This Subcontract opportunity from Government of Canada was posted on May 20, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and Software Media Safeguarding

Closed

International

Submission Closed05/26/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541690

New

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

DEADLINE

Independent Security Assessment and Authorization (A&A)This subcontract opportunity is for the Independent Security Assessment and Authorization (A&A) project supporting the California Department of Consumer Affairs. The selected provider will perform independent third-party security testing and compliance auditing for prime contractors, ensuring adherence to NIST SP 800-53 and California SAM/SIMM standards. Key deliverables include annual security testing, vulnerability scanning, the generation of Independent Security Assessment Reports, and the validation of Plans of Action and Milestones. The procurement is categorized under NAICS code 541690. Interested parties must submit their responses by the deadline of December 8, 2026. Further details regarding the solicitation can be accessed through the Cal eProcure portal.

California Department of Consumer Affairs

POSTED

DEADLINE

Life Safety and Accessibility Compliance SpecialistThe Life Safety and Accessibility Compliance Specialist subcontract involves providing specialized regulatory reviews for prime contractors working on City of Hamilton corporate facility projects in Canada. The selected provider will be responsible for inspecting facilities to ensure fire and life safety code compliance and conducting AODA accessibility audits to identify and document physical barriers. The primary deliverables for this engagement are detailed deficiency reports and professional recommendations for necessary life safety and accessibility upgrades. To qualify for this role, the contractor must hold professional certification as either a Certified Fire Protection Specialist or an Accessibility Consultant. Interested parties must submit their responses by the deadline of December 8, 2026. This opportunity is categorized under NAICS code 541690 and is managed through the City of Hamilton's procurement system.

POSTED

DEADLINE

Digital Accessibility AuditorThe Digital Accessibility Auditor subcontract involves providing independent accessibility validation for prime contractors working on University of Maryland Global Campus projects. The selected provider will be responsible for testing learning modules and platforms to ensure full compliance with Section 508 and WCAG 2.1 AA standards. Key deliverables include the production of Accessibility Conformance Reports using VPAT version 2.4 or later, along with comprehensive audit documentation and the development of strategic remediation plans to address any identified accessibility gaps. This opportunity is categorized under NAICS code 541690 and was posted on November 6, 2026. Interested parties must submit their responses by the deadline of November 20, 2026, at 3:00 PM. The contract is managed through the state of Maryland's procurement system.

POSTED

DEADLINE

CMMC Level 2 Compliance SupportThis subcontract for CMMC Level 2 Compliance Support focuses on providing cybersecurity assessments and remediation services for prime contractors associated with DLA Weapons Support Land Supply Chain projects. The primary objective is to conduct CMMC Level 2 self-assessments and implement necessary safeguards to protect covered defense information, ensuring strict adherence to DFARS 252.204-7012 and NIST SP 800-171 frameworks. The final deliverables include a comprehensive compliance report and a completed self-assessment. The project is managed under NAICS code 541690 for the Department of Defense and will be performed in Corpus Christi, Texas. Interested parties should note the response deadline of November 16, 2026, for this specific cybersecurity initiative.

DLA WEAPONS SUPPORT LAND SUPPLY CHAIN

POSTED

DEADLINE

Privacy Impact Assessment (PIA) SpecialistThe Regional District of Nanaimo is seeking a Privacy Impact Assessment Specialist to provide expert privacy consulting for prime contractors involved in data collection projects. The selected subcontractor will be responsible for developing critical documentation regarding survey methodology, data storage, security, and retention practices to ensure the successful completion and approval of a Privacy Impact Assessment. A deep professional knowledge of the Freedom of Information and Protection of Privacy Act is required for this role. The primary deliverables for the contract include a comprehensive data management plan and all necessary completed PIA documentation. This opportunity is based in Canada and is categorized under NAICS code 541690.

Regional District of Nanaimo

POSTED

DEADLINE

PPE Program Administration and Sizing ServicesThis subcontract for PPE Program Administration and Sizing Services supports prime contractors on Northern Wasco County PUD projects in The Dalles, Oregon. The selected provider will manage the administrative aspects of clothing programs, which includes conducting employee sizing sessions and ensuring the ordering and issuance of garments are completed within 10 business days. Additionally, the contractor is responsible for maintaining detailed records of garment types and ratings while delivering regular sizing records and inventory reports. Beyond logistics, the contractor must provide essential technical and regulatory guidance to ensure all protective clothing meets OSHA and OAR requirements. Interested parties should note that the response deadline for this opportunity is November 25, 2026, and the services fall under NAICS code 541690.

Northern Wasco County PUD

POSTED

DEADLINE

Global Fire Risk Assessment InspectionsThe Global Fire Risk Assessment Inspections subcontract, issued by FCDO Services, requires the performance of on-site fire risk assessments for prime contractors managing FCDO facility projects. The scope of work involves conducting physical inspections of both owned and rented buildings to identify potential hazards and evaluate overall safety compliance. These services will be delivered across a diverse global portfolio, including sites within the UK, British Overseas Territories, and various international posts. The primary deliverable for this engagement is the production of completed Fire Risk Assessment reports for every inspected site. Interested parties should note that the response deadline for this opportunity is December 11, 2026. The contract is categorized under NAICS code 541690, focusing on specialized professional services to ensure the safety and regulatory compliance of the agency's global infrastructure.

POSTED

DEADLINE

HVIP Performance Measurement and Data AnalysisThe HVIP Performance Measurement and Data Analysis subcontract supports the New Jersey Department of Law and Public Safety by providing specialized data collection and performance measurement for prime contractors. The selected provider will be responsible for developing tracking tools to monitor performance measures and conducting detailed analyses to determine how specific interventions impact retaliation rates. This role requires a high level of expertise in evidence-based model evaluation and strict adherence to victim data privacy laws. Key deliverables for this engagement include the production of comprehensive data reports, performance metrics, and final implementation reports. Interested parties should note that the response deadline is November 24, 2026, and the project falls under NAICS code 541690.

NJ Department of Law and Public Safety

POSTED

DEADLINE

Clinical Research Statistical Analysis ServicesThis subcontract for Clinical Research Statistical Analysis Services supports prime contractors on NIH/NIMHD research network projects. The scope of work involves developing statistical analysis plans, performing analysis on harmonized datasets, and providing essential support to the Data and Safety Monitoring Board. All technical work must be executed using SAS, R, or Stata while strictly adhering to NIH statistical guidelines and peer-review standards to ensure the delivery of validated data outputs and comprehensive statistical analysis reports. The project is associated with the National Institutes of Health and the Department of Health and Human Services, with the place of performance located in Bethesda. Interested parties should note the response deadline of November 23, 2026. The opportunity is categorized under NAICS code 541690, focusing on specialized biostatistical expertise to maintain the integrity of clinical research data.

National Institutes Of Health Nichd

POSTED

DEADLINE

NIST Compliance and Security Control MappingThis subcontract opportunity, titled NIST Compliance and Security Control Mapping, is issued by the Department of Defense IT Contracting Division for security auditing and mapping of prototypes on DISA E-ICAM projects. The selected provider will be responsible for mapping prototype functions to NIST SP 800-53 controls and ensuring strict alignment with the DoD Enterprise ICAM Reference Design and Desired Solution Attributes. The scope of work requires the application of NIST SP 800-53 and NIST SP 800-162 frameworks to produce comprehensive compliance matrices and security validation documentation. Qualified candidates must possess NIST certification or expert-level knowledge in the specified frameworks. The solicitation was posted on November 6, 2026, with a response deadline of November 30, 2026. This requirement falls under NAICS code 541690 and is designed to support prime contractors in meeting federal security standards for critical identity, credential, and access management infrastructure.

It Contracting Division - PL84

POSTED

DEADLINE

MRI Safety Consulting and Program ManagementThis subcontract for MRI Safety Consulting and Program Management supports prime contractors on projects for the Department of Veterans Affairs Central California Health Care System. The selected provider will deliver subject matter expertise to establish and maintain MR safety and quality assurance programs, which includes developing local safety rules, creating MRI-conditional implant protocols, and conducting root cause analyses for adverse events in accordance with ACR MR Safety standards. Qualified candidates must hold certification from the ABR, ABMP, or CCPM to ensure professional oversight of the program. Key deliverables include comprehensive MR Safety Program documentation and specific device protocols. The work is associated with NAICS code 541690 and will be performed at 500 North Santa Fe Street.

261-NETWORK Contract Office 21 (36C261)

POSTED

about 22 hours ago

DEADLINE

in 6 days

AI Contract Overview

The contract titled Cybersecurity and Software Media Safeguarding requires strict adherence to protocols ensuring all delivered software media—whether physical or digital—are free from malware, viruses, or any unauthorized code. This mandate applies to every stage of the software delivery lifecycle and necessitates comprehensive scanning procedures, official certification of cleanliness, and the use of secure transfer methods to prevent tampering or contamination. The responsibility for compliance rests entirely with the subcontractor, who must implement and document rigorous security measures that align with federal cybersecurity standards. Issued by Shared Services Canada under the Government of Canada, this subcontract is classified under NAICS code 541690 and is open for response until May 26, 2026. Performance is expected to occur across Canada, with no specific geographic limitations beyond the national scope. While no set-aside provisions are specified, the contract emphasizes integrity in software supply chains, demanding verifiable evidence of security practices and a commitment to safeguarding federal systems from digital threats. All parties involved must operate under the assumption that any failure to meet these criteria could result in rejection of delivery and potential contractual penalties.

General Info

Contract ensures malware-free software delivery with secure protocols for Canadian government cybersecurity.

Agency

Government of Canada → Shared Services Canada

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Canada, CAN

Set-Aside

NONE

Documents

This scope was carved out of REQ208283.

The full solicitation package (20 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Magnet/ GrayKey 26/27 - RCMP

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedMay 20

subcontract

Response DeadlineMay 26

Deadline has passed

Submission Closed

05/26/2026, 04:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Shared Services Canada

ContactsNo contacts available

OfficeN/A

Organization / Agency

Government of Canada → Shared Services Canada

Office AddressN/A

ContactsNo contact information available

Full Description

Ensure delivered software media (physical or digital) are free of malware, viruses, or unauthorized code through scanning, certification, and secure transfer protocols.

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS