Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity and Compliance Auditing

Active

State & Local

Response Deadline12/30/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity and Compliance Auditing subcontract involves performing independent security assessments and compliance audits for prime contractors working on Maryland Lottery and Gaming Control Agency projects. The scope of work focuses on conducting annual SOC 2 Type II auditing and PCI DSS attestations to ensure rigorous security standards are maintained. The successful provider will be responsible for delivering comprehensive annual PCI compliance reports and SOC 2 Type II audit reports. To qualify for this engagement, providers must hold CISA or QSA certifications. This opportunity is managed under the State of Maryland Government with a response deadline of December 30, 2026. The contract falls under NAICS code 541611, emphasizing the requirement for specialized administrative and management consulting services in the realm of cybersecurity compliance.

General Info

CISA/QSA certified providers perform SOC 2 and PCI audits for Maryland Lottery projects.

Agency

State of Maryland Government

NAICS

541611 - Administrative Management and General Management Consulting Services

Place of Performance

MD, USA

Set-Aside

NONE

Documents

This scope was carved out of BPM057747.

The full solicitation package (17 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Lottery Central Monitoring and Control System and Related Service

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 5

subcontract

Response DeadlineDec 30

Submission deadline

Response Deadline

12/30/2026, 07:00:00 PM UTCin 2 months

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyState of Maryland Government

ContactsNo contacts available

OfficeN/A

Organization / AgencyState of Maryland Government

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs independent security assessments and compliance audits for prime contractors on Maryland Lottery and Gaming Control Agency projects. Conducts annual PCI DSS attestations and SOC 2 Type II auditing. Requires CISA or QSA certifications. Delivers annual PCI compliance reports and SOC 2 Type II audit reports.

Similar Contracts

Same NAICS industry code

Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services (RFP-VC-26-006), Inland Empire Utilities Agency (California)

Solicitation # RFP-VC-26-006

Hagerty Consulting, Inc. is seeking a Disadvantaged Business Enterprise (DBE) subcontractor to support an engagement with the Inland Empire Utilities Agency (IEUA) in California. The project focuses on enhancing organizational resilience through the development and review of a Business Impact Analysis (BIA), Disaster Recovery Plan (DRP), and Business Continuity Plan (BCP), as well as the creation of recovery playbooks. The scope of work includes participating in client workshops, conducting assessments, and facilitating in-person tabletop exercises to identify response gaps. Preference is given to firms with expertise in IT/OT resilience and experience within the water, wastewater, or critical infrastructure sectors. The contract is funded by the U.S. Environmental Protection Agency (EPA), requiring strict adherence to federal and state regulations, including DBE Six Good Faith Efforts, Build America Buy America (BABA), and Davis-Bacon and Related Acts. Technical deliverables must align with CISA and NIST standards, specifically the NIST Risk Assessment Framework. The initial contract term is three years with an option to extend. Award evaluation is based on a firm's past performance in the utility sector, personnel qualifications, proposed staffing methodology, and cost-effectiveness. Proposals must be submitted electronically via PlanetBids by November 17, 2026.

Hagerty Consulting, Inc.

POSTED

about 5 hours ago

DEADLINE

Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for IEUA

Solicitation # business-impact-analysis-disaster-recovery-business-continuity-plan-services-ieua

Carollo Engineers, Inc. is soliciting qualified disadvantaged business enterprise firms to provide specialized services for the Inland Empire Utilities Agency. The project focuses on the development and implementation of a Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan. Specifically, the agency is seeking partners with expertise in risk assessment, emergency response and recovery planning, business continuity management, and information technology disaster recovery planning within the state of California. This opportunity is set aside for various small business classifications, including SBA certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone Small Businesses. Interested firms must submit their responses by November 16, 2026. Primary coordination for this solicitation is managed by Paola Machan at Carollo Engineers, Inc.

Carollo Engineers, Inc.

POSTED

about 5 hours ago

DEADLINE

Business Impact Analysis/Disaster Recovery Plan/Business Continuity Plan Services

Solicitation # business-impact-analysisdisaster-recovery-planbusiness-continuity-plan-services

The Inland Empire Utilities Agency is seeking electronic proposals from qualified vendors to develop and implement a comprehensive Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan. The primary objective of this initiative is to strengthen organizational resilience, safeguard critical business functions, and mitigate potential operational disruptions. This solicitation is specifically set aside for various small business categories, including SBA certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone Small Businesses. Interested parties must submit their responses by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Veronica Cordova.

Inland Empire Utilities Agency

POSTED

about 5 hours ago

DEADLINE

Professional Consulting ServicesThis subcontract opportunity is for Professional Consulting Services to support the California Human Services Agency. The selected provider will perform specialized professional or consulting services for prime contractors, offering subject matter expertise and advisory services to ensure the successful completion of program deliverables and the production of professional reports. The project is based in San Francisco and falls under NAICS code 541611. Interested parties must submit their responses by the deadline of November 23, 2026.

Human Services Agency

POSTED

about 9 hours ago

DEADLINE

Stakeholder and Public Engagement ServicesThis subcontract for Stakeholder and Public Engagement Services involves providing community outreach and stakeholder management for prime contractors working on Northwest Hills Council of Governments trail projects. The selected provider will be responsible for developing and executing comprehensive public engagement plans, facilitating public meetings, and utilizing survey software to gather and analyze community feedback. Key deliverables include a formal public engagement plan and detailed stakeholder feedback reports. The opportunity is managed by DAS Procurement for the state of Connecticut under NAICS code 541611. Qualified candidates must possess professional experience in community planning and public sector engagement. The solicitation was posted on October 27, 2026, with a response deadline set for November 30, 2026.

DAS Procurement

POSTED

about 11 hours ago

DEADLINE

in about 1 month

Campaign Analytics and Performance Reporting

The University of Akron

POSTED

about 12 hours ago

DEADLINE

Cybersecurity Governance and Compliance Support

Department of Administrative Services

POSTED

about 12 hours ago

DEADLINE

in about 12 hours

Investment Appraisal and Proposition Development Support

Solicitation # ocds-h6vhtk-078337

The York and North Yorkshire Combined Authority is seeking a single multidisciplinary supplier to provide an integrated investment appraisal and proposition-development service. This contract combines commercial support and appraisal for the Brownfield Housing Programme with the pipeline and proposition development for the Regional Investment Framework. The successful provider must operate as a unified team using a consistent core methodology to deliver both program requirements concurrently within the Yorkshire and the Humber region. The estimated contract value is 190,000 GBP including VAT, with a performance period of seven months running from November 16, 2026, to June 15, 2027. This opportunity is noted as being particularly suitable for small and medium-sized enterprises. The award will be based on the most advantageous tender using a price-to-quality ratio of 20% for pricing and 80% for quality. Tenders must be submitted electronically via the YORTender portal by October 28, 2026, at 12:00pm.

York and North Yorkshire Combined Authority

POSTED

about 13 hours ago

DEADLINE

Strategic Planning and Project Management Support

Virginia Department of Health

POSTED

about 14 hours ago

DEADLINE

Student Loan Default Prevention and Counseling ServicesThis subcontract for the Lone Star College System focuses on the delivery of student loan default prevention and counseling services. The selected provider will support prime contractors by offering financial literacy training, loan repayment counseling, and targeted outreach to students at risk of default. A primary objective of the engagement is to ensure strict compliance with the Higher Education Act and Federal Student Aid regulations, with success measured by reduced loan default rates and the submission of detailed student counseling reports. The opportunity is categorized under NAICS code 541611 and was posted on October 27, 2026. Interested parties must submit their responses by the deadline of November 18, 2026. Further details regarding the solicitation can be accessed through the Lone Star College procurement portal.

Lone Star College

POSTED

about 14 hours ago

DEADLINE

Institutional Strengthening and Capability Development Plan for Disaster Risk Management in Khyber Pakhtunkhwa

Solicitation # BRAVE-IS-002

DAI Pakistan Pvt. Ltd. is soliciting proposals for a firm to develop an Institutional Strengthening and Capability Development Plan for Disaster Risk Management in Khyber Pakhtunkhwa, Pakistan. Funded by the UK Foreign, Commonwealth & Development Office under the BRAVE-IS programme, the project involves working with the Relief, Rehabilitation and Settlement Department and its agencies, including the Provincial Disaster Management Authority, Rescue 1122, and the Civil Defence Directorate. The assignment is structured in four stages, moving from inception and diagnostic assessments of financial, HR, and digital systems to the creation of five-year strengthening plans and optional early implementation support. The contract is a fixed-price agreement requiring personnel to be based in Peshawar with necessary field visits. Bidding firms must provide a team featuring a Team Lead, a Public Financial Management Expert, a Digital Systems and ERP Expert, and a DRM Expert, alongside HR and GIS capabilities. Technical and financial proposals must be submitted via email by 4 November 2026, with clarification questions accepted until 26 October 2026.

DAI GLOBAL UK LTD

POSTED

about 15 hours ago

DEADLINE

PPP Concession Structuring and Financial Modeling ConsultantThis subcontract for a PPP Concession Structuring and Financial Modeling Consultant involves providing economic and commercial analysis for prime contractors on Asian Infrastructure Investment Bank projects within the Government of Bangladesh. The scope of work focuses on Highway Operating Concessions, specifically evaluating economic cases, risk allocation, and bundling strategies. Key deliverables include the development of native MS Excel financial models for corridor-level valuation and toll indexation regimes, as well as the production of Structuring and Indicative Valuation Reports. The consultant is responsible for conducting Value for Money analysis to compare various concession models against traditional public operations. This engagement falls under NAICS code 541611 and is managed through the Asian Infrastructure Investment Bank. Interested parties must note the response deadline of November 16, 2026.

Asian Infrastructure Investment Bank

POSTED

about 16 hours ago

DEADLINE

More opportunities from State of Maryland Government

Same awarding agency

Lottery Central Monitoring and Control System and Related Service

Solicitation # BPM057747

The State of Maryland, through the Department of General Services and the Maryland Lottery and Gaming Control Agency, is soliciting proposals for a single-award contract to provide a comprehensive Lottery Central Monitoring and Control System. The scope of work encompasses the full installation, implementation, operation, and maintenance of an integrated solution to manage retail lottery operations, including all necessary software, hardware, data center infrastructure, and reporting tools. A critical requirement is that the proposed system must currently be in operation within a North American lottery and the offeror must have supplied such a system to at least one North American provincial or state lottery within the last three years. The contract includes an initial term with a single five-year renewal option and requires one year of uncompensated conversion activities at the start. The procurement process utilizes a weighted evaluation where technical factors account for 65 percent and financial factors account for 35 percent of the total score. Financial proposals are structured around fixed monthly fees and fixed percentages of net sales. The state has established strict participation goals for Minority Business Enterprises at 25 percent, with specific targets for African American and women-owned MBEs, as well as a goal for Veteran-Owned Small Business Enterprises. Compliance is enforced through a detailed liquidated damages schedule covering both system performance milestones and MBE participation. Contractors must adhere to rigorous security and operational standards, including FIPS 140-2 encryption and the requirement that all state data remain within the United States. Mandatory insurance coverages include $50 million per claim for Professional Liability and $1 million for Crime/Employee Theft. Additionally, the successful contractor must remit a 1 percent electronic transaction fee on total invoiced amounts to the Department of General Services. Deliverables are subject to a formal inspection and acceptance process managed by a Contract Monitor to ensure alignment with industry best practices and state quality standards.

Computer Systems Design Services

POSTED

DEADLINE

In-Lane POS Integration ServicesThis subcontract opportunity involves providing In-Lane POS Integration Services for prime contractors working on projects for the Maryland Lottery and Gaming Control Agency. The scope of work focuses on the development and implementation of in-lane sales tools that integrate lottery software with third-party retail point-of-sale equipment. Key deliverables include enabling integrated lottery sales functionality at retail check-out lanes, specifically supporting cashier-activated dispensers and print-on-receipt capabilities. The project falls under NAICS code 541511 and is managed by the State of Maryland Government. Interested parties should note that the response deadline is December 30, 2026. Further details and application processes can be accessed through the Maryland eMaryland Marketplace portal.

Custom Computer Programming Services

POSTED

DEADLINE

Data Center Infrastructure ProvisioningThis subcontract for Data Center Infrastructure Provisioning supports prime contractors working on projects for the Maryland Lottery and Gaming Control Agency. The selected provider is responsible for supplying and managing both Primary and Remote Backup Data Centers, ensuring the delivery of fully equipped and redundant environments. Required deliverables include server hardware, storage, redundant communications paths, and UPS systems capable of supporting 150% load. All infrastructure must strictly adhere to the security standards established by the Department of Information Technology and the Maryland Lottery and Gaming Control Agency. This opportunity, categorized under NAICS code 518210, was posted on October 5, 2026, with a response deadline of December 30, 2026.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

iLottery and Mobile App DevelopmentThis subcontract focuses on the development and integration of iLottery programs and mobile payment applications for prime contractors working with the Maryland Lottery and Gaming Control Agency. The scope of work encompasses full-stack development, API integration, and user acceptance testing to deliver a fully operational iLottery platform and mobile payment application for digital games. To ensure security and regulatory adherence, the project requires strict compliance with PCI DSS standards and SOC 2 Type II reporting. The opportunity is categorized under NAICS code 541511 and is managed through the State of Maryland Government, with a response deadline set for December 30, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Retail Hardware Deployment Field ServicesThe Retail Hardware Deployment Field Services subcontract involves the physical installation and ongoing maintenance of lottery terminals and monitors for prime contractors supporting the Maryland Lottery and Gaming Control Agency. The service provider is responsible for ensuring that retail terminals are fully installed, operational, and successfully connected to the Primary Data Center. Key performance requirements include a strict installation timeline, with hardware deployed within 14 days of receiving notice, as well as providing continuous field hardware replacement services. This project falls under NAICS code 238210 and is managed through the State of Maryland Government.

Electrical Contractors and Other Wiring Installation Contractors

POSTED

DEADLINE

Warehouse Sorter System Equipment and InstallationThis subcontract involves the supply and installation of a warehouse instant ticket order sorter system designed for prime contractors working on Maryland Lottery and Gaming Control Agency projects. The scope of work includes provisioning a sorter capable of handling tickets measuring 12 inches or more as well as 8x8 inch tickets. Additionally, the contractor is responsible for installing a return station and seven fully equipped packing stations, each outfitted with PCs, scanners, and manifest printers to ensure a fully operational and integrated sorting and packing environment. The project is managed under the State of Maryland Government with a response deadline of December 30, 2026. Classified under NAICS code 333998, the contract focuses on delivering a turnkey equipment solution to streamline warehouse operations for the agency. Interested parties can find further details through the Maryland eMaryland Marketplace Advantage portal.

All Other Miscellaneous General Purpose Machinery Manufacturing

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS