Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity & RMF Compliance Support

Active

Federal

Response Deadline08/12/2026, 02:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires ongoing cybersecurity monitoring and full support for Risk Management Framework (RMF) compliance for a Department of Defense medical information technology system operating at Impact Levels 4 and 5. This includes the preparation and maintenance of all necessary RMF documentation, active management of Plans of Action and Milestones (POA&Ms), and sustained support to maintain the Authority to Operate - Continuous (ATO-C) status. The work is critical to ensuring the system meets rigorous DoD cybersecurity standards and remains compliant with federal and military regulations governing protected health information and critical infrastructure. Performance is centered in Williamsburg, Virginia, with a deadline for responses set for August 12, 2026. The contract is classified as a subcontract under NAICS code 541612, indicating it involves computer systems design and related services, specifically targeting cybersecurity and compliance support. The contracting activity is the Naval Supply Systems Command Fleet Logistics Center Norfolk, operating under the broader Department of Defense, and the service is essential to maintaining the operational integrity and security posture of a high-sensitivity medical IT environment.

General Info

Cybersecurity monitoring and RMF compliance support for DoD medical IT system at Impact Levels 4 and 5 in Williamsburg, Virginia.

Agency

Department Of Defense → Navsup Flt Logistics Ctr NorfolkView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

Williamsburg, VA, 23185, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 5

subcontract

Response DeadlineAug 12

Submission deadline

Response Deadline

08/12/2026, 02:00:00 PM UTCin 6 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Navsup Flt Logistics Ctr Norfolk

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → Navsup Flt Logistics Ctr Norfolk

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Provide continuous cybersecurity monitoring, RMF compliance documentation, POA&M management, and ATO-C maintenance for a DoD medical IT system operating at IL4/IL5.

Similar Contracts

Same NAICS industry code

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider to deliver its Employee Assistance Program as part of its Total Rewards Package, designed to support employees and their families through confidential, 24/7 assessment, referral, and intervention services. The program offers comprehensive resources covering lifestyle and daily living needs, family support, crisis intervention, and financial and legal assistance, accessible both online and via phone. These services aim to enhance employee wellbeing, promote engagement, and reinforce the Port’s broader mission under its Century Agenda to become a highly effective public agency by retaining and attracting talented individuals essential to its operations. The solicitation, posted on July 31, 2026, is classified under NAICS code 541612 and is managed by the Port’s Human Resources department. Primary contact for the opportunity is Mazarine Ebengho Kyalumba, with Kecia Reichstein serving as Project Manager, and all communications should be directed through their provided contact information. The program is not tied to a specific solicitation number and remains in forecast status, indicating an upcoming procurement process to secure a qualified vendor capable of delivering high-quality, scalable EAP services aligned with the Port’s commitment to workforce support and organizational effectiveness.

Human Resources

POSTED

about 11 hours ago

DEADLINE

Telephonic Monitoring & Call Center SupportThe contract involves providing telephonic monitoring and call center support to maintain regular check-ins with youth participants, ensuring compliance with program requirements and ongoing behavioral monitoring. Staff are responsible for documenting all interactions in detailed logs, identifying potential risks such as signs of distress, noncompliance, or safety concerns, and promptly escalating these issues to relevant case managers for intervention. The work requires consistent communication, accurate recordkeeping, and the ability to recognize and respond to emerging patterns that may require heightened attention or support. This position operates under the auspices of Clackamas Community College in Oregon, with the work expected to be performed remotely through a call center infrastructure. The solicitation is classified as a subcontract under NAICS code 541612, which corresponds to management consulting services, indicating the focus is on procedural oversight and support services rather than direct clinical care. Proposals must be submitted by August 26, 2026, and the opportunity was posted on August 4, 2026.

Clackamas Community College

POSTED

DEADLINE

In-Person Field Monitoring & Home VisitsThe contract involves conducting scheduled and unscheduled in-person field visits with youth and their families to monitor compliance with probation conditions, perform home inspections, and submit detailed reports on observations and outcomes. These visits are critical to ensuring welfare, safety, and adherence to court-mandated requirements, requiring trained personnel to assess living conditions, family dynamics, and behavioral adherence in real-world settings. The work demands consistent documentation, professional judgment, and coordination with community and justice system stakeholders. The contract is categorized as a subcontract under NAICS code 541612, posted on August 4, 2026, with a response deadline of August 26, 2026. It is sponsored by Clackamas Community College in Oregon, though specific location details for performance or contact information are not provided. The solicitation does not specify a set-aside type or detailed procurement structure, suggesting a general competitive bidding process open to eligible subcontractors with relevant field experience in social services, juvenile probation support, or community monitoring.

Clackamas Community College

POSTED

DEADLINE

GJ27-11 UHC Compensation Practices and Pay Equity Review Services

Solicitation # GJ27-11

Utah Housing Corporation is soliciting proposals for GJ27-11, a procurement for Compensation Practices and Pay Equity Review Services, with questions due by August 19, 2026, at 5 p.m. Mountain Time to Valerie Terry at vterry@uthc.org. Technical and cost submissions are both due by August 28, 2026, at 5 p.m. Mountain Time, with technical responses sent to Valerie Terry and cost responses sent to Travis Kartchner at tkartchner@uthc.org. Vendors must adhere to a strict 1GB file size limit per upload and are responsible for fully reviewing the solicitation document, as compliance with all requirements is mandatory. This opportunity is not administered by the Division of Purchasing, and any award information will not be posted publicly; vendors must contact the designated UHC representatives directly for updates. The solicitation will be closed upon the deadline, but responses received after the posting is removed will still be evaluated according to the official solicitation terms.

POSTED

DEADLINE

Town of Whitecourt - Request for Proposal - Town of Whitecourt Compensation Review

Solicitation # AB-2026-05493

The Town of Whitecourt, located 170 kilometers northeast of Edmonton along Highway 43 and accessible via Highway 16, is seeking qualified consulting firms to conduct a comprehensive employee compensation review. With a population of approximately 15,000 and serving as the largest urban center between Edmonton and Grande Prairie, the Town employs around 235 individuals across 116 positions to deliver essential municipal services including administration, finance, public works, recreation, and utility operations for water, wastewater, and waste. As part of its commitment to maintaining a competitive and equitable compensation structure, the Town conducts a formal review every three years or as needed, ensuring alignment with industry standards in similar municipalities. The review will evaluate salary grids and benefits packages, with the goal of sustaining employee retention and recruitment through a fair and market-competitive approach. A dedicated Compensation Committee, composed of staff representatives from across departments, will support the process by identifying comparable municipalities and job roles, designing benefit survey instruments, and reviewing draft recommendations. The Town operates in a non-union environment and considers its employees its most valuable asset, underscoring the importance of this review in reinforcing internal equity and external competitiveness. Proposals are due by August 27, 2026, and inquiries should be directed to Carizza Perrin, HR Advisor, via the contact information provided. The solicitation is publicly posted under number AB-2026-05493 on the Alberta purchasing portal.

Town of Whitecourt

POSTED

DEADLINE

CUI System Architecture Documentation and Compliance PlanningThe contract requires the development and comprehensive documentation of a system architecture for systems that handle Controlled Unclassified Information, with specific focus on defining security boundaries, mapping data flows, and aligning controls to meet NIST SP 800-171 requirements. The scope includes a detailed remediation plan designed to achieve full compliance across all 110 security requirements outlined in the standard, ensuring that every control is addressed, implemented, and documented. The architecture must clearly articulate how CUI is protected across the system environment, including technical, administrative, and physical safeguards. This subcontract is tied to the Department of Defense and specifically supports the MARITIME SUPPLY CHAIN ESOC BUYS, with performance required at Robins AFB, Georgia, zip code 31098-1887. The solicitation was posted on August 4, 2026, and responses are due by August 7, 2026, under NAICS code 541612, which categorizes the work under systems design and integration services. The contract emphasizes precise documentation and actionable compliance planning, leaving no room for partial adherence, and requires the contractor to deliver a complete, auditable framework that enables sustained CUI protection in alignment with federal standards.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

NIST SP 800-171 Compliance Assessment and ReportingA cybersecurity assessment is required to evaluate compliance with NIST SP 800-171 Revision 1 for systems that handle Controlled Unclassified Information, ensuring all applicable security controls are properly implemented and documented. The assessment must be conducted in accordance with federal standards and results must be formally reported through the Supplier Performance Risk System. The work is part of a subcontract under the Department of Defense and is performance-based at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation, issued under NAICS code 541612 for other scientific and technical consulting services, was posted on August 4, 2026, and responses are due by August 7, 2026. All deliverables must align with the specified compliance framework and be submitted via the designated government system within the deadline.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)This contract requires the implementation, assessment, and documentation of cybersecurity controls outlined in NIST SP 800-171 for systems that handle Controlled Unclassified Information, ensuring alignment with federal standards for protecting sensitive but unclassified data. The work involves a thorough evaluation of existing security postures, deployment of required controls, and the creation of a Plan of Action and Milestones to address any deficiencies identified during the assessment process. All activities must be meticulously documented to demonstrate compliance and support audit readiness. The contract is structured as a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain ESOC Buys office, with performance expected to take place in Jacksonville, Florida, at the designated zip code 32226-3404. It is solicited under NAICS code 541612, indicating the focus on computer systems design and related services, and the response deadline is August 17, 2026. The solicitation is available through the DIBBS platform, and while no specific set-aside status or point of contact is provided, the emphasis is on delivering a fully compliant and auditable cybersecurity framework aligned with NIST guidelines.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Cybersecurity Compliance and CMMC Assessment SupportThis contract supports defense contractors handling Controlled Unclassified Information by providing third-party CMMC Level 2 assessment and NIST SP 800-171 compliance services. The effort is focused on ensuring that subcontractors meet the required cybersecurity standards to protect sensitive defense data, with the assessments conducted in accordance with the Cybersecurity Maturity Model Certification framework. The work is intended to validate and strengthen the security posture of contractors operating within the Department of Defense supply chain, particularly those managing CUI across their systems and processes. The contract is issued as a subcontract under the FLUID HANDLING DIVISION of the Department of Defense, with performance required at KEYPORT, WA 98345-7610. The North American Industry Classification System code 541612 indicates the service falls under management consulting services, specifically relating to administrative management and general management consulting. The solicitation was posted on August 4, 2026, with responses due by August 17, 2026, and is accessible through the DIBBS platform. While no set-aside classification is specified, the scope is clearly targeted toward specialized cybersecurity compliance providers capable of delivering authoritative, audit-ready assessments aligned with federal defense cybersecurity mandates.

FLUID HANDLING DIVISION

POSTED

DEADLINE

Cybersecurity & CUI Safeguarding SupportThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information, ensuring all systems handling CUI meet federal cybersecurity standards. This includes conducting regular system assessments to validate compliance, promptly reporting any security incidents, and maintaining comprehensive documentation to demonstrate adherence to the required controls. The work is scoped as a subcontract under a Women-Owned Small Business Set-Aside, with the North American Industry Classification System code 541612 indicating specialized professional services related to cybersecurity and compliance support. The solicitation was posted on August 4, 2026, with responses due by August 19, 2026, and is managed by the Strategic Acquisition Program Directorate within the Department of Defense, though specific performance location and point of contact details are not provided in the data.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

DEADLINE

Past Performance and Proposal Support ServicesThe contract is titled Past Performance and Proposal Support Services and is structured as a subcontract under a Small Business Set Aside - Total designation, meaning only eligible small businesses may respond. It falls under NAICS code 541612, which corresponds to Management Consulting Services, indicating the work involves strategic support rather than technical execution. The solicitation was posted on August 4, 2026, with a firm response deadline of August 13, 2026, at 9:00 PM. The awardee will be responsible for compiling past performance references, drafting compelling proposal narratives, and ensuring comprehensive compliance documentation for a prime bid submission. The contracting agency is the FWS Sat Team 3 within the Department of the Interior, though no specific place of performance or point of contact details are provided, suggesting the work may be performed remotely or flexibly. No official solicitation number is listed, and the UI link directs to a SAM.gov workspace where full details and submission requirements can be accessed.

POSTED

DEADLINE

AI Security, Privacy & Risk Compliance AssessmentThe contract requires a comprehensive assessment of artificial intelligence use cases to ensure alignment with federal compliance standards including JISF, FISMA, NIST, and the Privacy Act. The work will focus on identifying and evaluating risks associated with personally identifiable information exposure, algorithmic bias, and ethical implications of AI deployment within federal operations. The evaluation must provide actionable insights into how AI systems meet or fall short of established security, privacy, and accountability frameworks, with an emphasis on mitigating potential harms to individuals and institutional integrity. Performance is expected to be carried out in Washington, D.C., with a submission deadline of September 4, 2026, and the solicitation was posted on August 4, 2026. This subcontract falls under NAICS code 541612, indicating it pertains to management consulting services, specifically those involving technical and regulatory compliance analysis. The contracting entity is the Judicial Branch’s Procurement Management Division, underscoring the importance of maintaining judicial independence and data protection standards. The scope demands technical expertise in federal information security protocols and ethical AI governance, with deliverables expected to support decision-making around lawful, equitable, and secure AI adoption across federal judicial functions.

Aousc-Procurement Management Division

POSTED

DEADLINE

More opportunities from Department Of Defense → Navsup Flt Logistics Ctr Norfolk

Same awarding agency

Zero-Day System Deployment & Rapid ExecutionThe contract titled Zero-Day System Deployment & Rapid Execution seeks to enable immediate operational capability for the Warehouse Management System through pre-hardened packaging, DevSecOps automation, and Infrastructure-as-Code methodologies, ensuring zero-day execution upon deployment. The work requires the integration of secure, standardized build pipelines and automated provisioning techniques to eliminate delays between system delivery and mission readiness, with a focus on reducing human intervention and enhancing system resilience. All solutions must align with Department of Defense cybersecurity and compliance standards while maintaining agility for rapid scaling and adaptation in dynamic operational environments. The subcontract is issued by the Naval Supply Systems Command Fleet Logistics Center Norfolk under the NAICS code 541511 for Custom Computer Programming Services, with performance required in Williamsburg, Virginia, ZIP 23185. Proposals must be submitted by August 12, 2026, at 2:00 PM EDT, and the opportunity was posted on SAM.gov on August 5, 2026. No set-aside classification is specified, and the contract does not list a point of contact, requiring bidders to reference the official SAM.gov posting for additional procedural details or clarifications.

Custom Computer Programming Services

POSTED

about 16 hours ago

DEADLINE

DMLSS Integration & Interoperability EngineeringEngineer and implement a seamless integration between the new Warehouse Management System and the Defense Medical Logistics Standard Support system to enable real-time supply chain tracking and reporting for Navy medical logistics operations. The work requires deep technical expertise in system interoperability, data synchronization, and secure government logistics environments, with a focus on ensuring accurate and timely availability of medical supplies across Navy medical facilities. The subcontract is targeted at firms capable of delivering robust, scalable, and compliant integration solutions that meet stringent Department of Defense standards for data integrity, operational reliability, and cybersecurity. Performance is required to be conducted in Williamsburg, Virginia with a response deadline of August 12, 2026, and the project falls under NAICS code 541512 for Computer Systems Design Services. The contracting activity is managed by the Naval Supply Systems Command Fleet Logistics Center Norfolk under the Department of Defense, and the subcontract will support critical medical logistics readiness by aligning modern warehouse automation with legacy defense medical logistics infrastructure. Bidders must demonstrate proven experience with DMLSS systems, federal supply chain protocols, and integration with military medical logistics platforms.

Computer Systems Design Services

POSTED

about 16 hours ago

DEADLINE

Cloud-Native Platform Development & ContainerizationThe contract requires the development and deployment of a cloud-native, containerized Warehouse Management System tailored for the Medical Community of Interest network, utilizing hardened IronBank containers to meet stringent Department of Defense security standards. The system must fully comply with Impact Level 4 and 5 requirements and align with Risk Management Framework controls, ensuring robust data protection and operational integrity in a high-security environment. All components must be designed for scalability, resilience, and seamless integration within the DoD’s cloud infrastructure, with a focus on zero-trust architecture and secure container lifecycle management. Performance is to be conducted in Williamsburg, Virginia, with a submission deadline of August 12, 2026, and the work is structured as a subcontract under the NAICS code 541511 for custom computer programming services. The project emphasizes adherence to DoD-mandated secure development practices and the use of only approved container images from IronBank, rejecting any unvetted or non-compliant third-party software. The successful contractor must demonstrate expertise in deploying classified-level applications on DoD networks, with proven experience in containerization, secure cloud environments, and compliance with DoD Impact Level requirements to support critical medical logistics operations.

Custom Computer Programming Services

POSTED

about 16 hours ago

DEADLINE

Total Bird Exclusion Netting System Removal and Installation Project

Solicitation # N0018926QW293

The contractor is required to fully remove and replace existing bird netting at Hangar 13 on Joint Base Andrews in Maryland with a new bird exclusion system designed to permanently prevent birds from nesting or roosting inside the facility. This includes all labor, equipment, tools, materials, transportation, and supervision needed to seal off all entry points in the walls and ceiling, ensuring comprehensive avian exclusion. The scope of work demands complete removal of the current netting and installation of a durable, properly engineered system tailored to the structural features of the hangar. This solicitation, titled Total Bird Exclusion Netting System Removal and Installation Project with number N0018926QW293, is a Small Business Set Aside under NAICS code 561710 and was posted on August 5, 2026, with proposals due by August 7, 2026. The contracting activity is managed by the Naval Supply Systems Command Fleet Logistics Center Norfolk in Virginia, and performance will occur exclusively at the Maryland location. All inquiries should be directed to Summer Crane, the primary point of contact, via email or phone provided in the solicitation details.

Exterminating and Pest Control Services

POSTED

about 16 hours ago

DEADLINE

USNA Marine Navigation Radar, AIS, and Communications Equipment

Solicitation # N0018926QL316

The U.S. Naval Academy is seeking commercial marine navigation, radar, Automatic Identification System (AIS), communications, and associated network equipment for installation on Yard Patrol vessels through a Firm Fixed Price contract under Solicitation Number N0018926QL316. This requirement, managed by the NAVSUP Fleet Logistics Center Norfolk, is classified under NAICS code 334511 and PSC 6605, and is set aside entirely for small businesses. Vendors must be registered in the System for Award Management (SAM) to be eligible for award, with registration required before contract award and maintained throughout performance and final payment. Quotes must be submitted by August 11, 2026, and all equipment must be delivered prior to September 30, 2026. The contracts will support operations at the USNA in Annapolis, Maryland, and proposals must demonstrate technical capability to meet performance standards. Information and registration details are available through SAM.gov, and inquiries should be directed to Daniel Petro or Cody Ellis at the provided contact details.

Search, Detection, Navigation, Guidance, Aeronautical, and Nautical System and Instrument Manufacturing

POSTED

about 16 hours ago

DEADLINE

Warehouse Modernization

Solicitation # N0018926QB121

The Navy Medical Readiness Logistics Command at Cheatham Annex in Williamsburg, Virginia is seeking input for the modernization of its warehouse operations to enhance efficiency and readiness support. The solicitation, identified as N0018926QB121, was posted on August 5, 2026, with responses due by August 12, 2026, and falls under the NAICS code 541512 for computer systems design services, indicating a focus on technology-driven improvements. The project is not set aside for any specific small business category, and the effort is being led by the Naval Supply Systems Command Fleet Logistics Center in Norfolk, Virginia. The work will take place at the Cheatham Annex facility, and the primary point of contact is Helen Tyson, reachable via email for inquiries. Additional details on scope and requirements are outlined in the attached Performance Work Statement and Sources Sought notice, which prospective vendors should review to understand the full scope of modernization objectives.

Computer Systems Design Services

POSTED

about 16 hours ago

DEADLINE

Surveying and Site Layout

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

in about 11 hours

Paving and Asphalt Milling

Highway, Street, and Bridge Construction

POSTED

DEADLINE

in about 11 hours

Concrete Forming and Placement

Poured Concrete Foundation and Structure Contractors

POSTED

DEADLINE

in about 11 hours

Plumbing and Piping Systems Installation

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

in about 11 hours

Electrical Installation and Wiring Services

Electrical Contractors and Other Wiring Installation Contractors

POSTED

DEADLINE

in about 11 hours

IT PIE Software License and Subscription ManagementVAE, Inc. grants a perpetual license to resell or distribute its IT PIE software, coupled with an annual subscription service that includes license key management and renewal administration. The agreement permits authorized distribution under terms that ensure ongoing support and compliance with subscription requirements, linking software access to timely renewal cycles. The contract is structured as a subcontract under the NAICS code 423490, issued by the Department of Defense through the Naval Supply Systems Command Fleet Logistics Center Norfolk, with performance centered in Washington, D.C., and a response deadline of August 6, 2026. All license distribution activities must adhere to the defined renewal and key management protocols to maintain valid and compliant use across end users.

Other Professional Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

in about 10 hours