Audits against NIST SP 800-53, ensures compliance with IRS Publication 1075 for tax data, and validates PHI/PII protections per VITA Security Requirements. Requires certification in NIST frameworks. Delivers security audit reports, compliance certifications, and risk assessments.

Similar Contracts

Same NAICS industry code

NIST 800-53 Compliance & Security CertificationThis subcontract for the South Dakota State Government focuses on providing NIST 800-53 Compliance and Security Certification for prime contractors on BIT projects. The scope of work involves performing security audits and validating hosting environments by mapping facility controls to NIST SP 800-53 Rev. 5 frameworks, reviewing System Security Plans, and conducting vulnerability scans. The selected provider must ensure strict compliance with HIPAA, PCI, and IRS standards using specialized auditing tools to deliver essential compliance certificates, NIST mapping reports, and SOC reports. The opportunity is categorized under NAICS code 541690 and was posted on September 25, 2026, with a response deadline of November 3, 2026. This engagement is designed to secure the technical infrastructure of state projects through rigorous validation and certification processes.

South Dakota State Government

POSTED

about 12 hours ago

DEADLINE

in about 1 month

Cyber Security Management and Virtual CISO (vCISO)This subcontract for the Haralson County Government in Georgia focuses on providing cyber security oversight and strategic security posture management for prime contractors. The selected provider will assign a Virtual CISO who must hold professional certifications such as CISSP or CISM to conduct quarterly security posture reviews and develop comprehensive business continuity plans using specialized security auditing tools. The primary deliverables for this engagement include quarterly security posture review reports and a validated Business Continuity Plan. Interested parties must respond by October 27, 2026, under NAICS code 541690 to ensure the county maintains a secure and resilient operational environment.

Haralson County Government

POSTED

about 12 hours ago

DEADLINE

in about 1 month

Medical CBRN Subject Matter Expertise (SME) & AnalysisThis small business set-aside subcontract, managed by the Department of Defense under the FA8003 771 Enterprise Sourcing Squadron, provides technical and analytical support for Air Force Medical Command projects. The scope of work focuses on Medical CBRN subject matter expertise, including CBRN intelligence research, the preparation of acquisition documentation for materiel solutions, and the execution of workflow analysis for medical CBRN responses. Performance is based in Falls Church, Virginia, and requires the use of SIPRNET for handling classified data. Qualified personnel must possess a Secret clearance and demonstrate familiarity with NIMS, HICS, and HSEEP. Key deliverables for the contract include technical reports, requirements documents, and capability certifications. The opportunity is categorized under NAICS code 541690, with a response deadline of October 9, 2026.

FA8003 771 Enterprise Sourcing Squadron

POSTED

about 14 hours ago

DEADLINE

EWIRDB Production and Authoritative Repository SupportThe EWIRDB Production and Authoritative Repository Support subcontract, issued by the Department of Defense under agency FA8604 Aflcmc Pzi, focuses on providing engineering assessments and quality control for all-source radar and ELINT data repositories. Supporting NASIC and NSIC projects, the contractor is responsible for executing quality control via SERF/JADE and populating the AFMSS/CSDB and MEKS repositories. Additional duties include supporting Technical Coordination Meetings and managing Foreign Military Sales data releases. This requirement necessitates TS/SCI cleared EA Analysts who can strictly adhere to EWIRDB SCG and NSA/CSS guidelines. The primary deliverables consist of quality-controlled signal data and fully populated repositories. The contract falls under NAICS code 541690, with a response deadline of October 9, 2026.

FA8604 Aflcmc Pzi

POSTED

about 14 hours ago

DEADLINE

MC CBRN Request For Information

Solicitation # FA800326R0016

Solicitation FA800326R0016 is a sources-sought request for a performance-based, non-personal advisory and assistance services contract supporting the Air Force Medical Command AFMEDCOM A4/10C programs. The requirement focuses on providing comprehensive technical and analytical support for Department of the Air Force organizational medical Chemical, Biological, Radiological, and Nuclear CBRN requirements, readiness, and consequence management. This effort is designed to facilitate both installation/homeland and expeditionary/deployed medical responses under the Air Force Medical All Hazards Support concept. The contract is designated as a total small business set-aside under NAICS code 541690. Primary performance will take place at the Defense Health Headquarters in Falls Church, Virginia, with potential requirements for briefings at the Pentagon and travel within the Continental United States or overseas. Key deliverables include meeting agendas, minutes, monthly status and financial reports, and a Quality Control Plan due within ten business days of award. Contractor personnel must possess current Department of War experience in medical CBRN areas, sign a non-disclosure agreement, and complete annual training in Operations Security and Controlled Unclassified Information. The government retains all intellectual property rights for materials produced during the contract, and the contractor is responsible for maintaining quality control and adhering to strict security protocols for handling classified and controlled unclassified information.

FA8003 771 Enterprise Sourcing Squadron

POSTED

about 14 hours ago

DEADLINE

T56 Engine Troubleshooting and Technical TrainingThis subcontract for the Department of Commerce involves providing specialized technical training and troubleshooting services for the NOAA Office of Marine and Aviation Operations. The selected provider will deliver on-site and classroom instruction on organizational level maintenance, specifically utilizing T56-A-14 Series 3.5 diagnostic tools. Key deliverables include the execution of training sessions and the submission of detailed troubleshooting reports to support prime contractors. A critical requirement for this engagement is the provision of personnel who are factory trained by Rolls-Royce. The opportunity is categorized under NAICS code 541690, with a response deadline of October 14, 2026. The scope of work focuses on ensuring operational readiness through on-call technical assistance and expert field troubleshooting for T56 engines.

POSTED

about 22 hours ago

DEADLINE

Campus Safety & Security ConsultingThis subcontract for Campus Safety and Security Consulting involves providing specialized design and consulting services for security infrastructure on State University of New York campus projects. The selected provider will work with prime contractors to develop comprehensive security master plans, system design specifications, access control strategies, and safety protocols. The opportunity is categorized under NAICS code 541690 and is associated with the State University of New York. Interested parties must respond by the deadline of October 27, 2026, following the posting date of September 25, 2026.

State University of New York (SUNY)

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Botetourt County Economic Development Authority is Seeking Proposals for AI Ready Roanoke Feasibility Study

Solicitation # RFP-127519

The Botetourt County Economic Development Authority, on behalf of the AI Ready Roanoke planning coalition, is seeking a qualified consultant to conduct a market demand and feasibility study for a regional AI Center of Excellence. This fixed-price engagement, not to exceed $250,000, is designed to validate regional demand for AI adoption and innovation programming to support a GO Virginia Implementation Grant application. The scope of work is divided into six key workstreams: demand analysis across four target industry clusters, program design for training and computing access, workforce analysis to identify high-risk occupations, site feasibility for three proposed locations, financial modeling including a five-year pro forma, and the design of a governance framework. A portion of the contract value, specifically $92,590, is contingent upon the approval of a planning grant from GO Virginia Region 2. The project is expected to be completed within 16 to 24 weeks from the notice to proceed and requires significant on-the-ground work in Virginia. Deliverables include research findings based on 32 to 40 company interviews and 8 to 14 partner interviews, as well as financial estimates and presentations to the executive committee. Proposals are evaluated based on approach and methodology (30%), relevant experience (25%), team qualifications (15%), cost value (15%), and regional knowledge (15%). Selected consultants must provide a Virginia State Corporation Commission identification number and maintain comprehensive insurance coverage, including commercial general liability of $1 million per occurrence. Proposals are due by October 2, 2026, and must be submitted electronically.

Economic Development Authority of Botetourt County

POSTED

about 22 hours ago

DEADLINE

Facilities Data AnalystThe Facilities Data Analyst subcontract for The University of Akron involves performing quantitative analysis of enrollment projections, staffing levels, and industry benchmarks for prime contractors on campus facility projects. The selected provider will utilize statistical tools to conduct comparative analyses specifically for science and engineering facilities, creating a data-driven foundation for operational efficiency reports. The final deliverables include comprehensive benchmarking reports and detailed data analysis sets to support the overall strategy. This opportunity is categorized under NAICS code 541690, with a response deadline of October 15, 2026.

The University of Akron

POSTED

DEADLINE

Sign Material Technical Consultant/TrainerThe Sign Material Technical Consultant/Trainer subcontract for the City of Detroit Traffic Engineering Division involves providing specialized technical instruction and on-site assistance to prime contractors. The selected manufacturer technician will be responsible for training staff on equipment operation, material application, and silk screening techniques, while also delivering technical reports and providing troubleshooting support for manufacturing and screen printing issues within a 24-hour notice period. This opportunity is categorized under NAICS code 541690 and was posted on September 24, 2026, with a response deadline of October 9, 2026. The contract focuses on ensuring the proper application of signage materials and the efficient operation of related machinery through expert guidance and professional training sessions.

City Of Detroit

POSTED

DEADLINE

Aircraft Records Review & Compliance AuditThis subcontract for the Texas A&M Forest Service involves performing comprehensive records reviews and compliance audits for aircraft projects. The selected provider will be responsible for examining aircraft logbooks and maintenance records, verifying adherence to Service Bulletins and Airworthiness Directives, and conducting life assessments specifically for Dash 8 platforms. To complete these tasks, the contractor must utilize regulatory databases and De Havilland technical data to produce a final life assessment and detailed compliance report. The opportunity is categorized under NAICS code 541690 and was posted on September 24, 2026, with a response deadline of October 9, 2026. Interested parties can find further details through the Texas SmartBuy portal under solicitation IFB-27-003.

Texas A&M Forest Service

POSTED

DEADLINE

FAA Regulatory Compliance and Airspace AuthorizationThis subcontract for the City of Fort Worth focuses on FAA regulatory compliance and airspace authorization to support citywide Drone as First Responder operations. The selected contractor will be responsible for securing legal and regulatory authorizations for prime contractors, which includes drafting and filing FAA applications for Certificates of Waiver or Authorization and Beyond Visual Line of Sight exemptions. The scope of work requires deep expertise in 14 CFR Part 107 and BVLOS requirements to develop comprehensive Concept of Operations documents, safety cases, and risk assessments. Key deliverables include approved FAA COAs, signed ConOps, and validated safety cases to ensure all drone operations meet federal safety and legal standards.

City Of Fort Worth

POSTED

DEADLINE

More opportunities from Virginia → Department of Social Services

Same awarding agency

Educational Materials Printing & SupplyThe Educational Materials Printing and Supply subcontract supports prime contractors on projects for the Virginia Department of Social Services. The scope of work involves the high-volume printing and binding of seminar curricula, participant workbooks, and certificates of completion, as well as the physical delivery of these booklets and handouts. Additionally, the contractor is responsible for the mailing and postage of all materials to agency offices or individual participants. This opportunity falls under NAICS code 323111 and has a response deadline of October 5, 2026.

Commercial Printing (except Screen and Books)

POSTED

about 22 hours ago

DEADLINE

Training Program Management & Coordination ServicesThis subcontract for Training Program Management and Coordination Services supports the Virginia Department of Social Services by providing administrative oversight for prime contractor training programs. The scope of work includes managing service intake, processing referrals, scheduling participants, and coordinating the logistics required for seminar delivery. The service provider will utilize specialized scheduling software and tracking databases to maintain operational efficiency. Key deliverables include a managed participant schedule and a verified registry of completed certifications. The opportunity is categorized under NAICS code 561110, with a response deadline of October 5, 2026.

Office Administrative Services

POSTED

about 22 hours ago

DEADLINE

Access & Visitation (AV) Seminar Instructor/ProviderThis subcontract opportunity is for an Access and Visitation Seminar Instructor or Provider to deliver instructional seminars for prime contractors supporting the Virginia Department of Social Services. The selected provider will conduct educational sessions focusing on the impact of divorce or separation on children, parenting and financial responsibilities, and conflict resolution strategies, utilizing specialized curriculum materials based on child psychology and family law. The provider is responsible for delivering completed seminar sessions and issuing certificates of completion to all participants. This opportunity falls under NAICS code 611430, with a response deadline of October 5, 2026.

Professional and Management Development Training

POSTED

about 22 hours ago

DEADLINE

Contracting Out SNAP E&T Case Management Services

Solicitation # BEN-27-003

The Virginia Department of Social Services is seeking proposals for the contracting out of SNAP E&T Case Management Services under solicitation RFI-126052. This opportunity is categorized under NAICS code 624310 and is managed by the Department of Social Services Procurement Unit located in Glen Allen, Virginia. Interested parties must submit their responses by the deadline of September 30, 2026. The primary point of contact for this solicitation is Charles Ward, who can be reached via email or phone for further inquiries regarding the submission process and project requirements.

Vocational Rehabilitation Services

POSTED

about 22 hours ago

DEADLINE

CSE-26-084 Access & Vistation (AV) Training

Solicitation # CSE-26-084

The Virginia Department of Social Services is soliciting applications under RFA CSE-26-084 to establish subgrant awards for the provision of co-parenting education services for Access and Visitation programs. The primary objective is to deliver seminars covering the effects of separation or divorce on children, parenting and financial responsibilities, and conflict resolution. Awardees will manage the full service lifecycle, including referral processing, intake, scheduling, instruction, and the issuance of completion certificates. All services must comply with the Virginia Office of the Executive Secretary Dispute Resolution Services policies and the Code of Virginia. The total funding obligated for this RFA is 100,000 dollars, with a base period of performance of one year and four optional one-year renewals. Applications are evaluated based on budget reasonableness and the required 10 percent program cash contribution (30 percent), project quality and measurable outcomes (25 percent), applicant capacity and infrastructure (25 percent), and the established need for the project (20 percent). Priority consideration is given to applicants capable of serving diverse geographical areas and providing services in languages other than English. Eligible applicants must be registered in the System for Award Management with a valid 12-digit Unique Entity Identifier and must be authorized to transact business in the Commonwealth of Virginia. The final deadline for submission is October 5, 2026, at 8:00 PM.

Other Individual and Family Services

POSTED

about 22 hours ago

DEADLINE

Data Collection & Performance ReportingThis subcontract, titled Data Collection and Performance Reporting, focuses on establishing comprehensive data collection and reporting systems for prime contractors working on Virginia Department of Social Services SNAP E&T projects. The primary objective is to implement rigorous processes for tracking participant milestones and outcomes based on ALICE standards, utilizing secure databases and reporting dashboards to monitor performance. The project requires strict adherence to government data security standards and IRS Publication 1075 to ensure the protection of sensitive information. Key deliverables include the creation of performance tracking reports and data dashboards. The solicitation was posted on September 11, 2026, with a response deadline of October 13, 2026, under NAICS code 541511.

Custom Computer Programming Services

POSTED

DEADLINE

Work Experience Program AdministrationThe Work Experience Program Administration subcontract supports prime contractors on Virginia Department of Social Services SNAP E&T projects. The selected provider is responsible for identifying employer partners, managing the placement of participants into on-the-job training roles, and monitoring site performance using employer partnership management systems. The contractor must ensure all activities comply with federal SNAP E&T work experience guidelines and is required to deliver detailed placement logs and performance evaluations. This opportunity is categorized under NAICS code 624190, with a response deadline of October 13, 2026.

Other Individual and Family Services

POSTED

DEADLINE

Job Search & Placement ServicesThis subcontract for Job Search and Placement Services supports prime contractors on Virginia Department of Social Services SNAP E&T projects. The selected provider will deliver comprehensive employment support, including resume writing, interview skills training, and job retention services, while utilizing career coaching tools and employment databases. Success in this role requires a deep understanding of local labor market trends and ALICE standards to effectively assist participants in securing sustainable employment. The contractor is responsible for maintaining and delivering detailed job placement records and training completion logs. This opportunity is categorized under NAICS code 561311 and is associated with the Virginia Department of Social Services. Interested parties must submit their responses by the deadline of October 13, 2026.

Employment Placement Agencies

POSTED

DEADLINE

Vocational Training & Education ServicesThis subcontract for Vocational Training and Education Services supports Virginia Department of Social Services SNAP E&T projects by providing formal education and vocational training to prepare participants for high-wage employment. The service provider must utilize specialized training facilities and trade-specific equipment to deliver accredited educational or vocational certifications, ensuring participants earn recognized credentials. The opportunity is listed under NAICS code 611519 and was posted on September 11, 2026, with a response deadline of October 13, 2026. This contract focuses on delivering a skilled workforce through targeted training initiatives managed by the Virginia Department of Social Services.

Other Technical and Trade Schools

POSTED

DEADLINE

Case Management ServicesThis subcontract for Case Management Services supports prime contractors on Virginia Department of Social Services SNAP E&T projects. The selected provider will be responsible for conducting intake assessments, developing Individualized Service Plans, and performing ongoing progress monitoring. All activities must be documented using case management software to ensure strict compliance with federal SNAP E&T and VDSS standards. The contractor is required to deliver completed participant case files, ISPs, and detailed progress reports. This opportunity falls under NAICS code 624190 and is associated with the Virginia Department of Social Services. The response deadline for this requirement is October 13, 2026.

Other Individual and Family Services

POSTED

DEADLINE

Organizational Change Management (OCM)This subcontract focuses on providing Organizational Change Management services to support prime contractors on projects for the Virginia Department of Social Services. The selected provider will be responsible for human-centric transition activities, including stakeholder engagement, communication planning, and workflow transition management. Key deliverables include a comprehensive change management plan, the creation of communication materials, and the development of adoption metrics to measure success. The opportunity requires a partner with proven experience in large-scale government IT modernization and change management. Performance will take place within the Commonwealth of Virginia under NAICS code 541611. Interested parties must submit their responses by October 13, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Training Development & DeliveryThis subcontract opportunity with the Virginia Department of Social Services focuses on the development and execution of a comprehensive training program for prime contractors. The selected provider will be responsible for creating a Comprehensive Training Plan under CLIN 31, producing instructional manuals, and conducting training sessions tailored for social workers and administrators. Success in this role requires specialized knowledge of social work workflows and child welfare caseload management to ensure the delivery of effective training materials and a finalized plan. The project falls under NAICS code 611430 and is performed within the Commonwealth of Virginia. Interested parties must submit their responses by October 13, 2026, following the posting date of September 11, 2026. The primary objective is to equip personnel with the necessary skills and documentation to manage VDSS projects efficiently.

Professional and Management Development Training

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS