Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Cybersecurity and Data Protection Services (for PHI/PII Handling)

Active

State & Local

Response Deadline09/01/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This contract seeks cybersecurity infrastructure services to safeguard protected health information and personally identifiable information in full compliance with HIPAA and applicable state laws. The services must include end-to-end encryption, a robust incident response plan, and mandatory U.S.-based data storage to ensure data sovereignty and regulatory adherence. The work is structured as a subcontract under NAICS code 541512, which classifies it under computer systems design and related services, and is being procured by the state of Kentucky based in Frankfort. All performance must occur within the United States, with no specific city designated beyond the general location of Other, ensuring flexibility in execution while maintaining compliance with jurisdictional requirements. Proposals are due by September 1, 2026, and the solicitation was posted on July 29, 2026, indicating a competitive procurement timeline for qualified vendors capable of delivering secure, lawful, and reliable data protection solutions.

General Info

Cybersecurity services for HIPAA-compliant health data with U.S.-based storage, encryption, and incident response under Kentucky procurement.

Agency

Kentucky → Frankfort, KYView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Other, KY, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 29

subcontract

Response DeadlineSep 1

Submission deadline

Response Deadline

09/01/2026, 06:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyKentucky → Frankfort, KY

ContactsNo contacts available

OfficeN/A

Organization / Agency

Kentucky → Frankfort, KY

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Provide cybersecurity infrastructure to protect PHI/PII with encryption, incident response, and U.S.-based data storage in compliance with HIPAA and state law.

Similar Contracts

Same NAICS industry code

Virtualization Consulting IDIQThe Port of Seattle is seeking a technical services partner to conduct a thorough evaluation of its existing virtualization platform, focusing on performance, security, and architectural integrity. The engagement aims to validate the platform’s operational reliability, uncover potential risks, and recommend optimization strategies that align with the organization’s business goals, compliance requirements, security standards, and resiliency needs. The deliverable will include a prioritized roadmap outlining actionable steps to enhance the platform’s effectiveness and long-term sustainability. This opportunity is structured under the Virtualization Consulting IDIQ, with the North American Industry Classification System code 541512, indicating it is scoped for computer systems design and related services. The contracting office is the Port of Seattle’s ICT Enterprise Infrastructure Services division, and inquiries should be directed to Carol Hassard as the primary point of contact or Jim Dawson as the project manager. While the solicitation number is not yet assigned, the forecast was posted in July 2026, signaling anticipated future procurement activity. Performance of the work is expected to align with the Port’s internal infrastructure needs, with no specified geographic restrictions beyond the Port’s operational scope.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Azure Consulting IDIQThe Port of Seattle is preparing to engage a cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to advance its Microsoft Azure and Hybrid cloud capabilities. The primary objective is to validate and strengthen the existing Azure architecture while guiding the implementation of new services in alignment with organizational standards, security requirements, and long-term scalability goals. The partner will be responsible for enhancing resiliency, improving the overall security posture, and ensuring that cloud deployments are optimized for performance, efficiency, and operational readiness across both cloud and on-premises environments. The engagement emphasizes strategic consultation and technical expertise in modernizing infrastructure, with a focus on ensuring all deployments adhere to best practices and support the Port’s evolving business needs. The solicitation is categorized under NAICS code 541512 for Computer Systems Design Services and is managed by the ICT Enterprise Infrastructure Services division. Point of contact for inquiries is Carol Hassard, with Jim Dawson serving as the Project Manager. While the solicitation number and set-aside details are not yet available, the forecasted posting date is July 29, 2026, and the place of performance will be at the Port of Seattle’s facilities.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System software to modernize airport operations and enhance passenger experience. This initiative targets the development and deployment of new software that will replace legacy systems, ensuring real-time flight data accuracy, improved reliability, and seamless integration with current airport infrastructure. The project falls under NAICS code 541512, indicating it involves custom computer programming services tailored to the specific operational needs of the airport environment, with the primary place of performance located at the Port of Seattle facilities. The primary point of contact for this opportunity is Farlis Lewis, reachable via email and phone, with Krista Sadler serving as the project manager for technical oversight. The solicitation is classified as a forecast, meaning no formal request for proposals has been issued yet, but interested vendors should prepare for an upcoming procurement process. The agency has not specified a set-aside type, suggesting the opportunity is open to all eligible contractors without preferential sizing or socioeconomic considerations. Although the exact timeline and requirements remain undeclared, stakeholders are encouraged to monitor the official portal link for future updates and formal solicitations.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

IT Systems Integration & LMS SupportThe contract requires the integration of Newsela’s educational content platform with the Florida School for the Deaf and the Blind’s existing Learning Management System and student information systems using industry-standard LTI and API protocols. This technical implementation aims to streamline access to adaptive reading materials and assessment tools, ensuring seamless authentication, data synchronization, and user management across platforms without disrupting existing workflows. The solution must support secure, real-time data exchange to enable personalized learning experiences aligned with student progress tracked within the school’s systems. The solicitation is classified as a subcontract under NAICS code 541512, with a response deadline of August 3, 2026, and was posted on July 29, 2026. The work is specifically tied to the needs of the Florida School for the Deaf and the Blind, indicating the integration must accommodate accessibility requirements for deaf and blind students. While no set-aside designation is specified, the contractor is expected to deliver a robust, scalable, and maintainable integration that aligns with the school’s operational and pedagogical goals. All technical deliverables must comply with LTI and API specifications to ensure compatibility with the institution’s current infrastructure.

Florida School for the Deaf and the Blind

POSTED

DEADLINE

Electronic Invoicing and Payment Processing SupportThe contract titled Electronic Invoicing and Payment Processing Support requires vendors to provide comprehensive support for the submission of electronic invoices in searchable PDF format, ensuring compatibility with automated systems and enabling efficient retrieval and processing of invoice data. Additionally, vendors must facilitate enrollment in PayMode by Bottomline Technologies to enable secure, streamlined electronic payments, reducing manual intervention and improving payment cycle efficiency. This subcontract is issued by Philadelphia Gas Works under the NAICS code 541512 for systems and software services, and the response deadline is August 12, 2026, with the posting date set for July 29, 2026. All performance is expected to align with the agency’s operational requirements for digital financial workflows, though specific geographic performance location details are not provided.

Philadelphia Gas Works

POSTED

DEADLINE

IT Systems Support and Maintenance ServicesThe contract awards ongoing IT support, system maintenance, software updates, and minor enhancements for digital systems used by the Health and Human Services Commission and the Department of State Health Services in Texas. It operates under an Indefinite-Delivery, Indefinite-Quantity (IDIQ) task-order structure, allowing for flexible scope and volume of services based on operational needs. The work encompasses maintaining the stability, security, and performance of critical state digital infrastructure, with a focus on continuous support rather than major development projects. All services must be performed in alignment with state requirements and timelines established through individual task orders issued under this master agreement. The contract was posted on July 29, 2026, with responses due by August 20, 2026, and is classified as a subcontract under NAICS code 541512 for computer systems design services. While no specific set-aside provisions are indicated, the opportunity is managed by the Texas Health and Human Services Commission and requires vendors to be prepared to deliver support across state agencies. Performance is expected to be conducted where the systems are hosted and utilized, primarily within Texas, and interested parties must register and respond through the Texas SmartBuy portal.

Health and Human Services Commission

POSTED

DEADLINE

Cybersecurity & Covered Defense Information (CDI) SafeguardingThis contract requires the implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information handled by subcontractor systems, along with establishing robust procedures for timely cyber incident reporting in accordance with federal requirements. The work is scoped to ensure compliance with Department of Defense cybersecurity standards, focusing on the protection of sensitive data through technical, administrative, and physical safeguards outlined in NIST SP 800-171, and mandates prompt notification and response protocols for any security breaches or anomalies affecting the information systems. The contract is classified as a subcontract under NAICS code 541512, indicating it relates to computer systems design services, and is issued by the Electrical Devices Division of the Department of Defense. Performance is to be conducted at the designated location identified as FPO with ZIP code 09523, and responses must be submitted by August 10, 2026. While no set-aside type is specified, the requirement is targeted toward entities capable of executing stringent cybersecurity frameworks and maintaining compliance with defense information protection mandates in a subcontracting environment.

ELECTRICAL DEVICES DIV

POSTED

DEADLINE

Cybersecurity Compliance Support (NIST SP 800-171)The contract seeks cybersecurity compliance support to achieve NIST SP 800-171 adherence for the protection of Controlled Unclassified Information under DFARS 252.204-7012 requirements. The scope includes developing a System Security Plan, creating and maintaining a Plan of Actions and Milestones, and ensuring full audit readiness through implementation of technical and administrative controls aligned with the NIST framework. This support is critical for safeguarding CUI handled by the contractor and must be delivered to meet Defense Federal Acquisition Regulation Supplement mandates. The work is classified as a subcontract under NAICS code 541512 and is being managed by the ASC Commodities Division within the Department of Defense. Performance is required to occur at Portsmouth, New Hampshire, with a response deadline of August 6, 2026, and the solicitation was posted on July 29, 2026. The contractor must possess demonstrated expertise in federal cybersecurity compliance, specifically in NIST 800-171 implementation, and be prepared to deliver documentation and operational controls that withstand rigorous defense audits. There is no specified set-aside classification for this opportunity.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity and Covered Defense Information (CDI) SafeguardingThe contract requires the implementation and maintenance of cybersecurity controls to safeguard Covered Defense Information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring that all systems handling sensitive defense data meet federal standards for protection. This subcontract is aimed at securing information systems against unauthorized access, disclosure, or compromise, with specific focus on technical, administrative, and physical safeguards defined by the referenced frameworks. Compliance is mandatory and must be demonstrated throughout the performance period, with continuous monitoring and documentation of control effectiveness as a core expectation. The work is to be performed at the APO location with zip code 09094-3219, under the oversight of the Department of Defense through the Medical Supply Chain Pharm FSA. The solicitation was posted on July 29, 2026, with responses due by August 4, 2026, indicating a tight turnaround for proposers to demonstrate capability and readiness. The NAICS code 541512 identifies the work as related to computer systems design services, suggesting the need for specialized technical expertise in cybersecurity architecture and integration. All parties must be prepared to meet rigorous compliance standards, maintain audit-ready records, and ensure ongoing adherence to federal cybersecurity requirements without exception.

MEDICAL SUPPLY CHAIN PHARM FSA

POSTED

DEADLINE

Cybersecurity Compliance (CMMC/NIST) ImplementationThe contract requires support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by implementing all necessary NIST Special Publication 800-171 controls to safeguard covered defense information in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The work involves conducting a self-assessment to identify gaps in current cybersecurity practices and executing a remediation plan to meet the specified control objectives, ensuring the contractor can authentically demonstrate compliance with federal standards for handling sensitive government data. This effort is part of a broader initiative to secure the defense supply chain against cyber threats and maintain eligibility for future DoD contract work. This is a subcontract under a HUBZone Set-Aside, designated for businesses located in and controlled from historically underutilized business zones, with the North American Industry Classification System code 541512 indicating information technology consulting services. The solicitation was posted on July 29, 2026, with a response deadline of August 12, 2026, and is managed by the ASC Commodities Division within the Department of Defense. Performance is expected to occur at an unspecified location, and the contract is accessible via the DIBBS portal for interested HUBZone-qualified subcontractors seeking to support defense cybersecurity compliance initiatives.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance for Contractor Information SystemsThis contract requires the implementation of NIST Special Publication 800-171 controls to safeguard Covered Defense Information on contractor information systems, ensuring alignment with federal cybersecurity standards for protecting sensitive defense data. The scope encompasses establishing, maintaining, and validating a robust cybersecurity posture that meets all regulatory requirements for data protection, access control, audit logging, and system integrity, while also fulfilling mandatory cyber incident reporting obligations as stipulated by applicable Department of Defense directives. The subcontract is issued by the Defense Logistics Agency under the Department of Defense and falls under NAICS code 541512, indicating it pertains to computer systems design services with a focus on cybersecurity compliance. The solicitation is open for responses until August 10, 2026, and the performance location is not specified, implying work may be performed at the contractor’s secure facility or wherever the system hosting Covered Defense Information resides. As a subcontract, the awardee must ensure full alignment with prime contract cybersecurity obligations and may be subject to verification, assessment, or audit by the government or its representatives. Compliance is non-negotiable, and failure to implement the required controls or report incidents timely may result in contract termination, financial penalties, or loss of eligibility for future defense work. The target audience includes contractors with experience in defense information systems, NIST controls implementation, and incident response protocols.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and CUI SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 Revision 2 controls to safeguard Controlled Unclassified Information within the contractor’s systems and environments. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI in alignment with federal cybersecurity standards. The contractor must also comply with incident reporting requirements mandated by DFARS 252.204-7012, ensuring timely notification and remediation of any cybersecurity events affecting CUI. All activities must be performed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, and the work is classified under NAICS code 541512 for Computer Systems Design Services. The contract is structured as a subcontract and is associated with the Department of Defense’s Land Supply Chain organization. Responses must be submitted by the deadline of August 28, 2026, with the expectation that performance will occur within the defense supply chain environment.

LAND SUPPLY CHAIN

POSTED

DEADLINE

More opportunities from Kentucky → Frankfort, KY

Same awarding agency

Subcontractor Compliance and Vetting ServicesThe contract titled Subcontractor Compliance and Vetting Services requires the provision of comprehensive background checks, licensure verification, and ongoing compliance monitoring for personnel employed by subcontractors working in healthcare contract environments. This effort ensures that all individuals fulfilling roles under these contracts meet stringent regulatory, professional, and safety standards necessary for secure and lawful operations within the healthcare sector. The work involves continuous verification of credentials, screening for disqualifying criminal or ethical histories, and tracking changes in licensure status to maintain adherence to state and federal requirements. The solicitation is open for responses until September 1, 2026, and is categorized under NAICS code 561330, indicating a focus on investigative and security services. The contract is tied to the state of Kentucky, with performance intended to support healthcare operations under state oversight, though the specific location of performance is broadly designated as Other. There is no set-aside designation specified, and all eligible contractors may respond. Bidders must be prepared to operate under strict compliance protocols, with systems in place to deliver timely, accurate, and auditable records to support state agency requirements for workforce integrity and patient safety. The official portal for submission and further details is accessible via the provided online link.

Professional Employer Organizations

POSTED

DEADLINE

in about 1 month

Insurance and Bonding Services (Cyber Insurance or Performance Bond)Contractors must provide either a performance bond or cyber insurance coverage equal to the full value of the contract, with the Commonwealth of Kentucky named as an Additional Insured. This requirement ensures financial protection or risk mitigation against potential failures or cyber incidents related to the scope of work. The solicitation is categorized as a subcontract under NAICS code 524126, which pertains to title insurance and other insurance-related services. Responses are due by September 1, 2026, at 6:00 PM Eastern Time, with the contract opportunity posted on July 29, 2026. The place of performance is listed as Other, indicating flexibility in location, and the contracting agency is based in Frankfort, Kentucky, under the Kentucky state government. All submissions must comply with the bonding or insurance stipulations as outlined, with no set-aside provisions specified.

Direct Property and Casualty Insurance Carriers

POSTED

DEADLINE

in about 1 month

Nutrition Program Management and Compliance OversightThe contract requires comprehensive management and compliance oversight of state-mandated nutrition programs, with primary responsibility for overseeing dietary services operations to ensure they meet all regulatory standards. The contractor must implement and maintain systems that ensure adherence to federal and state nutrition guidelines, respond promptly to audits, and develop effective corrective action plans to address any deficiencies identified during inspections or reviews. This role demands a deep understanding of nutrition program regulations and the ability to coordinate with internal and external stakeholders to maintain continuous compliance. The position is structured as a subcontract under NAICS code 541611, indicating it relates to management consulting services, and is associated with the Kentucky state agency based in Frankfort. The opportunity was posted on July 29, 2026, with proposals due by September 1, 2026. Performance is expected to occur across multiple locations designated as “Other,” suggesting the work may span various facilities or regions within Kentucky. The contractor will be responsible for ensuring operational excellence across all dietary service functions while maintaining full alignment with state and federal compliance frameworks, requiring proactive monitoring, documentation, and reporting capabilities.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

Licensed Clinical Dietitian Services (Ongoing Nutritional Care)The contract seeks licensed clinical dietitians to deliver ongoing nutritional assessments, care planning, and regulatory compliance services at a state-operated nursing facility in Frankfort, Kentucky. These professionals will be responsible for evaluating residents’ dietary needs, developing individualized nutrition plans, monitoring progress, and ensuring all care practices meet applicable state and federal regulations. The work is critical to maintaining resident health outcomes and facility accreditation standards. This is a subcontract opportunity with a NAICS code of 621399, classified under other miscellaneous health services, and responses are due by September 1, 2026. The place of performance is designated as “Other” in Kentucky, indicating services will be provided at an unspecified facility within the state. There is no set-aside information provided, and the solicitation is open through the Kentucky Virtual State Services portal, with no designated point of contact listed. Contractors must be equipped to deliver consistent, compliant, and clinical-grade nutrition services in a long-term care environment.

Offices of All Other Miscellaneous Health Practitioners

POSTED

DEADLINE

in about 1 month

RFP-729-2600000510-1 | Dietitian Services (C5882)

Solicitation # RFP-729-2600000510-1

The contract solicitation RFP-729-2600000510-1 for Dietitian Services (C5882) is issued by the State of Kentucky through its agency in Frankfort, with a posted date of July 29, 2026, and a response deadline of September 1, 2026, at 6:00 PM. This solicitation seeks qualified providers to deliver dietitian services across Kentucky, with the place of performance covering the entire state as the location is designated as Other, KY. It is categorized under a state, local, or educational government (SLED) agency type, and no specific set aside or NAICS code is provided, indicating open competition for eligible vendors. The primary point of contact is Monica Bell Spalding, reachable via email at monica.bellspalding@ky.gov, with a secondary contact available by phone at 502-564-7736 for inquiries related to the procurement. All proposals must be submitted through the online portal at https://vss.ky.gov/vssprod-ext/Advantage4, and interested parties are expected to meet all requirements outlined in the solicitation documents to be considered for award.

Offices of All Other Miscellaneous Health Practitioners

POSTED

DEADLINE

in about 1 month