This Government Contract opportunity from Government of Canada was posted on June 1, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and Data Privacy Compliance Services

Closed

International

Submission Closed06/15/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541612

New

SLED

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider to deliver its Employee Assistance Program as part of its Total Rewards Package, designed to support employees and their families through confidential, 24/7 assessment, referral, and intervention services. The program offers comprehensive resources covering lifestyle and daily living needs, family support, crisis intervention, and financial and legal assistance, accessible both online and via phone. These services aim to enhance employee wellbeing, promote engagement, and reinforce the Port’s broader mission under its Century Agenda to become a highly effective public agency by retaining and attracting talented individuals essential to its operations. The solicitation, posted on July 31, 2026, is classified under NAICS code 541612 and is managed by the Port’s Human Resources department. Primary contact for the opportunity is Mazarine Ebengho Kyalumba, with Kecia Reichstein serving as Project Manager, and all communications should be directed through their provided contact information. The program is not tied to a specific solicitation number and remains in forecast status, indicating an upcoming procurement process to secure a qualified vendor capable of delivering high-quality, scalable EAP services aligned with the Port’s commitment to workforce support and organizational effectiveness.

POSTED

DEADLINE

Indigenous Nursing Recruitment and Retention Guide

Solicitation # 1000268997

Health Canada is seeking a contractor to develop an Indigenous Nursing Recruitment and Retention Guide that offers an Indigenous-led, distinctions-based approach to support employers, educational institutions, and health system administrators in improving the recruitment and retention of Indigenous nurses across Canada. The deliverable is a comprehensive guide designed to provide practical, actionable tools grounded in Indigenous perspectives, with the goal of enhancing the working lives of Indigenous nurses. The solicitation is open to competitive bids, with proposals due by 2:00 p.m. EST on August 20, 2026, and the contract is expected to begin immediately upon award, concluding on March 31, 2027. No security clearance is required, and no trade agreements or comprehensive land claims apply to this procurement. Only one contract will be awarded, and all inquiries must be directed exclusively to Contracting Authority Christian Bélanger or his designated replacement, Saynab Cabdulle. The project is tied to the National Capital Region of Canada as the place of performance, and the solicitation was posted on August 4, 2026, under solicitation number 1000268997.

POSTED

DEADLINE

156-27-033 Request for Information - Law Enforcement Promotional Process

Solicitation # RFI-125545

The Virginia State Police is seeking information from qualified organizations to evaluate and modernize its promotional process for sworn personnel, aiming to ensure fairness, transparency, consistency, and legal defensibility in advancement decisions. The intent is to strengthen the framework governing promotions to investigative, supervisory, and command roles by identifying candidates who demonstrate essential competencies including leadership, judgment, decision-making ability, and aptitude aligned with contemporary law enforcement standards. Vendors are expected to assess the current system and provide actionable recommendations for improvement, focusing on methods and tools that support equitable and merit-based progression. Responses to this Request for Information, designated as RFI-125545, must be submitted by August 17, 2026, and are directed to Nicole Gresham at the Virginia State Police. The solicitation is open to organizations capable of supporting a SLED agency with expertise in personnel evaluation and organizational development within law enforcement contexts. All proposed solutions should be grounded in best practices and designed to enhance the integrity of internal advancement systems without introducing bias or inconsistency. The response deadline and submission details are accessible through the provided online portal, and performance will be conducted in North Chesterfield, Virginia.

Virginia State Police

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2 Self-Assessment)The contract requires the performance and documentation of a CMMC Level 2 self-assessment to ensure compliance with DFARS cybersecurity standards for handling covered defense information. This subcontract is issued under the Department of Defense’s Fluid Handling Division and is tied to the NAICS code 541612, indicating it involves management, scientific, and technical consulting services related to cybersecurity. The work must be completed by the response deadline of August 14, 2026, and the performance location is designated as Fort Hood with ZIP code 76544. The objective is to validate that the contractor’s cybersecurity practices align with the CMMC Level 2 framework, specifically to safeguard sensitive defense data in accordance with federal requirements. All documentation generated from the self-assessment must be thorough, accurate, and ready for potential review by government authorities.

FLUID HANDLING DIVISION

POSTED

DEADLINE

Digital Forensics & Data Recovery ServicesThe contract seeks qualified providers to conduct forensic analysis of digital devices seized within correctional facilities operated by the Texas Department of Criminal Justice. Scope of work includes secure data extraction, preservation of digital evidence, maintenance of a strict chain of custody, and the delivery of comprehensive technical reports detailing findings. All services must adhere to accepted forensic standards to ensure evidentiary integrity and admissibility in legal proceedings. Work will be performed in direct support of internal investigations and enforcement actions within the state’s correctional system. The solicitation is structured as a subcontract under NAICS code 541612, which pertains to investigative services, and is open for responses until September 25, 2026. There is no set-aside classification specified, and performance is expected to occur across multiple correctional facilities under Texas jurisdiction. Interested parties must submit proposals through the designated Texas SmartBuy portal, ensuring compliance with all technical, procedural, and security requirements outlined by the agency. Timely and accurate delivery of forensic results is critical to support ongoing operational and legal needs within the department.

Texas Department of Criminal Justice

POSTED

DEADLINE

Human Resources Information System (HRIS)

Solicitation # PE-64458-NONST-2027-000000032

The City of Decatur, Georgia is soliciting proposals for a Human Resources Information System (HRIS) to be implemented across all city departments and employee groups, with sealed submissions due by 4:00 p.m. on September 3, 2026 at the City Manager’s Office located at 509 North McDonough Street. The solicitation, identified as PE-64458-NONST-2027-000000032, consists of two documents: the RFP itself and the City’s Standard Professional Services Agreement, both of which together form the complete solicitation. Proposals must be submitted in accordance with all stated conditions, and submission constitutes acceptance of those terms. The City retains the right to accept or reject any proposals, negotiate changes, and waive technicalities, with an award expected within 60 days of the proposal deadline. All submissions become public records under Georgia’s Open Records Act. The HRIS solution must support city-wide operations and meet requirements outlined in the Statement of Work, with the contract term specified therein. Proposals are to be submitted electronically or in person to the designated address, and the full proposal package is available free of charge at www.decaturga.com/requestforproposals. Primary contact for technical inquiries is David Junger, with additional support available from Santana Dawson, Compensation and Benefits Manager, via phone or email. All times referenced in the solicitation are local to Decatur, Georgia. The City emphasizes that this is a non-set-aside solicitation open to all qualified proposers, and no specific NAICS code is designated. Proposers should ensure full compliance with all submission guidelines and deadlines to be considered.

POSTED

DEADLINE

Privacy Act & Regulatory Compliance ManagementThe contract mandates strict adherence to U.S. Privacy Act, UK GDPR, and applicable local labor laws across all recruitment activities, ensuring that data handling protocols align with international privacy standards. It requires implementation of robust data protection measures, ongoing audit readiness, and mandatory compliance training for all personnel involved in hiring processes to mitigate legal and reputational risks. The work is structured as a subcontract under the NAICS code 541612, managed by the Department of Defense under the administrative office FA5587 48 Cons, with a response deadline of August 18, 2026, and a posting date of August 3, 2026. Place of performance and point of contact details are not specified, and no set-aside type is designated, leaving scope and location flexible subject to contractor capabilities and regulatory alignment.

FA5587 48 Cons (admin Only No Req)

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171) Assessment & DocumentationThe contract requires the performance of NIST SP 800-171 compliance assessments to ensure the proper protection of Controlled Unclassified Information in accordance with DFARS 252.240-7997 requirements. This includes developing and maintaining comprehensive system security plans and associated documentation that demonstrate adherence to federal cybersecurity standards for handling CUI. The work is focused on ensuring that all technical, administrative, and physical safeguards are properly implemented and documented to meet Defense Federal Acquisition Regulation Supplement mandates. Performance of this subcontract is designated for Tracy, California, with a zip code of 95304-5000, and the work falls under NAICS code 541612 for other scientific and technical consulting services. The solicitation was posted on August 2, 2026, with a response deadline of August 10, 2026, and is issued under the Department of Defense through its ASC SUPPLIER OPER OEM DIVISION. The contract is structured as a subcontract and does not specify a set-aside classification. All deliverables must align precisely with NIST guidelines and DFARS compliance obligations to safeguard sensitive unclassified information within the defense supply chain.

ASC SUPPLIER OPER OEM DIVISION

POSTED

DEADLINE

NIST SP 800-171 Cybersecurity Compliance AssessmentThe contract requires a comprehensive assessment of information systems to ensure compliance with NIST SP 800-171 standards for safeguarding covered defense information as stipulated by DFARS regulations. The work involves evaluating technical and procedural controls within information systems to confirm adherence to the specified cybersecurity framework, with the goal of protecting sensitive data associated with Department of Defense contracts. The assessment must be thorough, documenting findings and identifying gaps in current security practices against the required NIST controls. This subcontract is issued under the NAICS code 541612 and is performance-based, with the place of performance located in Cherry Point, North Carolina, 28533-5040. The solicitation was posted on August 2, 2026, and responses are due by August 13, 2026. The contract is managed through the Department of Defense, specifically under the LAND SUPPLIER OPNS ENGINES organization, and must be executed by a qualified vendor capable of delivering a detailed, audit-ready evaluation of cybersecurity postures aligned with federal defense requirements. All deliverables must meet strict compliance thresholds to ensure the integrity, confidentiality, and availability of covered defense information.

LAND SUPPLIER OPNS ENGINES

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and assessment of cybersecurity controls aligned with NIST SP 800-171 to safeguard Controlled Unclassified Information (CUI) throughout the performance of the subcontract. This effort is critical to ensuring compliance with federal standards for protecting sensitive data in environments handling Department of Defense information. The work must be executed at the designated place of performance in Fort Hood, Texas, with all cybersecurity measures rigorously evaluated to confirm adherence to the specified framework. This is a subcontract under the NAICS code 541612, with a response deadline of August 10, 2026, and was posted on August 2, 2026. The contracting entity, Medical Supply Chain FSH, operates under the Department of Defense, emphasizing the sensitivity of the CUI involved and the necessity of robust security protocols. Compliance is non-negotiable, and failure to meet NIST SP 800-171 requirements could result in contract termination or other penalties. The subcontractor must be prepared to document, test, and maintain continuous security controls throughout the contract lifecycle.

MEDICAL SUPPLY CHAIIN FSH

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171 Assessment & SPRS Reporting)The contract requires the performance of Cybersecurity Compliance assessments in accordance with NIST Special Publication 800-171 for systems that handle Controlled Unclassified Information. The primary objective is to evaluate the implementation of security controls and achieve a minimum assessment score of 110, ensuring compliance with federal cybersecurity standards. All assessment results must be formally submitted to the Supplier Performance Risk System, where they will be recorded and used to evaluate contractor security posture. The work is governed under a subcontract structure in support of the Defense Logistics Agency, operating within the broader Department of Defense framework, and is classified under NAICS code 541612, indicating specialized IT and cybersecurity services. The contract was posted on August 1, 2026, and the place of performance remains unspecified, suggesting flexibility but requiring the contractor to ensure assessments are conducted on all applicable systems regardless of physical location.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity and CUI Compliance SupportThis contract requires ongoing adherence to DFARS 252.204-7012, mandating full implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information across all systems and processes. The scope includes establishing, maintaining, and continuously monitoring cybersecurity measures to protect CUI from unauthorized access, disclosure, or compromise, along with timely reporting of any cyber incidents as defined by the regulation. All activities must align with Department of Defense requirements and are performed under a subcontract arrangement, with compliance obligations extending to the entire lifecycle of CUI handling. The work supports the Defense Logistics Agency and is governed by NAICS code 541612, indicating specialized information technology services geared toward cybersecurity and regulatory compliance.

Defense Logistics Agency

POSTED

3 days ago

DEADLINE

N/A

AI Contract Overview

The contract titled Cybersecurity and Data Privacy Compliance Services is a subcontract issued by the Waterloo Regional Health Network under the Government of Canada, aimed at enhancing organizational compliance with HIPAA and other information security standards. The scope of work includes developing and implementing a comprehensive cybersecurity program, creating and maintaining formal policy documentation, delivering targeted staff training initiatives, and conducting rigorous oversight of third-party vendors to ensure adherence to data privacy requirements. All activities must align with federal and industry-specific frameworks governing the protection of sensitive health information. The solicitation was posted on June 1, 2026, with a response deadline of June 15, 2026, and is classified under NAICS code 541612, which corresponds to computer systems design and related services. While no set-aside status or geographic performance restrictions are specified, the work directly supports the health network’s obligation to safeguard patient data and maintain regulatory compliance. Interested parties must submit proposals via the provided Canadian government procurement portal before the deadline to be considered for award.

General Info

Cybersecurity services to ensure HIPAA compliance, vendor oversight, staff training, and policy development for health data protection.

Agency

Government of Canada → Waterloo Regional Health Network

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

CAN

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PhaseClosed

PostedJun 1

subcontract

Response DeadlineJun 15

Deadline has passed

Submission Closed

06/15/2026, 08:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Waterloo Regional Health Network

ContactsNo contacts available

OfficeN/A

Organization / Agency

Government of Canada → Waterloo Regional Health Network

Office AddressN/A

ContactsNo contact information available

Full Description

Provide cybersecurity program development, policy documentation, staff training, and third-party vendor oversight to ensure compliance with HIPAA and other information security frameworks.