Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Assessment and Compliance Services

Active

Federal

Response Deadline11/13/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity Assessment and Compliance Services subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The scope of work involves performing vulnerability scanning, penetration testing, and security configuration checks, alongside red-team and blue-team assessments. All activities must adhere to NIST SP 800-series and DoDI 8500.01 standards, with a focus on architectural reviews, cyber incident reporting, and DoDC3 compliance. Key deliverables include detailed vulnerability reports and incident response logs. Due to the sensitive nature of the work, personnel are required to hold high-level security clearances. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 13, 2026.

General Info

Agency

Department Of Defense → Defense Health Agency (dha)

NAICS

541519 - Other Computer Related Services

Place of Performance

USA

Set-Aside

NONE

Documents

This scope was carved out of RC3_20261030.

The full solicitation package (13 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

DHA Enterprise Referral Care Coordination Center Contract (RC3)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 30

subcontract

Response DeadlineNov 13

Submission deadline

Response Deadline

11/13/2026, 05:00:00 PM UTCin 14 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Defense Health Agency (dha)

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Defense Health Agency (dha)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs vulnerability scanning, penetration testing, and security configuration checks for prime contractors on Defense Health Agency (DHA) projects. Conducts red-team/blue-team assessments and architectural reviews per NIST SP 800-series and DoDI 8500.01. Manages cyber incident reporting and DoDC3 standards compliance. Requires high-level security clearances. Delivers vulnerability reports and incident response logs.

Similar Contracts

Same NAICS industry code

Gmetrix Platform Technical Support Services

Alabama State Department of Education, CTE \ Workforce Development

POSTED

about 3 hours ago

DEADLINE

GeoCortex Software Maintenance and SupportThis subcontract opportunity with Snohomish County in Washington focuses on providing software maintenance and technical support for GIS projects. The selected vendor will be responsible for maintaining existing GeoCortex software licenses to ensure overall system stability and continuous operation. To be eligible, the contractor must be an Original Equipment Manufacturer or an authorized provider of VertiGIS/GeoCortex software. The primary objective of the contract is to guarantee the ongoing validity of software licenses and the availability of professional technical support. Interested parties should note that the response deadline is November 17, 2026, and the work falls under NAICS code 541519.

Snohomish County

POSTED

about 7 hours ago

DEADLINE

Software, VertiGiS Geocortex Maintenance & Support

Solicitation # SS-26-0864AD

Snohomish County is seeking a single source procurement for software maintenance and support for its existing GeoCortex software, which has been in operation since 2010. Under the authority of Snohomish County Code 3.04.180, the county intends to award the contract to VertiGIS North America, LTD to ensure the continued maintenance of existing licenses. The procurement is estimated to span a five-year period of performance, with an initial year one cost of 12,000 USD and a total estimated five-year expenditure of 65,000 USD. This solicitation, identified as SS-26-0864AD, is currently listed as a sources-sought notice and is not a request for competitive bids. However, interested parties may submit a statement of capability and interest, including their firm's contact information and a description of their ability to provide the required functionality and integration. All responses must be submitted by November 17, 2026, at 1:00 pm Pacific local time.

Snohomish County

POSTED

about 7 hours ago

DEADLINE

Online Manual Technical Support & Maintenance

Lincolnshire County Council

POSTED

about 8 hours ago

DEADLINE

Healthcare Cybersecurity AuditorThe Healthcare Cybersecurity Auditor subcontract for the University of Michigan involves performing critical security validation and privacy impact assessments for prime contractors on healthcare projects. The scope of work includes auditing physical security safeguards, validating cloud segmentation, and reviewing encryption methods to ensure full HIPAA compliance. Additionally, the contractor is responsible for completing HECVAT v4+ submissions and delivering a comprehensive security assessment report along with a risk mitigation plan. This opportunity is categorized under NAICS code 541519 and was posted on October 30, 2026. Interested parties must submit their responses by the deadline of December 30, 2026. Further details and submission processes can be accessed through the University of Michigan's procurement portal.

University of Michigan

POSTED

about 9 hours ago

DEADLINE

IT Security and Compliance MonitoringThe IT Security and Compliance Monitoring subcontract focuses on maintaining the integrity and regulatory adherence of technology systems for prime contractors supporting the NASA Goddard Space Flight Center in Greenbelt, Maryland. The scope of work involves the implementation of Cyber Supply Chain Risk Management plans, the secure management of Controlled Unclassified Information, and the execution of rigorous security audits in accordance with NPR 2810.1F and NIST SP-500 series standards. The selected provider will be responsible for delivering comprehensive security compliance reports and developing strategic risk mitigation plans to protect critical infrastructure. This opportunity falls under NAICS code 541519, with a response deadline set for November 13, 2026.

NASA Goddard Space Flight Center

POSTED

about 11 hours ago

DEADLINE

Corporate 1000 Card Format ProgrammingThis small business set-aside subcontract involves specialized programming of 10,000 Corporate 1000 card formats for prime contractors supporting the NASA Shared Services Center. The project requires the delivery of programmed units that maintain serialized numbering sequences and adhere to specific site identification requirements established by the Langley Research Center in Hampton, Virginia. To execute this work, the contractor must possess manufacturer authorization and utilize proprietary programming tools from HID Global. The contract falls under NAICS code 541519 and is managed through the National Aeronautics And Space Administration.

NASA Shared Services Center

POSTED

about 11 hours ago

DEADLINE

Composicad Annual Maintenance and SupportThis subcontract, titled Composicad Annual Maintenance and Support, is issued through the NASA Shared Services Center to provide essential technical support and software maintenance for prime contractors working on NASA Marshall Space Flight Center projects. The primary objective is to ensure the continued functionality and optimization of Composicad Gold 4 Axes software, which is critical for the analysis and manufacture of composite overwrapped pressure vessels. The scope of work includes the delivery of annual maintenance updates and consistent technical support availability. Classified under NAICS code 541519, the contract focuses on maintaining specialized software capabilities to support high-precision aerospace manufacturing processes.

NASA Shared Services Center

POSTED

about 11 hours ago

DEADLINE

PII and Privacy Act Compliance MonitoringThis subcontract, titled PII and Privacy Act Compliance Monitoring, is issued by the USCIS Contracting Office under the Department of Homeland Security. The agreement establishes rigorous data security safeguards for prime contractors working on family reunification projects, specifically requiring the implementation of technical and administrative controls aligned with FIPPs and NIST SP 800-17 standards. To ensure the integrity of sensitive information, the contract mandates that all cloud service providers maintain FedRAMP Moderate or ISO 27001 certifications and requires secure protocols for all data transmissions. Operational compliance is maintained through mandatory annual privacy training for all personnel accessing DHS records. The contractor is responsible for providing critical verification and reporting, including training documentation, certificates of data destruction, and formal breach reports. This effort is centered in Washington and falls under NAICS code 541519, with a response deadline set for November 11, 2026.

USCIS Contracting Office(erbur)

POSTED

about 11 hours ago

DEADLINE

Cybersecurity Compliance and Cloud AuthorizationThis subcontract for DLA Troop Support focuses on Cybersecurity Compliance and Cloud Authorization to ensure platform security for prime contractors. The scope of work involves implementing and auditing NIST SP 800-53 moderate and high security controls, configuring CAC/PIV single sign-on with Federal PKI authentication, and maintaining DoD Cloud Computing Security Requirements up to Impact Level 5. The selected provider must hold FedRAMP and NIST SP 800-53 certifications to deliver a secured cloud environment and the necessary Authority to Operate documentation. This opportunity falls under NAICS code 541519, with a response deadline set for November 27, 2026.

DLA Troop Support

POSTED

about 11 hours ago

DEADLINE

CWS Cybersecurity & Identity ManagementThe CWS Cybersecurity and Identity Management subcontract focuses on implementing security architecture and Identity and Access Management for prime contractors operating on U.S. Department of the Treasury enterprise systems. The scope of work includes configuring Multi-Factor Authentication and PIV/CAC authentication using SAML or OpenID Connect, establishing role-based access controls, and managing sensitive document marking to ensure a secure and authenticated system environment. All deliverables must adhere to Treasury security and hosting standards. This opportunity is associated with NAICS code 541519 and is performed in Washington. The response deadline for this requirement is November 30, 2026.

Departmental Offices

POSTED

about 11 hours ago

DEADLINE

in about 1 month

Technical Commissioning and Training SpecialistThis subcontract opportunity for a Technical Commissioning and Training Specialist supports prime contractors on Bureau of Engraving and Printing facility projects in Washington. The selected provider will be responsible for executing the Testing and Commissioning Plan, which includes performing final testing, calibration, and startup self-tests to ensure system readiness. A critical component of the scope involves training MCD personnel on screening workflows and safe operations using manufacturer-approved materials. The contract concludes with the delivery of certified trained operators and the submission of Final Acceptance Test results. This requirement is managed under the Department of the Treasury's Office of the Chief Procurement Officer.

Office Of The Chief Procurement Officer

POSTED

about 11 hours ago

DEADLINE

More opportunities from Department Of Defense → Defense Health Agency (dha)

Same awarding agency

EHR Systems Administration and Technical SupportThe EHR Systems Administration and Technical Support subcontract provides critical technical administration for Electronic Health Record and Health Information Exchange systems supporting prime contractors on Defense Health Agency projects. The scope of work includes managing data flow, implementing data sharing and use agreements, and supporting Phase 0 mobilization within FedRAMP authorized cloud environments. Key deliverables center on maintaining system uptime and ensuring the functionality of integrated EHR appointment modules. Strict adherence to regulatory standards is required, specifically compliance with NIST SP 800-88 Rev 2 and DoDI 8500.01. This opportunity falls under NAICS code 541512 and is associated with the Department of Defense. Interested parties should note the response deadline of November 13, 2026.

Computer Systems Design Services

POSTED

about 11 hours ago

DEADLINE

Healthcare Care Coordination and Patient Navigation ServicesThis subcontract for Healthcare Care Coordination and Patient Navigation Services supports prime contractors on Defense Health Agency projects within the Department of Defense. The scope of work involves managing centralized direct care appointments and providing specialty navigation and care coordination. Operations must adhere to DHA-PM 6000.100, TOM, and TSM standards, utilizing Electronic Health Records, IVR systems, and Capability and Capacity Dashboards to deliver managed patient appointments and detailed coordination logs. Compliance is a critical requirement, as all activities must align with HIPAA and Privacy Act regulations. Additionally, personnel are required to hold full practice level clinical licensing to perform the necessary duties. The opportunity is categorized under NAICS code 621999, with a response deadline set for November 13, 2026.

All Other Miscellaneous Ambulatory Health Care Services

POSTED

about 11 hours ago

DEADLINE

DHA Enterprise Referral Care Coordination Center Contract (RC3)

Solicitation # RC3_20261030

The Defense Health Agency is conducting market research via a Request for Information for the Enterprise Referral Care Coordination Center Contract (RC3). The primary objective is to gather industry feedback on a draft Performance Work Statement to refine requirements for appointing, referral management, and care coordination across all DHA Military Treatment Facilities. The scope of work focuses on centralizing direct care appointments through electronic health records and providing high-quality specialty navigation to achieve first-call resolution for beneficiaries. The project is governed by NAICS code 561110 and requires strict adherence to Access to Care standards, TRICARE regulations, and the Privacy Act of 1974 and HIPAA. The anticipated contract structure includes a five-year period of performance, consisting of a base year that combines a transition period and a base period, followed by four twelve-month option years. Performance will be executed at specified on-site facilities, contractor locations, or approved remote workstations. Key requirements include a detailed transition-in plan due within ten days of award, mandatory cybersecurity incident reporting per DFARS 252.204-7012, and comprehensive staff training through the DHA Learning Management System. Quality is managed via a Quality Assurance Surveillance Plan with specific acceptable quality levels for training and credentialing. Responses to this RFI must be submitted using the provided Excel format by November 13, 2026.

Office Administrative Services

POSTED

about 11 hours ago

DEADLINE

DHA - Offsite Sterile Processing Support Services

Solicitation # HT9427-27-RFI-0001

The Defense Health Agency (DHA) is conducting market research through a Request for Information (RFI) to identify qualified contractors capable of providing offsite sterile processing (SPD) support for various Military Treatment Facilities (MTFs). The primary goal is to enhance service resilience and workload stability by outsourcing the decontamination, assembly, and sterilization of surgical instruments, including minimally invasive surgical cases, power equipment, and Da Vinci accessories. The scope of work requires the contractor to manage the entire logistics chain, including providing transport containers and ensuring the secure, environmentally controlled transportation of contaminated instruments to offsite facilities and the return delivery of sterile inventory. This effort covers numerous MTFs across the United States, with specific critical locations designated as requiring no interruptions in service. Potential providers must adhere to rigorous industry and federal standards, including ANSI/AAMI ST79 and ST58, FDA 21 CFR Part 820, and various OSHA and DOT regulations. While the government has provided a general planning estimate of approximately 2,000 trays per month, final contract terms, award structures, and small business set-aside determinations will be decided based on the capabilities and feedback received from industry respondents. This is strictly a fact-finding mission and does not constitute a formal solicitation or an obligation to award a contract.

Packaging and Labeling Services

POSTED

DEADLINE

DHA Enterprise-Wide Commercial Solutions Opening (CSO)

Solicitation # HT003826SC005

The Defense Health Agency (DHA) has established the Enterprise-Wide Commercial Solutions Opening (CSO), solicitation number HT003826SC005, to identify and acquire commercial products, services, and non-developmental items. Active from August 7, 2026, through August 6, 2027, this initiative seeks commercially available capabilities that can be deployed immediately or modified to meet DHA requirements across its Medical Digital Solutions, Medical Services, and Medical Products portfolios. The government will utilize a variety of award vehicles, including firm-fixed-price FAR-based contracts and Other Transaction (OT) agreements for research, prototyping, and experimental purposes under authorities such as 10 U.S.C. 3458, 3201, 4021, 4022, and 4023. The procurement process is driven by the issuance of specific Areas of Interest (AoI), which define problem statements, objectives, and submission criteria. Submissions undergo a streamlined, multi-phase evaluation process: Phase I involves a pitch or white paper evaluated on a Go/No-Go basis for strategic alignment and feasibility; Phase II may include an optional oral presentation or demonstration to assess technical viability; and Phase III requires a full commercial proposal evaluated on technical merit, cost reasonableness, and past performance. This CSO is administered by the DHACA Defense Healthcare Management Systems Contracting Division and is designed to prioritize cost-effective, commercially viable solutions to enhance healthcare readiness and patient safety.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 1 month ago

DEADLINE

Medical Product SupplierThis subcontract opportunity with the Defense Health Agency under the Department of Defense involves the supply of commercial medical products, devices, and non-developmental items for prime contractors. The scope includes providing off-the-shelf medical consumables and hardware, modifying commercial products to meet specific clinical requirements, and delivering physical prototypes for operational feasibility testing. The contract requires strict adherence to FDA approvals and FAR Part 12 compliance. Performance will be centered in Falls Church, Virginia, under NAICS code 423450. The primary objective is to ensure the delivery of medical hardware and supplies that meet the rigorous standards of the Defense Health Agency.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Commercial Medical Services ProviderThe Commercial Medical Services Provider subcontract supports the Defense Health Agency within the Department of Defense, specifically operating out of Falls Church. The primary objective is to provide commercially available healthcare services and clinical support functions for prime contractors. This includes the delivery of specialized medical services, the implementation of commercial healthcare delivery models, and the testing of service-based prototypes within DHA facilities. To qualify for this role, providers must maintain professional medical licensing and ensure full compliance with Military Health System healthcare standards. The scope of work focuses on delivering validated service-delivery prototypes and professional medical care under NAICS code 621999.

All Other Miscellaneous Ambulatory Health Care Services

POSTED

DEADLINE

Medical Digital Solutions ProviderThe Medical Digital Solutions Provider subcontract supports the Defense Health Agency by supplying and implementing commercially available digital health technologies, software, and platforms. The scope of work includes providing commercial SaaS or on-premise tools, modifying existing capabilities for DHA integration, and developing digital prototypes for testing within the Military Health System. All deliverables must be deployable digital solutions that adhere to FAR Part 12 and DFARS Subpart 212.70 regulations. This opportunity is categorized under NAICS code 541511 and is associated with the Department of Defense. The primary place of performance is located in Falls Church, Virginia. The contract focuses on delivering scalable digital health infrastructure to prime contractors to enhance the operational capabilities of the Defense Health Agency.

Custom Computer Programming Services

POSTED

DEADLINE

Mobile Medical Portal DevelopmentThe Mobile Medical Portal Development subcontract focuses on creating front-end user interfaces and native or responsive mobile platforms for prime contractors supporting the Defense Health Agency. The primary objectives include the development of mobile applications for medical form completion and the creation of real-time visualization dashboards designed to track medical readiness. All deliverables must adhere to Section 508 Compliance and meet rigorous mobile security standards. This project falls under NAICS code 541511 and is performed for the Department of Defense in Grassy Creek.

Custom Computer Programming Services

POSTED

DEADLINE

IL5/IL6 Cloud Infrastructure and Security EngineeringThe IL5/IL6 Cloud Infrastructure and Security Engineering subcontract supports the Defense Health Agency within the Department of Defense. The primary objective is to design and implement secure hosting environments and cross-domain connectivity for prime contractors. This involves deploying solutions within Department of War Impact Level 5 environments and establishing secure connectivity to Impact Level 6, while utilizing Unity Catalog for governance. To execute this contract, the provider must maintain FedRAMP High and DoD IL5/6 authorizations to ensure a secure and governed cloud environment. The work is categorized under NAICS code 541519 and is designated for performance in Grassy Creek.

Other Computer Related Services

POSTED

DEADLINE

Medical Data Integration and Standards SpecialistThis subcontract for a Medical Data Integration and Standards Specialist supports the Defense Health Agency within the Department of Defense. The primary objective is to integrate the PARATUS platform with Military Health System data sources for prime contractors. This involves mapping and transforming data to meet FHIR R4 and HL7 v2.5.1 standards, while implementing clinical terminology mapping through the use of SNOMED CT, ICD-10, and LOINC. The technical execution requires the use of FHIR servers and HL7 integration engines to deliver functional data pipelines and integrated data contracts. The work is categorized under NAICS code 541512 and is performed in Grassy Creek.

Computer Systems Design Services

POSTED

DEADLINE

Agentic AI and Machine Learning EngineeringThis subcontract focuses on the development and implementation of agentic artificial intelligence and machine learning models to support prime contractors on Defense Health Agency projects. The primary objectives include designing ML-based risk scoring algorithms for medical readiness and creating agentic AI to automate notification systems and document-driven medical workflows. The project requires specialized expertise in medical AI ethics and accuracy to ensure the delivery of integrated AI/ML modules for automated triage and risk scoring. Performance for this effort is centered in Grassy Creek under NAICS code 541715 for the Department of Defense.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS