Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity and Data Privacy Consultant

Active

State & Local

Response Deadline11/19/2026, 05:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity is for a Cybersecurity and Data Privacy Consultant to support prime contractors on projects for the New York State Division of Homeland Security and Emergency Services. The selected consultant will be responsible for conducting security assessments and penetration testing, with a specific focus on validating data governance, privacy controls for personally identifiable information, and overall cybersecurity through the use of security scanning tools. Additionally, the scope of work includes testing service restoration, recovery point objectives, and disaster recovery protocols in alignment with NYS or NIST frameworks. Key deliverables for this engagement include comprehensive security audit reports, detailed penetration test results, and necessary compliance certifications. Interested parties should note the response deadline of November 19, 2026.

General Info

Cybersecurity consultant for NYS DHSES performing security assessments and penetration testing by 11/19/2026.

Agency

New York → NYS Division of Homeland Security and Emergency Services

NAICS

541512 - Computer Systems Design Services

Place of Performance

NY, USA

Set-Aside

NONE

Documents

This scope was carved out of 2140135.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFI Fire Investigation Reporting Management System

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 22

subcontract

Response DeadlineNov 19

Submission deadline

Response Deadline

11/19/2026, 05:00:00 AM UTCin 27 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew York → NYS Division of Homeland Security and Emergency Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyNew York → NYS Division of Homeland Security and Emergency Services

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments and penetration testing for prime contractors on NYS Division of Homeland Security and Emergency Services projects. Validates cybersecurity, data governance, and privacy controls for PII using security scanning tools. Tests disaster recovery, recovery point objectives (RPO), and service restoration per NIST or NYS frameworks. Delivers security audit reports, penetration test results, and compliance certifications.

Similar Contracts

Same NAICS industry code

MetroAccess Fare Collection and Management System

Solicitation # WMATA-0000010941

The Washington Metropolitan Area Transit Authority is seeking proposals for the MetroAccess Fare Collection and Management System under solicitation number WMATA-0000010941. This project falls under NAICS code 541512, focusing on computer systems design services to enhance the transit authority's fare processing and management capabilities. The solicitation was posted on October 22, 2026, with a strict response deadline of October 27, 2026. Interested parties must submit their responses through the official WMATA supplier portal by the specified cutoff time to be considered for this procurement opportunity.

Washington Metropolitan Area Transit Authority

POSTED

about 7 hours ago

DEADLINE

EHR and Pharmacy System Integration ServicesThis subcontract for EHR and Pharmacy System Integration Services involves performing technical integrations between Prescription Drug Monitoring Program systems and external pharmacy dispensing systems and Electronic Health Records for prime contractors working with the Rhode Island Department of Health. The scope of work focuses on the development of APIs and connectors utilizing HL7/FHIR standards, the management of interstate data sharing protocols, and the delivery of integrated data pipelines. The project requires strict adherence to CMS implementation standards and the Medicaid PARTNERSHIP Act. Classified under NAICS code 541512, the opportunity was posted on October 22, 2026, with a response deadline of November 23, 2026. Interested parties can find further details through the Rhode Island Department of Administration procurement portal.

State of Rhode Island

POSTED

about 8 hours ago

DEADLINE

in about 1 month

DOH Prescription Drug Monitoring Program

Solicitation # RFP27007077

The Rhode Island Department of Health is soliciting proposals for a single vendor to implement and operate a comprehensive, cloud-based Prescription Drug Monitoring Program (PDMP). The system is designed to collect, manage, and analyze data on controlled substance prescriptions for Schedules II through V and opioid antagonists to enhance patient safety and prevent drug misuse. Key technical requirements include a secure, mobile-responsive web portal that supports interstate data sharing and integration with Electronic Health Records and pharmacy dispensing systems. The solution should preferably be FedRAMP certified and must comply with CMS implementation standards, the Medicaid PARTNERSHIP Act, and specific Rhode Island General Laws. The contract features a base period from January 1, 2027, to April 30, 2028, with four optional extension years. Performance begins with a stakeholder engagement kickoff in January 2027, followed by user experience design, legal reviews, and a data integration pilot. Proposals are evaluated on a 100-point scale, with 70 points allocated to technical qualifications and presentations and 30 points to cost. Awardees must adhere to strict federal funding requirements, including 45 CFR Part 75, the Byrd Anti-Lobbying Amendment, and various non-discrimination laws. Additionally, the vendor must comply with rigorous cybersecurity policies, prohibiting offshore access to production systems and requiring a Business Associate Agreement for data privacy. Invoicing is conducted monthly based on actual expenditures, with payments submitted to the RIDOH Project Officer by the 10th of each month.

State of Rhode Island

POSTED

about 8 hours ago

DEADLINE

in about 1 month

RFP DOS 2027-01 NH Sex Offender Registry Public Website

Solicitation # RFP DOS 2027-01

The New Hampshire Department of Safety is soliciting proposals under RFP DOS 2027-01 to modernize the public Sex Offender Registry website and its associated administrative functions. The selected vendor will provide comprehensive professional services, software development, hosting, and integration to create a mobile-responsive, WCAG 2.1 AA compliant platform. Key functional requirements include a public search tool with geocoding and mapping capabilities, daily data synchronization from authoritative sources, a tip and comment intake system, and a mechanism to administer annual fee payments via card, cash, or check. The solution must also support role-based access, audit logging, and the publication of non-compliant offender warrant lists. The contract will be awarded to the highest-scoring vendor based on a combined evaluation of technical and price proposals, noting that this is not a low-bid award. Technical scores will be refined through oral interviews, product demonstrations, and reference checks. The initial term of performance is two years from the effective date, with potential extensions for years three through six subject to funding and performance. Strict security standards are mandated, including compliance with NIST SP 800-171 R2, NIST SP 800-53 Revision 5 Moderate level controls, and NIST SP 800-63. Additionally, all state data must be stored and processed exclusively within the Continental United States. Proposals are due by December 16, 2026, and must be submitted in searchable PDF format to the Department of Safety.

Department Of Safety

POSTED

about 8 hours ago

DEADLINE

in about 2 months

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern, industry-standard Laboratory Information Management Services platform for the Jody Connor Limnology Center. The new system must document, track, and retain physical, chemical, and biological water quality data throughout the laboratory process, from sample receipt to finalization. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure automated data flow. The solution must also integrate with Zebra ZD220 TTLabel printers to automate the generation of sample labels and chain-of-custody forms. This Firm Fixed Price contract is expected to span multiple state fiscal years from 2027 through 2031, with an option for the state to extend the term up to three years. Proposals are evaluated on a 110-point scale focusing on the proposed solution, technical management, company experience, staffing qualifications, and FedRAMP/GovRAMP authorization status, following an initial pass/fail cybersecurity screening. The selected contractor must adhere to strict NIST security standards, including SP 800-171 R2 and SP 800-53 Revision 5, and comply with state regulations regarding workplace civility and prohibited foreign technologies. Final acceptance of the system will be based on measurable criteria and a formal test plan.

Department Of Environmental Services

POSTED

about 8 hours ago

DEADLINE

Survey and Case Management Data Migration SpecialistThis subcontract opportunity is for a Survey and Case Management Data Migration Specialist to support prime contractors on projects for the Pittsburgh Public School District. The selected specialist will perform ETL processes to migrate historical data, including surveys, responses, embedded data, contacts, and workflows, while ensuring that record identifiers are preserved. Key technical requirements include executing contact deduplication and maintaining detailed merge logs to ensure the integrity of warehouse joins. The project requires the delivery of a fully migrated dataset accompanied by verified record counts and comprehensive field mapping documentation. Due to the nature of the data, the specialist must possess a thorough understanding of FERPA regulations and obtain the necessary Pennsylvania state clearances. Interested parties should note the response deadline of November 23, 2026.

Pittsburgh Public School District

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Managed Services Provider (MSP)

Solicitation # rfx_20450

Public Health Ontario (PHO) is seeking a single lead service provider to establish a strategic partnership for the delivery, coordination, and continuous improvement of managed information technology and cyber security services. This initiative, identified by project reference 183327001 and solicitation number rfx_20450, requires an integrated Managed Service Provider (MSP) and Managed Security Service Provider (MSSP) capability. The partnership will utilize a hybrid operating model that blends outsourced services with PHO-retained capabilities to enhance operational resilience, advance cyber maturity, and support digital priorities through 24/7/365 monitoring, automation, and scalable technical capacity. The selected provider must demonstrate mandatory capabilities in Microsoft 365 E5+, Digital Workplace, IT Service Desk, and Microsoft Azure Cloud management, as well as MSSP functions including Managed SIEM, XDR, Threat Intelligence, Vulnerability Management, and Incident Response. A critical requirement is the operationalization of agentic AI within SOC operations and a commitment to participate in the Ontario Provincial Cyber Security Operating Model (CSOM). To ensure strict data privacy, all personal health and personal information must be stored, processed, and accessed exclusively within Canada in compliance with PHIPA, PIPEDA, and GO-ITS standards. The procurement process follows a Best Score awarding strategy, with evaluations split between a Qualification Envelope, a Technical Envelope for non-price criteria, and a Commercial Envelope for pricing. Proponents must adhere to strict submission guidelines via the Ontario Tenders Portal, ensuring no pricing information is included in technical responses. Additionally, the provider must comply with comprehensive health and safety standards as mandated by the Occupational Health and Safety Act (OHSA) and the Accessibility for Ontarians with Disabilities Act.

OAHPP (Public Health Ontario)

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Cybersecurity Support ServicesThis subcontract for Cybersecurity Support Services involves providing engineering and compliance assistance for prime contractors working on US Air Force MC-130J Link 16 systems. The scope of work focuses on performing critical cyber support tasks and auditing to ensure all systems adhere to Air Force security standards for deployment, which specifically includes the integration of YUBI keys and the delivery of comprehensive certification and accreditation documentation. Managed under the Department of Defense and the AFLCMC Wiuka agency, the contract requires personnel to hold a Secret security clearance and maintain DoD 8570 compliant certifications, such as Security+. Interested parties should note the response deadline of November 5, 2026, for this opportunity categorized under NAICS code 541512.

FA8509 Aflcmc Wiuka

POSTED

about 11 hours ago

DEADLINE

Cybersecurity Systems Engineering and Integration ServicesThis subcontract for Cybersecurity Systems Engineering and Integration Services supports the Department of Homeland Security, specifically within the Investigations and Operations Support Dallas office. The project focuses on implementing systems engineering methodologies to integrate robust cybersecurity measures for prime contractors managing Immigration and Customs Enforcement investigative databases. The primary objective is to design and execute controls for Confidentiality, Integrity, and Availability, while managing Supply Chain Risk Management in strict accordance with FISMA and NIST SP 800-53 standards. The successful provider will be responsible for delivering a security-integrated system architecture and comprehensive documentation proving compliance with all established CIA and SCRM standards. Classified under NAICS code 541512, the contract requires a specialized technical approach to ensure the integrity of critical investigative data systems. Performance for this engagement is centered in the 20536 zip code area.

Investigations And Operations Support Dallas

POSTED

about 11 hours ago

DEADLINE

IT and Structured CablingThis subcontract involves the removal of legacy IT infrastructure and the installation of a new certified structured cabling system for prime contractors supporting U.S. Department of State and INL facility projects. The scope of work includes the installation of Cat6/6a cabling, patch panels, and racks, all of which must adhere to TIA/EIA standards. The project is located in Tegucigalpa, Honduras, and is managed under NAICS code 541512. Interested parties should note the response deadline of November 2, 2026, for this Department of State agency requirement.

Acquisitions - Aqm Momentum

POSTED

about 11 hours ago

DEADLINE

PLM Application Configuration and Integration ServicesThe PLM Application Configuration and Integration Services subcontract involves providing specialized planning, design, and configuration of core Product Lifecycle Management capabilities for prime contractors supporting US Air Force AF-PLM projects. The scope of work focuses on configuring Siemens Teamcenter modules for PDM, CAD data, and BOM management, alongside the development of automated workflows and database schema adaptations. Additionally, the contractor is responsible for integrating AF-PLM with enterprise systems and executing data migration for onboarding programs in accordance with AFI 63-1201, resulting in the delivery of custom software configurations and detailed migration reports. Managed by the Department of Defense under the FA8770 Aflcmc Gbk agency, this effort is categorized under NAICS code 541512. The place of performance is located in Dayton, Ohio. Interested parties should note the response deadline of November 5, 2026, for this specific procurement opportunity.

FA8770 Aflcmc Gbk

POSTED

about 11 hours ago

DEADLINE

Defense Health Agency (DHA), Portfolio Acquisition Executive, Medical Digital Solutions (PAE MDS), Enterprise Intelligence & Data Solutions (EIDS) Program Management Office (PMO), Data Exchange Services Operations, Modernization, and Development

Solicitation # HT003826SC005-AOI0002

The Defense Health Agency (DHA) is seeking commercial solutions under Area of Interest (AOI) #02 for the operations, sustainment, modernization, and development of the Data Exchange Platform (DxP). Managed by the Enterprise Intelligence and Data Solutions (EIDS) Program Management Office, the DxP is critical for processing real-time clinical and operational data across more than 15 external systems, ensuring interoperability between the DHA, Department of Veterans Affairs, and other federal healthcare partners. The primary objective is to maintain 24x7 operational continuity of legacy SOAP-based services with zero unplanned disruption while transitioning the architecture toward a scalable, cloud-native, API-driven environment utilizing RESTful microservices, FHIR R4, and OMOP CDM standards. This solicitation is issued under Commercial Solutions Opening HT003826SC005, with the government anticipating a Firm-Fixed-Price pricing structure and a potential award by March 2027. The procurement follows a multi-phase evaluation process; Phase I responses, due by October 28, 2026, are evaluated on a Go/No-Go basis focusing on technical feasibility, commercial maturity, and alignment with Zero Trust and Risk Management Framework security standards. Selected vendors may proceed to Phase II for further validation through demonstrations and pricing discussions. All contractor personnel must be U.S. citizens with appropriate security clearances, and respondents must provide an Organizational Conflict of Interest mitigation approach.

Defense Health Agency

POSTED

about 11 hours ago

DEADLINE

More opportunities from New York → NYS Division of Homeland Security and Emergency Services

Same awarding agency

Technical Training and Implementation ConsultantThe Technical Training and Implementation Consultant subcontract supports the NYS Division of Homeland Security and Emergency Services by providing specialized system configuration and end-user training for prime contractors. The scope of work focuses on developing comprehensive training materials and conducting instructional sessions for fire investigators, specifically regarding case tracking and the use of configurable templates within sandbox environments. Additionally, the consultant is responsible for establishing agency-approved terminology and checklist configurations to ensure system standardization. Key deliverables for this engagement include the production of detailed training manuals, the successful execution of user training sessions, and the delivery of fully configured system templates. This project falls under NAICS code 611430 and is managed through the state of New York, with a response deadline set for November 19, 2026.

Professional and Management Development Training

POSTED

about 19 hours ago

DEADLINE

Data Migration and API Integration SpecialistThis subcontract opportunity is for a Data Migration and API Integration Specialist to support prime contractors on projects for the New York State Division of Homeland Security and Emergency Services. The primary scope of work involves the extraction, transformation, and loading of legacy investigative data, including the migration of state-owned reports and metadata. The selected provider will be responsible for configuring APIs for system integrations using specialized ETL tools and API development frameworks while ensuring strict adherence to data governance standards and maintaining the integrity of sensitive records. The project focuses on the delivery of migrated historical data and the implementation of active API integrations. Interested parties should note that the solicitation was posted on October 22, 2026, with a response deadline of November 19, 2026. The work falls under NAICS code 541511, reflecting the technical nature of the data migration and systems integration requirements for the state agency.

Custom Computer Programming Services

POSTED

about 19 hours ago

DEADLINE

Fire Investigation Case Management SaaS ProviderThis subcontract opportunity is for a Software as a Service provider to supply and host a secure, commercially available Case Management System for prime contractors working on projects for the New York State Division of Homeland Security and Emergency Services. The selected provider will deliver a secure environment for digital investigative records, featuring configurable report templates and specialized workflows designed for case assignments and supervisory review. The software must be cloud-hosted with geographic redundancy to ensure reliability and must strictly comply with NFPA 921 and NFPA 1033 standards. Interested parties should note that the response deadline is November 19, 2026, and the project falls under NAICS code 513210.

Software Publishers

POSTED

about 19 hours ago

DEADLINE

RFI Fire Investigation Reporting Management System

Solicitation # 2140135

The New York State Division of Homeland Security and Emergency Services, through the Office of Fire Prevention and Control, has issued a Request for Information (RFI) for a Fire Investigation Reporting Management System. This initiative seeks commercially available solutions to support the full investigative case lifecycle for the Fire Investigations Branch. The goal is to implement a secure environment capable of collecting, preserving, and managing complex digital investigative records, including diagrams, interviews, and laboratory findings, to support administrative, regulatory, civil, and criminal proceedings. The system must provide real-time visibility into case assignments and progress, utilize configurable report templates, and adhere to NFPA 921 scientific framework principles and OFPC approved policies. This RFI is for planning purposes and does not constitute a formal solicitation for bids or a promise to issue a contract. Interested vendors must submit their responses via email by November 19, 2026. Key requirements for the proposed solution include robust cybersecurity, data governance, and strict privacy controls to ensure personally identifiable information is handled correctly. Additionally, vendors must address data ownership and the ability to export all state-owned reports and metadata upon contract termination. The state is requesting information on functional requirements, implementation milestones, acceptance testing, and available cost and licensing structures.

POSTED

about 19 hours ago

DEADLINE

Grants Management Program

Solicitation # 2138532

POSTED

about 2 months ago

DEADLINE

Console for Building 22 and MTA

Solicitation # 2128144

The New York State Division of Homeland Security and Emergency Services has issued a single source award to L3Harris Technologies Inc for the Console for Building 22 and MTA project. This procurement, identified by solicitation number 2128144, is exempt from standard advertising requirements and is designated for performance in Albany, New York. The contract falls under NAICS code 334310 and has an advertisement end date of November 4, 2025, while the specific contract term is currently to be determined. Inquiries regarding this notice should be directed to the primary contact, Jenny Fung.

Audio and Video Equipment Manufacturing

POSTED

DEADLINE

Console for Building 22 and MTA

Solicitation # 2128144

The New York State Division of Homeland Security and Emergency Services has issued a special notice for contract DHS01-0000102-1160200, titled Console for Building 22 and MTA. This agreement is a single source award granted to L3Harris Technologies Inc, with the place of performance located in Albany, New York. The solicitation, identified by number 2128144, was posted on October 28, 2025, and has an advertisement end date of November 4, 2025. While the specific contract term is currently to be determined, inquiries regarding this procurement exemption should be directed to the primary contact, Jenny Fung.

Security Systems Services (except Locksmiths)

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS