Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Cybersecurity and RMF Compliance Support

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract involves providing specialized cybersecurity services focused on supporting the IBS-ES system to ensure its compliance with established security standards. Key tasks include conducting vulnerability assessments to identify potential security weaknesses, implementing necessary security controls to mitigate risks, and maintaining Risk Management Framework (RMF) packages which are essential for ongoing system authorization and compliance. These efforts are vital to maintaining the system’s integrity and protecting sensitive defense-related information. Awarded as a subcontract by the Department of Defense under the agency FA8555 Aflcmc C3IBK, the performance location is specified as Fairfax, with the contract falling within the NAICS code 541612, which relates to administrative management and general management consulting services. The contract, titled "Cybersecurity and RMF Compliance Support," was posted on January 26, 2026, and facilitates robust cybersecurity posture management aligned with DoD requirements, ensuring continuous operational security for the IBS-ES system.

General Info

Provide cybersecurity services including vulnerability assessments and RMF compliance for DoD IBS-ES system.

Agency

Department Of Defense → FA8555 Aflcmc C3IBKView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

Fairfax, VA, 22033, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJan 26

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → FA8555 Aflcmc C3IBK

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → FA8555 Aflcmc C3IBK

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Provide cybersecurity support including vulnerability assessments, security control implementation, and RMF package maintenance for IBS-ES system compliance.

Similar Contracts

Same NAICS industry code

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider for its Employee Assistance Program, a core component of its Total Rewards Package designed to support employees and their families through confidential, round-the-clock access to assessment, referral, and support services. The program offers comprehensive resources covering lifestyle and daily living needs, family support, crisis intervention, and financial and legal assistance, delivered via phone or an online platform. These services are available not only upon employee request but also when initiated by Human Resources to promote workforce wellbeing and effectiveness. The program is strategically aligned with the Port’s Century Agenda to build a highly effective public agency by enhancing employee engagement and retention, recognizing that the talent and stability of its staff are essential to achieving its mission. The solicitation is classified under NAICS code 541612 and is posted as a forecast with no set-aside designation, indicating an open competition for qualified vendors. The contracting office is the Port’s Human Resources department, with primary point of contact Mazarine Ebengho Kyalumba and project manager Kecia Reichstein available for inquiries. The program’s implementation will be based at the Port of Seattle’s operational locations, and the selected provider will be expected to deliver consistent, high-quality support services that align with the agency’s values and objectives. The portal for further details is accessible through the Port’s official website, and the posting date reflects the anticipated timeline for future procurement activities.

Human Resources

POSTED

about 5 hours ago

DEADLINE

NIST SP 800-171 Compliance Assessment & System Security Plan DevelopmentThe contract requires performing a comprehensive gap assessment against the NIST SP 800-171 cybersecurity framework to evaluate the current state of an information system’s security controls. Based on the findings, the contractor must develop or update the System Security Plan to align with NIST requirements, ensuring all necessary policies, procedures, and control implementations are properly documented and integrated. The deliverables include a detailed compliance score that quantifies the system’s adherence to the standard and a prioritized remediation roadmap outlining actionable steps, timelines, and resources needed to address identified deficiencies and achieve full compliance. The work is classified as a subcontract under NAICS code 541612 and is being procured by the DOD’s ASC Commodities Division, with performance expected to occur at Hill AFB, Utah, in the ZIP code 84056-5734. The solicitation was posted on July 24, 2026, and responses are due by July 29, 2026. All activities must be completed in alignment with federal cybersecurity standards, with final deliverables intended to support the organization’s ability to protect controlled unclassified information and meet regulatory obligations. The contractor must demonstrate expertise in NIST 800-171 assessments, SSP development, and risk-based remediation planning.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Security Compliance and Reporting ServicesThe contract requires the provision of comprehensive security services for contractor personnel deploying to Kazakhstan, with a focus on adherence to DS/IS/IND security protocols. Key responsibilities include conducting mandatory security briefings, tracking security clearances, and promptly reporting any security incidents to ensure full compliance with U.S. Department of State standards. All activities must be executed in support of operations at the U.S. Embassy in Astana, where the place of performance is formally designated. The subcontract is categorized under NAICS code 541612, indicating it relates to management consulting services with a specialized emphasis on security compliance and risk mitigation. The solicitation is open for responses until July 30, 2026, and was posted on July 24, 2026, with the contracting entity being the U.S. Department of State through its office in Nur-Sultan. While no set-aside preferences are indicated and no specific point of contact is provided, contractors must ensure all deliverables align with the embassy's operational security requirements. Participation involves strict coordination with U.S. government security frameworks and a high level of accountability for the integrity and timeliness of all reporting and compliance documentation.

US Embassy Nur-Sultan

POSTED

DEADLINE

Skilled Labor Planning & Workforce Scaling StrategyThe contract requires the development of a comprehensive workforce strategy to address skilled labor demands during periods of operational surge, focusing on recruitment, training, and retention initiatives tailored to critical aviation support functions. The effort centers on identifying current and projected skill gaps, designing scalable training programs to rapidly onboard and upskill personnel, and implementing retention measures to stabilize the workforce amid high-turnover environments. This subcontract supports the Department of Defense’s Oklahoma City-based defense logistics activity, with performance tied to maintaining mission readiness through a resilient, adaptable labor force. The solicitation is open for responses until August 24, 2026, under the NAICS code 541612 for management consulting services, indicating the need for strategic advisory expertise rather than direct labor provision. The work must be executed in alignment with the organizational priorities of the Defense Logistics Agency Aviation, with no specific set-aside criteria mentioned, allowing broad eligibility for qualified subcontractors. Successful proposers will need to demonstrate proven experience in workforce planning within defense or high-tempo operational contexts, with methodologies that can be rapidly deployed and measured for impact. All deliverables must support long-term workforce sustainability while addressing immediate surge requirements.

Ok DLA Aviation At Oklahoma City

POSTED

DEADLINE

Security and Personnel Vetting ComplianceThe contract entails the pre-screening and submission of personnel for mandatory federal vetting processes including NACI, E-Verify, FBI fingerprinting, and NCIC-III/TSDB checks, ensuring full compliance with applicable U.S. government directives. All submissions must adhere to established protocols for conducting background investigations and verifying employment eligibility, with responsibility resting on the subcontractor to manage the accuracy, timeliness, and completeness of all data provided to federal systems. The work is performed under the oversight of the Department of Defense through W4LD USA Hecsa, with specific focus on upholding national security and personnel integrity standards across all submitted cases. This subcontract, classified under NAICS code 541612, has a submission deadline of July 31, 2026, and was posted on July 24, 2026, indicating a short response window for qualified vendors. While no set-aside classification or location details are specified, performance is expected to support federal requirements regardless of physical location, and the contractor must be capable of handling sensitive information in alignment with defense and intelligence community standards. All participants must be processed through standardized federal databases without delay, and failure to meet compliance thresholds could result in disqualification or termination of subcontractor status.

POSTED

DEADLINE

Identity and Access Management for Contractor PersonnelThe contract requires support for compliance with the Department of State’s Personnel Identity Verification policy by managing end-to-end identity verification, badging, and PIV card issuance for contractor personnel who need access to U.S. government facilities in Podgorica. This includes validating the identity of contractors, ensuring adherence to federal credentials standards, and coordinating the physical and digital processes necessary to issue and maintain secure access credentials. All activities must align with DOS PIC requirements to ensure only authorized individuals gain entry to sensitive government locations. The work is scoped specifically to support the U.S. Embassy in Podgorica under the NAICS code 541612 for management consulting services and is structured as a subcontract. Proposals must be submitted by August 24, 2026, and the performance location is fixed at the embassy facility in Podgorica with a postal code of 81000. The contract does not specify set-aside status or point of contact details, and all responsibilities center on maintaining secure, compliant identity and access management systems tailored to the operational needs of U.S. government personnel and contractors operating within the embassy’s jurisdiction.

US Embassy Podgorica

POSTED

DEADLINE

Security & Background Investigation ServicesThe contract requires the performance of federal background investigations, including NACI, MBI, and BI, for all personnel, with strict adherence to timelines for initiation and secure handling of sensitive personnel data. The scope of work centers on conducting or managing the end-to-end investigation process to ensure compliance with federal standards and safeguarding the integrity of classified and personal information throughout the lifecycle of each inquiry. This is a subcontract under the Department of Veterans Affairs, specifically managed by the 262-NETWORK Contract Office 22, with a North American Industry Classification System code of 541612. The solicitation was posted on July 24, 2026, and responses are due by August 14, 2026, at 6:00 p.m. The place of performance and agency office address are not specified, indicating the work may be performed remotely or across multiple locations. No set-aside type is designated, and the point of contact information is not provided in the available data.

262-NETWORK Contract Office 22 (36C262)

POSTED

DEADLINE

RFP - Third-Party Independent Benchmarking and Assurance ServicesAll submissions for the RFP titled Third-Party Independent Benchmarking and Assurance Services under solicitation number WS5735871318 must be received by August 3, 2026, at 14:00 EDT, overriding any previously stated deadlines on SAP Business Network or CanadaBuys; responses submitted after this time will be deemed non-responsive. This solicitation is exempt from Trade Agreements under a National Security Exemption and is restricted exclusively to Canadian suppliers in accordance with the Buy Canadian Policy Framework. The requirement is to provide on-demand Third-Party Benchmarking and Assurance Services to support the transformation and renewal of HR and pay systems across the Government of Canada, activated through Task Authorizations. The contract is issued by Public Services and Procurement Canada, with the NAICS code 541612, and all performance will take place within Canada. The primary point of contact is Melanie Desjardins, Contracting Authority, reachable at melanie.desjardins@tpsgc-pwgsc.gc.ca.

Department of Public Works and Government Services

POSTED

DEADLINE

Cybersecurity Compliance and CMMC Level 2 ImplementationThe contract requires comprehensive support to achieve CMMC Level 2 compliance for systems handling covered defense information, encompassing gap assessments against NIST SP 800-171 controls, implementation of required security measures, development of a detailed System Security Plan, and accurate SPRS reporting. All activities must align with Department of Defense cybersecurity standards and ensure full readiness for CMMC certification. The work is scoped to a subcontract under the ACTIVE DEVICES DIVISION and must be performed at a designated location in San Diego, California, with a zip code of 92136-3581. The solicitation, issued under NAICS code 541612 for other professional, scientific, and technical services, has a response deadline of August 3, 2026, and was posted on July 23, 2026, with no set-aside designation specified.

ACTIVE DEVICES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance and Reporting (NIST SP 800-171)The contract requires full implementation of the NIST SP 800-171 security controls on all systems handling covered defense information, ensuring robust protection of sensitive data in alignment with federal cybersecurity standards. Compliance must be maintained throughout the performance period, with continuous monitoring and documentation to demonstrate adherence to each control requirement. Any cyber incident affecting these systems must be reported to the Defense Counterintelligence and Security Agency (DC3) within 72 hours of discovery, with timely and accurate reporting being a mandatory condition of performance. This subcontract is issued under the NAICS code 541612 and is performance-based, with the place of performance located in New Cumberland, Pennsylvania at the ZIP code 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, with the contracting entity being the Electrical Devices Division within the Department of Defense. Failure to meet the cybersecurity requirements or miss the incident reporting window could result in contract noncompliance, financial penalties, or termination. All parties must ensure their systems, personnel, and procedures are fully prepared to meet these obligations prior to contract award.

ELECTRICAL DEVICES DIV

POSTED

DEADLINE

Prohibited Sources Compliance Monitoring (Huawei, ZTE, CCMCs)The contract requires strict monitoring and enforcement to ensure no telecommunications equipment or services from prohibited sources including Huawei, ZTE, or由中国控制的通信公司 are used at any level of performance. Compliance is mandated under DFARS clauses 7017 and 7007, which prohibit the acquisition or use of telecom equipment deemed a national security risk. The subcontract is tied to a specific performance location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and falls under the NAICS code 541612 indicating information technology consulting services. Responsibility for verifying compliance rests with the subcontractor, who must maintain documentation and implement safeguards to prevent inadvertent incorporation of banned equipment or services into systems or solutions delivered under the agreement. The Department of Defense, through the Maritime Supply Chain office, is enforcing this requirement as part of broader supply chain security initiatives. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, leaving a limited window for qualified parties to submit proposals and demonstrate their adherence to the security protocols outlined.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and ensure compliance with DFARS 252.204-7012, mandate for contractors handling Covered Defense Information. This includes establishing and maintaining appropriate technical, administrative, and physical safeguards to protect CUI, as well as establishing procedures for timely cyber incident reporting and completing a self-assessment based on the NIST 800-171 requirements. Documentation of the assessment and ongoing compliance activities must be maintained and made available upon request. The work is a subcontract under the Department of Defense, specifically tied to the Maritime Supply Chain, with performance required at New Cumberland, Pennsylvania, zipcode 17070-5002. The NAICS code 541612 indicates the nature of the effort relates to computer systems design services, suggesting the focus is on technical implementation and integration of security controls. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and bidders must demonstrate capability to meet all federal cybersecurity requirements for defense contractors handling sensitive government data.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

More opportunities from Department Of Defense → FA8555 Aflcmc C3IBK

Same awarding agency

Secure Logistics and Transport of Classified EquipmentThis contract involves the secure transportation and handling of classified hardware, including radios, servers, and test equipment, between designated secure facilities. The primary objective is to ensure the integrity and security of sensitive equipment by maintaining a strict chain-of-custody throughout the transport process, in accordance with Department of Defense (DoD) standards. The subcontract falls under NAICS Code 484220, which covers specialized freight trucking services, and is managed by the Department of Defense agency FA8555 Aflcmc C3IBK. The place of performance for this subcontract is Greenville, and the work requires compliance with all relevant DoD logistics and security protocols to safeguard the classified materials during transit. Although specific solicitation numbers and set-aside details are not provided, the contract demands adherence to stringent handling and transport procedures to mitigate risk and ensure the secure delivery of high-value, sensitive equipment. The secure logistics operation plays a critical role in supporting military communications and infrastructure by facilitating reliable and protected movement of essential classified hardware.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

TS/SCI-Cleared Technical Support and Help DeskThis contract involves providing Tier 2 and Tier 3 technical support for end users of the IBS-CUS system, focusing on troubleshooting, diagnostics, and coordination with engineering teams to ensure system functionality and resolve complex issues. The work requires personnel holding TS/SCI clearance, reflecting the sensitive nature of the support function. The contract is organized as a subcontract under the NAICS code 541519, which pertains to other computer-related services. The sponsoring agency is the Department of Defense, specifically the FA8555 Aflcmc C3IBK office. The place of performance is located in Greenville, though further location details are unspecified. The contract emphasizes high-level technical assistance to maintain the operational integrity of defense-related systems, underscoring the importance of security clearance and technical expertise in executing the support services.

Other Computer Related Services

POSTED

DEADLINE

Classified Software Sustainment and IntegrationThis contract focuses on the sustainment and integration of software baselines for the IBS-CUS system, emphasizing version control, patch deployment, integration testing, and ensuring secure software delivery within a classified environment. The work involves maintaining the integrity and security of software updates in a sensitive setting, requiring specialized handling to comply with classification requirements. The contract falls under the NAICS code 541512, indicating services related to computer systems design and related services. The Department of Defense, specifically the FA8555 Aflcmc C3IBK agency, oversees this subcontract, which is set to be performed primarily in Greenville. The scope includes continuous support and updating of the software to ensure operational effectiveness and security compliance. The contract was posted on March 30, 2026, and is aimed at sustaining critical software infrastructure for defense purposes, ensuring that software versions are properly controlled, patches are deployed securely, and integration testing is thorough to maintain system reliability in a classified operational environment.

Computer Systems Design Services

POSTED

DEADLINE

Secure IT Hardware Maintenance and RepairThe contract involves providing maintenance, repair, and logistics support services for classified communication equipment, including radios, antennas, data center hardware, and secure networking devices, all located within a cleared facility. It is a subcontract under the Department of Defense, specifically under the FA8555 Aflcmc C3IBK office, and focuses on ensuring the operational reliability and security of sensitive IT hardware. The work will be performed primarily in Greenville and falls under NAICS code 811212, which pertains to computer and office machine repair and maintenance. The scope emphasizes handling security-cleared equipment critical to defense communications infrastructure, requiring specialized technical expertise and adherence to stringent security protocols. The contract was posted on March 30, 2026, and supports the ongoing mission readiness of classified and secure information systems.

Computer and Office Machine Repair and Maintenance

POSTED

DEADLINE

Classified Systems Sustainment EngineeringThis contract involves providing on-site engineering support for the sustainment of a classified Department of Defense command, control, intelligence, surveillance, and reconnaissance (C2ISR) network system known as IBS-CUS. The scope of work includes troubleshooting system issues, managing configurations, and integrating legacy systems to ensure continuous and effective operation. The contract is a subcontract under NAICS code 541330, which pertains to engineering services, and is managed by the FA8555 Aflcmc C3IBK office within the Department of Defense. The work will be performed primarily in Greenville, although specific state and postal details are not provided. The contract was posted on March 30, 2026, and focuses on supporting critical sustainment efforts for a highly sensitive and classified defense network, emphasizing the importance of maintaining operational integrity and system reliability. No details on set-aside status or a solicitation number are specified, indicating a targeted subcontract award likely requiring personnel with specialized security clearances and expertise in defense communication systems.

Engineering Services

POSTED

DEADLINE

Lab Transition and Relocation SupportThis contract involves the planning and execution of a secure relocation of the IBS-ES lab environment from its current location in Fairfax, VA, to a Government-owned facility at Robins Air Force Base, Georgia. The project requires specialized support to ensure the safe transfer of sensitive equipment and data associated with the lab, emphasizing security throughout the process. The contract falls under the NAICS code 488210, which pertains to support activities for transportation, indicating the logistical nature of the work. Issued by the Department of Defense through the Aflcmc C3IBK office, this is a subcontract opportunity aimed at facilitating the physical move and reestablishment of the lab environment at the new site. The contract posting date is January 26, 2026, and the primary place of performance is identified as Fairfax, VA, where the lab is currently based before relocation. The focus is on maintaining operational continuity and secure handling during the transition to ensure that all critical research and development functions resume smoothly at Robins AFB.

Support Activities for Rail Transportation

POSTED

DEADLINE

Configuration Management and Spares SupportThis contract focuses on managing system configuration baselines and providing comprehensive support for IBS-ES hardware and software components. It includes the supply of spare parts and assistance with repairs and upgrades, ensuring that the systems remain operational and up-to-date. The contract is set as a subcontract under the NAICS code 423490 and is managed by the Department of Defense’s FA8555 Aflcmc C3IBK office. The performance location for this contract is Fairfax, Virginia, with the postal code 22033. While specific details such as solicitation number, set-aside type, and point of contact are not provided, the contract reflects a commitment to maintaining technological readiness and support for critical defense infrastructure through configuration management and logistical support.

Other Professional Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Systems Engineering and Integration SupportThis contract involves providing systems engineering and integration support focused on the upgrades, modifications, and integration of the Integrated Battle Station Electronic Systems (IBS-ES) with other defense platforms. The work will utilize Model-Based Systems Engineering (MBSE) practices and Government-owned tools to ensure efficient and effective technical support. The contract is categorized under the NAICS code 541330, which relates to engineering services, specifically within a subcontracting arrangement. The Department of Defense’s FA8555 Aflcmc C3IBK office is overseeing this effort, with the place of performance located in Fairfax, VA, 22033. While the solicitation number and set-aside details are not provided, the contract was posted on January 26, 2026. This engagement underscores a commitment to enhancing defense system interoperability and modernizing key electronic warfare capabilities through advanced systems engineering methodologies.

Engineering Services

POSTED

DEADLINE

Software Maintenance and Technical RefreshThis contract involves providing ongoing software maintenance, bug fixes, version updates, and technical refresh services for the IBS-ES software to ensure it stays current and compatible with defense networks. The work is performed as a subcontract under NAICS code 541512, which covers computer systems design services. The contract is managed by the Department of Defense agency FA8555 Aflcmc C3IBK and is based in Fairfax, Virginia, with the ZIP code 22033. The main objective of this engagement is to maintain the operational effectiveness of the IBS-ES software by implementing timely updates and resolving technical issues. This effort supports the continuous functionality and security compliance of the software within defense network environments, emphasizing the importance of keeping the system up-to-date with evolving technical standards. The contract posting date was January 26, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Technical Data Package (TDP) Development and DocumentationThe contract focuses on the development and validation of a comprehensive technical data package (TDP) for the IBS-ES system, ensuring detailed and structured technical documentation. Key deliverables include the creation and verification of essential documents such as the Software Requirements Specification (SRS), System/Subsystem Design Description (SSDD), Interface Control Document (ICD), and the Requirements Traceability Verification Matrix (RTVM). This documentation is intended to facilitate future competitive opportunities related to the IBS-ES system by providing clear, standardized, and validated technical information. Awarded as a subcontract under the NAICS code 541330, the contract is managed by the Department of Defense through the FA8555 Aflcmc C3IBK office. The place of performance is located in Fairfax, Virginia, with a focus on ensuring the technical package meets all specified standards and requirements. This effort supports long-term sustainment and modernization by enabling informed decision-making and streamlined communication between stakeholders involved in future IBS-ES system competitions.

Engineering Services

POSTED

DEADLINE