Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Compliance Auditor

Active

State & Local

Response Deadline11/12/2026, 08:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity and Compliance Auditor subcontract involves performing critical security assessments and compliance validations for prime contractors working on Washington State Department of Health projects. The scope of work includes conducting penetration testing, managing vulnerabilities, and performing detailed audits to ensure adherence to SOC 2 Type II, HIPAA, ISO 27001, and NIST standards. Key deliverables for this engagement consist of comprehensive security audit reports, penetration test results, and formal compliance certifications. This opportunity is categorized under NAICS code 541690 and will be performed across multiple counties. Interested parties should note that the solicitation was posted on October 9, 2026, with a response deadline of November 12, 2026.

General Info

Cybersecurity auditor subcontract for Washington State Health projects focusing on compliance and penetration testing.

Agency

Washington → Department of Health

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Multiple Counties, WA, USA

Set-Aside

NONE

Documents

This scope was carved out of RFI-DOH27-02C.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

WSIIS Consumer Access Tool & Sch

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 9

subcontract

Response DeadlineNov 12

Submission deadline

Response Deadline

11/12/2026, 08:00:00 AM UTCin 14 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyWashington → Department of Health

ContactsNo contacts available

OfficeN/A

Organization / AgencyWashington → Department of Health

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments and compliance validation for prime contractors on Washington State Department of Health (DOH) projects. Conducts penetration testing, vulnerability management, and audits for SOC 2 Type II, HIPAA, ISO 27001, and NIST standards. Delivers security audit reports, penetration test results, and compliance certifications.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. This effort supports a project for the Inland Empire Utilities Agency focused on Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. Eligible entities include SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and DOT certified Disadvantaged Business Enterprises. Interested parties must respond by the deadline of November 17, 2026. Primary inquiries and submissions should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 2 hours ago

DEADLINE

National Security & Foreign Affairs Data ProviderThis subcontract opportunity with the Government of Canada seeks a National Security and Foreign Affairs Data Provider to supply intelligence-related information products and geopolitical data. The selected provider will support prime contractors on Public Services and Procurement Canada projects by delivering security risk assessments, geopolitical trend data, international relations information, and specialized security datasets. The contract requires the provider to be capable of entering into a Provider Master License Agreement. Interested parties must submit their responses by March 31, 2027, for work to be performed within Canada under NAICS code 541690.

Government of Canada / Gouvernement du Canada

POSTED

about 10 hours ago

DEADLINE

Cybersecurity Compliance & Risk Assessment ConsultantThis subcontract opportunity is for a Cybersecurity Compliance and Risk Assessment Consultant to support prime contractors on U.S. Air Force R&D projects. The selected provider will perform security risk assessments, verify compliance with 24 NIST SP 800-172 requirements, develop OCI mitigation plans, and prepare projects for DCMA and DIBAC assessments. Key deliverables include compliance affirmation reports and detailed risk assessment documentation produced through the use of cybersecurity auditing tools and NIST frameworks. The contract is a total small business set-aside under NAICS code 541690, specifically targeting firms with fewer than 500 employees. Qualified candidates must hold CMMC Level 2 and NIST SP 800-171/172 certifications. The response deadline for this requirement is November 25, 2026.

POSTED

about 12 hours ago

DEADLINE

McMurdo Station Flight Support ServicesThe McMurdo Station Flight Support Services subcontract, managed by the NASA Shared Services Center, involves providing specialized on-site technical personnel to support prime contractors on NASA Goddard Space Flight Center balloon mission projects in Antarctica. The scope of work includes performing compatibility testing, the physical commissioning of gondola systems, and providing critical launch support within a polar environment. The primary objective is to deliver technical expertise and the final launch readiness sign-off to ensure mission success. Due to the extreme nature of the work location, all assigned personnel are required to successfully pass rigorous medical and psychological screenings necessary for Antarctic travel. This opportunity is categorized under NAICS code 541690 and requires a response by November 2, 2026.

NASA Shared Services Center

POSTED

about 12 hours ago

DEADLINE

Specialized Technical ConsultantThis subcontract opportunity is for a Specialized Technical Consultant to provide subject matter expertise to prime contractors supporting Department of Defense 2027 SBIR/STTR Phase I projects for the U.S. Air Force. The selected consultant will be responsible for performing specialized analysis, designing methodologies, and assisting in the development of Phase I approaches and objectives. Key deliverables include technical specifications, validated methodologies, and expert reports. The opportunity is a total small business set-aside under NAICS code 541690, requiring firms to have fewer than 500 employees to meet SBIR/STTR mandates. The solicitation was posted on October 28, 2026, with a response deadline of November 25, 2026, at 5:00 PM.

POSTED

about 12 hours ago

DEADLINE

TEMPEST and Protected Distribution Systems (PDS) AuditorThis subcontract opportunity with NIWC Atlantic involves providing specialized security testing and inspections for prime contractors to prevent electromagnetic emanations. The selected provider will be responsible for conducting TEMPEST testing, surveys, and Protected Distribution Systems (PDS) inspections and certifications. These tasks require the use of TEMPEST-specific measurement equipment and the delivery of formal PDS Certification Reports and TEMPEST Survey Results. Qualified candidates must possess a Secret or Top Secret security clearance and demonstrate technical proficiency with IA PUB-5239-22 and CNSSI 7003 standards. The work is located in Hanahan and falls under NAICS code 541690. Interested parties must respond by November 4, 2026.

POSTED

about 12 hours ago

DEADLINE

Cybersecurity Validation for Signal RoutingThis small business set-aside subcontract for the U.S. Navy focuses on cybersecurity validation for signal routing within shipboard signal projects. The selected contractor will perform security analysis and vulnerability testing on IOU architectures, specifically conducting threat modeling for Navigation and HM&E signal paths. A primary objective is to execute red-team analysis on routing logic to protect against signal injection, culminating in the delivery of a comprehensive mitigation plan and a Security Assessment Report. To be eligible, contractors must maintain CMMC compliance and demonstrate a strong working knowledge of Department of Defense cybersecurity frameworks. This opportunity is designated as a total small business set-aside under NAICS code 541690. Interested parties must submit their responses by November 25, 2026.

POSTED

about 12 hours ago

DEADLINE

Life Safety and Force Protection ConsultantThe Life Safety and Force Protection Consultant subcontract, issued by the Department of Justice Office Acquisition Management, focuses on ensuring DEA facility projects comply with antiterrorism standards and life safety codes. The selected consultant will be responsible for inspecting physical safety measures, force protection components, and life safety systems, ultimately delivering detailed force protection assessment reports and fire safety work sheets based on federal standards. This opportunity is a total Small Business Set Aside under NAICS code 541690, with performance located in Fort Worth. Due to the sensitive nature of DEA facilities, the contractor must be able to pass high-level background checks. Interested parties must respond by November 30, 2026.

Office Acquisition Management

POSTED

about 12 hours ago

DEADLINE

in about 1 month

ATT 1 Senior _Advisor_2026_Statement of Work - Biological therapeutics EOC Support- 7571PS27Q00017

Solicitation # 7571PS27Q00017

Solicitation 7571PS27Q00017 is a request for quotes for two executive-level Senior Advisor Consultants to provide Subject Matter Expert services for the NINDS BPN-Biologics program External Oversight Committee. The selected contractors will provide strategic guidance, technical feedback on drug discovery and development projects within the biological therapeutics portfolio, and mentorship to NIH program leadership. This is a small business set-aside acquisition under NAICS code 541690, utilizing a Firm Fixed Price purchase order. The period of performance consists of a one-year base period from November 5, 2026, to November 4, 2027, with two subsequent one-year options, for a total potential duration of three years. The government anticipates approximately 50 labor hours per year per consultant, with an option for an additional 50 hours. Reimbursement for annual travel-related expenses is capped at 2,000 dollars per consultant, subject to government approval. Evaluation is based on best value, with technical qualifications—specifically professional experience in pharmaceutical development and pain expertise—weighted as significantly more important than price and past performance. Proposed key personnel must be employees of the quoter by the start of the contract and are subject to salary rate limitations based on the Executive Schedule, Level II. Submissions must include a price template, a technical narrative, resumes, letters of commitment, and up to two relevant past performance references.

Omas Strategic Buying Center - Professional Services

POSTED

about 12 hours ago

DEADLINE

2 Senior Advisors Services for the NINDS Blueprint Neurotherapeutic Network for Small Molecules External Oversight Committee (EOC) Subject Matter Expert (SME) Services

Solicitation # 7571PS27Q00021

Solicitation 7571PS27Q00021 is a small business set-aside for the National Institute of Neurological Disorders and Stroke to procure two executive-level Senior Advisors to serve as Subject Matter Experts for the Blueprint Neurotherapeutics Network External Oversight Committee. These advisors, who must hold a PhD or MD in Pharmacology, Organic Chemistry, or a related drug development discipline, will provide strategic guidance and technical feedback on drug discovery and development projects within the BPN portfolio. The scope of work includes reviewing program operations, recommending pharmacology-related trial advancements, and participating in monthly virtual meetings and one annual face-to-face meeting at the NIH campus in Bethesda, Maryland. The contract is a Firm-Fixed Price purchase order with a base period from November 5, 2026, to November 4, 2027, and two subsequent one-year option periods. The government anticipates a requirement of 50 labor hours per year per advisor, with an option for an additional 50 hours and annual travel reimbursement up to 2,000 dollars per consultant. Award will be based on best value, with technical personnel qualifications weighted most heavily, followed by price reasonableness and past performance. Proposals are limited to ten pages and must include a completed pricing template, key personnel resumes, and a narrative demonstrating how the proposed experts meet the specific technical requirements.

Omas Strategic Buying Center - Professional Services

POSTED

about 12 hours ago

DEADLINE

CDC Technical Assistance and Capacity Building for Nutrition, Physical Activity, and Obesity Prevention Strategies

Solicitation # CDC_DNPAO_Technical_Assistance

The Centers for Disease Control and Prevention (CDC), specifically the Division of Nutrition, Physical Activity, and Obesity (DNPAO), is conducting market research to identify qualified parties for a contract providing technical, professional, and scientific subject matter expertise. The scope of work focuses on five priority strategies: physical activity accessibility, healthy food choices, breastfeeding support, obesity prevention in early care and education, and family healthy weight programs. Services include coaching, mentoring, workshops, and the development of tools to enhance public health efforts at national, state, and local levels. The government is evaluating potential market capacity to provide these services under a performance-based acquisition contract, with possible NAICS codes 541690 and 541611. The anticipated period of performance runs from September 15, 2027, to September 14, 2030, consisting of a base year and two option years. Performance will primarily occur onsite at CDC facilities in Atlanta, Georgia, or remotely if space is unavailable. Key requirements include strict adherence to Section 508 accessibility standards, the Plain Writing Act, and the protection of Controlled Unclassified Information (CUI). Notably, the use of non-CDC AI technology to process or store CDC data is prohibited. The contract will be managed via a performance-based payment system, with strict quality standards requiring 98 percent data accuracy and 95 percent on-time delivery of products. Interested parties must submit a capability statement of no more than three pages to Ann Bonis by November 10, 2026.

CDC Office Of Acquisition Services

POSTED

about 12 hours ago

DEADLINE

CDC Advancing Nutrition, Physical Activity, and Obesity and Chronic Disease Prevention through Epidemiology, Surveillance and Data Modernization

Solicitation # CDC_DNPAO_Epi_Surveillance

The Centers for Disease Control and Prevention Office of Acquisition Services is conducting market research to identify qualified parties capable of providing technical, professional, and scientific subject matter expertise to the Division of Nutrition, Physical Activity, and Obesity. The primary objective of this effort is to advance nutrition, physical activity, and obesity and chronic disease prevention through epidemiology, surveillance, and data modernization. Key tasks include analyzing publicly available data for State Report Cards on Support for Walking, Bicycling, and Active Kids and Communities, as well as facilitating collaborations for the Active People, Healthy Nation network. The government is seeking vendors who can implement a performance-based service acquisition contract with a strong project management plan focusing on cost containment, risk mitigation, and the retention of key personnel. The anticipated period of performance consists of a base year starting September 15, 2027, with two subsequent one-year option periods. Work will primarily be performed onsite at CDC facilities in Atlanta, Georgia, or remotely if space is unavailable. Interested organizations must submit a response of no more than three pages by November 10, 2026, including tailored capability statements and answers to specific government questions. Potential contractors must demonstrate the ability to comply with strict Section 508 accessibility standards, NIST SP 800-53 security deficiencies, and CDC guidelines regarding the use of generative artificial intelligence. The requirement may be set aside for small businesses under NAICS codes 541690 or 541611, or procured through full and open competition.

CDC Office Of Acquisition Services

POSTED

about 12 hours ago

DEADLINE

More opportunities from Washington → Department of Health

Same awarding agency

Reporting & Analytics DeveloperThis subcontract opportunity is for a Reporting and Analytics Developer to support prime contractors on projects for the Washington State Department of Health. The selected developer will be responsible for building reporting engines and a comprehensive suite of operational and compliance dashboards. Key deliverables include the creation of data tools for tracking outbreaks, monitoring student compliance and at-risk students, and generating data quality reports aligned with public health reporting standards. The project falls under NAICS code 541511 and will be performed across multiple counties. Interested parties should note that the solicitation was posted on October 9, 2026, with a response deadline of November 12, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

School Information System (SIS) IntegrationThis subcontract opportunity with the Washington State Department of Health focuses on the integration of immunization tools with district School Information Systems. The selected contractor will be responsible for developing critical interfaces to facilitate student roster exchanges, enrollment updates, and the reporting of compliance statuses. A primary requirement of the project is ensuring strict adherence to FERPA regulations to protect student data privacy. The project is categorized under NAICS code 541512 and will be performed across multiple counties. Interested parties must submit their responses by November 12, 2026, to provide the functional SIS integration interfaces required for these public health initiatives.

Computer Systems Design Services

POSTED

DEADLINE

AI/ML Patient Matching SpecialistThis subcontract opportunity for an AI/ML Patient Matching Specialist supports prime contractors working on projects for the Washington State Department of Health. The primary objective is the development of advanced patient identification algorithms and the design and tuning of machine learning models. These efforts aim to reduce duplicate records across disparate data sources while ensuring strict adherence to NIST security frameworks. The selected provider will be responsible for delivering a fully integrated patient matching module and algorithm. Performance will take place across multiple counties. Interested parties should note the posting date of October 9, 2026, with a response deadline set for November 12, 2026.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Data Migration & Registry ManagementThis subcontract for the Washington State Department of Health focuses on Data Migration and Registry Management. The selected provider will perform extraction, transformation, and loading of immunization data to support prime contractors, specifically migrating data from existing registries into new systems and managing overall registry integration. The primary deliverables for this engagement include a fully migrated dataset and a comprehensive data migration methodology report. Due to the nature of the work involving protected health information, the contractor must maintain HIPAA certification. The project is categorized under NAICS code 541511 and will be performed across multiple counties. Interested parties must submit their responses by November 12, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Health Data Interoperability & API IntegrationThe Health Data Interoperability and API Integration subcontract involves performing technical integration between various health tools and the WSIIS registry for prime contractors working on Washington State Department of Health projects. The primary objective is the development of API data pipelines that utilize HL7 and FHIR standards to ensure secure bidirectional data exchange, rigorous validation, and effective error handling. Strict adherence to HIPAA compliance is required for all work performed. The successful contractor will be responsible for delivering fully functional API data pipelines along with comprehensive interoperability documentation. This opportunity is categorized under NAICS code 541512 and covers performance across multiple counties.

Computer Systems Design Services

POSTED

DEADLINE

Mobile Application Development (Patient/Consumer Portal)This subcontract involves the development and implementation of a mobile application portal for prime contractors supporting Washington State Department of Health immunization projects. The scope of work encompasses comprehensive UI/UX design, front-end mobile development, and the integration of backend APIs to deliver a fully functional and deployed portal. A critical requirement of the project is ensuring that the application meets strict accessibility conformance standards to accommodate a user base of over four million people. The project is categorized under NAICS code 541511 and will be performed across multiple counties. Interested parties should note that the solicitation was posted on October 9, 2026, with a response deadline set for November 12, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

WSIIS Consumer Access Tool & Sch

Solicitation # RFI-DOH27-02C

The Washington State Department of Health is issuing Request for Information RFI-DOH27-02C to identify qualified vendors capable of providing a Washington State Immunization Information System Consumer Access Tool and a School Immunization Management Solution. The objective is to enhance public access to immunization records and streamline compliance management for schools and childcare providers. The required solution must be capable of supporting at least 4 million users and provide extensive reporting and dashboard capabilities, including student compliance, exemptions, and outbreak tracking. Technical requirements emphasize health-data interoperability through HL7 and FHIR standards, as well as strict adherence to security frameworks including HIPAA, FERPA, NIST, SOC 2 Type II, and ISO 27001. This RFI is for informational and planning purposes, and no contract will be awarded as a direct result of this effort. Vendors must submit their responses by November 12, 2026, via the Washington Electronic Business Solution portal. Submissions must utilize the provided Technical Response Form to categorize capabilities as Meets, Configurable, Customization Required, Planned, or Does Not Meet. The Department of Health is seeking detailed information on pricing models for both off-the-shelf and custom-built solutions, including implementation, data migration, and ongoing maintenance costs. Additionally, vendors must describe their support models, service level agreements for Severity 1-3 issues, and identity management integrations such as Azure/Entra ID and SSO.

Computer Systems Design Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS