This Subcontract opportunity from Utah was posted on June 8, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity & Data Protection Services

Closed

State & Local

Submission Closed07/08/2026, 02:00:00 PM MDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541690

New

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries and coordination should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

DEADLINE

Quality Assurance (QA) ConsultancyThis Quality Assurance Consultancy subcontract for Oil & Gas Development Company Limited (OGDCL) focuses on the establishment and auditing of quality management systems for prime contractors operating on OGDCL projects in Pakistan. The selected consultant will be responsible for developing Quality Management Plans, conducting comprehensive system audits of contractor quality processes, and managing non-conformance reports to ensure operational standards are met. Key deliverables for this engagement include Approved Quality Plans, detailed Quality Audit Reports, and the formulation of corrective action plans. To qualify for this role, the consultant must hold an ISO 9001 Lead Auditor certification. Interested parties must submit their responses by November 23, 2026.

Oil & Gas Development Company Limited (OGDCL)

POSTED

DEADLINE

Independent Security Assessment and Authorization (A&A)This subcontract opportunity is for the Independent Security Assessment and Authorization (A&A) project supporting the California Department of Consumer Affairs. The selected provider will perform independent third-party security testing and compliance auditing for prime contractors, ensuring adherence to NIST SP 800-53 and California SAM/SIMM standards. Key deliverables include annual security testing, vulnerability scanning, the generation of Independent Security Assessment Reports, and the validation of Plans of Action and Milestones. The procurement is categorized under NAICS code 541690. Interested parties must submit their responses by the deadline of December 8, 2026. Further details regarding the solicitation can be accessed through the Cal eProcure portal.

California Department of Consumer Affairs

POSTED

DEADLINE

Life Safety and Accessibility Compliance SpecialistThe Life Safety and Accessibility Compliance Specialist subcontract involves providing specialized regulatory reviews for prime contractors working on City of Hamilton corporate facility projects in Canada. The selected provider will be responsible for inspecting facilities to ensure fire and life safety code compliance and conducting AODA accessibility audits to identify and document physical barriers. The primary deliverables for this engagement are detailed deficiency reports and professional recommendations for necessary life safety and accessibility upgrades. To qualify for this role, the contractor must hold professional certification as either a Certified Fire Protection Specialist or an Accessibility Consultant. Interested parties must submit their responses by the deadline of December 8, 2026. This opportunity is categorized under NAICS code 541690 and is managed through the City of Hamilton's procurement system.

POSTED

DEADLINE

Digital Accessibility AuditorThe Digital Accessibility Auditor subcontract involves providing independent accessibility validation for prime contractors working on University of Maryland Global Campus projects. The selected provider will be responsible for testing learning modules and platforms to ensure full compliance with Section 508 and WCAG 2.1 AA standards. Key deliverables include the production of Accessibility Conformance Reports using VPAT version 2.4 or later, along with comprehensive audit documentation and the development of strategic remediation plans to address any identified accessibility gaps. This opportunity is categorized under NAICS code 541690 and was posted on November 6, 2026. Interested parties must submit their responses by the deadline of November 20, 2026, at 3:00 PM. The contract is managed through the state of Maryland's procurement system.

POSTED

DEADLINE

CMMC Level 2 Compliance SupportThis subcontract for CMMC Level 2 Compliance Support focuses on providing cybersecurity assessments and remediation services for prime contractors associated with DLA Weapons Support Land Supply Chain projects. The primary objective is to conduct CMMC Level 2 self-assessments and implement necessary safeguards to protect covered defense information, ensuring strict adherence to DFARS 252.204-7012 and NIST SP 800-171 frameworks. The final deliverables include a comprehensive compliance report and a completed self-assessment. The project is managed under NAICS code 541690 for the Department of Defense and will be performed in Corpus Christi, Texas. Interested parties should note the response deadline of November 16, 2026, for this specific cybersecurity initiative.

DLA WEAPONS SUPPORT LAND SUPPLY CHAIN

POSTED

DEADLINE

Privacy Impact Assessment (PIA) SpecialistThe Regional District of Nanaimo is seeking a Privacy Impact Assessment Specialist to provide expert privacy consulting for prime contractors involved in data collection projects. The selected subcontractor will be responsible for developing critical documentation regarding survey methodology, data storage, security, and retention practices to ensure the successful completion and approval of a Privacy Impact Assessment. A deep professional knowledge of the Freedom of Information and Protection of Privacy Act is required for this role. The primary deliverables for the contract include a comprehensive data management plan and all necessary completed PIA documentation. This opportunity is based in Canada and is categorized under NAICS code 541690.

Regional District of Nanaimo

POSTED

DEADLINE

PPE Program Administration and Sizing ServicesThis subcontract for PPE Program Administration and Sizing Services supports prime contractors on Northern Wasco County PUD projects in The Dalles, Oregon. The selected provider will manage the administrative aspects of clothing programs, which includes conducting employee sizing sessions and ensuring the ordering and issuance of garments are completed within 10 business days. Additionally, the contractor is responsible for maintaining detailed records of garment types and ratings while delivering regular sizing records and inventory reports. Beyond logistics, the contractor must provide essential technical and regulatory guidance to ensure all protective clothing meets OSHA and OAR requirements. Interested parties should note that the response deadline for this opportunity is November 25, 2026, and the services fall under NAICS code 541690.

Northern Wasco County PUD

POSTED

DEADLINE

Global Fire Risk Assessment InspectionsThe Global Fire Risk Assessment Inspections subcontract, issued by FCDO Services, requires the performance of on-site fire risk assessments for prime contractors managing FCDO facility projects. The scope of work involves conducting physical inspections of both owned and rented buildings to identify potential hazards and evaluate overall safety compliance. These services will be delivered across a diverse global portfolio, including sites within the UK, British Overseas Territories, and various international posts. The primary deliverable for this engagement is the production of completed Fire Risk Assessment reports for every inspected site. Interested parties should note that the response deadline for this opportunity is December 11, 2026. The contract is categorized under NAICS code 541690, focusing on specialized professional services to ensure the safety and regulatory compliance of the agency's global infrastructure.

POSTED

DEADLINE

HVIP Performance Measurement and Data AnalysisThe HVIP Performance Measurement and Data Analysis subcontract supports the New Jersey Department of Law and Public Safety by providing specialized data collection and performance measurement for prime contractors. The selected provider will be responsible for developing tracking tools to monitor performance measures and conducting detailed analyses to determine how specific interventions impact retaliation rates. This role requires a high level of expertise in evidence-based model evaluation and strict adherence to victim data privacy laws. Key deliverables for this engagement include the production of comprehensive data reports, performance metrics, and final implementation reports. Interested parties should note that the response deadline is November 24, 2026, and the project falls under NAICS code 541690.

NJ Department of Law and Public Safety

POSTED

DEADLINE

Clinical Research Statistical Analysis ServicesThis subcontract for Clinical Research Statistical Analysis Services supports prime contractors on NIH/NIMHD research network projects. The scope of work involves developing statistical analysis plans, performing analysis on harmonized datasets, and providing essential support to the Data and Safety Monitoring Board. All technical work must be executed using SAS, R, or Stata while strictly adhering to NIH statistical guidelines and peer-review standards to ensure the delivery of validated data outputs and comprehensive statistical analysis reports. The project is associated with the National Institutes of Health and the Department of Health and Human Services, with the place of performance located in Bethesda. Interested parties should note the response deadline of November 23, 2026. The opportunity is categorized under NAICS code 541690, focusing on specialized biostatistical expertise to maintain the integrity of clinical research data.

National Institutes Of Health Nichd

POSTED

DEADLINE

NIST Compliance and Security Control MappingThis subcontract opportunity, titled NIST Compliance and Security Control Mapping, is issued by the Department of Defense IT Contracting Division for security auditing and mapping of prototypes on DISA E-ICAM projects. The selected provider will be responsible for mapping prototype functions to NIST SP 800-53 controls and ensuring strict alignment with the DoD Enterprise ICAM Reference Design and Desired Solution Attributes. The scope of work requires the application of NIST SP 800-53 and NIST SP 800-162 frameworks to produce comprehensive compliance matrices and security validation documentation. Qualified candidates must possess NIST certification or expert-level knowledge in the specified frameworks. The solicitation was posted on November 6, 2026, with a response deadline of November 30, 2026. This requirement falls under NAICS code 541690 and is designed to support prime contractors in meeting federal security standards for critical identity, credential, and access management infrastructure.

It Contracting Division - PL84

POSTED

1 day ago

DEADLINE

in 23 days

AI Contract Overview

The contract focuses on delivering comprehensive cybersecurity and data protection services, encompassing the implementation and continuous monitoring of cybersecurity controls. It emphasizes ensuring compliance with key regulatory frameworks including FIPS, SOC2, and GRAMA, which are critical for maintaining high standards of information security and data governance. Additionally, the contract covers the management of cyber risk through proactive measures such as incident response, aimed at mitigating potential threats and responding effectively to security events. Issued by the state of Utah, this subcontract opportunity under NAICS code 541690 invites qualified vendors to submit proposals by July 8, 2026. The scope targets specialized cybersecurity functions designed to protect sensitive information and maintain regulatory compliance, reflecting the increasing importance of robust cybersecurity infrastructure for public sector entities. The contract’s strategic focus on compliance and risk management demonstrates a commitment to both regulatory adherence and operational resilience in the face of evolving cyber threats.

General Info

Cybersecurity services contract ensuring compliance, risk management, monitoring, and incident response, Utah state, proposals due July 2026.

Agency

Utah

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

UT, USA

Set-Aside

NONE

Documents

This scope was carved out of SLCI26092.

The full solicitation package (7 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Salt Lake City Corporation Request for Proposals SLCI26092 Agenda and Minutes Software RFP

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJun 8

subcontract

Response DeadlineJul 8

Deadline has passed

Submission Closed

07/08/2026, 02:00:00 PM MDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyUtah

ContactsNo contacts available

OfficeN/A

Organization / AgencyUtah

Office AddressN/A

ContactsNo contact information available

Full Description

Implementation and monitoring of cybersecurity controls, compliance with FIPS, SOC2, and GRAMA, and management of cyber risk including incident response.