Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Compliance Auditor

Active

State & Local

Response Deadline10/01/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for a Cybersecurity and Compliance Auditor involves performing security reviews and penetration testing for prime contractors on Ohio EPA projects. The scope of work includes conducting configuration reviews for operating systems, applications, and databases, executing bi-weekly log anomaly reports, and maintaining the System Security Plan. The contractor must ensure strict adherence to NIST 800-53, NIST 800-171, CJIS Security Policy, and IRS Special Publication 1075. Key deliverables include security audit reports, risk assessments, and compliance certifications. The opportunity is categorized under NAICS code 541519 and is associated with the EPA PM-ITS Info Tech Service and PM-Fiscal Administration units.

General Info

Cybersecurity auditor providing security reviews and compliance testing for Ohio EPA projects.

Agency

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

OH, USA

Set-Aside

NONE

Documents

This scope was carved out of SRC0000041892.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Operator Certification Tracking System

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 15

subcontract

Response DeadlineOct 1

Submission deadline

Response Deadline

10/01/2026, 08:00:00 PM UTCin 16 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyEpa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

ContactsNo contacts available

OfficeN/A

Organization / Agency

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security reviews and penetration testing for prime contractors on Ohio EPA projects. Conducts configuration reviews of OS, applications, and databases, executes bi-weekly log anomaly reports, and maintains the System Security Plan. Adheres to NIST 800-53, NIST 800-171, CJIS Security Policy, and IRS Special Publication 1075. Delivers security audit reports, risk assessments, and compliance certifications.

Similar Contracts

Same NAICS industry code

Software Support for KASEMAKE and KASECUT LicensesThis subcontract through the National Archives and Records Administration provides software support and license maintenance for prime contractors managing industrial equipment projects in College Park. The scope of work includes troubleshooting, updates, and ensuring the validity of two KASEMAKE and two KASECUT software licenses for a one-year duration. Eligible providers must demonstrate OEM authorization or provide proof of their ability to support these specific systems. The successful contractor is responsible for delivering active software support agreements and fully functional licenses under NAICS code 541519.

Nara Contracting Office

POSTED

about 16 hours ago

DEADLINE

Maintenance and Support Agreement for NIH Hazardous Waste Management Tracking Information Software (EnviroWare)

Solicitation # 75N98026Q01215

The National Institutes of Health (NIH) is seeking a firm-fixed-price maintenance and support agreement for EnviroWare, a proprietary software application used to track and manage hazardous waste at the NIH main campus and off-site facilities. The contract is intended as a non-competitive, sole-source award to Wastelinq, Inc., the proprietary owner of the software, under statutory authority 41 U.S.C. 1901. The primary objective is to ensure the system remains in good operating condition, meets all applicable codes and developer specifications, and maintains compliance with US EPA and Maryland Department of Environment regulations. The scope of work includes technical phone support during normal business hours, the implementation of security, Oracle, and Java patches to meet NIH ITB security requirements, and the provision of custom development enhancements at fixed hourly rates. The period of performance consists of a one-year base period starting September 28, 2026, with two optional one-year extensions. Services will be performed via remote connections or on-site at the NIH Hazardous Waste Management Facility in Bethesda, Maryland. All deliverables are subject to inspection and acceptance by the NIH Project Officer.

National Institutes Of Health Olao

POSTED

about 16 hours ago

DEADLINE

Protective Distribution System (PDS) Preventive Maintenance and Support Services

Solicitation # W912PX26PA004

The Regional Contracting Office intends to award a sole source purchase order to CyberSecure IPS, LLC for the maintenance and support of the CyberSecure Alarmed Carrier Protective Distribution System (PDS) at the Joint Interagency Task Force South compound in Key West, Florida. This procurement is conducted under Title 41 U.S.C. 1901(e)(2) and FAR 12.102(a) because the proprietary nature of the system's firmware and software makes the Original Equipment Manufacturer the only viable source. The services are critical for maintaining a legal mandate for continuous monitoring of classified fiber-optic network runs and ensuring the system retains its active Authority to Operate. The scope of work includes the annual renewal of proprietary IMS Gold software licenses, 24/7 off-site technical support via telephone and ticketing, and one annual on-site visit for hardware calibration, performance analysis, and administrator training. Because the system operates on an air-gapped network, all technical coordination must be handled off-network. While this is a sole-source notice, interested parties may submit capability statements to Contracting Officer Lian Pinzon, provided they can demonstrate legal access to the OEM's proprietary source code and software patches.

0410 Aq Hq Contract

POSTED

about 16 hours ago

DEADLINE

in about 8 hours

Health Shared Services Provincial Health Corporation - Request for Proposal - Co-Managed Security Operations Centre (SOC)

Solicitation # AB-2026-06274

Health Shared Services Provincial Health Corporation is seeking a partner for a co-managed service model to support its centralized Security Operations Centre. The selected proponent will collaborate with the internal SOC team using existing tools and workflows to ensure 24x7x365 operational coverage. Key responsibilities include providing specialized expertise in threat monitoring, detection engineering, threat intelligence, threat hunting, incident response, and governance, while also offering mentoring, coaching, and quality assurance. This solicitation, identified as AB-2026-06274, was posted on September 14, 2026, with a response deadline of October 9, 2026. The services will be performed in Alberta, and the primary point of contact for the procurement process is Lisa Yanofsky-Potvin.

Health Shared Services Provincial Health Corporation

POSTED

DEADLINE

Electronic Resource Aggregation and ManagementThis subcontract for the Massachusetts Board of Library Commissioners focuses on the electronic resource aggregation and management of digital content. The selected provider will perform value-added reselling and aggregation for prime contractors, utilizing license management software and aggregation portals to handle agreements between the agency and various publishers. A critical requirement for this role is maintaining authorized reseller status for major encyclopedic and educational publishers to ensure the delivery of a managed portfolio of licensed digital products. The project is based in Boston, Massachusetts, under NAICS code 541519. Interested parties must adhere to the response deadline of December 18, 2026. This engagement centers on streamlining the acquisition and management of digital resources to support the agency's library services.

1007CONVD - MA Board of Library Commissioners

POSTED

DEADLINE

Cybersecurity Testing & ComplianceThis subcontract for Cybersecurity Testing and Compliance supports the Oregon Housing Stabilization Division by providing security testing and validation for prime contractors on HUD-funded SaaS projects. The scope of work includes developing security testing plans, executing penetration tests via vulnerability scanners, and remediating identified vulnerabilities. The primary objective is to ensure all projects maintain compliance with the State of Oregon IT Security Standards and NIST SP 800.53 r5, culminating in the delivery of security testing results and EIS Oversight approval. The opportunity is categorized under NAICS code 541519 and is based in Salem, Oregon. Interested parties must submit their responses by October 30, 2026, following the posting date of September 14, 2026.

Housing Stabilization Division

POSTED

DEADLINE

in about 1 month

Cybersecurity Coordination and ATO MaintenanceThis subcontract, titled Cybersecurity Coordination and ATO Maintenance, involves providing technical coordination and documentation support for prime contractors on Department of the Air Force projects at Columbus Air Force Base. The primary objective is to ensure that wireless solutions adhere to Department of Defense security standards through close collaboration with the CAFB Wing Cybersecurity Office and the management of DODIN waivers. The scope of work requires the application of DoD security compliance frameworks and Air Force policies to deliver a validated Authority to Operate and approved DODIN waivers. This opportunity is categorized under NAICS code 541519 and is associated with the Department of Defense, with the place of performance located in Columbus, Mississippi.

FA3022 14 Cons Lgca

POSTED

DEADLINE

Cybersecurity and Continuity ComplianceThis subcontract, titled Cybersecurity and Continuity Compliance, supports prime contractors on U.S. Air Force avionics manufacturing projects. The primary objective is to implement cybersecurity frameworks within production environments and develop Continuity of Operations plans to mitigate supply chain disruptions. The project is managed under the Department of Defense, specifically the FA8539 Afsc Pzaba agency. Key requirements include adherence to NIST SP 800-171 or CMMC compliance standards. The successful provider will be responsible for delivering comprehensive cybersecurity compliance reports and a detailed Continuity of Operations plan. The solicitation was posted on September 14, 2026, with a response deadline of October 14, 2026, falling under NAICS code 541519.

FA8539 Afsc Pzaba

POSTED

DEADLINE

Classified Processing Enclave & SCIF OperationsThis subcontract for the Space Development Agency focuses on the establishment and operation of Classified Processing Enclaves and SCIFs to support GaaS projects. The primary objective is to provide prime contractors with secure facilities and processing environments that utilize TEMPEST-shielded environments and physical or logical isolation hardware to ensure government data remains isolated from commercial traffic. A key deliverable is the provision of a certified secure facility specifically for classified downlinks. To be eligible, providers must maintain a Facility Clearance and adhere to strict security standards, including NIST SP 800-171 and CMMC Level 2. The opportunity was posted on September 14, 2026, with a response deadline of October 14, 2026. It falls under NAICS code 541519 and is managed by the Department of Defense.

FA2401 Space Development Agency Sda

POSTED

DEADLINE

24/7/365 Technical Support for Rockwell SystemsThis subcontract provides continuous system-level technical support for prime contractors working on US Navy NSWC Carderock Division projects in Bethesda. The scope of work includes 24/7/365 phone and live chat support, utilizing remote ticketing systems and Rockwell Automation knowledge bases to deliver technical troubleshooting and ticket resolution. Qualified providers must hold technical certification in Rockwell Automation systems to ensure the delivery of specialized support. This opportunity is categorized under NAICS code 541519 and is managed by the Department of Defense for the NSWC Carderock agency.

POSTED

DEADLINE

Rockwell Automation Software Support and License ManagementThis subcontract for the Department of Defense and NSWC Carderock focuses on the supply and management of software licenses for prime contractors. The scope of work includes providing Integrated Services Agreements at the Essential Level, managing software renewals and upgrades, and ensuring software compatibility for the ECCAHDISPE Pit certification. The successful provider must be an authorized Rockwell Automation partner or licensed reseller to deliver active licenses and documented upgrades. The project is based in Bethesda, Maryland, under NAICS code 541519. Interested parties must respond by September 21, 2026, following the posting date of September 14, 2026.

POSTED

DEADLINE

Comprehensive Engine Management System (CEMS) Reporting ServicesThe Comprehensive Engine Management System (CEMS) Reporting Services subcontract involves providing data entry and tracking for serially tracked assets related to Air Force F110 engine projects. The contractor is responsible for updating assets into the CEMS database using AF Form 1534 and approved spreadsheets, adhering to technical orders TO-00-25-254-1 and TO-00-25-254-2. Key deliverables include CEMS CDR Reports and updated asset tracking records. To perform these services, the contractor must maintain CEMS webpage access and ensure full CMMC compliance. This opportunity is managed by the Department of Defense through the Ok DLA Aviation office in Oklahoma City, with a response deadline of October 14, 2026. The work falls under NAICS code 541519.

Ok DLA Aviation At Oklahoma City

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS