Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity and Information Assurance

Active

Federal

Response Deadline10/26/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Cybersecurity and Information Assurance supports the Defense Health Agency by securing data hosting environments for prime contractors on OBHAT/BHAS projects. The scope of work involves implementing critical security controls for data-at-rest and data-in-transit through the use of IAM systems, encryption software, and SIEM tools. The provider is responsible for delivering continuous monitoring reports and achieving the Security Authorization to Operate. The contract requires strict adherence to HIPAA, NIST SP 800-53, and DoD Impact Level certifications to ensure full regulatory compliance. Performance will take place in Frederick, and the opportunity is categorized under NAICS code 541519. Responses are due by October 26, 2026.

General Info

Cybersecurity subcontract for DHA data hosting, requiring NIST/HIPAA compliance by October 26, 2026.

Agency

Department Of Defense → Defense Health Agency

NAICS

541519 - Other Computer Related Services

Place of Performance

Frederick, MD, USA

Set-Aside

NONE

Documents

This scope was carved out of HT942726RFI707.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFI for Data Hosting, Integration, and Sustainment Support for the OBHAT/BHAS Program

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedSep 24

subcontract

Response DeadlineOct 26

Submission deadline

Response Deadline

10/26/2026, 04:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Defense Health Agency

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Defense Health Agency

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Secures the data hosting environment for prime contractors on Defense Health Agency (DHA) OBHAT/BHAS projects. Implements security controls for data-at-rest and data-in-transit using SIEM tools, encryption software, and IAM systems. Ensures compliance with NIST SP 800-53, HIPAA, and DoD Impact Level (IL) certifications. Delivers Security Authorization to Operate (ATO) and continuous monitoring reports.

Similar Contracts

Same NAICS industry code

Data Center Remote Hands / Smart Hands SupportThis subcontract for Humble Independent School District involves providing on-site technical support and physical equipment management for prime contractors. The scope of work includes 24/7 facility monitoring and Smart Hands services, such as hardware installation, cable swapping, and server reboots, utilizing DCIM monitoring tools. The provider is responsible for delivering ongoing operational support and detailed incident response reports. Qualified personnel must hold BICSI or CompTIA Server+ certifications to perform these services. The opportunity was posted on September 25, 2026, with a response deadline of October 26, 2026. This project falls under NAICS code 541519 and is focused on maintaining critical data center infrastructure within the district.

POSTED

about 11 hours ago

DEADLINE

in about 1 month

Pre-Qualification for Application Support Services – Infor FSM

Solicitation # 234421

TransLink, the South Coast British Columbia Transportation Authority, is seeking pre-qualified providers for Application Support Services specifically for Infor FSM. This solicitation, identified by number 234421, is managed through the Province of British Columbia and is intended for performance within British Columbia. Interested parties must submit their responses by the deadline of October 21, 2026, at 9:00 PM. The opportunity was officially posted on September 25, 2026, and further details regarding the application process can be accessed via the BC Bid portal.

TransLink(South Coast British Columbia Transportation Authority)

POSTED

about 12 hours ago

DEADLINE

Pre-Qualification for Application Support Services - Octave Attune EAM

Solicitation # 234420

TransLink, the South Coast British Columbia Transportation Authority, is seeking pre-qualified providers for application support services specifically for Octave Attune EAM. This solicitation, identified by number 234420, is open to organizations capable of providing technical expertise and support for the specified enterprise asset management system within the province of British Columbia. Interested parties must submit their responses by the deadline of October 21, 2026, at 9:00 PM. The solicitation was officially posted on September 25, 2026, and further details regarding the application process can be accessed through the BC Bid portal.

TransLink(South Coast British Columbia Transportation Authority)

POSTED

about 12 hours ago

DEADLINE

CJIS Compliance and Cybersecurity ConsultantThis subcontract opportunity for the City of Mulberry, Georgia, seeks a CJIS Compliance and Cybersecurity Consultant to establish a comprehensive security framework for a new law enforcement agency. The selected contractor will be responsible for developing a detailed compliance path that ensures all federal and state data security standards are met, requiring specialized expertise in Criminal Justice Information Services security policies. The primary objective is to deliver a defined cybersecurity strategy and compliance roadmap integrated into a final report. Interested parties must submit their responses by October 16, 2026, under NAICS code 541519.

City of Mulberry

POSTED

about 12 hours ago

DEADLINE

Notice of Intent/Due Diligence Post - Traxxall

Solicitation # BD-27-1084-POLGH-GHQ-133873

The Massachusetts MSP General Headquarters has issued a Notice of Intent and Due Diligence Posting under solicitation number BD-27-1084-POLGH-GHQ-133873 for Traxxall. This SLED organization opportunity is managed by primary point of contact Brian Kearnan and is centered in Framingham, Massachusetts. The solicitation was posted on September 25, 2026, with a response deadline set for October 9, 2026. All related activities and performance will take place at the Worcester Road location in Framingham, MA.

POLGHQ - MSP General Headquarters

POSTED

about 13 hours ago

DEADLINE

Phone Service Coordination and IntegrationThe Phone Service Coordination and Integration subcontract for the Haralson County Government in Georgia involves providing technical liaison and coordination services for prime contractors. The primary objective is to manage service requirements and troubleshooting between the county and third-party phone providers to ensure seamless integration between IT managed services and VoIP or PBX telephony infrastructure. The selected provider must hold relevant telecommunications certifications to ensure the operational stability and coordinated communication of phone services. This opportunity, categorized under NAICS code 541519, was posted on September 25, 2026, with a response deadline of October 27, 2026.

Haralson County Government

POSTED

about 14 hours ago

DEADLINE

in about 1 month

Secure Data Handling & DeliveryThe Secure Data Handling and Delivery subcontract, managed by the Department of Transportation's 693JJ3 Acquisition And Grants Mgt, focuses on providing secure transmission and storage mechanisms for prime contractors working on USDOT FHWA ITS JPO projects. The primary objective is to ensure that sensitive data is delivered to the government through the implementation of encrypted transfer protocols and secure cloud storage, strictly adhering to USDOT secure data delivery requirements. Classified under NAICS code 541519, this opportunity was posted on September 25, 2026, with a response deadline of October 16, 2026. The contract is designed to facilitate the delivery of securely transmitted data packages, ensuring the integrity and confidentiality of information exchanged between contractors and the government agency.

693JJ3 Acquisition And Grants Mgt

POSTED

about 15 hours ago

DEADLINE

DTS System Administration and DTA SupportThis subcontract opportunity, titled DTS System Administration and DTA Support, involves providing specialized technical administration of the Defense Travel System for prime contractors on Strategic Systems Programs projects. The scope of work includes managing user profiles, routing lists, and Lines of Accounting, as well as executing organizational transfer actions. All activities must ensure strict compliance with JTR and DoDI 5154.31 through the use of the DTA Maintenance Tool to deliver validated user profiles and routing lists. The contract is issued by Pae Strategic Systems Programs under the Department of Defense and is designated as a total Small Business Set Aside under NAICS code 541519. Performance will take place at the Washington Navy Yard. Interested parties must respond by October 13, 2026.

Pae Strategic Systems Programs

POSTED

about 15 hours ago

DEADLINE

RMF Compliance and ATO Maintenance ServicesThe RMF Compliance and ATO Maintenance Services subcontract supports prime contractors on DISA and Army ESEMS projects to ensure the maintenance of Authorization to Operate status. The scope of work involves performing cybersecurity documentation and administrative tasks, including the management of RMF documentation and eMASS records, reviewing DOW STIG documentation, and creating integration guidance for GOTS software. Key deliverables include updated eMASS records and STIG compliance reports. This opportunity is based in Fort Huachuca and is managed by the Department of Defense IT Contracting Division. Qualified candidates must possess a Secret or Top Secret security clearance and hold professional RMF certifications such as CISSP or CISM. The response deadline for this subcontract is October 9, 2026.

It Contracting Division - PL84

POSTED

about 15 hours ago

DEADLINE

Endpoint Security Event Management

Solicitation # 842674854

The Defense Information Systems Agency (DISA) is conducting market research through a Sources Sought notice to identify qualified sources for an Endpoint Security Event Management System to support Project Manager Command & Control Infrastructure and Network Enterprise Technology Command. The requirement centers on delivering a comprehensive cybersecurity solution for the Department of War Information Network – Army, with a focus on enabling Zero Trust Architecture through Endpoint Detection and Response, Security Incident and Event Management, Comply to Connect, asset management, advanced analytics, network visualization, and integration with the Army’s Big Data Platform and Identity Credentialing and Access Management services. The system must leverage Microsoft Defender for Endpoint and Elastic Defend to manage EDR across Army Unified Directory Services endpoints, enforce default-deny application controls, automate malware response, restrict removable media, collect behavioral telemetry, ingest STIX/TAXII threat data, and prepare infrastructure for post-quantum cryptography migration. The solution must support global fielding across CONUS and OCONUS locations, including contingency theaters and hazardous duty areas, with simultaneous on-prem and cloud deployments. The contract is anticipated to be a single-award IDIQ with a ceiling value of $850 million and a potential performance period of up to ten years, consisting of a two-year base period followed by eight one-year option periods beginning March 29, 2027. Primary performance will be centered at Fort Huachuca, Arizona, with oversight from Aberdeen Proving Ground, Maryland, and support delivered through four regional cyber centers covering Army installations worldwide. All contractors must hold a Top Secret facility clearance and be capable of providing personnel with at least Secret-level clearances, with the ability to assign Top Secret-cleared individuals for mission-critical tasks. Compliance with DoD cybersecurity standards including RMF, STIGs, IAVAs, and Authorization to Operate is mandatory. Subcontracting is limited under FAR 52.219-14, and companies must demonstrate small business status if applicable, adhere to the NAICS code 541519 with a $34 million size standard, and list qualifying prime contract vehicles such as ENCORE III, SETI, GSA OASIS, ALLIANT II, VETS II, STARS III, MAS, NIH CIO-SP4, and NASA SEWP V. Responses must be submitted via email by 12:30 PM EDT on June 29, 2026, and include business information, CAGE code, socio-economic designation, and a capabilities

It Contracting Division - PL84

POSTED

about 15 hours ago

DEADLINE

Digital Forensics Examiner Services

Solicitation # N0018927Q00010

Navsup Flt Logistics Ctr Norfolk is seeking sources for a single firm, fixed price contract to provide continued Digital Forensics Examiner Support services for the Naval Criminal Investigative Service NCIS Cyber Directorate. The requirement involves providing certified personnel to conduct complex, non-destructive evaluations of target computer systems and detailed forensic examinations of mobile devices and digital media used in criminal investigations or intelligence gathering. The primary objective is to protect Department of Navy personnel, assets, and infrastructure from criminal, terrorist, and foreign intelligence threats. This opportunity is intended to be competed among certified 8(a) Program Participants under NAICS code 541519. The contractor must provide all necessary equipment, supplies, and tools, including mobile phones and cellular service for examiners. Performance is distributed across multiple locations, including Camp Pendleton, California, Camp Lejeune, North Carolina, Naval Station Mayport, Florida, and MCAS Miramar, California, with potential for both CONUS and OCONUS travel. Key deliverables include monthly status reports, non-destructive evaluations, and forensic examinations of cyber cases. Personnel must be compliant with SECNAV M-5239.2 cybersecurity qualifications and maintain valid passports and driver's licenses. The contractor is also required to maintain specific automobile liability insurance and adhere to the DoD Industrial Security Manual for handling classified materials as detailed in DD Form 254. Performance will be monitored via a Quality Assurance Surveillance Plan with a requirement that over 95 percent of deliverables be submitted timely and without rework.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 15 hours ago

DEADLINE

Travel Management Office (TMO) Travel Program (Defense Travel System (DTS) & Government Travel Charge Card (GTCC)) and Mail Management Center (MMC) Technical and Administrative Support Services.

Solicitation # N0003026JV001

Pae Strategic Systems Programs is conducting market research via a Sources Sought Notice to identify capable firms for a five-year Firm-Fixed-Price, Level-of-Effort contract spanning from May 10, 2027, to May 9, 2032. The requirement is a total small business set-aside under NAICS 541519, focused on providing technical and administrative support for the Travel Management Office (TMO) and the Mail Management Center (MMC). Primary services include Defense Travel System (DTS) profile and routing management, Government Travel Charge Card (GTCC) administration, travel auditing and analysis, help desk operations, and official mail handling. The primary place of performance is the SPHQ at the Washington Navy Yard in District of Columbia. Key personnel must possess a minimum of a favorable Tier 1 background investigation to handle personally identifiable information and access government systems such as CitiManager and Visa IntelliLink. The contractor is responsible for maintaining strict confidentiality and privacy act compliance, as well as ensuring no organizational conflicts of interest exist. The government is requesting white paper capability statements not exceeding five pages to assess industry capacity based on recent performance in travel and mail management. This notice is for market research purposes only and does not constitute a formal solicitation or a promise of a future contract award.

Pae Strategic Systems Programs

POSTED

about 15 hours ago

DEADLINE

More opportunities from Department Of Defense → Defense Health Agency

Same awarding agency

Administrative Operations and Tasker ManagementThe Administrative Operations and Tasker Management subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The scope of work involves managing official tasker flows, executing the TASKER Coordination process, and preparing responses to Congressional Inquiries. Additionally, the contractor is responsible for office space planning and supply inventory management, with required deliverables including tasker action spreadsheets and monthly inventory reports. This opportunity is based in Falls Church, Virginia, under NAICS code 561110. Personnel assigned to this contract must possess a Tier I or II background investigation. The solicitation was posted on September 25, 2026, with a response deadline of October 12, 2026.

Office Administrative Services

POSTED

about 15 hours ago

DEADLINE

Project Management and Process Improvement SupportThis subcontract provides project management and process improvement support for prime contractors working on Defense Health Agency projects. The scope of work involves executing Process Improvement Plans across the design, development, testing, and sustainment phases, utilizing Process Asset libraries to conduct joint reviews and plan pilot tests. Key deliverables include the finalized Process Improvement Plans, regular project status reports, and the results of pilot testing. The opportunity is categorized under NAICS code 541611 and is based in Falls Church, Virginia. Personnel assigned to this contract must possess a Tier I or II background investigation to meet security requirements. Interested parties must respond by October 12, 2026.

Administrative Management and General Management Consulting Services

POSTED

about 15 hours ago

DEADLINE

Onsite IT Systems and Network AdministrationThis subcontract for the Defense Health Agency provides onsite IT systems and network administration support for prime contractors. The scope of work includes performing technology refreshes, equipment troubleshooting, and annual audits utilizing DoD Gateways, DISA STIGs, and Nessus scanners. Additionally, the provider is responsible for delivering system topology, data flow diagrams, and Privacy Impact Assessments. The contract requires strict adherence to cybersecurity standards, including NIST SP 800-171 compliance in SPRS and DoDI 8500.01. Performance will take place in Falls Church, Virginia, under NAICS code 541513. Responses are due by October 12, 2026.

Computer Facilities Management Services

POSTED

about 15 hours ago

DEADLINE

Human Resource and Manpower Management ServicesThis subcontract for Human Resource and Manpower Management Services provides senior-level HR support for prime contractors working on Defense Health Agency projects. The scope of work includes managing personnel recruitment, creating hiring action packets, maintaining organizational charts, and overseeing performance evaluations, awards, and retirements. The contractor is required to use DHA personnel systems and timekeeping software, delivering completed hiring packets and monthly processing reports as primary deliverables. The position is based in Falls Church, Virginia, and requires a Tier I or II background investigation along with CUI access. This opportunity is categorized under NAICS code 541612 and is associated with the Department of Defense. The response deadline for this requirement is October 12, 2026.

Human Resources Consulting Services

POSTED

about 15 hours ago

DEADLINE

European Healthcare Environmental Cleaning (HEC) Services

Solicitation # HT9406-26-R-E006

The Defense Health Agency (DHA) is soliciting proposals for a single-award, firm-fixed-price Indefinite Delivery/Indefinite Quantity (ID/IQ) contract to provide highly specialized Healthcare Environmental Cleaning (HEC) and Linen Distribution Services at various Military Treatment Facilities (MTFs) in Germany. The scope of work includes maintaining aseptic environments for clinical and surgical spaces through specialized cleaning, disinfection, linen laundry, and regulated medical waste collection. Performance locations encompass Landstuhl Regional Medical Center (LRMC) and its outlying clinics, Medical Department Activity – Bavaria (MEDDAC-B) in Vilseck and its associated clinics, and the Rhine Ordnance Medical Center (ROBMC). The anticipated ordering period runs from May 15, 2027, to May 14, 2032, which includes a 90-day phase-in period. The contract has a maximum value of approximately $99.99 million. The selection process will utilize a competitive tradeoff source selection method, where performance confidence is significantly more important than price. Evaluation will occur in three sequential phases: Technical Capability, Performance Confidence, and Price. To be considered technically acceptable, offerors must demonstrate at least three consecutive years of healthcare cleaning experience within the last five years and provide detailed cleaning procedures that meet industry and regulatory standards, such as ISO 9001:2015 and ISO 14001. Key personnel, specifically Executive Managers, must be proficient in both English and German. Proposals must be submitted via email by the deadline of October 15, 2026, and successful offerors will be required to implement a comprehensive training program covering infection control, safety, and asbestos awareness.

Janitorial Services

POSTED

about 15 hours ago

DEADLINE

Program Management Support Services Bridge 4

Solicitation # PANDHA-26-P-0000-046996

The Defense Health Agency intends to award a sole source, firm-fixed-price non-personal services contract to Deloitte Consulting, LLP for Program Management support services. This bridge contract consists of a three-month base period running from November 14, 2026, to February 13, 2027, with three subsequent three-month option periods extending through November 13, 2027. The contractor will provide comprehensive support to the Assistant Director for Health Care Administration and Operations, the Portfolio Acquisition Executive for Medical Digital Solutions, and the J6 Risk Management Executive Division. Performance will take place primarily at the Defense Health Headquarters in Falls Church, Virginia, and Joint Base San Antonio Fort Sam Houston, Texas. The scope of work includes managing Integrated Product Teams, conducting research and analysis, and providing special project support. Key performance metrics require taskers to be disseminated within 24 hours of receipt, research reports delivered within five business days, and meeting minutes completed within two workdays. The contract mandates strict adherence to cybersecurity standards, including DoD IA requirements and NIST SP 800-171, with a requirement for no unmitigated high-severity vulnerabilities. Administrative requirements include the use of iRAPT for invoicing and the execution of DHA Form 49 Non-Disclosure Agreements for all personnel. While intended as a sole source award, the agency will consider capability statements or quotations from responsible sources submitted by 10:00 AM Eastern on October 12, 2026.

Administrative Management and General Management Consulting Services

POSTED

about 15 hours ago

DEADLINE

TRICARE Medicare Eligible Program Second Generation (TMEP2)

Solicitation # HT940226R0001

Pharmacy Benefit Management and Other Third Party Administration of Insurance and Pension Funds

POSTED

about 15 hours ago

DEADLINE

in about 1 month

Secure Contractor-Owned, Contractor-Operated (COCO) Peer Review SystemThis subcontract involves the provision and hosting of a secure, web-based electronic system designed for prime contractors supporting Defense Health Agency peer review projects. The contractor is responsible for delivering a fully operational Contractor-Owned, Contractor-Operated system that features document viewing, virtual meeting facilitation, and concurrent panel scoring. A critical component of the requirement is the integration of results into Government Electronic Government Systems via secure web services that adhere to strict technical specifications for data integrity. The project is managed under the Department of Defense for the Defense Health Agency, with the place of performance located in Frederick, Maryland. Classified under NAICS code 518210, the opportunity was posted on September 24, 2026, with a response deadline of October 9, 2026. The scope of work ensures the delivery of secure data file transfers and a comprehensive digital infrastructure to facilitate the peer review process.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Scientific Peer Review Coordination and Technical EvaluationThis subcontract for Scientific Peer Review Coordination and Technical Evaluation supports the Defense Health Agency within the Department of Defense. The primary objective is the recruitment of subject matter expert panel chairpersons and reviewers to manage technical evaluations for biomedical research proposals. Key responsibilities include conducting conflict of interest reviews, managing the scoring process via secure web-based electronic systems, and delivering comprehensive Panel Member Identification and Peer Review Debriefing Reports. The opportunity is categorized under NAICS code 541990 and is centered in Frederick, Maryland. Interested parties must adhere to the response deadline of October 9, 2026, following the posting date of September 24, 2026.

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

eBRAP Application Support and Compliance ServicesThe eBRAP Application Support and Compliance Services subcontract provides essential administrative and technical support for prime contractors managing Defense Health Agency biomedical research projects. The scope of work includes coordinating Funding Opportunity Announcement setup, operating helpdesks for applicant inquiries, and performing administrative reviews of pre-applications to ensure all required components are present. Additionally, the contractor is responsible for validating applicant entity coding through eBRAP and Grants.gov, delivering compliance review lists, and providing monthly consolidated export reports. This opportunity is categorized under NAICS code 541611 and is associated with the Department of Defense. The place of performance is located in Frederick, Maryland. Interested parties must adhere to the response deadline of October 9, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

IT Operations and User Support ServicesThe IT Operations and User Support Services subcontract provides critical operational support and end-user assistance for prime contractors working on Defense Health Agency OBHAT/BHAS projects. Based in Frederick, the scope of work involves managing Service Level Agreements and delivering help desk support through ITSM ticketing systems like ServiceNow or Jira, all while adhering to ITIL standards for operational maintenance. Key deliverables include the resolution of user support tickets and the submission of monthly SLA performance reports. This opportunity falls under NAICS code 541513 and is associated with the Department of Defense. The response deadline for this requirement is October 26, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

in about 1 month

Data Engineering and DBA ServicesThis subcontract for Data Engineering and DBA Services supports prime contractors on Defense Health Agency OBHAT/BHAS projects. The scope of work involves managing database structures, performing data engineering, and providing comprehensive database administration, including data modeling, performance tuning, and replication using SQL and NoSQL databases and data warehousing tools. The objective is to deliver optimized database environments that adhere to strict data integrity standards and performance benchmarks. The opportunity is associated with NAICS code 541513 and is performed in Frederick. Interested parties must respond by October 26, 2026, following the posting date of September 24, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

in about 1 month

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS