Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Identity Management

Open

State & Local

Response Deadline01/14/2027, 04:00:00 PM PST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity and Identity Management subcontract for the California State Water Resources Control Board focuses on the design and implementation of security architecture, authentication, and authorization protocols for prime contractors. The scope of work includes establishing Role-Based Access Control, encryption protocols, and system hardening policies, as well as developing logging, monitoring, and incident response protocols that adhere to state security standards. Key deliverables for this engagement include a comprehensive Security Architecture document and a detailed RBAC matrix. This opportunity is categorized under NAICS code 541519 and is based in Sacramento. The project was posted on November 20, 2025, with a response deadline of January 15, 2027. Interested parties can find further details through the Cal eProcure portal.

General Info

Cybersecurity subcontract for California Water Board focusing on security architecture and identity management.

Agency

California State Water Resources Control

NAICS

541519 - Other Computer Related Services

Place of Performance

Sacramento, CA, USA

Set-Aside

NONE

Documents

This scope was carved out of 25-020-280.

The full solicitation package (99 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Water Technical Access Portal (WaterTAP)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 20

subcontract

Response DeadlineJan 14

Submission deadline

Response Deadline

01/14/2027, 04:00:00 PM PSTin 2 months

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia State Water Resources Control

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia State Water Resources Control

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Designs and implements security architecture, authentication, and authorization protocols for prime contractors on State Water Resources Control Board (SWRCB) projects. Implements Role-Based Access Control (RBAC), encryption protocols, and system hardening policies. Sets up logging, monitoring, and incident response protocols compliant with state security standards. Delivers the Security Architecture document and RBAC matrix.

Similar Contracts

Same NAICS industry code

Incident Response and Data Protection ServicesThe Incident Response and Data Protection Services subcontract supports prime contractors on Department of Information Resources projects within the state of Texas. The scope of work focuses on mitigating cyber threats through emergency response, ensuring continuous data availability via backup and replication, and maintaining security through media protection sanitization. Key deliverables include the provision of detailed incident reports and backup verification logs to ensure operational resilience. This opportunity is categorized under NAICS code 541519 and was posted on November 10, 2026. Interested parties must submit their responses by the deadline of February 10, 2027. Further details regarding this procurement can be accessed through the Texas SmartBuy portal.

Department of Information Resources

POSTED

about 9 hours ago

DEADLINE

Software Maintenance and Technical Support for Jurisdiction OnlineThis subcontract focuses on providing software maintenance and technical support for the Jurisdiction Online system, specifically supporting prime contractors on State of Alabama Elevator Inspections projects. The scope of work includes delivering comprehensive computer support services, troubleshooting technical issues, and ensuring continuous system availability in strict accordance with state electronic interface standards. Success is measured by the consistent availability of the system and the timely resolution of support tickets. To be eligible for this opportunity, contractors must be enrolled in E-Verify and registered with the Alabama Secretary of State. The project falls under NAICS code 541519. Interested parties should note the response deadline of November 16, 2026, for this Alabama-based agency requirement.

Elevator Inspections

POSTED

about 9 hours ago

DEADLINE

4010/4015-Jurisdiction Online

Solicitation # SRC0000037643

The State of Alabama, specifically the Elevator Inspections agency, is soliciting computer support for the Inspections Division under the project titled 4010/4015-Jurisdiction Online. This solicitation, numbered SRC0000037643, requires responses to be submitted electronically through the Alabama Buys portal. The resulting contract is limited to a total cost of 25,000 dollars, including any subsequent renewals, and may be renewed annually for a maximum term of five years. All disputes that cannot be resolved through negotiation will be handled in Montgomery, Alabama. The State reserves the right to evaluate bids based on cost realism, price reasonableness, and supplier qualifications, including the request for professional licenses and certificates of insurance. Awardees must comply with strict regulatory requirements, including enrollment in the E-Verify program, registration with the Alabama Secretary of State for out-of-state entities, and certification of tax compliance and non-collusion. Payments are handled via electronic methods such as P-cards or EFT, and the State maintains the right to inspect all products before final acceptance in accordance with the Universal Commerce Code.

Elevator Inspections

POSTED

about 9 hours ago

DEADLINE

Cybersecurity and Compliance ArchitectThis subcontract for a Cybersecurity and Compliance Architect supports the South Dakota Department of Human Services by implementing critical security layers and access controls for prime contractors. The scope of work focuses on the configuration of Multi-Factor Authentication, Single Sign-On, and Role-Based Access Controls to secure system entry. Additionally, the project requires the delivery of a comprehensive security architecture and the implementation of encryption for data both at rest and in transit. To ensure regulatory compliance, the project must adhere to NIST and HIPAA/HITECH standards. Key deliverables include the development of immutable audit logging and the establishment of secure records retention triggers. Interested parties should note the response deadline of January 8, 2027, for this South Dakota State Government initiative categorized under NAICS code 541519.

South Dakota State Government

POSTED

about 9 hours ago

DEADLINE

in about 2 months

Cybersecurity Services and Disaster Recovery PlanningThis subcontract for the Sanford Housing Authority in North Carolina focuses on the delivery of cybersecurity and disaster recovery services for prime contractors managing IT projects. The scope of work includes protecting systems from intrusions, managing access codes, and maintaining physical network security. The selected provider will be responsible for developing formal security procedures and a comprehensive Disaster Recovery Plan that adheres to HUD reporting and data security standards. Key deliverables include the submission of written security documentation and a finalized Disaster Recovery Plan. Interested parties should note that the response deadline is December 2, 2026, and the project falls under NAICS code 541519, with performance taking place in Sanford.

Sanford Housing Authority

POSTED

about 9 hours ago

DEADLINE

UMGC RFP #92340 - Managed Security Operations Center (SOC) Services

Solicitation # 92340

The University of Maryland Global Campus (UMGC) is soliciting proposals for a qualified provider to deliver managed Security Operations Center (SOC) services. The selected contractor will provide 24x7x365 security monitoring, threat detection, analysis, incident response, threat intelligence, and related advisory services across the University's SIEM tool, specifically utilizing Exabeam. The scope of work includes the continuous analysis of security events across academic, administrative, cloud, and enterprise systems, while ensuring compliance with frameworks such as NIST CSF, NIST SP 800-171, FERPA, GLBA, PCI DSS, and CMMC. The contract is structured for an initial three-year term with two optional one-year renewals. Proposals must be submitted electronically via the UMGC Bid Locker by November 19, 2026, divided into separate technical and price volumes. Technical evaluations will prioritize service delivery, relevant experience, staffing, and implementation over cost. Mandatory requirements for offerors include maintaining an ISO/IEC 27001 certification or SOC 2 Type II attestation, adhering to Maryland Living Wage requirements, and meeting a 3% Minority Business Enterprise (MBE) participation goal. Additionally, the contractor must maintain specific insurance coverages, including $5 million per occurrence for Cyber Security/Data Breach insurance and $3 million in annual aggregate for Commercial General Liability. Payments will be processed via Electronic Funds Transfer for contracts exceeding $500,000.

POSTED

about 12 hours ago

DEADLINE

CrowdStrike Falcon Elite License SupplyThis subcontract agreement involves the supply of CrowdStrike Falcon Elite Endpoint Detection and Response software license keys and activation codes for prime contractors working on security projects for Triple A S.A. E.S.P. in Colombia. The primary objective is to provide official license codes and digital deliverables to maintain continuous security coverage across the designated projects. To be eligible, providers must hold authorized CrowdStrike reseller or partner status. Required deliverables include the provision of the license codes and a signed Certification of Activation. The solicitation was posted on November 10, 2026, with a response deadline of November 23, 2026.

Triple A S.A. E.S.P.

POSTED

about 13 hours ago

DEADLINE

Послуги із заміни в ЄДЕБО користувача уповноваженого суб’єкта з доступом із використанням динамічних бібліотек

Solicitation # UA-2026-11-10-014187-a

The State University Zhytomyr Polytechnic, located in Zhytomyr, Ukraine, is soliciting bids for specialized services to replace an authorized user within the Unified State Electronic System of Registration of Rights to Real Estate (EDRBO). The scope of work specifically involves managing user access through the use of dynamic libraries to ensure the continuity and security of the institution's digital authorizations. This procurement process, identified by solicitation number UA-2026-11-10-014187-a, strictly prohibits the use of goods or services originating from the Russian Federation, the Republic of Belarus, or the Islamic Republic of Iran. Interested parties may coordinate with the primary point of contact, Olena Vasylivna Vlasyuk, via the provided university legal department contact details.

Державний університет "Житомирська політехніка "

POSTED

about 15 hours ago

DEADLINE

Application Support and Maintenance ProviderThe Application Support and Maintenance Provider subcontract involves providing ongoing technical support and maintenance for prime contractors managing software contracts for the Caerphilly County Borough Council. The scope of work focuses on ensuring system availability and security through the management of software upgrades, patching, and continuous performance monitoring. The provider will utilize help desk and ticketing systems to resolve technical issues and maintain operational standards. This opportunity was posted on November 10, 2026, with a response deadline of December 11, 2026, falling under NAICS code 541519.

Caerphilly County Borough Council

POSTED

about 15 hours ago

DEADLINE

in about 1 month

Cybersecurity & Cross-Domain SecurityThis subcontract, managed by the Department of Defense under the FA8819 Sda And Combat Power Szk-La agency, focuses on implementing cybersecurity frameworks and cross-domain solutions for Space Systems Command LEO communications mesh projects. The scope of work involves developing encryption standards, Zero Trust architectures for space environments, and secure gateways for cross-domain data transfer. Technical execution requires the use of Hardware Security Modules, encryption software, and cross-domain guards to deliver robust security architectures and protocols. Performance will take place in El Segundo, California, under NAICS code 541519. Due to the sensitive nature of the space systems involved, personnel must possess Secret, TS, or SCI clearances and ensure strict adherence to NIST SP 800-171 and CMMC compliance standards. The solicitation was posted on November 10, 2026, with a response deadline of November 24, 2026.

FA8819 Sda And Combat Power Szk-La

POSTED

about 17 hours ago

DEADLINE

Asset Tracking and Transponder Integration ServicesThis subcontract for Asset Tracking and Transponder Integration Services supports prime contractors on Army Contracting Command Rock Island projects. The scope of work involves the supply, installation, and management of transponder tracking systems to maintain total visibility of assets. To ensure seamless operations, the contractor must utilize integration software compatible with Department of Defense platforms, specifically mentioning systems such as Loadout or Pangea, to deliver real-time tracking data and comprehensive visibility reports. The project is managed under the Department of Defense and will be performed at Camp Arifjan in Kuwait. Classified under NAICS code 541519, the opportunity was posted on November 10, 2026, with a response deadline of November 17, 2026.

POSTED

about 17 hours ago

DEADLINE

Cybersecurity and Information AssuranceThis Cybersecurity and Information Assurance subcontract supports Washington Headquarters Services and the Department of Defense by providing critical cybersecurity oversight for prime contractors on WHS/DSCA projects. The scope of work focuses on implementing and auditing Risk Management Framework controls, designing Zero Trust architecture, and conducting risk assessments within decentralized environments to ensure the protection of partner nation data. Key deliverables include the production of security audit reports and the delivery of Authority to Operate packages. Qualified personnel must hold a CISSP certification to perform these duties. The opportunity is categorized under NAICS code 541519 and is based in the 22202 zip code area. Interested parties should note the response deadline of December 3, 2026.

Washington Headquarters Services

POSTED

about 17 hours ago

DEADLINE

More opportunities from California State Water Resources Control

Same awarding agency

API Integration & Interface DevelopmentThe API Integration and Interface Development subcontract focuses on the creation and configuration of system interfaces, APIs, and data feeds for prime contractors supporting the California State Water Resources Control Board. The scope of work involves implementing REST and SOAP communication protocols and developing data exchange formats utilizing JSON and XML. Key technical responsibilities include defining API endpoints, establishing input and output formats, and implementing security methods to ensure secure data transmission. The project requires the delivery of an Interface Control Document and the deployment of operational data feeds. Performance of these services will take place in Sacramento. The solicitation was posted on November 20, 2025, with a response deadline of January 15, 2027, falling under NAICS code 541512.

Computer Systems Design Services

POSTED

DEADLINE

Software Architecture & Full-Stack DevelopmentThis subcontract for Software Architecture and Full-Stack Development focuses on the design, development, and implementation of the WaterTAP solution for prime contractors working on California State Water Resources Control Board projects. The scope of work includes creating solution architecture, conducting fit-gap analyses, and building a decoupled architecture to integrate client applications, databases, and external APIs. The project utilizes Agile methodology to deliver system configurations and customizations for servers and databases, ultimately resulting in the delivery of the operational WaterTAP software system. Based in Sacramento, the contract is associated with NAICS code 541511 and has a response deadline of January 15, 2027.

Custom Computer Programming Services

POSTED

DEADLINE

Cloud Infrastructure & Environment ProvisioningThis subcontract for Cloud Infrastructure and Environment Provisioning supports prime contractors on projects for the California State Water Resources Control Board. The scope of work involves the supply and configuration of SaaS and cloud hardware and software environments, specifically focusing on the delivery of development, integration, and sandbox environments. The provider is responsible for creating the Bill of Materials and configuring all necessary server, database, and network components to ensure fully operational cloud environments. The project is based in Sacramento and falls under NAICS code 518210. The contract was posted on November 20, 2025, with a response deadline of January 15, 2027. The final deliverables include the operational cloud environments and a finalized Bill of Materials.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Organizational Change Management (OCM) & TrainingThis subcontract for the California State Water Resources Control Board focuses on Organizational Change Management and Training services based in Sacramento. The selected provider will be responsible for conducting change impact analyses, managing stakeholder communications, and developing comprehensive OCM plans and readiness assessments to support prime contractors on agency projects. Key deliverables include the creation and execution of internal user training curricula, communication strategies, and final training completion reports. The opportunity was posted on November 20, 2025, with a response deadline of January 15, 2027, falling under NAICS code 611430.

Professional and Management Development Training

POSTED

DEADLINE

Geospatial Systems (GIS) DevelopmentThis subcontract for Geospatial Systems (GIS) Development supports prime contractors on projects for the California State Water Resources Control Board. The scope of work focuses on the design and implementation of geospatial features for data storage, processing, and visualization, specifically through the development of functional modules and visualization tools within the WaterTAP portal. The project is categorized under NAICS code 541370 and is based in Sacramento. The solicitation was posted on November 20, 2025, with a response deadline set for January 15, 2027.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

Water Technical Access Portal (WaterTAP)

Solicitation # 25-020-280

The California Department of Technology, on behalf of the State Water Resources Control Board (SWRCB), is soliciting proposals for the development, design, implementation, and maintenance of the Water Technical Access Portal (WaterTAP). This enterprise-level, cloud-based SaaS solution is intended to replace legacy systems and disparate databases with a single system of record for drinking water reporting. The project aims to streamline data intake, improve data quality, and enhance regulatory oversight and transparency for California's public water systems. The scope of work encompasses project management, system interfaces, data migration, testing, organizational change management, and security, with a primary focus on minimizing customization to maintain agility in responding to new legislation. The contract is structured as a fixed-rate, deliverable-based agreement with an initial term of three years and options for two additional one-year extensions, allowing for a maximum term of six years. Performance will be primarily remote within the continental United States, with potential on-site support in Sacramento. Bidders are evaluated through a multi-phase process where 70 percent of the score is based on non-cost criteria—including narratives, qualifications, and demonstrations—and 30 percent is based on cost. Mandatory pass/fail gates include bidder qualifications and references. Key personnel, such as the Project Manager and Technical Lead, must meet strict experience and certification requirements, and all key staff are required to complete state ethics training and financial disclosure filings.

Other Computer Related Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS