Top

Cybersecurity and Data Access Compliance Monitoring

Active

Federal

Response Deadline07/29/2026, 03:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Transportation → Department Of Commerce SspoView Agency

NAICS

541920View NAICS

Place of Performance

Washington, DC, 20230, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 14

subcontract

Response DeadlineJul 29

Submission deadline

Response Deadline

07/29/2026, 03:00:00 PM UTCin 2 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Transportation → Department Of Commerce Sspo

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Transportation → Department Of Commerce Sspo

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Monitor and audit access to the commercial data platform to ensure compliance with FISMA, NIST, and federal cybersecurity standards.

Similar Contracts

Same NAICS industry code

NAICS: 541920

New

Federal

Cybersecurity & CUI Compliance SupportThe contract requires support for ensuring all program data, student projects, and communications adhere to Controlled Unclassified Information standards and Department of Defense cybersecurity policies. This subcontract, solicited under NAICS code 541920, is tied to the Naval Supply Systems Command Fleet Logistics Center Norfolk and will be performed at a location in Annapolis with a ZIP code of 21402. The work is focused on maintaining compliance with federal cybersecurity requirements to protect sensitive but unclassified information within educational and operational environments under DoD oversight. The response deadline is July 29, 2026, at 2:00 PM, with the solicitation posted on July 24, 2026. The contract is classified as a subcontract and does not specify a set-aside type or point of contact. The performance location and compliance requirements indicate that the effort supports a DoD-affiliated academic or training program, necessitating rigorous implementation of cybersecurity controls and information handling procedures consistent with CUI guidelines and DoD mandates.

Navsup Flt Logistics Ctr Norfolk

POSTED

DEADLINE

Herbicide Application ServicesThe contract encompasses full-service herbicide application across approximately 240 acres at Noxubee National Wildlife Refuge, requiring comprehensive execution of all associated tasks including labor, specialized equipment, transportation, and adherence to federal, state, and local environmental regulations. The scope demands professional compliance with all applicable laws governing pesticide use and habitat protection, ensuring the safe and effective management of invasive vegetation while safeguarding native ecosystems and wildlife. All work must be performed with strict attention to environmental stewardship and regulatory mandates. This is a subcontract under a Total Small Business Set-Aside, exclusively available to small businesses as defined by the SBA, and falls under NAICS code 541920 for other scientific and technical consulting services. The opportunity was posted on July 23, 2026, with responses due by July 28, 2026, and is managed by the FWS Sat Team 3 under the Department of the Interior. The place of performance is at Noxubee NWR, though specific location details are not provided, and the contract is accessible via the SAM.gov platform for qualified small businesses seeking to bid.

POSTED

DEADLINE

Cybersecurity and CUI Compliance SupportThe contract titled Cybersecurity and CUI Compliance Support requires the provision of comprehensive cybersecurity services to safeguard LEOSA data in alignment with Department of Defense Controlled Unclassified Information requirements. This includes continuous monitoring, proactive incident response planning, and regular compliance auditing to ensure adherence to federal security standards, with specific emphasis on implementing robust encryption protocols and strict access controls. The work is critical to maintaining the integrity and confidentiality of sensitive information handled under DoD guidelines. This subcontract is categorized under NAICS code 541920 and is associated with the agency FA8052 773 Ess within the Department of Defense. The place of performance is designated as DWG with a zip code of 78236, indicating the primary operational location. The solicitation was posted on July 22, 2026, with responses due by July 29, 2026, at 9:00 PM, leaving a limited window for qualification and submission. No set-aside type or point of contact information is specified, and bidders must ensure full compliance with all cybersecurity and data protection obligations outlined in the scope.

POSTED

DEADLINE

Cyber Incident Response & Forensic SupportThe contract entails providing specialized cyber incident response and forensic support services to address cybersecurity threats impacting Department of Defense systems. Services include preserving system images, conducting in-depth malware analysis, and delivering comprehensive findings to the DoD Cyber Crime Center under strict timelines to ensure timely threat mitigation and compliance with federal cybersecurity protocols. The work is performed as a subcontract under the Defense Logistics Agency, which operates under the broader Department of Defense structure, and is classified under NAICS code 541920 for other scientific and technical consulting services. The performance location and specific point of contact are not detailed, but the activity is tied to the DIBBS contract tracking system with the referenced award numbers, indicating official DoD procurement lineage and oversight.

Defense Logistics Agency

POSTED

DEADLINE

Cyber Incident Reporting and Response SupportThe contract, titled Cyber Incident Reporting and Response Support, is a subcontract under the Department of Defense managed by the Defense Logistics Agency, focused on continuous monitoring for cyber incidents and timely reporting through DIBNET within 72 hours of detection. It requires the contractor to coordinate closely with DoD entities to conduct forensic analysis and implement mitigation measures in response to identified cyber threats. The work is governed under NAICS code 541920, indicating it involves other scientific and technical consulting services, and is intended to support the broader cybersecurity posture of defense systems. The contract was posted on July 21, 2026, and the performance location and point of contact details are not specified, emphasizing the operational nature of the support as being integrated within existing DoD infrastructure and protocols.

Defense Logistics Agency

POSTED

DEADLINE

Information Security and Compliance SupportThe contract titled Information Security and Compliance Support entails ongoing services to maintain and enhance system security through vulnerability assessments, managed access control, comprehensive audit logging, and continuous adherence to federal and state regulatory requirements. Key compliance frameworks include HIPAA for health data protection, NIST standards for cybersecurity best practices, and applicable state data privacy laws, ensuring the safeguarding of sensitive information across all operational environments. The work is structured as a subcontract under NAICS code 541920, assigned by the Michigan Department of Technology, Management and Budget, with performance expected to align with the agency’s broader security and regulatory obligations. Responses to this solicitation are due by August 3, 2026, with the opportunity posted on July 17, 2026, and no set-aside provisions identified. While no specific point of contact or physical performance location is provided, the work is intended to support Michigan’s state agency systems, requiring contractors to demonstrate proven expertise in enterprise security operations and regulatory compliance. All parties must ensure their services are delivered in accordance with current legal and technical standards, with ongoing accountability for system integrity and data protection across the state’s digital infrastructure.

POSTED

DEADLINE

Sensitive Security Information (SSI) Handling and ProtectionThe contract requires the implementation of comprehensive procedures for handling Sensitive Security Information (SSI) in strict compliance with 49 CFR Part 15 and Part 1520, focusing on safeguarding information critical to transit security. This includes establishing robust access controls to ensure only authorized personnel can view or handle SSI, conducting mandatory staff training on SSI protocols, and deploying secure methods for data transmission to prevent unauthorized disclosure or interception. All practices must align with federal regulations governing the protection of sensitive security data within the transportation sector. The contract is structured as a subcontract under NAICS code 541920, issued by the City of Madison in Wisconsin, with a response deadline of August 17, 2026. While specific performance location and point of contact details are not provided, the work is intended to support transit security operations and demands strict adherence to federal SSI safeguards. Suppliers must demonstrate proven expertise in implementing security information management systems that meet or exceed the requirements outlined in the referenced Code of Federal Regulations, ensuring continuous compliance and operational readiness for safeguarding critical infrastructure information.

POSTED

DEADLINE

Technical Writing & Documentation ServicesThe contract titled Technical Writing & Documentation Services is a small business set-aside opportunity under the NAICS code 541920, designated as a Total Small Business Set-Aside, meaning only small businesses are eligible to compete. It is issued by the Department of Defense through the DOD Education Activity and requires the development of comprehensive technical documentation including policies, procedures, operational guides, architecture diagrams, and other supporting materials for IT systems and services. The solicitation was posted on July 15, 2026, with a response deadline of July 30, 2026, at 6:00 PM, and performance will be based in Alexandria. The contract is structured as a subcontract, indicating it is part of a larger prime contract effort. While no specific point of contact or detailed address is provided, interested parties must submit proposals through the federal procurement portal linked in the posting.

DOD Education Activity

POSTED

DEADLINE

24x7 Security Operations Center (SOC) ServicesThe contract seeks a qualified small business to provide continuous 24x7 Security Operations Center services for the Department of Defense Education Activity’s global IT infrastructure, encompassing cybersecurity monitoring, incident response, threat hunting, and vulnerability management. The work is intended to ensure robust protection and rapid mitigation of cyber threats across DoDEA’s widely distributed network environment, requiring round-the-clock operational readiness and advanced technical capabilities to detect, analyze, and neutralize emerging risks in real time. This is a total small business set-aside under SBA guidelines with a NAICS code of 541920, indicating the scope aligns with computer services and cybersecurity support functions. The solicitation was posted on July 15, 2026, with proposals due by July 30, 2026, and the place of performance is centered in Alexandria, though services must be delivered globally to support DoDEA’s international operations. The contract is structured as a subcontract, emphasizing integration into a broader defense IT security framework, and requires contractors to meet stringent requirements for situational awareness, proactive threat identification, and coordinated response protocols across all network domains.

DOD Education Activity

POSTED

DEADLINE

Cybersecurity and Insider Threat Program (ITP) Development

Defense Ci And Security Agency

POSTED

DEADLINE

Cybersecurity Plan Development and ImplementationThe contract requires the development and implementation of a comprehensive cybersecurity plan focused on securing AI models, associated data, and underlying network infrastructure, with a primary emphasis on software supply chain security and cryptographic integrity. The plan must ensure end-to-end protection throughout the lifecycle of AI systems, including mitigation of risks from third-party components, validation of code provenance, and enforcement of robust cryptographic standards to preserve data confidentiality, authenticity, and integrity. The work must align with federal cybersecurity guidelines and be designed for scalable, continuous maintenance and adaptation to emerging threats. This is a subcontract under the National Telecommunications and Information Administration within the Department of Commerce, classified under NAICS code 541920, with a response deadline of September 9, 2026. The project demands technical expertise in AI security, cryptographic protocols, and supply chain risk management, and successful execution will require close coordination with stakeholders to integrate security controls into existing systems without compromising performance or usability. Performance location details are unspecified, but the scope implies national-level involvement and potential collaboration with federal entities beyond the primary agency.

National Telecommunications And Information Admini

POSTED

DEADLINE

Cybersecurity and Compliance ImplementationThe contract requires the implementation and thorough documentation of a comprehensive set of security controls to safeguard sensitive data and ensure regulatory compliance. Key measures include deploying two-factor authentication across systems, establishing encrypted communications channels, enforcing robust anti-malware policies, and separating service accounts to minimize risk exposure. The contractor must align all security practices with the stringent requirements of PCI DSS, HIPAA, and CJIS, ensuring that infrastructure handling financial, healthcare, and law enforcement data meets or exceeds federal standards. Additionally, the contractor is responsible for providing full support during SOC 2 and SOC 3 audits, including preparing documentation, facilitating assessments, and addressing findings to maintain ongoing compliance validation. The project is classified as a subcontract under NAICS code 541920 and is managed by the California Public Works Department. While no specific location or point of contact is provided, the work must be performed in alignment with the department’s operational and compliance obligations. The solicitation was posted on July 13, 2026, with a firm deadline for responses on July 27, 2026. Interested parties must submit their proposals to the linked procurement portal before the deadline, ensuring all technical and compliance deliverables are clearly outlined and feasible within the scope of the contract.

Public Works Department

POSTED

14 days ago

DEADLINE

in about 3 hours

View Details

More opportunities from Department Of Transportation → Department Of Commerce Sspo

Same awarding agency

NAICS: 518210

New

Federal

Subscription Access and User ManagementThe contract establishes a subscription-based service to manage enterprise-wide access to the CRU Asset Platform for all ITA employees, guaranteeing unlimited, device-agnostic, and around-the-clock availability through a cloud-based interface. This ensures seamless and secure user access regardless of location or device type, supporting continuous operational needs across the organization. The service is designed to handle user provisioning, authentication, and access control at scale, with full responsibility for maintaining system availability, performance, and compliance with enterprise security standards. The contract is classified as a subcontract under NAICS code 518210, reflecting its focus on data processing, hosting, and related services. It was posted on July 23, 2026, with a response deadline of August 3, 2026, and is managed by the Department of Commerce through its SSPO office. While detailed performance locations and point of contact information are not provided, the scope emphasizes centralized, cloud-delivered user management with no geographic restrictions. The solution must support a fully scalable, secure, and resilient platform accessible to all authorized personnel at any time, with no limitations on concurrent usage or device configuration.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Data Export and Integration SupportThe contract seeks to establish seamless data export capabilities from the CRU Asset Platform directly to Excel and PowerBI, ensuring accurate formatting, proper metadata tagging, and full compatibility across target systems. The work requires rigorous testing to confirm that exported datasets retain integrity, structure, and functional usability in both platforms, with attention to user experience and data fidelity. The contractor must deliver a robust solution that supports routine reporting and analytics without manual intervention or data loss. This subcontract under NAICS code 541512 is issued by the Department of Commerce, with responses due by August 3, 2026. The opportunity is open without set-aside designation, and performance is not restricted to a specific geographic location. The posting was made on July 23, 2026, and interested parties are expected to submit proposals that demonstrate technical proficiency in data integration, platform compatibility, and automated export workflows. All deliverables must align with federal data standards and ensure the exported information remains actionable for downstream analytical purposes.

Computer Systems Design Services

POSTED

DEADLINE

Help Desk and Data Quality SupportThe contract seeks a subcontractor to operate a help desk dedicated to supporting ITA users of the CRU Asset Platform, with primary responsibilities including troubleshooting access problems and resolving erroneous data entries. All issues must be addressed and corrected within two business days of identification to ensure minimal disruption to user operations. The work falls under NAICS code 541512, indicating it is classified as computer systems design and related services. This subcontract is posted by the Department of Commerce through its SSPO office and has a response deadline of August 3, 2026, with submissions required by 6:00 PM Eastern Time. The solicitation does not specify a set-aside type or a designated point of contact, and the place of performance details remain unspecified, suggesting the work may be performed remotely or at a location to be determined by the contractor. The opportunity is accessible via the SAM.gov portal for potential applicants to review and respond prior to the deadline.

Computer Systems Design Services

POSTED

DEADLINE

Data Analytics and Interpretation SupportThe contract seeks expert-level analytical support to interpret plant-level data on steel, aluminum, and copper production, focusing on cost drivers, energy consumption, and emissions to enable detailed cross-country and cross-plant comparisons. The work demands advanced data analysis capabilities to uncover trends, identify efficiency gaps, and provide actionable insights that inform strategic decision-making across global manufacturing operations. The opportunity is posted as a subcontract under NAICS code 541611, with a response deadline of August 3, 2026, and is managed by the Department of Commerce through its SSSPO office. Performance location details are unspecified, and no set-aside provisions are indicated. Interested parties must submit proposals before the stated deadline to be considered for this engagement, which requires deep domain expertise in industrial materials analytics and the ability to translate complex datasets into clear, comparative findings.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Notice of Intent to Sole Source - Global Steel and Aluminum Monitoring ServicesThe U.S. Department of Commerce, through the International Trade Administration, is pursuing a sole-source acquisition to subscribe to the CRU Asset Platform, a specialized digital service providing comprehensive, plant-level data on global steel, aluminum, and copper production. This subscription is essential to support U.S. industrial policy and trade enforcement by enabling detailed analysis of international cost structures, capacity utilization, energy consumption, labor expenditures, and emissions across global facilities—particularly in China and Russia—where such data is otherwise inaccessible or unreliable. The platform will deliver real-time, quarterly-updated information on production volumes, facility specifications, ownership, and operating metrics, allowing for like-for-like comparisons between foreign assets and U.S. counterparts to assess import penetration, overcapacity, and unfair trade practices. All data will be accessible 24/7 via a web-based interface with no software downloads required, supporting unlimited enterprise-wide use by ITA staff and enabling export to Excel and PowerBI for further analysis. The contract will run for a one-year base period from September 1, 2026, through August 30, 2027, and is justified as non-competitive due to the unique and unmatched scope of standardized, globally consistent data available only through CRU, as endorsed by industry associations including AISI, OECD, and IAI. Performance obligations center on continuous, uninterrupted platform availability, data accuracy, and rapid correction of errors within two business days, along with access to expert analysts for interpretation and comparative insights. The vendor must also facilitate internal use of data by ITA and permit external sharing of aggregated outputs only with prior approval. No pricing details are disclosed in the solicitation, and no line-item structures, payment terms, or financial codes are provided, indicating this is a single, subscription-based procurement with costs subject to post-award negotiation. The place of performance is entirely digital, with no physical delivery or packaging requirements, and the sole point of contact for vendor inquiries is CRU’s Business Development Manager in Pittsburgh, while no government COR, COTR, or PCO is designated in publicly available documentation.

Web Search Portals and All Other Information Services

POSTED

DEADLINE

Ongoing Technical Support and MaintenanceThe contract titled Ongoing Technical Support and Maintenance outlines a subcontract for continuous 24/7 technical support, maintenance, repair, and user assistance related to voice and internet systems. Services include immediate incident response, proactive uptime monitoring, and comprehensive system management to ensure operational continuity and performance reliability. The work is performance-based and required to be delivered at the place of performance in Anchorage, Alaska, with a ZIP code of 99501. The contract falls under NAICS code 541512, which classifies it as Computer Systems Design and Related Services, and is administered by the Department of Transportation under the Department of Commerce Sspo. Solicitations are open for response until August 4, 2026, at 3:00 PM, with the opportunity posted on July 22, 2026. No set-aside designation is specified, and the agreement is structured as a subcontract, implying the winning vendor will provide support services under an existing prime contract or broader federal initiative.

Computer Systems Design Services

POSTED

DEADLINE

Telecommunications Installation and CablingThe contract entails the full installation, activation, and testing of voice and data cabling infrastructure at the Anchorage Field Office, specifically focusing on structured cabling systems and comprehensive system commissioning to ensure operational readiness. All work must be performed in accordance with industry standards and completed to support reliable telecommunications services, including both network and communication pathways within the facility. The place of performance is clearly designated as Anchorage, Alaska, with a zip code of 99501, and the project falls under the NAICS code 238220 for telecommunications installation. This is a subcontract opportunity posted by the Department of Commerce SSSPO but associated with the Department of Transportation, indicating a multi-agency coordination structure. The solicitation was made public on July 22, 2026, with proposals due by August 4, 2026, at 3:00 PM. Interested parties must submit responses by the deadline to be considered for award, and while no specific set-aside type is detailed, the classification as a subcontract suggests eligibility requirements may be governed by the prime contractor’s procurement policies. The task requires technical expertise in structured cabling, system integration, and testing standards to deliver a fully functional, code-compliant infrastructure without disruption to existing operations.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

Business Voice Line and Fax ServiceThe contract is for the provision of a single commercial business voice line with integrated local and long-distance calling and fax transmission services, specifically tailored for a federal field office located in Anchorage, Alaska, with a zip code of 99501. The service is classified under NAICS code 517111, indicating it falls within the telecommunications sector, and is structured as a subcontract with no set-aside designation. The solicitation was posted on July 22, 2026, with a response deadline of August 4, 2026, at 3:00 PM Eastern Time, allowing potential vendors a limited window to submit proposals. The contracting entity is the Department of Commerce Sspo, while the performing agency is the Department of Transportation, indicating a cross-agency coordination for service delivery. The place of performance is confirmed in Anchorage, and the contract is accessible via the SAM.gov platform for further details and submissions.

Wired Telecommunications Carriers

POSTED

DEADLINE

Dedicated Internet Circuit ProvisionThe contract seeks the supply and ongoing provision of a dedicated 10 Mbps commercial internet circuit to support the Economic Development Administration’s Anchorage Field Office, specifically for email and standard business operations. The service must be reliably maintained to ensure uninterrupted connectivity essential for daily administrative functions. Performance is required at the Anchorage location with a ZIP code of 99501, and the work is classified under NAICS code 518210, indicating it pertains to data processing, hosting, and related services. This is a subcontract opportunity issued by the Department of Commerce Sspo, though the agency organization listed is the Department of Transportation, reflecting a cross-agency operational structure. The solicitation was posted on July 22, 2026, and responses are due by August 4, 2026, at 3:00 PM. No set-aside designation or specific organization type requirement is indicated, meaning the opportunity is open to all eligible bidders. There are no details provided regarding point of contact or physical office address beyond the place of performance, and all communication and submissions must adhere to the specified deadline. The official portal for the opportunity is accessible via the provided SAM.gov link, where full terms and submission instructions can be obtained.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

NOTICE OF INTENT TO AWARD SOLE SOURCEThe Department of Commerce’s Economic Development Administration intends to award a sole source Firm-Fixed-Price commercial purchase order to GCI Communications Corp for telecommunications services at its Anchorage Field Office, Alaska, with a 12-month base period and four one-year option periods. The contract encompasses commercial telephone services, including local and long-distance calling and fax capability, along with a dedicated 10 Mbps internet circuit, full installation and activation of cabling, and ongoing 24/7 technical support. Services must operate within the constraints of the federally managed facility and support uninterrupted mission-critical communications for operations serving rural and remote Alaskan communities. The award is justified due to GCI’s exclusive access to the building’s telecommunications infrastructure and the absence of alternative providers capable of meeting the government’s requirements without unacceptable disruption. No competitive solicitation is being issued; instead, this notice serves to validate the sole source determination by inviting responsible commercial sources to submit a written capability statement within 15 days indicating their ability to meet the requirements, with no guarantee of competition or award. Contractual obligations include strict compliance with Department of Commerce cybersecurity policies, the Privacy Act, NIST SP 800-171, and Controlled Unclassified Information handling standards. Security training and incident reporting are mandatory, and all work must be performed at the Anchorage Field Office, with no FOB terms applicable given the service nature. The Government will inspect and accept services upon successful installation and testing at the destination. No pricing details, CLINs, payment offices, or invoicing instructions are disclosed, as this is a notice of intent rather than a solicitation. The contracting office is located in Washington, DC, with Alicia Brister as the primary point of contact. The NAICS code is 517111, and while no formal FAR clauses, evaluation factors, or attachment metadata are provided, the procurement hinges on infrastructure exclusivity and mission continuity, making GCI the only viable source under current conditions.

Wired Telecommunications Carriers

POSTED

DEADLINE

Commercial Data Licensing and Subscription Management

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Data Analytics and Trade Intelligence Reporting

Administrative Management and General Management Consulting Services

POSTED

13 days ago

DEADLINE

in 2 days

View Details